last executing test programs: 1m57.593836933s ago: executing program 2 (id=572): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0066a6", 0x14, 0x6, 0x1, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x6}}}}}}}, 0x0) 1m57.512175343s ago: executing program 2 (id=574): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}], 0x2, 0x20044040) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d09004beafd0d8c560a8480ffe00600004e20594289acb176b583a5000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000000000", 0x48}], 0x1) 1m57.415720119s ago: executing program 2 (id=577): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x800, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9, 0x0, @opaque="95"}}}}}, 0x0) 1m57.336882153s ago: executing program 2 (id=578): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$eJzs3M1vVFUbAPDn3k6/aF9a3rx5FWJiE4MajUOhBBNW4NqoiSxcUtspaTp82NbENiwK7tWFMS5IDH+CiXvZuDJxgQvFv4AYiSG6ARZj7nyUkekMpczMhfL7JWfuOXNm7vM8c2HuucncBvDMmsoe0oj9EXE6iZioP59GxFC1NxKxUXvd3dsX57KWRKXy/p9JJBFx5/bFuca+kvp2rD4YiYjrbyXx309b466srS/Nlsul5fr40OrZC4dW1tbfWDw7e6Z0pnTu6MybR2eOzcx0sdabFz78+oWf33n58tXPpt/9au+PSZyI8fpccx3dMhVTm59JZrC+LUTEbLeD5WSgXk9znUkhx4QAAOgobVrD/T8mYiDuL94m4odfck0OAAAA6IrKQEQFAAAA2OUS1/8AAACwyzV+B3Dn9sW5Rsv3Fwn9detkREzW6m/c31ybKcRGdTtSvW93z19JNN/WmtTe9timskjf/VTKWvToPuRONi5FxPNbHf+kWv9k9S7u1vrTiJjuQvypB8ZPU/0nuhA/7/oBeDZdO1k7kbWe/9LN9U9scf4rbHHu2om8z3+N9d/dlvXf/foH2qz/3ttmjAP3Xrvebq55/ffB57/NZ/Gz7WMV9QhuXYo4UNiq/mSz/qRN/ae3GWNs7uaVdnNZ/Vm9jdbv+itXIw5WV3Ot9Tcknf4+0aGFxXJpuva4xf7XjnWO33z8s5bFb1wL9EN2/PfEzo7/hW3GmHzuj/3t5h5ef/r7UHKq2huqP/PJ7Orq8uGIoeTt1uePdM6l8ZrGPrL6X32p8///rerPvhM26p9D9q/nUn2bjS8/EHPs4JFvd15/b2X1z+/w+H+xzRjffH/lo3ZzedcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNMhjYjxSNLiZj9Ni8WIsYj4X+xJy+dXVl9fOP/xuflsLmIyBtOFxXJpOiImauMkGx+u9u+PjzwwnomIfRHx5cRodVycO1+ez7t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo1FxHgkaTEi0oj4eyJNi8W8swIAAAC6bjLvBAAAAICec/0PAAAAu1/L9X/hX6ORfuYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArrTvxWs3kojYOD5abZmh+txgrpkBvZbu+J2VSlcTAfpuIO8EgNwUmvqVinM6PEtc4wPJQ+ZH2s4Mdz0XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5cr+y/diOJiI3jo9WWGarPDeaaGdBrad4JALkZ6DSZ9C8PoP8KeScA5MY1PlBb6t+r1LTOj7R95/AjRGm/FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeDuPVlqTFiEir/TQtFiP+ExGTMZgsLJZL0xGxNyJ+nRgczsaH804aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArltZW1+aLZdLyzo77dw7FfEEpKHzZHVGo+chhntZRd7fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5GFlbX1ptlwuLa/knQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQt5W19aXZcrm03MNO3jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCffwIAAP//ZLcP0g==") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1m57.168907544s ago: executing program 2 (id=581): sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x74, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004011}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1m56.838402807s ago: executing program 2 (id=589): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x20) 1m56.707765085s ago: executing program 32 (id=589): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x20) 11.502116777s ago: executing program 3 (id=2383): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r0, 0x2000, 0x0) 10.626590062s ago: executing program 0 (id=2389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x11, 0x0, 0x2000000000000}, 0x700) 4.589527676s ago: executing program 0 (id=2397): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 4.280226165s ago: executing program 3 (id=2398): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x480}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) add_key(0x0, 0x0, &(0x7f0000000280)="ba", 0x1, 0xfffffffffffffffb) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.05631516s ago: executing program 4 (id=2399): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x1) syz_clone3(&(0x7f00000003c0)={0x100001000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.025567122s ago: executing program 1 (id=2400): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec774000) capset(0x0, &(0x7f0000000080)={0x200000, 0x200000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) move_pages(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000080), 0x0, 0x0) 3.933832661s ago: executing program 0 (id=2401): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.499946931s ago: executing program 5 (id=2402): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x40601) ioctl$TIOCCONS(r1, 0x541d) ioctl$TIOCCONS(r1, 0x541d) 3.475675935s ago: executing program 4 (id=2403): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x404, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$P9_RVERSION(r2, &(0x7f0000001080)=ANY=[@ANYBLOB="070000006bffff"], 0x15) 3.379912232s ago: executing program 3 (id=2404): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 3.285224463s ago: executing program 1 (id=2405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 2.937347452s ago: executing program 4 (id=2406): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0/../file0\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000010980)=""/204, 0xcc) 2.898350547s ago: executing program 3 (id=2407): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000480)={0x80000000a, 0x98, 0x5, 0x400}) 2.854885422s ago: executing program 5 (id=2408): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmmsg$inet(r0, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 2.518606357s ago: executing program 0 (id=2409): r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 2.239328804s ago: executing program 1 (id=2410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x2c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x20000014) 2.224909614s ago: executing program 5 (id=2411): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup3(r1, r0, 0x80000) read$FUSE(r2, 0x0, 0x0) 2.11476967s ago: executing program 4 (id=2412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="171f8e3983221de099729fb43b80fc37f1bbcc3559fb34425b1077954aaadd1ca0c00e9c4b8c78b183b1d84db49c162abfddef0e7f6ca1398cae7949c3607855d2303b9890542ec60620594736d608078f6daa6231ac06d499b32dff93d44c2bbfd6c85843f933f6592bbe40b4868b79b5ea7f3653d82ac3cf80f813d794b7b09f71511b51fd09b75ce69658dcd4a55d4bfb0a1606f2188d598b37d8090c564a80607ddb5d79fd2a18de2313cbdbc1af98cb6d3020b23ce4c547f1bd8f610922fe08dbc02b4b37a44fadcb0806408fdeb93f8e143a963b8120a5ac26e4ccb57ee244ab78ab1b3f4183cfd9fc7f9b258d5170d524d780228339f96fe0c09eaed410796e8be78522f32df8855534b332cf24d98b6056970a58c831a85c811afbdd2b333c96cd2e0d7b54cccdeca1e6c937983966dcfeb1afbe28750dd831092be23cc1ffbff89041b28c19584af222692529f3c8ae659275105296c8032a01b484fc246f3e292d10e53392b39ba0af2ac2e0deb76caecda2167300cc68a2426526fd9e134d1525ee5d9e424f64b59b888e7c540418265db1907c710ed8334a8e436728ab5343be7eee19c5145fb323295db5210ae93ead29c42dfe3b3bd1fc4e8240ac1f87c237f61ea3af837dda2502bd1faeeb544fd017828640398a0e678c313815cd0e730cb748355b01494c056fd19ffb97537059ccaa4379e25129d35c9f83ba987a35854f4d17c5ecca26597076c1d4141754dca2cbcd4659772ad2640a6441adab38e057cba77c1f0f543ca7f20309b9cbb5a9171e4c05fadaf3eb33c8268fa0cc35508239c02014c1685aea7a1943e6366f03d62be5a2b6fc76a8db8044b72c4cd082720e82f24b03832638a540c859c93a5d706cf5ab28fd457ecbca82ee7a03f8267e26c84b4d8104b86d2403edac93b9b75f7b0c178b12c42ef15abfb8ec956d5524b7b1d6b945af3c511db0128addff4a9218a246c5a733004ee9337e7a4de271a383efec3ef0c25d75036dbfe27360ecfac59e9bc25b1191d6a12e71ca3c52588873681c98165fb3c4d82c422bd3008c9911d46c340a55a250f0321dd6f4cd6d83e489678dad2deb83f46af1eab92c7269159409827c2c307c6e7f9d9440628c81f279994f5fb8b9b01d4af256e8417462787053a203dc09ba8937ae8165e6f4ea9aed2601797518788438fcb3784c58d4bb322f00d560172efbf387cfcebb92f603236af7eaafa978ff5ad01883e4dbda3a402b4ecc1d7e0464d87c5f27f748d9c438c397cae30eb56403e9cb79b4a7e5a79bd5247e8a309aa9e602aca523fa6aec9564617e342e531a4e88665127e266774e79d9e34663c04e422051b30b0f30c6ab55e265575dc22fc7eaea281a85881783bc55e033278373a2810df8994e4a9908ed0078f6992053f53389f19a03e905e577f5cc60edf62c00d8956e927f7bb3d6e8cce72d7fff06123c0615a2f732b0e2c4a35ea97b6dc3a08978acf023900dc418865da12eed9c1d6af2e3107a0e0732b2245dc745ebe8331701caf4f9bd97d4719dee094bdb5a85ce02f2beb39f2e13d0782b4cd1b7fb3ed076e9fd9ca5ec811ff9272fd08df0cf079e23ab5e5ec44a7de222bc14b3dc41087b50643ca782b75f3ba209c571076d924714d00e6626ca329e8bb517d7dcf3a4b500c937e1a5c7af968dd874aab4edcd391ca8fa254f8e4b61d82710ae98d17bd437d49af1e869997d5d0a7f0900179ce98b117b7b2571d35328e32328451e42eee34f99ab5063d03d5a98a04c86604f14c6aff8ca56b09400c5a6e7f4df0be2c8f646bebb9adb9ebca408b20ba73f8bb595b825971df99b90ffe77c6933858c89e987467a229d20b565bb1f7edb8383fdd899ebe92fa9877397ee77d01c0de7a7443c98ed7724cbc983108b1d182b5eea01568e0a9104087cf3915a3c0d775cc3cf6041972895a07da516cfc622ec298aa35b67b13af5049b2557ab3f0c8d634701b02d50d75d99dc9adb6c32fecf98f0bdc4c6b517d65a6217acc44fa8b6eff82e09bba9534ccbab14a42d9c0fd9a71c02599ef214d4c785f7a4076f9e3bbc9bf5af9ffe49ba853511819f100968eafeb912afd53114b8669bdb0fe4e27d77c3e1d3eb40b4e9099e373799872c2fe9bba38b34404725884ec78a334a32890df438c01ae55fbb121335f3f90242677134f0d9ac360a14b4820207c9014ec7913fc0a4e8eb4273dc01e85daaab311e70b5a46e0f5efddef200e88d3f92215c907b9627e384f11da9ff69310ecac64f97d84148259dd3ee1997297107b81df0c0cc7d80d141e17ad0efa97291604e497d7165c692f27aed38ff2720849366ac64d67ac6eb7475527b613d5445485c777f47587cbf34838981f6a3dfc7556515d062e4b6815e898973486c63871ed477b8e1b6e1a9e9bd23c5f7f8e65b28dbe04f901a9eff8a7433ceefb4c832f73fa6dae046530d6449c69ca7f225357b5211e33b63f6b9328d904f5b6f604d175274c58b94f03a110ae68895534e0e767bd0e5ea85da6dda08f7bc15273c35e738ffc3299d33e66974aa1ceb3a46a292d4be3ca8088bca95a0a392128c8211ca19eab11d503b200e5d16c704e50c86f0c9730c53043e1a5fc1cd1b4c9989d9c5f37071562b8ff13a35861d6ea65125edd6a8188e1f0003c07971aabda0dc7caff8a9a65685a218ef3a7d0bd0d725dcc4e5dbd366f8ac40b4909aa29ebb469f5f16e9a93c6f66af1b1efcc5134fb5246155441ec383f16936594e5204072ffde080c300d2b972c11363910567dac69f9595303b8842f878d17e5da16a0dc8ac7e15046bf3eb8150398078cff44760073f85a2eedc9073a4e4c1e3a337835f57334bea02a0002aabd108e7f3670734aff5cd416df3954f998e5dd6929c3980eb1e4f22ede74324cd81aed07cb3ba2facd323f49ab8d83d323024f9e02e6cd956abfabebdf5bbb861fca9580a2ded9c66f34790ae92f13b7cd4f867b4fe3b7f94b21fb32fafdf397f6185491ce3d7ccd40c4f0064aa17457450f6489953629f53685547dc0967cc360dd52ef3adc56adecb7689e866fa6e8e5b63177ff32e82d10de2559077d5080a3e93839b8b2bfad9c0bca7653f6353eaa138c7fc2f445e80eab1ed1d600ca98f3d2472e67c750fe81bd1418f7d538bb3a38d3481afda6b27eede13a2a14fd4ebf3bfb75dc98b915c122a79dbe5b9d7f5c58bfcda0c488da864b604ea465850a8276e43d946174bb4bc491c4de6578188345b7c2f60ca8f52846d862323d43e3856b222cd8b8295a9c6ff9fb2078642af41b57dbf307bec27eb7afed5e10ce6a17bf6c0a1d253a155a9bddef920eb74eaee8df9b4798d3bb3b8680c1c43822b4d86ba80fc084d4af50f83059db5894c138758425f44200cb40c0b122a02defeafe8fb1333d3990432272691f0e5943262d7b16740802fd634f7b627a639a21b7ceb712a1b64ffb4739a80eea995b5ef67cc0cafcf351505c0cd312efd91cf558d1f285636a281694c5693c97b3d61106a08aecf308659f2bee0c47797151f6b7aee21980459d4b62f0dc9b17a9b4d90897b8d6256180f2bf172fbd3b64a4b69f214c2510f2ac16deffea8d5c86e38c2860176c048e176142b357f49ee07591895ecc560e309266a24e8b4a80f651c4d10b7b4538dda532e13beca6a929e89d67b2fba84710791832bac8e68da6554b0ca635e99f82532aad5a194bf7ff94a9646f2d58060bbad3d3181fad500b1921bb9aa5c4d1c36883869453171ece1da56cec257d4f61973cde0d701a6cb033f102ed3e2dc419fadefb02ce6e387ab9df52e0c2fbb942e1c96ca7c8764ba97751eef7553262857e49366924eb09e89ce3551ed152992a701e9110fcd96d815d743a58467c1a99842d5d1a19d70d2e309981e3f36a17df6f037bd3469acde9283adc6de05a08c33dba5c312635a294fa357ce1cfe29ee8112e9ebad1961131a9e360b2adbbf8053884257a0ecc635d517c8ffab745d3dbdf05e2ffd770fc741920cbc22204710bd754d5803fb57495e3a0740d06f111c196baf403d38a5504c767f9c072c9490b99439e7e2b178af33b6fdd838a638e00f71e7671ebde1a6d67bd3cba16f05e12b4b00c19e071df9d5f0cb726bcd29d89fcb32fe68e4e47973238998833f170572069bb95bd5d688d7e9e18b249484af944103996e0ae003721f87e3bb05e3352269cf4e3289a3a73cc2c2a4aaf5502e75a2d9a3e997ec6627d5e2bca92f756db3b4b5f61d22f898b713862ca1979b95429c74fdf7328d5667156c6fcfa67722accd252f735c10e680ad0099380821058ce74e4044000cefdf3f0b24dbcbce5e0386d2b61ddb17f2e26f2c563380116101bdd598eb69670396e582d0ad7ba5e397b0af3ff4740f24e6ac0dfbddbb25a0e573a45a22b475f297efc383ce32c5292c445d223c11eff09cb568935f583bbf5226833890b779e7e8f53cfe4ff9ee1956249d1de668abe9ffef10bf9102520e079570e8764717831523018226be5b042ccddff1c9d3778302499fb95207b11e96f5324747c3b03cdc87b444e9be8caae13f17a42d2e89d94e09667ab93c669fe3609a50490789553a587c6d01f71286b7ae0b1fd55b84cd407ea4a5147e268fe180958df8c4edfcd8c7425a0f7dd83a42324da0e3dbb939f35d44789f8b3ba53e4397a1b7d816a75b9f9d75ec5e3079e91f4ee18ff49e95be1490f839045e7660ed98e284b3b42dc92615b0bef42aaaa4d68e76365b3c4b0d2e03c1074ff89bd4cf6ee3a8a052a2a89473eb017d47587c8b37b6be7cdec595efbde082f821473b15300a3c9e25098fd2c1936e1ed98f47947e232456ed4effb0f5e873ac37ac0ab5549a94f62fec7b0cab33e0d812108355ee73e4cd9076bd1d63d2f237db7470dc0e1c296e24c3f981e6a6e5e7986bb2d0dd14f8c073e4f2da5fecea229e9c1cc8a735610ed4605521d507e9be1d91ebe321385866015e4605cae73a2ad0b152e9ac7403bad4f8f0ca1727e52b8398967d39f063cf4cc4e6b95267ee932c6d7c45cbbbabc3de2c597b40007e82c15d0e0d92c92a5a80536a1d43476b3d8da61bc3c338797b5bc66ba1d03928af72122a16e3b6057d4b6b405052b64759896c4718d486a9c4b1a361799dd3677f71a568fafee240b887d350a82eabf32283d340cbcc7bb7ca6cbd04a11398ac515724cd0ecc4de654900779bb29f4148080db4c1d2c698d8c5a83348181a3631890ce5db9f4480fa41b1599890788ef0579f78428b0112859c0286581a13205b76108b8cdfe4b2e195fc079621445ff21a6eb9236086dcc72a75bda2fd8afe5d93bf5c1b9e58d9d0df8d44f66e1660a3ccd25275bcc987f70ea17814888f0a6952efc7f31da75477b3dd6418f83692f964a198ec8c481b4140c294c9afe3c257b3e0dad93eaf8e9359d2d36bff6fa3de522a4bda85edbd1b4b0baabe68a443f7dc4455426e29893fe489b451046e5b74e3e5492c0a3dc7af279233383aa61342093cc9e94b9b76163fda501a5f23d5ea224b0e8ff9bb5bb5760e272ed1d1a0a249b6df38ead5b7056602bd194994d9d0bc7b71166f150009b815a2e8e6be7e93e2b24b2db9363c5cad767b2374289f35bb3649ecb9d9de96246c3aa0c"}}}, 0xfce) 1.781723976s ago: executing program 0 (id=2413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 1.670833005s ago: executing program 3 (id=2414): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='1', 0x1) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) 1.38821259s ago: executing program 5 (id=2415): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) 1.340386414s ago: executing program 1 (id=2416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/84], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073756200"], 0x0, 0x5a}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000608)="0900000004000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.058262047s ago: executing program 3 (id=2417): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.043158119s ago: executing program 4 (id=2418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)="164d3653fccf0fad2d69ab01ae1ac6da2c98ca0bd22c9cb42fdf260772464c9ebc43a59d66a0236eb61cead40d596e15ac3369e37d0766bc413a8253fc9d1bf570dff37a6079fe2bc482e6de55dc33dd8a43e121557b8f08b599cb188cbf868c2340264cc49ef7f027c330b9479a891e4cf0f7f21ea5df84768d072ee308ce6c", 0x80}], 0x1}, 0x40841) 870.4744ms ago: executing program 5 (id=2419): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) keyctl$set_reqkey_keyring(0xe, 0x1) 848.006528ms ago: executing program 0 (id=2420): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 670.640184ms ago: executing program 1 (id=2421): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, &(0x7f0000003100)=[{&(0x7f0000000480)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 526.264985ms ago: executing program 4 (id=2422): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 208.481253ms ago: executing program 5 (id=2423): r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001140)) openat$fb0(0xffffffffffffff9c, &(0x7f0000001440), 0x602080, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001700)) 0s ago: executing program 1 (id=2424): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 0xec/0x23c [ 45.997385][ T6038] do_el0_svc+0x4c/0x5c [ 45.997396][ T6038] el0_svc+0x64/0x260 [ 45.997408][ T6038] el0t_64_sync_handler+0x44/0x104 [ 45.997419][ T6038] el0t_64_sync+0x198/0x19c [ 45.997430][ T6038] Mem-Info: [ 45.997434][ T6038] active_anon:22 inactive_anon:5276 isolated_anon:1170 [ 45.997434][ T6038] active_file:3336 inactive_file:17129 isolated_file:0 [ 45.997434][ T6038] unevictable:3641 dirty:1702 writeback:512 [ 45.997434][ T6038] slab_reclaimable:8875 slab_unreclaimable:88174 [ 45.997434][ T6038] mapped:33035 shmem:4976 pagetables:1066 [ 45.997434][ T6038] sec_pagetables:0 bounce:0 [ 45.997434][ T6038] kernel_misc_reclaimable:0 [ 45.997434][ T6038] free:1472630 free_pcp:10629 free_cma:7616 [ 45.997456][ T6038] Node 0 active_anon:88kB inactive_anon:21104kB active_file:13344kB inactive_file:68516kB unevictable:14564kB isolated(anon):4680kB isolated(file):0kB mapped:132140kB dirty:6808kB writeback:2048kB shmem:19904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9024kB pagetables:4264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 45.997479][ T6038] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 45.997503][ T6038] lowmem_reserve[]: 0 0 3650 3650 3650 [ 45.997523][ T6038] Node 0 Normal free:2812632kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88kB inactive_anon:21104kB active_file:13344kB inactive_file:68516kB unevictable:14564kB writepending:8856kB zspages:0kB present:5242880kB managed:3738576kB mlocked:15548kB bounce:0kB free_pcp:42516kB local_pcp:42516kB free_cma:0kB [ 45.997548][ T6038] lowmem_reserve[]: 0 0 0 0 0 [ 45.997567][ T6038] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 45.997633][ T6038] Node 0 Normal: 1217*4kB (UME) 680*8kB (UME) 429*16kB (UM) 42*32kB (UME) 64*64kB (UME) 53*128kB (UME) 2*256kB (ME) 1*512kB (M) 3*1024kB (UM) 9*2048kB (UM) 674*4096kB (UM) = 2812628kB [ 45.997716][ T6038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 45.997723][ T6038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 45.997730][ T6038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 45.997737][ T6038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 45.997744][ T6038] 25437 total pagecache pages [ 45.997747][ T6038] 0 pages in swap cache [ 45.997751][ T6038] Free swap = 124996kB [ 45.997755][ T6038] Total swap = 124996kB [ 45.997759][ T6038] 2097152 pages RAM [ 45.997762][ T6038] 0 pages HighMem/MovableOnly [ 45.997765][ T6038] 392460 pages reserved [ 45.997769][ T6038] 8192 pages cma reserved [ 45.997773][ T6038] 1 pages hwpoisoned [ 46.204569][ T6042] loop3: detected capacity change from 0 to 512 [ 46.218582][ T6042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.256436][ T10] wiimote 0005:057E:0330.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 46.256767][ T10] wiimote 0005:057E:0330.0001: New device registered [ 46.316743][ T10] wiimote 0005:057E:0330.0001: detected device: Nintendo Wii Remote Plus (Gen 2) [ 46.376231][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.388538][ T6043] wiimote 0005:057E:0330.0001: Device removed [ 46.457998][ T10] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input4 [ 46.483583][ T10] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input5 [ 46.494790][ T10] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input3 [ 46.496027][ T6056] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 46.560136][ T6058] tap0: tun_chr_ioctl cmd 35108 [ 46.607305][ T6060] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 46.679054][ T6065] fido_id[6065]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.697630][ T6067] tmpfs: Invalid uid '0x00000000ffffffff' [ 46.703790][ T6069] netlink: 'syz.0.526': attribute type 2 has an invalid length. [ 46.703804][ T6069] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 46.703814][ T6069] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.526'. [ 46.703875][ T6069] nbd: couldn't find a device at index 16 [ 47.071861][ T6095] loop3: detected capacity change from 0 to 256 [ 47.085827][ T6095] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 47.085845][ T6095] FAT-fs (loop3): Filesystem has been set read-only [ 47.085869][ T6095] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 47.092590][ T6095] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 47.256155][ T6099] loop3: detected capacity change from 0 to 128 [ 47.262663][ T6099] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.262892][ T6099] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.557550][ T6111] tipc: Started in network mode [ 47.557568][ T6111] tipc: Node identity ac14140f, cluster identity 4711 [ 47.557905][ T6111] tipc: New replicast peer: 255.255.255.255 [ 47.558324][ T6111] tipc: Enabled bearer , priority 10 [ 47.601316][ T6075] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 47.606189][ T4720] atkbd serio0: keyboard reset failed on [ 47.726914][ T6123] Soft offlining pfn 0x1368c9 at process virtual address 0x20489000 [ 47.733905][ T6123] Soft offline: 0x1368c9: invalidated [ 48.302344][ T6154] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 48.302344][ T6154] The task syz.0.561 (6154) triggered the difference, watch for misbehavior. [ 48.676669][ T4720] tipc: Node number set to 2886997007 [ 48.909901][ T6188] loop2: detected capacity change from 0 to 4096 [ 48.922437][ T6188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.971965][ T6188] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 49.023822][ T4715] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 49.033890][ T4715] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 49.125735][ T58] wlan1: Trigger new scan to find an IBSS to join [ 49.142819][ T6200] loop0: detected capacity change from 0 to 8 [ 49.185640][ T6200] SQUASHFS error: Failed to read block 0x260685: -5 [ 49.185657][ T6200] SQUASHFS error: Unable to read metadata cache entry [260685] [ 49.185666][ T6200] SQUASHFS error: Unable to read directory block [260685:0] [ 49.343801][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.428314][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.458373][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.535230][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.636368][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.640579][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.641000][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.641349][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.641550][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.669793][ T6220] loop1: detected capacity change from 0 to 128 [ 49.695144][ T6220] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.736274][ T6220] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop1' because it doesn't have stable inode numbers [ 49.769809][ T58] bridge_slave_1: left allmulticast mode [ 49.769833][ T58] bridge_slave_1: left promiscuous mode [ 49.770642][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.792762][ T58] bridge_slave_0: left allmulticast mode [ 49.792780][ T58] bridge_slave_0: left promiscuous mode [ 49.792850][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.806065][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.853368][ T6235] loop1: detected capacity change from 0 to 1024 [ 49.853709][ T6235] EXT4-fs: Ignoring removed bh option [ 49.858203][ T6235] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 49.880450][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.940332][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.102193][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.111711][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.116751][ T58] bond0 (unregistering): Released all slaves [ 50.135869][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 50.147096][ T6242] netlink: 'syz.1.602': attribute type 5 has an invalid length. [ 50.501681][ T58] hsr_slave_0: left promiscuous mode [ 50.501943][ T58] hsr_slave_1: left promiscuous mode [ 50.502256][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.502270][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.504208][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.504294][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.541969][ T58] veth1_macvtap: left promiscuous mode [ 50.542012][ T58] veth0_macvtap: left promiscuous mode [ 50.542064][ T58] veth1_vlan: left promiscuous mode [ 50.542109][ T58] veth0_vlan: left promiscuous mode [ 50.920212][ T58] team0 (unregistering): Port device team_slave_1 removed [ 50.930760][ T58] team0 (unregistering): Port device team_slave_0 removed [ 50.992420][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 51.122634][ T6295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.618'. [ 51.261863][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.261932][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.262023][ T6218] bridge_slave_0: entered allmulticast mode [ 51.262513][ T6218] bridge_slave_0: entered promiscuous mode [ 51.263251][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.263276][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.263329][ T6218] bridge_slave_1: entered allmulticast mode [ 51.263701][ T6218] bridge_slave_1: entered promiscuous mode [ 51.303241][ T6218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.309555][ T6218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.323043][ T6218] team0: Port device team_slave_0 added [ 51.329077][ T6218] team0: Port device team_slave_1 added [ 51.362363][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.362377][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.362393][ T6218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.362897][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.362904][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.362916][ T6218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.386710][ T6316] loop0: detected capacity change from 0 to 128 [ 51.399490][ T6316] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.432805][ T6218] hsr_slave_0: entered promiscuous mode [ 51.433192][ T6218] hsr_slave_1: entered promiscuous mode [ 51.436494][ T6218] debugfs: 'hsr0' already exists in 'hsr' [ 51.436511][ T6218] Cannot create hsr debugfs directory [ 51.459934][ T4716] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.610085][ T6330] loop0: detected capacity change from 0 to 512 [ 51.637775][ T6330] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.623: bg 0: block 5: invalid block bitmap [ 51.637796][ T6330] loop0: lost filesystem error report for type 5 error -117 [ 51.637950][ T6330] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 51.637960][ T6330] loop0: lost filesystem error report for type 5 error -117 [ 51.638073][ T6330] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.623: invalid indirect mapped block 3 (level 2) [ 51.638086][ T6330] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.638286][ T6330] EXT4-fs (loop0): 1 orphan inode deleted [ 51.638294][ T6330] EXT4-fs (loop0): 1 truncate cleaned up [ 51.638741][ T6330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.675945][ T6218] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.686966][ T4721] Bluetooth: hci3: command tx timeout [ 51.692326][ T6218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.692699][ T6218] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.693584][ T6218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.693860][ T6218] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.707815][ T6218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.708924][ T6218] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.729021][ T6218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.782477][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.782507][ T6218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.782577][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.782609][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.791946][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.822212][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.886314][ T6218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.907223][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.910688][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.929056][ T6218] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.949645][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.949677][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.950012][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.950034][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.979418][ T6218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.084468][ T907] wlan1: Trigger new scan to find an IBSS to join [ 52.124954][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.125137][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.165848][ T4728] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 52.475139][ T6218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.581541][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 52.744732][ T6218] veth0_vlan: entered promiscuous mode [ 52.760493][ T6218] veth1_vlan: entered promiscuous mode [ 52.806912][ T6218] veth0_macvtap: entered promiscuous mode [ 52.821248][ T6218] veth1_macvtap: entered promiscuous mode [ 52.840348][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.849719][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.916131][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.916168][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.916194][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.916214][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.979575][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.979592][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.006924][ T6372] overlayfs: statfs failed on './file0' [ 53.032694][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.032708][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.056478][ T6418] netlink: 104 bytes leftover after parsing attributes in process `syz.3.643'. [ 53.248528][ T6429] loop1: detected capacity change from 0 to 512 [ 53.271018][ T6429] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.641: bg 0: block 5: invalid block bitmap [ 53.271043][ T6429] loop1: lost filesystem error report for type 5 error -117 [ 53.271230][ T6429] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 53.271245][ T6429] loop1: lost filesystem error report for type 5 error -117 [ 53.271367][ T6429] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.641: invalid indirect mapped block 3 (level 2) [ 53.271381][ T6429] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.271541][ T6429] EXT4-fs (loop1): 1 orphan inode deleted [ 53.271552][ T6429] EXT4-fs (loop1): 1 truncate cleaned up [ 53.272006][ T6429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.303631][ T6432] netlink: 'syz.5.590': attribute type 21 has an invalid length. [ 53.303649][ T6432] netlink: 128 bytes leftover after parsing attributes in process `syz.5.590'. [ 53.303690][ T6432] netlink: 'syz.5.590': attribute type 4 has an invalid length. [ 53.303698][ T6432] netlink: 'syz.5.590': attribute type 5 has an invalid length. [ 53.303706][ T6432] netlink: 3 bytes leftover after parsing attributes in process `syz.5.590'. [ 53.315835][ T6432] netlink: 'syz.5.590': attribute type 21 has an invalid length. [ 53.315848][ T6432] netlink: 128 bytes leftover after parsing attributes in process `syz.5.590'. [ 53.315878][ T6432] netlink: 'syz.5.590': attribute type 4 has an invalid length. [ 53.315887][ T6432] netlink: 'syz.5.590': attribute type 5 has an invalid length. [ 53.315896][ T6432] netlink: 3 bytes leftover after parsing attributes in process `syz.5.590'. [ 53.462559][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.471953][ T6443] netlink: 'syz.5.650': attribute type 10 has an invalid length. [ 53.492597][ T6443] team0: Port device dummy0 added [ 53.543402][ T6447] loop4: detected capacity change from 0 to 512 [ 53.560126][ T6447] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.652: inode has both inline data and extents flags [ 53.560418][ T6447] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.560570][ T6447] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.652: couldn't read orphan inode 15 (err -117) [ 53.560584][ T6447] loop4: lost filesystem error report for type 5 error -117 [ 53.561199][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.713625][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.764783][ T4721] Bluetooth: hci3: command tx timeout [ 54.138346][ T6481] netlink: 168 bytes leftover after parsing attributes in process `syz.1.666'. [ 54.142681][ T6476] loop5: detected capacity change from 0 to 8192 [ 54.242144][ T6488] loop1: detected capacity change from 0 to 128 [ 54.319314][ T6488] fscrypt (loop1, inode 12): Unsupported encryption flags (0x30) [ 54.486563][ T6499] loop1: detected capacity change from 0 to 4096 [ 54.706129][ T6520] netlink: 72 bytes leftover after parsing attributes in process `syz.3.683'. [ 54.785739][ T6523] input: syz1 as /devices/virtual/input/input7 [ 55.125038][ T40] wlan1: Trigger new scan to find an IBSS to join [ 55.291021][ T6560] nvme_fcloop: unknown parameter or missing value 'w' [ 55.391148][ T6568] loop5: detected capacity change from 0 to 512 [ 55.493378][ T6218] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 55.627741][ T6586] nfs: Deprecated parameter 'nointr' [ 55.845334][ T4721] Bluetooth: hci3: command tx timeout [ 55.861893][ T6609] loop5: detected capacity change from 0 to 512 [ 55.886148][ T6609] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.725: bg 0: block 5: invalid block bitmap [ 55.886172][ T6609] loop5: lost filesystem error report for type 5 error -117 [ 55.886407][ T6609] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 55.886418][ T6609] loop5: lost filesystem error report for type 5 error -117 [ 55.886537][ T6609] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.725: invalid indirect mapped block 3 (level 2) [ 55.886551][ T6609] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.886709][ T6609] EXT4-fs (loop5): 1 orphan inode deleted [ 55.886720][ T6609] EXT4-fs (loop5): 1 truncate cleaned up [ 55.933335][ T6609] fscrypt (loop5, inode 11): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 56.029422][ T40] wlan1: Creating new IBSS network, BSSID 0e:d5:60:c8:f8:90 [ 56.352313][ T6648] overlayfs: upper fs does not support tmpfile. [ 56.697343][ T30] audit: type=1807 audit(56.680:7): UNKNOWN=ĻIasure res=0 [ 56.699425][ T30] audit: type=1802 audit(56.680:8): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.5.756" res=0 errno=0 [ 56.702295][ T6671] ima: policy update failed [ 56.702439][ T30] audit: type=1802 audit(56.680:9): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.5.756" res=0 errno=0 [ 57.037626][ T6696] loop3: detected capacity change from 0 to 128 [ 57.126289][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.767'. [ 57.249081][ T6707] loop1: detected capacity change from 0 to 512 [ 57.257092][ T6708] loop3: detected capacity change from 0 to 256 [ 57.257426][ T6708] vfat: Unknown parameter 'iocharse' [ 57.317006][ T6707] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.873224][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.785'. [ 57.911614][ T6744] syz.4.786 uses obsolete (PF_INET,SOCK_PACKET) [ 57.924531][ T4721] Bluetooth: hci3: command tx timeout [ 57.975523][ T6743] EXT4-fs (loop1): Test dummy encryption mode enabled [ 58.082394][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'. [ 58.339514][ T6763] bonding: bond0 is being deleted... [ 58.419732][ T6763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.456466][ T6763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.473445][ T6763] bond0 (unregistering): Released all slaves [ 58.780402][ T6787] usb_storage.quirks: string doesn't fit in 127 chars. [ 58.869324][ T6795] bond1: option ad_user_port_key: invalid value (65535) [ 58.869341][ T6795] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 58.904247][ T6795] bond1 (unregistering): Released all slaves [ 59.215975][ T6816] set_capacity_and_notify: 1 callbacks suppressed [ 59.215988][ T6816] loop5: detected capacity change from 0 to 128 [ 59.234359][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 59.234382][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.818'. [ 59.356995][ T6822] tap0: tun_chr_ioctl cmd 1074025672 [ 59.357011][ T6822] tap0: ignored: set checksum disabled [ 59.703823][ T6846] loop3: detected capacity change from 0 to 256 [ 59.728579][ T6846] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 59.728603][ T6846] FAT-fs (loop3): Can't find a valid FAT filesystem [ 59.901204][ T6859] loop4: detected capacity change from 0 to 512 [ 59.917859][ T6859] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.919643][ T6859] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.838: Directory hole found for htree index block 0 [ 59.919669][ T6859] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 59.921285][ T6859] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 59.984493][ T6859] EXT4-fs (loop4): shut down requested (2) [ 60.436405][ T6900] loop5: detected capacity change from 0 to 512 [ 60.453612][ T6900] EXT4-fs (loop5): orphan cleanup on readonly fs [ 60.453889][ T6900] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.857: EA inode 11 has unexpected i_nlink=2 ref_count=0 [ 60.453905][ T6900] loop5: lost filesystem error report for type 5 error -117 [ 60.462331][ T6900] EXT4-fs (loop5): Remounting filesystem read-only [ 60.462737][ T6900] EXT4-fs (loop5): 1 orphan inode deleted [ 60.592354][ T6911] ieee802154 phy1 wpan1: encryption failed: -22 [ 60.829446][ T6932] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device! [ 60.829463][ T6932] nvme nvme0: syz.5.872: nsid (0) in cmd does not match nsid (1) of namespace [ 60.900876][ T6936] blkio.reset_stats is deprecated [ 61.214815][ T4720] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.378548][ T4720] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 61.380893][ T4720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.380909][ T4720] usb 1-1: config 0 has no interfaces? [ 61.382450][ T4720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.382461][ T4720] usb 1-1: Product: syz [ 61.382468][ T4720] usb 1-1: Manufacturer: syz [ 61.382475][ T4720] usb 1-1: SerialNumber: syz [ 61.406398][ T4720] usb 1-1: config 0 descriptor?? [ 61.468598][ T6970] loop1: detected capacity change from 0 to 8 [ 61.498073][ T6970] SQUASHFS error: Failed to read block 0x6e6: -5 [ 61.498088][ T6970] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 61.498095][ T6970] SQUASHFS error: read_indexes: reading block [6e4:0] [ 61.646615][ T4720] usb 1-1: USB disconnect, device number 2 [ 62.018698][ T6996] loop4: detected capacity change from 0 to 1024 [ 62.041923][ T6996] EXT4-fs (loop4): shut down requested (2) [ 62.236935][ T7010] overlayfs: option "workdir=./mysys" is useless in a non-upper mount, ignore [ 62.236954][ T7010] overlayfs: missing 'lowerdir' [ 62.272720][ T7013] loop0: detected capacity change from 0 to 512 [ 62.284529][ T7013] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.293158][ T7013] EXT4-fs (loop0): 1 truncate cleaned up [ 62.367830][ T7021] usbip-vudc usbip-vudc.0: gadget not bound [ 62.458271][ T7026] loop3: detected capacity change from 0 to 512 [ 62.459578][ T7028] loop5: detected capacity change from 0 to 1024 [ 62.481987][ T7026] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.914: bg 0: block 4: invalid block bitmap [ 62.482008][ T7026] loop3: lost filesystem error report for type 5 error -117 [ 62.482138][ T7026] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 62.482148][ T7026] loop3: lost filesystem error report for type 5 error -117 [ 62.482311][ T7026] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.914: invalid indirect mapped block 1 (level 1) [ 62.482325][ T7026] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.483273][ T7026] EXT4-fs (loop3): 1 truncate cleaned up [ 62.602030][ T7037] loop0: detected capacity change from 0 to 2048 [ 62.666535][ T7037] fs-verity (loop0, inode 13): Unsupported log_blocksize: 14 [ 62.909411][ T7060] netlink: 64 bytes leftover after parsing attributes in process `syz.3.928'. [ 63.007011][ T4720] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.031343][ T4720] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.213669][ T865] cfg80211: failed to load regulatory.db [ 64.016903][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.959'. [ 64.176510][ T7148] EXT4-fs mount: 33 callbacks suppressed [ 64.176525][ T7148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.300023][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.364051][ T7167] netlink: 'syz.3.968': attribute type 12 has an invalid length. [ 64.364069][ T7167] netlink: 'syz.3.968': attribute type 29 has an invalid length. [ 64.364079][ T7167] netlink: 148 bytes leftover after parsing attributes in process `syz.3.968'. [ 64.364092][ T7167] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 64.364099][ T7167] netlink: 'syz.3.968': attribute type 2 has an invalid length. [ 64.488362][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.544428][ T7155] fido_id[7155]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.636127][ T7185] set_capacity_and_notify: 2 callbacks suppressed [ 64.636143][ T7185] loop4: detected capacity change from 0 to 2048 [ 64.656753][ T7185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.734352][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 64.796525][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.274501][ T58] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.275015][ T58] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.275031][ T58] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.275046][ T58] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.639234][ T7249] binder: 7246:7249 ioctl c018620b 20000240 returned -14 [ 65.657433][ T7253] ip6tnl0: Caught tx_queue_len zero misconfig [ 66.162081][ T7293] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1013'. [ 66.742132][ T7339] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 66.909449][ T7351] loop0: detected capacity change from 0 to 512 [ 66.909868][ T7351] EXT4-fs: Ignoring removed oldalloc option [ 66.920665][ T7351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.000491][ T7357] loop1: detected capacity change from 0 to 4096 [ 67.018767][ T7357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.028365][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.087743][ T7369] loop5: detected capacity change from 0 to 512 [ 67.099076][ T7369] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1045: iget: bad extended attribute block 134217728 [ 67.099094][ T7369] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.100084][ T7369] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1045: couldn't read orphan inode 15 (err -117) [ 67.100106][ T7369] loop5: lost filesystem error report for type 5 error -117 [ 67.101500][ T7369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.148984][ T7369] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1045: invalid indirect mapped block 234881024 (level 0) [ 67.149346][ T7369] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1045: invalid indirect mapped block 768 (level 1) [ 67.199961][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.256212][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.481482][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 67.492820][ T7393] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 67.637099][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1059'. [ 67.647504][ T7404] loop0: detected capacity change from 0 to 1024 [ 67.647844][ T7404] EXT4-fs: Ignoring removed bh option [ 67.647871][ T7404] EXT4-fs: Ignoring removed bh option [ 67.662485][ T7404] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 67.670844][ T7404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.856839][ T4716] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /231/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 67.861013][ T4716] EXT4-fs (loop0): Remounting filesystem read-only [ 67.884809][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.885455][ T7418] block nbd0: server does not support multiple connections per device. [ 67.885877][ T7418] block nbd0: shutting down sockets [ 68.126702][ T7436] rnbd_client L127: Can't parse path ip:127.0.0.1\ߐ?:…b”EzńīÜ[‡ž¶ÖßłĶŪµ¬°>,: -22 [ 68.930856][ T7498] macvlan2: entered promiscuous mode [ 68.930875][ T7498] bridge0: entered promiscuous mode [ 68.972419][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.987367][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.987407][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.987435][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.987463][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.987488][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.987512][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.987536][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.987566][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.987589][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.041927][ T7504] evm: overlay not supported [ 69.151414][ T7507] Injecting memory failure for pfn 0x138cd8 at process virtual address 0x20162000 [ 69.163715][ T7506] loop1: detected capacity change from 0 to 8192 [ 69.169150][ T7507] Memory failure: 0x138cd8: recovery action for clean LRU page: Recovered [ 69.169170][ T7507] Injecting memory failure for pfn 0x1224e4 at process virtual address 0x20163000 [ 69.169312][ T7507] Memory failure: 0x1224e4: recovery action for clean LRU page: Recovered [ 69.169323][ T7507] Injecting memory failure for pfn 0x1370f5 at process virtual address 0x20164000 [ 69.169362][ T7507] Memory failure: 0x1370f5: recovery action for clean LRU page: Recovered [ 69.173219][ T7506] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.211517][ T7506] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.211535][ T7506] FAT-fs (loop1): Filesystem has been set read-only [ 69.417162][ T1156] hsr0: entered promiscuous mode [ 69.830479][ T7522] loop0: detected capacity change from 0 to 8192 [ 69.848309][ T7522] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.862697][ T7529] loop5: detected capacity change from 0 to 256 [ 69.909793][ T7529] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 69.909812][ T7529] FAT-fs (loop5): Filesystem has been set read-only [ 70.031464][ T7538] loop3: detected capacity change from 0 to 1024 [ 70.031824][ T7538] EXT4-fs: Ignoring removed bh option [ 70.071149][ T7538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 70.290514][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 70.333058][ T7563] loop5: detected capacity change from 0 to 1024 [ 70.333445][ T7563] EXT4-fs: Ignoring removed orlov option [ 70.341494][ T7563] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 70.342060][ T7563] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 70.342150][ T7563] EXT4-fs (loop5): orphan cleanup on readonly fs [ 70.361102][ T7563] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.1130: Invalid inode table block 0 in block_group 0 [ 70.361129][ T7563] loop5: lost filesystem error report for type 5 error -117 [ 70.363638][ T7563] EXT4-fs (loop5): Remounting filesystem read-only [ 70.363655][ T7563] Quota error (device loop5): write_blk: dquota write failed [ 70.363694][ T7563] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 70.363759][ T7563] EXT4-fs (loop5): 1 truncate cleaned up [ 70.364046][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 70.364061][ C0] EXT4-fs (loop5): initial error at time 70: __ext4_get_inode_loc:4916 [ 70.364073][ C0] EXT4-fs (loop5): last error at time 70: __ext4_get_inode_loc:4916 [ 70.387968][ T7563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.436343][ T7563] EXT4-fs (loop5): shut down requested (0) [ 70.490505][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.712615][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1139'. [ 70.851932][ T30] audit: type=1326 audit(70.830:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.0.1145" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91979368 code=0x7ffc0000 [ 70.851956][ T30] audit: type=1326 audit(70.830:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.0.1145" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91979368 code=0x7ffc0000 [ 70.853153][ T30] audit: type=1326 audit(70.830:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.0.1145" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffff91979368 code=0x7ffc0000 [ 70.853170][ T30] audit: type=1326 audit(70.830:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.0.1145" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91979368 code=0x7ffc0000 [ 70.853192][ T30] audit: type=1326 audit(70.830:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.0.1145" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91979368 code=0x7ffc0000 [ 70.992039][ T7605] loop1: detected capacity change from 0 to 512 [ 71.001308][ T7605] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.001321][ T7605] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 71.017629][ T7605] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.017798][ T7605] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1150: bad orphan inode 15 [ 71.017811][ T7605] loop1: lost filesystem error report for type 5 error -117 [ 71.021345][ T7605] ext4_test_bit(bit=14, block=18) = 1 [ 71.021364][ T7605] is_bad_inode(inode)=0 [ 71.021369][ T7605] NEXT_ORPHAN(inode)=1023 [ 71.021373][ T7605] max_ino=32 [ 71.021377][ T7605] i_nlink=0 [ 71.023982][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 71.023993][ C0] EXT4-fs (loop1): initial error at time 71: ext4_orphan_get:1429 [ 71.024005][ C0] EXT4-fs (loop1): last error at time 71: ext4_orphan_get:1429 [ 71.045188][ T7605] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz.1.1150: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 71.045217][ T7605] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.050039][ T7605] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 71.051118][ T7605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.095882][ T7605] EXT4-fs (loop1): shut down requested (0) [ 71.119326][ T7610] loop5: detected capacity change from 0 to 512 [ 71.156256][ T7610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.171868][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.263854][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.354114][ T7627] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 71.379855][ T7630] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1158'. [ 71.698968][ T7647] loop5: detected capacity change from 0 to 512 [ 71.722213][ T7647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.802117][ T7653] loop1: detected capacity change from 0 to 256 [ 71.832239][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.215526][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 72.215545][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'. [ 72.252646][ T7676] input: syz0 as /devices/virtual/input/input9 [ 72.472746][ T30] audit: type=1400 audit(72.450:15): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="_" object="lowerdi}" requested=w pid=7686 comm="syz.3.1186" name="file1" dev="tmpfs" ino=1327 [ 72.616622][ T7695] tun0: tun_chr_ioctl cmd 1074025677 [ 72.616714][ T7695] tun0: linktype set to 1 [ 72.621091][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 72.643390][ T7699] bridge0: port 3(batadv1) entered blocking state [ 72.646117][ T7699] bridge0: port 3(batadv1) entered disabled state [ 72.646206][ T7699] batadv1: entered allmulticast mode [ 72.651935][ T7699] batadv1: entered promiscuous mode [ 72.783047][ T7711] loop5: detected capacity change from 0 to 512 [ 72.797949][ T7711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.987281][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.134468][ T58] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 73.134483][ T58] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 73.406270][ T7753] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1216'. [ 73.646249][ T7762] loop3: detected capacity change from 0 to 4096 [ 73.648427][ T7762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.650514][ T7762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.203012][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 74.203077][ T7755] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1217'. [ 74.257682][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.938161][ T7816] loop1: detected capacity change from 0 to 256 [ 75.151607][ T7830] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 75.215076][ T7834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 75.359996][ T7843] netlink: 'syz.1.1259': attribute type 3 has an invalid length. [ 75.492665][ T7853] block nbd5: shutting down sockets [ 75.568826][ T7863] loop4: detected capacity change from 0 to 512 [ 75.579863][ T7863] EXT4-fs (loop4): Test dummy encryption mode enabled [ 75.594329][ T7863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.981404][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.022318][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1277'. [ 76.022335][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1277'. [ 76.022342][ T7881] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 76.039421][ T7883] loop0: detected capacity change from 0 to 1024 [ 76.069856][ T7883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.126539][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.295197][ T7903] ipvlan2: entered allmulticast mode [ 76.295216][ T7903] vlan0: entered allmulticast mode [ 76.295228][ T7903] veth0_vlan: entered allmulticast mode [ 76.300364][ T7903] batman_adv: batadv0: Adding interface: ipvlan2 [ 76.300374][ T7903] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.300388][ T7903] batman_adv: batadv0: Interface activated: ipvlan2 [ 76.484452][ T7919] synth uevent: /bus/acpi: unknown uevent action string [ 76.915889][ T7956] loop5: detected capacity change from 0 to 1024 [ 76.928827][ T7956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.969449][ T7963] loop1: detected capacity change from 0 to 256 [ 76.971613][ T7956] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 76.971974][ T7956] EXT4-fs (loop5): Remounting filesystem read-only [ 77.057039][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.077835][ T7966] loop0: detected capacity change from 0 to 2048 [ 77.091998][ T7966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.191156][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.916630][ T8018] TCP: TCP_TX_DELAY enabled [ 78.013268][ T8028] loop4: detected capacity change from 0 to 512 [ 78.046578][ T8028] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1342: iget: bad i_size value: 38620345925642 [ 78.046605][ T8028] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.053548][ T8028] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1342: couldn't read orphan inode 15 (err -117) [ 78.053572][ T8028] loop4: lost filesystem error report for type 5 error -117 [ 78.054454][ T8028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.148279][ T8036] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1342: bg 0: block 5: invalid block bitmap [ 78.170853][ T8036] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 840 with error 28 [ 78.170879][ T8036] EXT4-fs (loop4): This should not happen!! Data will be lost [ 78.170879][ T8036] [ 78.170888][ T8036] EXT4-fs (loop4): Total free blocks count 0 [ 78.170896][ T8036] EXT4-fs (loop4): Free/Dirty block details [ 78.170917][ T8036] EXT4-fs (loop4): free_blocks=0 [ 78.170933][ T8036] EXT4-fs (loop4): dirty_blocks=844 [ 78.170939][ T8036] EXT4-fs (loop4): Block reservation details [ 78.170946][ T8036] EXT4-fs (loop4): i_reserved_data_blocks=844 [ 78.195405][ T8033] bonding: no command found in bonding_masters - use +ifname or -ifname [ 78.205184][ T3365] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 840 with max blocks 4 with error 28 [ 78.546728][ T8057] loop3: detected capacity change from 0 to 512 [ 78.581761][ T8057] EXT4-fs (loop3): Test dummy encryption mode enabled [ 78.590773][ T8057] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.627969][ T8057] EXT4-fs error (device loop3): __ext4_add_entry:2414: inode #2: comm syz.3.1354: Directory hole found for htree leaf block 0 [ 78.630918][ T8057] EXT4-fs (loop3): Remounting filesystem read-only [ 78.690551][ T8064] loop4: detected capacity change from 0 to 1024 [ 78.691944][ T4717] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 78.739857][ T8064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.775138][ T8071] erspan0: entered promiscuous mode [ 78.852849][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.041944][ T8094] loop5: detected capacity change from 0 to 8 [ 79.435950][ T4721] block nbd4: Receive control failed (result -107) [ 79.448802][ T8117] block nbd4: shutting down sockets [ 79.486398][ T8120] rt1711h 0-0004: probe with driver rt1711h failed with error -5 [ 79.486767][ T8120] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 79.595860][ T907] Bluetooth: hci5: Frame reassembly failed (-84) [ 79.622257][ T14] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 79.647297][ T8131] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.652912][ T8131] EXT4-fs (loop1): 1 truncate cleaned up [ 79.653405][ T8131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.681681][ T8131] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.1389: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 79.683163][ T8131] EXT4-fs (loop1): Remounting filesystem read-only [ 79.758594][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.812903][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.813083][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.135554][ T8161] rnbd_client L127: Can't parse path ip: -93 [ 80.275450][ T8170] team0: No ports can be present during mode change [ 80.325333][ T8175] netlink: 'syz.5.1409': attribute type 1 has an invalid length. [ 80.325351][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 80.325360][ T8175] netlink: 'syz.5.1409': attribute type 1 has an invalid length. [ 80.325368][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 80.325399][ T8175] iwpm_send_hello: Unable to send a nlmsg [ 80.457012][ T8186] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1414'. [ 80.532211][ T8189] set_capacity_and_notify: 1 callbacks suppressed [ 80.532228][ T8189] loop5: detected capacity change from 0 to 1024 [ 80.538437][ T8189] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.542533][ T8189] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #3: block 1: comm syz.5.1415: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.542625][ T8189] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.542719][ T8189] Quota error (device loop5): write_blk: dquota write failed [ 80.542732][ T8189] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 80.542753][ T8189] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.1415: Failed to acquire dquot type 0 [ 80.542763][ T8189] loop5: lost filesystem error report for type 5 error -117 [ 80.543146][ T8189] EXT4-fs error (device loop5): ext4_free_blocks:6719: comm syz.5.1415: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.543159][ T8189] loop5: lost filesystem error report for type 5 error -117 [ 80.543474][ T8189] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.1415: Invalid inode bitmap blk 0 in block_group 0 [ 80.543486][ T8189] loop5: lost filesystem error report for type 5 error -117 [ 80.544325][ C0] EXT4-fs (loop5): error count since last fsck: 4 [ 80.544338][ C0] EXT4-fs (loop5): initial error at time 80: ext4_map_blocks:832: inode 3: block 1 [ 80.544364][ C0] EXT4-fs (loop5): last error at time 80: ext4_read_inode_bitmap:141 [ 80.573416][ T58] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.573434][ T58] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.578038][ T58] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 80.578055][ T58] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 0 [ 80.578066][ T58] loop5: lost filesystem error report for type 5 error -117 [ 80.591070][ T8189] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 80.591094][ T8189] loop5: lost filesystem error report for type 5 error -117 [ 80.591261][ T8189] EXT4-fs (loop5): 1 orphan inode deleted [ 80.592932][ T8189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.656084][ T8189] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.1415: Invalid inode table block 18446744069414584321 in block_group 0 [ 80.656272][ T8189] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 80.702405][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.703565][ T6218] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 18446744069414584321 in block_group 0 [ 80.703582][ T6218] loop5: lost filesystem error report for type 5 error -117 [ 80.723766][ T8198] tps6598x 0-0003: probe with driver tps6598x failed with error -22 [ 80.724244][ T8198] i2c i2c-0: new_device: Instantiated device tps25750 at 0x03 [ 80.841644][ T8208] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.866456][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.413828][ T8240] syz.5.1439 (8240): /proc/8239/oom_adj is deprecated, please use /proc/8239/oom_score_adj instead. [ 81.604312][ T4728] Bluetooth: hci5: command 0x1003 tx timeout [ 81.604368][ T4721] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 81.842570][ T8267] block nbd1: NBD_DISCONNECT [ 83.033108][ T8334] loop0: detected capacity change from 0 to 512 [ 83.037829][ T8334] EXT4-fs (loop0): Test dummy encryption mode enabled [ 83.037852][ T8334] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.050678][ T8334] EXT4-fs (loop0): 1 truncate cleaned up [ 83.051146][ T8334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.115059][ T8334] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6542: inode #15: comm syz.0.1480: bad extra_isize 62 (inode size 256) [ 83.121568][ T8334] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6542: inode #15: comm syz.0.1480: bad extra_isize 62 (inode size 256) [ 83.122385][ T8334] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6542: inode #15: comm syz.0.1480: bad extra_isize 62 (inode size 256) [ 83.135067][ T8334] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6542: inode #15: comm syz.0.1480: bad extra_isize 62 (inode size 256) [ 83.135436][ T8334] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6542: inode #15: comm syz.0.1480: bad extra_isize 62 (inode size 256) [ 83.135609][ T8334] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6542: inode #15: comm syz.0.1480: bad extra_isize 62 (inode size 256) [ 83.248911][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.479935][ T8359] tap0: tun_chr_ioctl cmd 1074025677 [ 83.480029][ T8359] tap0: linktype set to 769 [ 83.609227][ T8367] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1496'. [ 83.731981][ T8381] loop5: detected capacity change from 0 to 256 [ 83.801485][ T8388] loop1: detected capacity change from 0 to 1024 [ 83.801823][ T8388] EXT4-fs: Ignoring removed bh option [ 83.819138][ T8388] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 83.833110][ T8388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.887112][ T8394] loop5: detected capacity change from 0 to 8 [ 83.924878][ T8394] SQUASHFS error: Failed to read block 0x6e6: -5 [ 83.924894][ T8394] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 83.974734][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.989091][ T8398] netlink: 'syz.3.1509': attribute type 2 has an invalid length. [ 83.989106][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1509'. [ 84.066091][ T8406] tmpfs: Using encoding : utf8-12.1.0 [ 84.449342][ T8431] loop5: detected capacity change from 0 to 7 [ 84.576393][ T8439] loop9: detected capacity change from 0 to 524287998 [ 84.680007][ T8431] Dev loop5: unable to read RDB block 7 [ 84.680029][ T8431] loop5: unable to read partition table [ 84.680092][ T8431] loop5: partition table beyond EOD, truncated [ 84.680113][ T8431] loop_reread_partitions: partition scan of loop5 (śłƒå”™‰ü¾CźjĢ–ć¢P=Ć½?ć}X‹ŗŠ œėÜ%õ«`Éęրł…ˆ{ķ©Ö˜Čµ4FLQkŻŠ) failed (rc=-5) [ 84.681881][ T8435] support for cryptoloop has been removed. Use dm-crypt instead. [ 85.236033][ T8484] netlink: 'syz.3.1549': attribute type 2 has an invalid length. [ 85.236052][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1549'. [ 85.638235][ T8502] mt6360 0-0034: probe with driver mt6360 failed with error -5 [ 85.638538][ T8502] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34 [ 86.123443][ T8529] loop4: detected capacity change from 0 to 512 [ 86.133034][ T8529] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.148084][ T8529] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.185276][ T8529] EXT4-fs error (device loop4): __ext4_add_entry:2414: inode #2: comm syz.4.1572: Directory hole found for htree leaf block 0 [ 86.185557][ T8529] EXT4-fs (loop4): Remounting filesystem read-only [ 86.261987][ T4711] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 86.302536][ T8542] loop5: detected capacity change from 0 to 256 [ 86.311426][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.362078][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.362106][ T8542] FAT-fs (loop5): Filesystem has been set read-only [ 86.362219][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.362238][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.362323][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.362355][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.362384][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.362411][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.362438][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.362464][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.362490][ T8542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.475080][ T8552] sch_fq: defrate 2 ignored. [ 86.993672][ T4720] wiimote 0005:057E:0306.0003: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 86.993793][ T4720] wiimote 0005:057E:0306.0003: New device registered [ 87.018141][ T8578] veth1_macvtap: left promiscuous mode [ 87.018165][ T8578] macsec0: entered allmulticast mode [ 87.040140][ T8578] veth1_macvtap: entered promiscuous mode [ 87.040160][ T8578] veth1_macvtap: entered allmulticast mode [ 87.040222][ T8578] macsec0: left allmulticast mode [ 87.040232][ T8578] veth1_macvtap: left allmulticast mode [ 87.234232][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.341006][ T8602] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 87.359083][ T8604] loop5: detected capacity change from 0 to 512 [ 87.367432][ T8604] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.384068][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 87.384280][ T8604] EXT4-fs (loop5): 1 truncate cleaned up [ 87.384791][ T8604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.385357][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 87.386632][ T10] usb 1-1: config 0 has no interfaces? [ 87.389079][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.389094][ T10] usb 1-1: Product: syz [ 87.389101][ T10] usb 1-1: Manufacturer: syz [ 87.389108][ T10] usb 1-1: SerialNumber: syz [ 87.390425][ T10] usb 1-1: config 0 descriptor?? [ 87.429797][ T8604] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.1607: corrupted xattr entries [ 87.429992][ T8604] EXT4-fs error (device loop5): get_max_inline_xattr_value_size:73: inode #15: comm syz.5.1607: corrupt xattr in inline inode [ 87.430202][ T8604] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.1607: corrupted xattr entries [ 87.453690][ T8604] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.1607: corrupted xattr entries [ 87.462753][ T8604] EXT4-fs error (device loop5) in ext4_setattr:6247: Corrupt filesystem [ 87.515671][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.595604][ T8621] loop3: detected capacity change from 0 to 256 [ 87.634951][ T8621] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 87.634968][ T8621] FAT-fs (loop3): Filesystem has been set read-only [ 87.637772][ T8575] wiimote 0005:057E:0306.0003: Device removed [ 87.639043][ T1156] usb 1-1: USB disconnect, device number 3 [ 87.726490][ T8624] usb usb9: usbfs: process 8624 (syz.1.1617) did not claim interface 3 before use [ 87.732664][ T8626] loop4: detected capacity change from 0 to 512 [ 87.746225][ T8626] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 87.762293][ T8626] EXT4-fs (loop4): 1 truncate cleaned up [ 87.762981][ T8626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.775245][ T8628] loop3: detected capacity change from 0 to 2048 [ 87.801491][ T8628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.816710][ T8628] EXT4-fs (loop3): shut down requested (2) [ 87.827425][ T8626] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1619: invalid indirect mapped block 2185560079 (level 0) [ 87.828705][ T8626] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1619: invalid indirect mapped block 65535 (level 2) [ 87.849233][ T8626] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.1619: Invalid inode table block 0 in block_group 0 [ 87.865775][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.876533][ T8626] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 87.876831][ T8626] EXT4-fs error (device loop4): ext4_splice_branch:479: inode #13: comm syz.4.1619: mark_inode_dirty error [ 87.878887][ T8626] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1619: bg 0: block 46: invalid block bitmap [ 87.879800][ T8626] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 87.880488][ T8626] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.1619: Invalid inode table block 0 in block_group 0 [ 87.908817][ T8626] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 87.909273][ T8626] EXT4-fs error (device loop4): ext4_truncate:4721: inode #13: comm syz.4.1619: mark_inode_dirty error [ 87.948013][ T8638] loop5: detected capacity change from 0 to 256 [ 87.961992][ T8640] loop1: detected capacity change from 0 to 512 [ 87.962346][ T8640] EXT4-fs: Ignoring removed i_version option [ 87.962369][ T8640] EXT4-fs: Ignoring removed bh option [ 87.972796][ T8640] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1623: inode #13: comm syz.1.1623: iget: illegal inode # [ 87.972815][ T8640] loop1: lost filesystem error report for type 5 error -117 [ 87.972936][ T8640] EXT4-fs (loop1): Remounting filesystem read-only [ 87.973439][ T8640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.995903][ T8638] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 87.995921][ T8638] FAT-fs (loop5): Filesystem has been set read-only [ 88.020530][ T8640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.060442][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.165469][ T907] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 88.190567][ T8654] loop1: detected capacity change from 0 to 256 [ 88.210558][ T8654] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.219684][ T8654] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 88.219713][ T8654] FAT-fs (loop1): Filesystem has been set read-only [ 88.275568][ T8658] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1631'. [ 88.563778][ T8684] loop5: detected capacity change from 0 to 2048 [ 88.575757][ T8684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.654363][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.744637][ T8695] No such timeout policy "syz1" [ 88.944200][ T8710] i2c i2c-0: new_device: Can't parse I2C address [ 89.011212][ T8718] net_ratelimit: 3321 callbacks suppressed [ 89.011229][ T8718] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.024974][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 89.025016][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 89.350668][ T8741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.357723][ T8741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 89.357758][ T8741] System zones: 0-1, 3-36 [ 89.359191][ T8741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.399749][ T8744] ieee802154 phy1 wpan1: encryption failed: -22 [ 89.450877][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 89.462585][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.684307][ T4720] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 89.687733][ T4720] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input12 [ 89.702580][ T4720] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input13 [ 89.707806][ T4720] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input11 [ 89.711199][ T8765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.738139][ T8761] fido_id[8761]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.802378][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.811683][ T8774] Injecting memory failure for pfn 0x137eb6 at process virtual address 0x20945000 [ 89.812480][ T8774] Memory failure: 0x137eb6: recovery action for clean LRU page: Recovered [ 89.812492][ T8774] Injecting memory failure for pfn 0x138a89 at process virtual address 0x20946000 [ 89.812541][ T8774] Memory failure: 0x138a89: recovery action for clean LRU page: Recovered [ 89.812550][ T8774] Injecting memory failure for pfn 0x138a88 at process virtual address 0x20947000 [ 89.812588][ T8774] Memory failure: 0x138a88: recovery action for clean LRU page: Recovered [ 89.812596][ T8774] Injecting memory failure for pfn 0x137477 at process virtual address 0x20948000 [ 89.812629][ T8774] Memory failure: 0x137477: recovery action for clean LRU page: Recovered [ 90.009425][ T8778] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.016901][ T8778] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1686: inode has both inline data and extents flags [ 90.016921][ T8778] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.017050][ T8778] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1686: couldn't read orphan inode 15 (err -117) [ 90.017064][ T8778] loop4: lost filesystem error report for type 5 error -117 [ 90.075465][ T8781] vxcan1: Caught tx_queue_len zero misconfig [ 90.237568][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.237744][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.117306][ T8826] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.398613][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 91.487126][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.487319][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.759239][ T8868] mmap: syz.1.1729 (8868) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.222518][ T8899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1743'. [ 92.251287][ T8902] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 92.266578][ T8906] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1746'. [ 92.494329][ T8918] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1752'. [ 92.730028][ T8926] block2mtd: illegal erase size [ 93.706393][ T8955] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1770'. [ 93.965460][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1778'. [ 94.076249][ T8982] set_capacity_and_notify: 4 callbacks suppressed [ 94.076263][ T8982] loop4: detected capacity change from 0 to 512 [ 94.289833][ T8999] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1789'. [ 94.289859][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1789'. [ 94.289870][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1789'. [ 94.518583][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 94.539931][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 94.627128][ T9021] netlink: 'syz.4.1798': attribute type 2 has an invalid length. [ 94.823390][ T9035] loop3: detected capacity change from 0 to 128 [ 94.823889][ T9035] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.828373][ T9035] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.997646][ T9042] loop3: detected capacity change from 0 to 4096 [ 94.998051][ T9042] EXT4-fs: Ignoring removed orlov option [ 95.046044][ T9042] EXT4-fs (loop3): Test dummy encryption mode enabled [ 95.048093][ T9042] EXT4-fs mount: 4 callbacks suppressed [ 95.048104][ T9042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.110576][ T9042] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 95.111980][ T9042] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 95.128147][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.128751][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.165696][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.381455][ T9062] Injecting memory failure for pfn 0x11eedf at process virtual address 0x20000000 [ 95.390386][ T9062] Memory failure: 0x11eedf: recovery action for clean LRU page: Recovered [ 95.390407][ T9062] Injecting memory failure for pfn 0x11eede at process virtual address 0x20001000 [ 95.390565][ T9062] Memory failure: 0x11eede: recovery action for clean LRU page: Recovered [ 95.390575][ T9062] Injecting memory failure for pfn 0x11eedd at process virtual address 0x20002000 [ 95.390610][ T9062] Memory failure: 0x11eedd: recovery action for clean LRU page: Recovered [ 95.390618][ T9062] Injecting memory failure for pfn 0x11eedc at process virtual address 0x20003000 [ 95.390651][ T9062] Memory failure: 0x11eedc: recovery action for clean LRU page: Recovered [ 95.390659][ T9062] Injecting memory failure for pfn 0x11eedb at process virtual address 0x20004000 [ 95.390690][ T9062] Memory failure: 0x11eedb: recovery action for clean LRU page: Recovered [ 95.390698][ T9062] Injecting memory failure for pfn 0x11eeda at process virtual address 0x20005000 [ 95.390728][ T9062] Memory failure: 0x11eeda: recovery action for clean LRU page: Recovered [ 95.390736][ T9062] Injecting memory failure for pfn 0x11eed9 at process virtual address 0x20006000 [ 95.390767][ T9062] Memory failure: 0x11eed9: recovery action for clean LRU page: Recovered [ 95.390774][ T9062] Injecting memory failure for pfn 0x11eed8 at process virtual address 0x20007000 [ 95.393925][ T9062] Memory failure: 0x11eed8: recovery action for clean LRU page: Recovered [ 95.429636][ T9062] Injecting memory failure for pfn 0x11ee37 at process virtual address 0x20008000 [ 95.438410][ T9062] Memory failure: 0x11ee37: recovery action for clean LRU page: Recovered [ 95.438429][ T9062] Injecting memory failure for pfn 0x11ee36 at process virtual address 0x20009000 [ 95.451542][ T9062] Memory failure: 0x11ee36: recovery action for clean LRU page: Recovered [ 95.451563][ T9062] Injecting memory failure for pfn 0x11ee35 at process virtual address 0x2000a000 [ 95.451783][ T9062] Memory failure: 0x11ee35: recovery action for clean LRU page: Recovered [ 95.451793][ T9062] Injecting memory failure for pfn 0x11ee34 at process virtual address 0x2000b000 [ 95.451832][ T9062] Memory failure: 0x11ee34: recovery action for clean LRU page: Recovered [ 95.451841][ T9062] Injecting memory failure for pfn 0x11ee33 at process virtual address 0x2000c000 [ 95.451874][ T9062] Memory failure: 0x11ee33: recovery action for clean LRU page: Recovered [ 95.451882][ T9062] Injecting memory failure for pfn 0x11ee32 at process virtual address 0x2000d000 [ 95.451914][ T9062] Memory failure: 0x11ee32: recovery action for clean LRU page: Recovered [ 95.451922][ T9062] Injecting memory failure for pfn 0x11ee31 at process virtual address 0x2000e000 [ 95.451953][ T9062] Memory failure: 0x11ee31: recovery action for clean LRU page: Recovered [ 95.451960][ T9062] Injecting memory failure for pfn 0x11ee30 at process virtual address 0x2000f000 [ 95.451990][ T9062] Memory failure: 0x11ee30: recovery action for clean LRU page: Recovered [ 95.451998][ T9062] Injecting memory failure for pfn 0x11ee2f at process virtual address 0x20010000 [ 95.452028][ T9062] Memory failure: 0x11ee2f: recovery action for clean LRU page: Recovered [ 95.452035][ T9062] Injecting memory failure for pfn 0x11ee2e at process virtual address 0x20011000 [ 95.452065][ T9062] Memory failure: 0x11ee2e: recovery action for clean LRU page: Recovered [ 95.452073][ T9062] Injecting memory failure for pfn 0x11ee2d at process virtual address 0x20012000 [ 95.452102][ T9062] Memory failure: 0x11ee2d: recovery action for clean LRU page: Recovered [ 95.452110][ T9062] Injecting memory failure for pfn 0x11ee2c at process virtual address 0x20013000 [ 95.452139][ T9062] Memory failure: 0x11ee2c: recovery action for clean LRU page: Recovered [ 95.452147][ T9062] Injecting memory failure for pfn 0x11ee2b at process virtual address 0x20014000 [ 95.452184][ T9062] Memory failure: 0x11ee2b: recovery action for clean LRU page: Recovered [ 95.452193][ T9062] Injecting memory failure for pfn 0x11ee2a at process virtual address 0x20015000 [ 95.452225][ T9062] Memory failure: 0x11ee2a: recovery action for clean LRU page: Recovered [ 95.452233][ T9062] Injecting memory failure for pfn 0x11ee29 at process virtual address 0x20016000 [ 95.452262][ T9062] Memory failure: 0x11ee29: recovery action for clean LRU page: Recovered [ 95.452270][ T9062] Injecting memory failure for pfn 0x11ee28 at process virtual address 0x20017000 [ 95.452299][ T9062] Memory failure: 0x11ee28: recovery action for clean LRU page: Recovered [ 95.452307][ T9062] Injecting memory failure for pfn 0x11e1af at process virtual address 0x20018000 [ 95.452337][ T9062] Memory failure: 0x11e1af: recovery action for clean LRU page: Recovered [ 95.452344][ T9062] Injecting memory failure for pfn 0x11e1ae at process virtual address 0x20019000 [ 95.452374][ T9062] Memory failure: 0x11e1ae: recovery action for clean LRU page: Recovered [ 95.452382][ T9062] Injecting memory failure for pfn 0x11e1ad at process virtual address 0x2001a000 [ 95.452411][ T9062] Memory failure: 0x11e1ad: recovery action for clean LRU page: Recovered [ 95.452419][ T9062] Injecting memory failure for pfn 0x11e1ac at process virtual address 0x2001b000 [ 95.452805][ T9062] Memory failure: 0x11e1ac: recovery action for clean LRU page: Recovered [ 95.452813][ T9062] Injecting memory failure for pfn 0x11e1ab at process virtual address 0x2001c000 [ 95.452845][ T9062] Memory failure: 0x11e1ab: recovery action for clean LRU page: Recovered [ 95.452853][ T9062] Injecting memory failure for pfn 0x11e1aa at process virtual address 0x2001d000 [ 95.452883][ T9062] Memory failure: 0x11e1aa: recovery action for clean LRU page: Recovered [ 95.452890][ T9062] Injecting memory failure for pfn 0x11e1a9 at process virtual address 0x2001e000 [ 95.452920][ T9062] Memory failure: 0x11e1a9: recovery action for clean LRU page: Recovered [ 95.452927][ T9062] Injecting memory failure for pfn 0x11e1a8 at process virtual address 0x2001f000 [ 95.452957][ T9062] Memory failure: 0x11e1a8: recovery action for clean LRU page: Recovered [ 95.452965][ T9062] Injecting memory failure for pfn 0x134a07 at process virtual address 0x20020000 [ 95.564323][ T9062] Memory failure: 0x134a07: recovery action for clean LRU page: Recovered [ 95.593031][ T9065] loop5: detected capacity change from 0 to 256 [ 95.863546][ T907] IPVS: starting estimator thread 0... [ 95.945156][ T9084] IPVS: using max 59 ests per chain, 141600 per kthread [ 96.881194][ T9109] loop1: detected capacity change from 0 to 256 [ 97.300252][ T9140] loop4: detected capacity change from 0 to 512 [ 97.300608][ T9140] ext4: Unknown parameter 'bsdgroups.smackfsfloor' [ 97.318203][ T9144] loop5: detected capacity change from 0 to 512 [ 97.350597][ T9144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.371027][ T9143] loop1: detected capacity change from 0 to 4096 [ 97.394346][ T9143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.483862][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.626990][ T6218] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 97.628521][ T6218] EXT4-fs (loop5): Remounting filesystem read-only [ 97.633633][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.831658][ T9173] loop5: detected capacity change from 0 to 256 [ 98.169818][ T9198] loop4: detected capacity change from 0 to 1024 [ 98.202303][ T9198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.286844][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.393243][ T9214] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.442242][ T3365] Bluetooth: hci5: Frame reassembly failed (-84) [ 98.452707][ T9212] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 98.494718][ T9214] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 98.544879][ T9218] block2mtd: illegal erase size [ 98.576088][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 98.576112][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1890'. [ 98.659240][ T9228] EXT4-fs: Ignoring removed nobh option [ 98.666786][ T9228] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.751742][ T4717] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.957561][ T9241] bond0: invalid ARP target specified [ 99.088911][ T58] IPVS: starting estimator thread 0... [ 99.175456][ T9251] IPVS: using max 59 ests per chain, 141600 per kthread [ 99.225397][ T9258] set_capacity_and_notify: 2 callbacks suppressed [ 99.225411][ T9258] loop3: detected capacity change from 0 to 2048 [ 99.248140][ T9258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.277049][ T9258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.484133][ T4721] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 101.515534][ T9279] netlink: 'syz.4.1914': attribute type 2 has an invalid length. [ 101.635587][ T9285] loop5: detected capacity change from 0 to 1024 [ 101.658002][ T9285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 101.729423][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 102.036466][ T9312] overlayfs: upper fs does not support file handles, falling back to index=off. [ 102.036478][ T9312] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 102.426619][ T9331] loop0: detected capacity change from 0 to 512 [ 102.456264][ T9331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 102.456309][ T9331] System zones: 1-12 [ 102.457526][ T9331] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.1938: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 102.457548][ T9331] loop0: lost filesystem error report for type 5 error -117 [ 102.460896][ T9331] EXT4-fs (loop0): 1 orphan inode deleted [ 102.461368][ T9331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.591574][ T9342] netlink: 'syz.5.1944': attribute type 83 has an invalid length. [ 102.595835][ T9341] ima: policy update failed [ 102.596012][ T30] audit: type=1802 audit(102.580:16): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.1945" res=0 errno=0 [ 102.625870][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.880010][ T9363] loop3: detected capacity change from 0 to 512 [ 102.898890][ T9363] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.912543][ T9366] loop0: detected capacity change from 0 to 512 [ 102.915765][ T9363] EXT4-fs (loop3): 1 truncate cleaned up [ 102.916239][ T9363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.930812][ T9366] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.956792][ T9366] EXT4-fs (loop0): 1 truncate cleaned up [ 102.957264][ T9366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.998698][ T9366] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.1954: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1 [ 102.998905][ T9366] EXT4-fs (loop0): Remounting filesystem read-only [ 103.000988][ T9366] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #2: comm syz.0.1954: directory missing '..' [ 103.019329][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.062026][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.163729][ T9378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.163822][ T9378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.163867][ T9378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.163893][ T9378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.163979][ T9378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.164005][ T9378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.164042][ T9378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.164067][ T9378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.164102][ T9378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.164127][ T9378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.260393][ T9380] pim6reg: entered allmulticast mode [ 103.294888][ T9379] pim6reg: left allmulticast mode [ 103.878656][ T9423] loop3: detected capacity change from 0 to 512 [ 103.886422][ T9423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.910401][ T9423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.992189][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.139895][ T9440] loop0: detected capacity change from 0 to 4096 [ 104.151630][ T9442] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [229] [ 104.151644][ T9442] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 104.151654][ T9442] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 104.151660][ T9442] One or more global auth toks could not properly register; rc = [-22] [ 104.151677][ T9442] Error validating options; rc = [-22] [ 104.165849][ T9440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.227134][ T9447] »»»»»»: renamed from vlan0 (while UP) [ 104.309129][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.398032][ T30] audit: type=1400 audit(104.380:17): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rwa pid=9456 comm="syz.5.1997" name="tun" dev="devtmpfs" ino=691 [ 104.637856][ T9474] loop5: detected capacity change from 0 to 512 [ 104.657824][ T9474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.667957][ T9480] Injecting memory failure for pfn 0x13b719 at process virtual address 0x20001000 [ 104.676577][ T9480] Memory failure: 0x13b719: recovery action for clean LRU page: Recovered [ 104.676648][ T9480] Injecting memory failure for pfn 0x13ab67 at process virtual address 0x20002000 [ 104.676871][ T9480] Memory failure: 0x13ab67: recovery action for clean LRU page: Recovered [ 104.676928][ T9480] Injecting memory failure for pfn 0x137e89 at process virtual address 0x20003000 [ 104.677015][ T9480] Memory failure: 0x137e89: recovery action for clean LRU page: Recovered [ 104.771991][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.782123][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 105.456167][ T9526] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 105.528681][ T9530] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 105.645513][ T9534] nbd0: detected capacity change from 0 to 618483679232 [ 105.646624][ T4728] block nbd0: Receive control failed (result -32) [ 105.668221][ T4359] block nbd0: Dead connection, failed to find a fallback [ 105.668236][ T4359] block nbd0: shutting down sockets [ 105.668268][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.668283][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.680546][ T9538] loop9: detected capacity change from 0 to 524287997 [ 105.700270][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.700297][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.701691][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.701709][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.701825][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.701840][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.701889][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.701900][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.701951][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.701961][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.702008][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.702018][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.702061][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.702071][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.702088][ T4731] ldm_validate_partition_table(): Disk read failed. [ 105.702119][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.702128][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.702169][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.702185][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.744822][ T4731] Dev nbd0: unable to read RDB block 0 [ 105.755768][ T4731] nbd0: unable to read partition table [ 105.763868][ T4731] ldm_validate_partition_table(): Disk read failed. [ 105.783343][ T4731] Dev nbd0: unable to read RDB block 0 [ 105.783528][ T4731] nbd0: unable to read partition table [ 105.852254][ T9542] loop4: detected capacity change from 0 to 128 [ 105.861629][ T9542] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.895396][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2038'. [ 105.920009][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.021189][ T5991] ldm_validate_partition_table(): Disk read failed. [ 106.021502][ T5991] Dev nbd0: unable to read RDB block 0 [ 106.022669][ T5991] nbd0: unable to read partition table [ 106.041899][ T5991] ldm_validate_partition_table(): Disk read failed. [ 106.042053][ T5991] Dev nbd0: unable to read RDB block 0 [ 106.047651][ T5991] nbd0: unable to read partition table [ 106.114535][ T9562] loop3: detected capacity change from 0 to 1024 [ 106.130339][ T9562] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 106.130392][ T9562] System zones: 0-1, 3-12 [ 106.130980][ T9562] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.165326][ T9563] Invalid ELF header magic: != ELF [ 106.275338][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 106.328771][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2049'. [ 106.328799][ T9573] netlink: 'syz.5.2049': attribute type 21 has an invalid length. [ 106.492559][ T9587] loop3: detected capacity change from 0 to 1024 [ 106.492923][ T9587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.507280][ T9587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.625712][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.756042][ T9606] loop0: detected capacity change from 0 to 256 [ 106.926924][ T9618] loop4: detected capacity change from 0 to 256 [ 107.117870][ T9628] loop5: detected capacity change from 0 to 4096 [ 107.145508][ T9628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.220871][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.321921][ T9648] loop4: detected capacity change from 0 to 128 [ 107.323410][ T9648] EXT4-fs (loop4): Test dummy encryption mode enabled [ 107.336307][ T9648] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.432215][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.955075][ T9688] macvlan0: entered promiscuous mode [ 107.974131][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 108.675493][ T9716] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.700335][ T9716] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 108.780115][ T4717] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.083396][ T9733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.083417][ T9733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.094374][ T9733] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 109.097714][ T9733] EXT4-fs (loop5): 1 truncate cleaned up [ 109.098164][ T9733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.207872][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.253306][ T9745] block2mtd: too many arguments [ 109.602299][ T9770] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 109.657984][ T9774] loop3: p2 < > p3 < > [ 109.686707][ T4345] loop3: p2 < > p3 < > [ 109.839029][ T9786] xt_hashlimit: size too large, truncated to 1048576 [ 110.004907][ T5991] udevd[5991]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 110.006936][ T6080] udevd[6080]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 110.025925][ T9795] FAULT_INJECTION: forcing a failure. [ 110.025925][ T9795] name failslab, interval 1, probability 0, space 0, times 1 [ 110.025948][ T9795] CPU: 0 UID: 0 PID: 9795 Comm: syz.3.2146 Tainted: G L syzkaller #0 PREEMPT [ 110.025962][ T9795] Tainted: [L]=SOFTLOCKUP [ 110.025966][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 110.025971][ T9795] Call trace: [ 110.025974][ T9795] show_stack+0x2c/0x3c (C) [ 110.025993][ T9795] __dump_stack+0x30/0x40 [ 110.026005][ T9795] dump_stack_lvl+0xd8/0x12c [ 110.026017][ T9795] dump_stack+0x1c/0x28 [ 110.026028][ T9795] should_fail_ex+0x41c/0x590 [ 110.026041][ T9795] should_failslab+0xc4/0x120 [ 110.026055][ T9795] __kmalloc_cache_noprof+0x94/0x5fc [ 110.026064][ T9795] proc_self_get_link+0xe4/0x17c [ 110.026078][ T9795] pick_link+0x5cc/0xcf4 [ 110.026089][ T9795] step_into_slowpath+0x468/0x670 [ 110.026101][ T9795] link_path_walk+0xb34/0x1584 [ 110.026112][ T9795] path_openat+0x160/0x18f4 [ 110.026122][ T9795] do_file_open+0x1c8/0x2e8 [ 110.026132][ T9795] do_sys_openat2+0x114/0x1e8 [ 110.026144][ T9795] do_sys_open+0xb0/0xe0 [ 110.026155][ T9795] __arm64_sys_openat+0xa8/0xc4 [ 110.026167][ T9795] invoke_syscall+0x98/0x244 [ 110.026186][ T9795] el0_svc_common+0xec/0x23c [ 110.026198][ T9795] do_el0_svc+0x4c/0x5c [ 110.026209][ T9795] el0_svc+0x64/0x260 [ 110.026220][ T9795] el0t_64_sync_handler+0x44/0x104 [ 110.026231][ T9795] el0t_64_sync+0x198/0x19c [ 110.364467][ T4728] Bluetooth: Frame is too long (len 20, expected len 4) [ 110.475480][ T9815] macvlan0: entered promiscuous mode [ 110.475646][ T9815] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 110.475655][ T9815] netlink: 'syz.1.2155': attribute type 2 has an invalid length. [ 110.564669][ T1156] atkbd serio1: keyboard reset failed on [ 110.710809][ T9826] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 111.263761][ T9838] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 111.263777][ T9838] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.263799][ T9838] vhci_hcd vhci_hcd.3: default hub control req: 1f14 v0016 i0003 l0 [ 111.379709][ T9850] set_capacity_and_notify: 3 callbacks suppressed [ 111.379723][ T9850] loop4: detected capacity change from 0 to 512 [ 111.389003][ T9848] netlink: 'syz.0.2170': attribute type 1 has an invalid length. [ 111.389017][ T9848] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2170'. [ 111.402933][ T9850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 111.402975][ T9850] System zones: 1-12 [ 111.403606][ T9850] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.2172: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 111.403619][ T9850] loop4: lost filesystem error report for type 5 error -117 [ 111.403802][ T9850] EXT4-fs (loop4): 1 orphan inode deleted [ 111.404412][ T9850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.465308][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.517931][ T9861] input: syz0 as /devices/virtual/input/input16 [ 116.583305][ T9864] loop5: detected capacity change from 0 to 8192 [ 116.650233][ T1156] Process accounting resumed [ 116.650712][ T1156] bio_check_eod: 1 callbacks suppressed [ 116.650722][ T1156] kworker/0:2: attempt to access beyond end of device [ 116.650722][ T1156] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.660919][ T1156] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 116.660935][ T1156] FAT-fs (loop5): Filesystem has been set read-only [ 116.947687][ T9895] batadv_slave_1: entered promiscuous mode [ 116.948172][ T9894] batadv_slave_1: left promiscuous mode [ 116.965190][ T9897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2193'. [ 116.966866][ T9897] veth1_to_team: entered promiscuous mode [ 116.996539][ T9897] veth1_to_team: left promiscuous mode [ 117.168659][ T9908] loop4: detected capacity change from 0 to 1024 [ 117.179285][ T9910] loop3: detected capacity change from 0 to 1024 [ 117.180493][ T9910] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.180506][ T9910] EXT4-fs: Ignoring removed oldalloc option [ 117.192629][ T9908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.194817][ T9910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.212557][ T9910] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2199: bg 0: block 112: padding at end of block bitmap is not set [ 117.219670][ T9912] serio: Serial port ptm0 [ 117.260210][ T9910] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.2199: lblock 0 mapped to illegal pblock 0 (length 1) [ 117.272833][ T9910] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #15: comm syz.3.2199: lblock 0 mapped to illegal pblock 0 (length 1) [ 117.340744][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.398355][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.407739][ T9925] loop0: detected capacity change from 0 to 1024 [ 117.408296][ T9925] EXT4-fs: Ignoring removed bh option [ 117.412421][ T9925] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 117.432697][ T9925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.492085][ T9925] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 7: comm syz.0.2205: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 117.508476][ T9925] EXT4-fs (loop0): Remounting filesystem read-only [ 117.672043][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.694007][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 118.072235][ T9946] Console: switching to colour dummy device 80x25 [ 118.129299][ T9946] Console: switching to colour frame buffer device 128x48 [ 119.266999][ T9962] batadv0: Caught tx_queue_len zero misconfig [ 119.268597][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2220'. [ 119.355274][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2221'. [ 119.525676][ T3405] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 119.910023][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2225'. [ 119.910051][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2225'. [ 119.927557][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2224'. [ 120.268485][ T1156] wiimote 0005:057E:0330.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 120.268721][ T1156] wiimote 0005:057E:0330.0004: New device registered [ 120.348709][ T9980] wiimote 0005:057E:0330.0004: Device removed [ 120.905444][ T9996] loop4: detected capacity change from 0 to 1024 [ 120.906600][ T9996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.928914][ T9996] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 121.147734][ T9992] fido_id[9992]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.290020][ T1156] wiimote 0005:057E:0330.0004: detected device: Nintendo Wii Remote Plus (Gen 2) [ 121.370438][ T1156] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input18 [ 121.390689][ T1156] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input19 [ 121.418013][ T1156] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input17 [ 123.031361][T10027] loop5: detected capacity change from 0 to 256 [ 123.263533][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 124.585451][T10051] FAULT_INJECTION: forcing a failure. [ 124.585451][T10051] name failslab, interval 1, probability 0, space 0, times 0 [ 124.585481][T10051] CPU: 0 UID: 0 PID: 10051 Comm: syz.5.2258 Tainted: G L syzkaller #0 PREEMPT [ 124.585496][T10051] Tainted: [L]=SOFTLOCKUP [ 124.585501][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 124.585509][T10051] Call trace: [ 124.585514][T10051] show_stack+0x2c/0x3c (C) [ 124.585537][T10051] __dump_stack+0x30/0x40 [ 124.585554][T10051] dump_stack_lvl+0xd8/0x12c [ 124.585572][T10051] dump_stack+0x1c/0x28 [ 124.585587][T10051] should_fail_ex+0x41c/0x590 [ 124.585606][T10051] should_failslab+0xc4/0x120 [ 124.585623][T10051] __kmalloc_noprof+0x108/0x6c8 [ 124.585637][T10051] security_prepare_creds+0x60/0x35c [ 124.585653][T10051] prepare_creds+0x500/0x7d0 [ 124.585671][T10051] lookup_user_key+0x1a4/0xd4c [ 124.585686][T10051] __arm64_sys_add_key+0x34c/0x43c [ 124.585700][T10051] invoke_syscall+0x98/0x244 [ 124.585717][T10051] el0_svc_common+0x19c/0x23c [ 124.585734][T10051] do_el0_svc+0x4c/0x5c [ 124.585750][T10051] el0_svc+0x64/0x260 [ 124.585766][T10051] el0t_64_sync_handler+0x44/0x104 [ 124.585782][T10051] el0t_64_sync+0x198/0x19c [ 125.235719][T10061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 125.626430][T10069] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2266'. [ 125.842282][ T4728] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 125.932807][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.099268][T10075] FAULT_INJECTION: forcing a failure. [ 126.099268][T10075] name failslab, interval 1, probability 0, space 0, times 0 [ 126.099300][T10075] CPU: 0 UID: 0 PID: 10075 Comm: syz.5.2269 Tainted: G L syzkaller #0 PREEMPT [ 126.099316][T10075] Tainted: [L]=SOFTLOCKUP [ 126.099321][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 126.099329][T10075] Call trace: [ 126.099334][T10075] show_stack+0x2c/0x3c (C) [ 126.099360][T10075] __dump_stack+0x30/0x40 [ 126.099377][T10075] dump_stack_lvl+0xd8/0x12c [ 126.099393][T10075] dump_stack+0x1c/0x28 [ 126.099408][T10075] should_fail_ex+0x41c/0x590 [ 126.099426][T10075] should_failslab+0xc4/0x120 [ 126.099444][T10075] __kmalloc_noprof+0x108/0x6c8 [ 126.099458][T10075] security_sk_alloc+0x60/0x35c [ 126.099475][T10075] sk_prot_alloc+0xe0/0x1e8 [ 126.099489][T10075] sk_alloc+0x44/0x3ac [ 126.099501][T10075] __netlink_create+0x78/0x23c [ 126.099517][T10075] netlink_create+0x3b4/0x6a0 [ 126.099532][T10075] __sock_create+0x31c/0x670 [ 126.099546][T10075] __sys_socket_create+0xc0/0x11c [ 126.099560][T10075] __sys_socket+0x44/0xec [ 126.099574][T10075] __arm64_sys_socket+0x84/0x9c [ 126.099588][T10075] invoke_syscall+0x98/0x244 [ 126.099605][T10075] el0_svc_common+0x19c/0x23c [ 126.099621][T10075] do_el0_svc+0x4c/0x5c [ 126.099637][T10075] el0_svc+0x64/0x260 [ 126.099653][T10075] el0t_64_sync_handler+0x44/0x104 [ 126.099669][T10075] el0t_64_sync+0x198/0x19c [ 131.780962][T10085] net_ratelimit: 3 callbacks suppressed [ 131.780981][T10085] ip_tables: iptables: counters copy to user failed while replacing table [ 133.592748][T10125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2289'. [ 133.636490][T10125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2289'. [ 133.691603][T10128] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 137.370286][T10157] batadv_slave_1: entered promiscuous mode [ 137.392168][T10155] batadv_slave_1: left promiscuous mode [ 137.503880][T10160] loop0: detected capacity change from 0 to 512 [ 137.529155][T10160] EXT4-fs: Ignoring removed nobh option [ 137.750730][T10160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.177717][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.469767][T10169] loop5: detected capacity change from 0 to 8 [ 138.592292][T10174] FAULT_INJECTION: forcing a failure. [ 138.592292][T10174] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 138.592323][T10174] CPU: 0 UID: 0 PID: 10174 Comm: syz.3.2309 Tainted: G L syzkaller #0 PREEMPT [ 138.592338][T10174] Tainted: [L]=SOFTLOCKUP [ 138.592344][T10174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 138.592351][T10174] Call trace: [ 138.592356][T10174] show_stack+0x2c/0x3c (C) [ 138.592379][T10174] __dump_stack+0x30/0x40 [ 138.592396][T10174] dump_stack_lvl+0xd8/0x12c [ 138.592412][T10174] dump_stack+0x1c/0x28 [ 138.592428][T10174] should_fail_ex+0x41c/0x590 [ 138.592446][T10174] should_fail_alloc_page+0xec/0x10c [ 138.592465][T10174] prepare_alloc_pages+0x194/0x484 [ 138.592480][T10174] __alloc_frozen_pages_noprof+0x180/0x648 [ 138.592493][T10174] alloc_pages_mpol+0x1fc/0x3d0 [ 138.592507][T10174] folio_alloc_mpol_noprof+0x4c/0x248 [ 138.592522][T10174] vma_alloc_folio_noprof+0x100/0x1dc [ 138.592536][T10174] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 138.592553][T10174] folio_prealloc+0x3c/0x1b0 [ 138.592570][T10174] do_pte_missing+0x1bd0/0x2a28 [ 138.592583][T10174] handle_mm_fault+0x1534/0x2bec [ 138.592599][T10174] do_page_fault+0x77c/0xb88 [ 138.592614][T10174] do_translation_fault+0xc4/0x114 [ 138.592630][T10174] do_mem_abort+0x70/0x194 [ 138.592645][T10174] el0_da+0x78/0x254 [ 138.592661][T10174] el0t_64_sync_handler+0xd8/0x104 [ 138.592677][T10174] el0t_64_sync+0x198/0x19c [ 138.592774][T10174] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 138.746234][T10176] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.125233][T10196] input: syz1 as /devices/virtual/input/input21 [ 146.964511][T10231] FAULT_INJECTION: forcing a failure. [ 146.964511][T10231] name failslab, interval 1, probability 0, space 0, times 0 [ 146.964542][T10231] CPU: 0 UID: 0 PID: 10231 Comm: syz.3.2333 Tainted: G L syzkaller #0 PREEMPT [ 146.964557][T10231] Tainted: [L]=SOFTLOCKUP [ 146.964563][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 146.964571][T10231] Call trace: [ 146.964576][T10231] show_stack+0x2c/0x3c (C) [ 146.964602][T10231] __dump_stack+0x30/0x40 [ 146.964619][T10231] dump_stack_lvl+0xd8/0x12c [ 146.964635][T10231] dump_stack+0x1c/0x28 [ 146.964651][T10231] should_fail_ex+0x41c/0x590 [ 146.964669][T10231] should_failslab+0xc4/0x120 [ 146.964687][T10231] __kmalloc_noprof+0x108/0x6c8 [ 146.964701][T10231] security_prepare_creds+0x60/0x35c [ 146.964717][T10231] prepare_creds+0x500/0x7d0 [ 146.964734][T10231] copy_creds+0xd8/0x7b0 [ 146.964750][T10231] copy_process+0xb1c/0x332c [ 146.964763][T10231] kernel_clone+0x234/0x9fc [ 146.964777][T10231] __arm64_sys_clone3+0x35c/0x390 [ 146.964791][T10231] invoke_syscall+0x98/0x244 [ 146.964808][T10231] el0_svc_common+0x19c/0x23c [ 146.964825][T10231] do_el0_svc+0x4c/0x5c [ 146.964841][T10231] el0_svc+0x64/0x260 [ 146.964857][T10231] el0t_64_sync_handler+0x44/0x104 [ 146.964872][T10231] el0t_64_sync+0x198/0x19c [ 147.225510][T10233] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 149.561986][T10269] loop4: detected capacity change from 0 to 512 [ 149.581999][T10269] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.602998][T10269] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.2346: bad orphan inode 131083 [ 149.603024][T10269] loop4: lost filesystem error report for type 5 error -117 [ 149.604852][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 149.604866][ C0] EXT4-fs (loop4): initial error at time 149: ext4_orphan_get:1429 [ 149.604883][ C0] EXT4-fs (loop4): last error at time 149: ext4_orphan_get:1429 [ 149.626605][T10268] overlayfs: fs on './tracing' does not support file handles, falling back to index=off,nfs_export=off. [ 149.629094][T10269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.759805][T10269] EXT4-fs (loop4): shut down requested (2) [ 149.774603][T10269] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #2: comm syz.4.2346: directory missing '.' [ 150.023461][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.383187][T10278] FAULT_INJECTION: forcing a failure. [ 150.383187][T10278] name failslab, interval 1, probability 0, space 0, times 0 [ 150.383219][T10278] CPU: 0 UID: 0 PID: 10278 Comm: syz.1.2352 Tainted: G L syzkaller #0 PREEMPT [ 150.383235][T10278] Tainted: [L]=SOFTLOCKUP [ 150.383241][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 150.383249][T10278] Call trace: [ 150.383254][T10278] show_stack+0x2c/0x3c (C) [ 150.383283][T10278] __dump_stack+0x30/0x40 [ 150.383300][T10278] dump_stack_lvl+0xd8/0x12c [ 150.383317][T10278] dump_stack+0x1c/0x28 [ 150.383333][T10278] should_fail_ex+0x41c/0x590 [ 150.383351][T10278] should_failslab+0xc4/0x120 [ 150.383369][T10278] __kmalloc_cache_noprof+0x94/0x5fc [ 150.383384][T10278] __arm64_sys_io_uring_register+0x618/0x13fc [ 150.383402][T10278] invoke_syscall+0x98/0x244 [ 150.383419][T10278] el0_svc_common+0x19c/0x23c [ 150.383435][T10278] do_el0_svc+0x4c/0x5c [ 150.383451][T10278] el0_svc+0x64/0x260 [ 150.383467][T10278] el0t_64_sync_handler+0x44/0x104 [ 150.383483][T10278] el0t_64_sync+0x198/0x19c [ 150.458923][T10283] FAULT_INJECTION: forcing a failure. [ 150.458923][T10283] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.458953][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.0.2353 Tainted: G L syzkaller #0 PREEMPT [ 150.458968][T10283] Tainted: [L]=SOFTLOCKUP [ 150.458974][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 150.458981][T10283] Call trace: [ 150.458986][T10283] show_stack+0x2c/0x3c (C) [ 150.459012][T10283] __dump_stack+0x30/0x40 [ 150.459029][T10283] dump_stack_lvl+0xd8/0x12c [ 150.459044][T10283] dump_stack+0x1c/0x28 [ 150.459060][T10283] should_fail_ex+0x41c/0x590 [ 150.459078][T10283] should_fail+0x14/0x24 [ 150.459094][T10283] should_fail_usercopy+0x20/0x30 [ 150.459111][T10283] __arm64_sys_openat2+0x19c/0x404 [ 150.459130][T10283] invoke_syscall+0x98/0x244 [ 150.459147][T10283] el0_svc_common+0x19c/0x23c [ 150.459163][T10283] do_el0_svc+0x4c/0x5c [ 150.459184][T10283] el0_svc+0x64/0x260 [ 150.459201][T10283] el0t_64_sync_handler+0x44/0x104 [ 150.459216][T10283] el0t_64_sync+0x198/0x19c [ 151.055998][T10291] loop0: detected capacity change from 0 to 1024 [ 151.098118][T10291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.258144][T10291] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.2355: lblock 3 mapped to illegal pblock 3 (length 3) [ 151.275800][T10291] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 151.275833][T10291] EXT4-fs (loop0): This should not happen!! Data will be lost [ 151.275833][T10291] [ 151.534721][ T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 151.552896][T10303] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 151.632973][ T907] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 151.654179][ T907] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 151.654208][ T907] EXT4-fs (loop0): This should not happen!! Data will be lost [ 151.654208][ T907] [ 151.663303][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 152.232003][T10313] loop3: detected capacity change from 0 to 512 [ 152.391106][T10313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.505419][T10313] EXT4-fs (loop3): shut down requested (2) [ 152.778497][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.627399][ T4718] Bluetooth: hci0: command 0x0406 tx timeout [ 153.627457][ T4718] Bluetooth: hci2: command 0x0406 tx timeout [ 153.627497][ T4718] Bluetooth: hci1: command 0x0406 tx timeout [ 153.659706][T10336] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2374'. [ 154.003494][T10344] loop0: detected capacity change from 0 to 1024 [ 154.021171][T10344] EXT4-fs: Ignoring removed bh option [ 154.031580][T10344] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 154.093227][T10344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.459564][T10344] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 7: comm syz.0.2378: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 154.485294][T10344] EXT4-fs (loop0): Remounting filesystem read-only [ 154.545023][T10354] loop5: detected capacity change from 0 to 128 [ 154.978612][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.359379][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2384'. [ 155.814647][T10370] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2388'. [ 155.816152][T10370] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.816705][T10370] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.967717][T10370] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2388'. [ 156.332493][T10378] loop4: detected capacity change from 0 to 256 [ 158.727973][ T4713] Bluetooth: hci4: command 0x0406 tx timeout [ 161.957245][T10387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2394'. [ 162.449131][T10395] FAULT_INJECTION: forcing a failure. [ 162.449131][T10395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.449161][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.4.2399 Tainted: G L syzkaller #0 PREEMPT [ 162.449181][T10395] Tainted: [L]=SOFTLOCKUP [ 162.449187][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 162.449195][T10395] Call trace: [ 162.449201][T10395] show_stack+0x2c/0x3c (C) [ 162.449226][T10395] __dump_stack+0x30/0x40 [ 162.449244][T10395] dump_stack_lvl+0xd8/0x12c [ 162.449260][T10395] dump_stack+0x1c/0x28 [ 162.449276][T10395] should_fail_ex+0x41c/0x590 [ 162.449295][T10395] should_fail+0x14/0x24 [ 162.449311][T10395] should_fail_usercopy+0x20/0x30 [ 162.449329][T10395] _inline_copy_from_user+0x3c/0x188 [ 162.449345][T10395] copy_clone_args_from_user+0x1c8/0x5d0 [ 162.449359][T10395] __arm64_sys_clone3+0x150/0x390 [ 162.449373][T10395] invoke_syscall+0x98/0x244 [ 162.449390][T10395] el0_svc_common+0x19c/0x23c [ 162.449406][T10395] do_el0_svc+0x4c/0x5c [ 162.449422][T10395] el0_svc+0x64/0x260 [ 162.449439][T10395] el0t_64_sync_handler+0x44/0x104 [ 162.449458][T10395] el0t_64_sync+0x198/0x19c [ 163.020664][T10399] bond0: ARP target 9.0.0.0 is already present [ 163.020688][T10399] bond0: option arp_ip_target: invalid value (9) [ 163.060977][T10399] bond0 (unregistering): Released all slaves [ 163.909304][T10416] loop3: detected capacity change from 0 to 4096 [ 163.952231][ T4359] blk_print_req_error: 58 callbacks suppressed [ 163.952249][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.952269][ T4359] buffer_io_error: 56 callbacks suppressed [ 163.952278][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 163.974508][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.974541][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 163.974718][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.974736][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 163.974886][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.974904][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 163.975049][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.975067][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 163.976391][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.976410][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 163.976565][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.976583][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 163.976718][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.976735][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 163.976778][T10422] ldm_validate_partition_table(): Disk read failed. [ 164.021708][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 164.021740][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.021918][ T4359] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 164.021937][ T4359] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.031381][T10422] Dev nbd0: unable to read RDB block 0 [ 164.039341][T10416] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.039366][T10416] EXT4-fs (loop3): Test dummy encryption mode enabled [ 164.041906][T10422] nbd0: unable to read partition table [ 164.082355][T10416] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 164.082469][T10416] System zones: 0-5 [ 164.115640][T10416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.152954][T10422] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 164.169668][T10422] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 164.183821][T10422] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 164.303137][ T1156] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 164.336892][ T1156] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.519218][ T4345] ldm_validate_partition_table(): Disk read failed. [ 164.519803][ T4345] Dev nbd0: unable to read RDB block 0 [ 164.533463][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.536914][ T4345] nbd0: unable to read partition table [ 164.560201][ T4345] ldm_validate_partition_table(): Disk read failed. [ 164.563917][T10431] syzkaller1: entered promiscuous mode [ 164.580259][ T4345] Dev nbd0: unable to read RDB block 0 [ 164.590783][T10431] syzkaller1: entered allmulticast mode [ 164.598307][ T4345] nbd0: unable to read partition table [ 165.663274][T10452] FAULT_INJECTION: forcing a failure. [ 165.663274][T10452] name failslab, interval 1, probability 0, space 0, times 0 [ 165.663308][T10452] CPU: 0 UID: 0 PID: 10452 Comm: syz.5.2419 Tainted: G L syzkaller #0 PREEMPT [ 165.663325][T10452] Tainted: [L]=SOFTLOCKUP [ 165.663330][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 165.663339][T10452] Call trace: [ 165.663344][T10452] show_stack+0x2c/0x3c (C) [ 165.663370][T10452] __dump_stack+0x30/0x40 [ 165.663390][T10452] dump_stack_lvl+0xd8/0x12c [ 165.663408][T10452] dump_stack+0x1c/0x28 [ 165.663424][T10452] should_fail_ex+0x41c/0x590 [ 165.663442][T10452] should_failslab+0xc4/0x120 [ 165.663460][T10452] kmem_cache_alloc_noprof+0x94/0x5d4 [ 165.663474][T10452] prepare_creds+0x34/0x7d0 [ 165.663491][T10452] keyctl_set_reqkey_keyring+0x84/0x1e4 [ 165.663507][T10452] __arm64_sys_keyctl+0x120/0x3e8 [ 165.663522][T10452] invoke_syscall+0x98/0x244 [ 165.663538][T10452] el0_svc_common+0x19c/0x23c [ 165.663555][T10452] do_el0_svc+0x4c/0x5c [ 165.663570][T10452] el0_svc+0x64/0x260 [ 165.663586][T10452] el0t_64_sync_handler+0x44/0x104 [ 165.663602][T10452] el0t_64_sync+0x198/0x19c [ 165.750649][T10446] fido_id[10446]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.985884][T10458] loop4: detected capacity change from 0 to 512 [ 166.023306][T10458] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 166.058741][T10458] EXT4-fs (loop4): 1 truncate cleaned up [ 166.127845][T10458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.237987][T10247] ldm_validate_partition_table(): Disk read failed. [ 166.254299][T10247] Dev nbd0: unable to read RDB block 0 [ 166.257015][T10458] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2422'. [ 166.286983][T10247] nbd0: unable to read partition table [ 166.377030][T10247] ldm_validate_partition_table(): Disk read failed. [ 166.390062][T10247] Dev nbd0: unable to read RDB block 0 [ 166.409010][T10247] nbd0: unable to read partition table [ 167.167181][ T4359] nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10 [ 167.167214][ T4359] nvme nvme0: Does your device have a faulty power saving mode enabled? [ 167.167232][ T4359] nvme nvme0: Try "nvme_core.default_ps_max_latency_us=0 pcie_aspm=off pcie_port_pm=off" and report a bug [ 167.323306][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.338161][ T3405] nvme 0000:00:02.0: enabling device (0000 -> 0002) [ 167.372586][ T3405] nvme nvme0: Disabling device after reset failure: -19 [ 167.400728][ T4359] non-slab/vmalloc memory [ 167.400747][ T4359] list_add corruption. prev->next should be next (ffff0000c889d840), but was ffff0000c9070648. (prev=ffff0000c9070648). [ 167.400865][ T4359] ------------[ cut here ]------------ [ 167.400872][ T4359] kernel BUG at lib/list_debug.c:34! [ 167.400957][ T4359] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 167.407240][ T4359] Dumping ftrace buffer: [ 167.408013][ T4359] --------------------------------- [ 167.409016][ T4359] CPU:0 [LOST 43134387 EVENTS] [ 167.409016][ T4359] : [ 167.409032][ T4359] : [ 167.410309][ T4359] : [ 167.410775][ T4359] : [ 167.411275][ T4359] : [ 167.411715][ T4359] : [ 167.412155][ T4359] : [ 167.412605][ T4359] : [ 167.413050][ T4359] : [ 167.413505][ T4359] : [ 167.413961][ T4359] : [ 167.414422][ T4359] : [ 167.414884][ T4359] : [ 167.415357][ T4359] : [ 167.415818][ T4359] : [ 167.416297][ T4359] : [ 167.416774][ T4359] : [ 167.417272][ T4359] : [ 167.417717][ T4359] : [ 167.418168][ T4359] : [ 167.418629][ T4359] : [ 167.419104][ T4359] : [ 167.419554][ T4359] : [ 167.420015][ T4359] : [ 167.420470][ T4359] : [ 167.420929][ T4359] : [ 167.421396][ T4359] : [ 167.421861][ T4359] : [ 167.422336][ T4359] : [ 167.422780][ T4359] : [ 167.423261][ T4359] : [ 167.423723][ T4359] : [ 167.424199][ T4359] : [ 167.424669][ T4359] : [ 167.425147][ T4359] : [ 167.425621][ T4359] : [ 167.426097][ T4359] : [ 167.426577][ T4359] : [ 167.427037][ T4359] : [ 167.427513][ T4359] : [ 167.427987][ T4359] : [ 167.428527][ T4359] : [ 167.429002][ T4359] : [ 167.429478][ T4359] : [ 167.429954][ T4359] : [ 167.430433][ T4359] : [ 167.430902][ T4359] : [ 167.431393][ T4359] : [ 167.431880][ T4359] : [ 167.432357][ T4359] : [ 167.432842][ T4359] : [ 167.433315][ T4359] : [ 167.433771][ T4359] : [ 167.434241][ T4359] : [ 167.434691][ T4359] : [ 167.435138][ T4359] : [ 167.435593][ T4359] : [ 167.436052][ T4359] : [ 167.436518][ T4359] : [ 167.436983][ T4359] : [ 167.437454][ T4359] : [ 167.437929][ T4359] : [ 167.438387][ T4359] : [ 167.438844][ T4359] : [ 167.439296][ T4359] : [ 167.439755][ T4359] : [ 167.440209][ T4359] : [ 167.440668][ T4359] : [ 167.441127][ T4359] : [ 167.441578][ T4359] M [ 167.442017][ T4359] M [ 167.442475][ T4359] M [ 167.442931][ T4359] M [ 167.443398][ T4359] M [ 167.443880][ T4359] M [ 167.444362][ T4359] M [ 167.444827][ T4359] M [ 167.445322][ T4359] M [ 167.445802][ T4359] M [ 167.446295][ T4359] M [ 167.446781][ T4359] M [ 167.447294][ T4359] M [ 167.447763][ T4359] M [ 167.448243][ T4359] M [ 167.448727][ T4359] M [ 167.449212][ T4359] M [ 167.449676][ T4359] M [ 167.450164][ T4359] M [ 167.450639][ T4359] M [ 167.451133][ T4359] M [ 167.451623][ T4359] M [ 167.452105][ T4359] M [ 167.452595][ T4359] M [ 167.453059][ T4359] M [ 167.453546][ T4359] M [ 167.454020][ T4359] M [ 167.454501][ T4359] M [ 167.454973][ T4359] M [ 167.455450][ T4359] M [ 167.455926][ T4359] M [ 167.456407][ T4359] M [ 167.456876][ T4359] M [ 167.457362][ T4359] M [ 167.457821][ T4359] M [ 167.458292][ T4359] M [ 167.458761][ T4359] M [ 167.459233][ T4359] M [ 167.459708][ T4359] M [ 167.460207][ T4359] M [ 167.460678][ T4359] M [ 167.461168][ T4359] M [ 167.461661][ T4359] M [ 167.462136][ T4359] M [ 167.462622][ T4359] M [ 167.463076][ T4359] M [ 167.463535][ T4359] M [ 167.463984][ T4359] M [ 167.464451][ T4359] M [ 167.464909][ T4359] M [ 167.465389][ T4359] M [ 167.465852][ T4359] M [ 167.466347][ T4359] M [ 167.466848][ T4359] M [ 167.467347][ T4359] M [ 167.467855][ T4359] M [ 167.468344][ T4359] M [ 167.468816][ T4359] M [ 167.469278][ T4359] M [ 167.469754][ T4359] M [ 167.470213][ T4359] M [ 167.470687][ T4359] M [ 167.471175][ T4359] M [ 167.471665][ T4359]  [ 167.472122][ T4359]  [ 167.472600][ T4359]  [ 167.473076][ T4359]  [ 167.473548][ T4359]  [ 167.474018][ T4359]  [ 167.474507][ T4359]  [ 167.474991][ T4359]  [ 167.475490][ T4359]  [ 167.475967][ T4359]  [ 167.476441][ T4359]  [ 167.476883][ T4359]  [ 167.477346][ T4359]  [ 167.477824][ T4359]  [ 167.478286][ T4359]  [ 167.478760][ T4359]  [ 167.479237][ T4359]  [ 167.479708][ T4359]  [ 167.480174][ T4359]  [ 167.480657][ T4359]  [ 167.481146][ T4359]  [ 167.481629][ T4359]  [ 167.482121][ T4359]  [ 167.482601][ T4359]  [ 167.483086][ T4359]  [ 167.483562][ T4359]  [ 167.484034][ T4359]  [ 167.484524][ T4359]  [ 167.484981][ T4359]  [ 167.485454][ T4359]  [ 167.485922][ T4359]  [ 167.486394][ T4359]  [ 167.486885][ T4359]  [ 167.487375][ T4359]  [ 167.487839][ T4359]  [ 167.488305][ T4359]  [ 167.488765][ T4359]  [ 167.489233][ T4359]  [ 167.489713][ T4359]  [ 167.490184][ T4359]  [ 167.490640][ T4359]  [ 167.491089][ T4359] --------------------------------- [ 167.492529][ T4359] Modules linked in: [ 167.493302][ T4359] CPU: 0 UID: 0 PID: 4359 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT [ 167.495270][ T4359] Tainted: [L]=SOFTLOCKUP [ 167.496056][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 167.497974][ T4359] Workqueue: kblockd blk_mq_requeue_work [ 167.499096][ T4359] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 167.500562][ T4359] pc : __list_add_valid_or_report+0x144/0x148 [ 167.501727][ T4359] lr : __list_add_valid_or_report+0x144/0x148 [ 167.502841][ T4359] sp : ffff8000993e7a10 [ 167.503623][ T4359] x29: ffff8000993e7a10 x28: ffff8000993e7ac8 x27: ffff8000993e7ac0 [ 167.505203][ T4359] x26: 1fffe00019113b09 x25: ffff0000c889d840 x24: ffff0000c889d848 [ 167.506729][ T4359] x23: 1fffe0001920e0c9 x22: dfff800000000000 x21: ffff0000c9070648 [ 167.508196][ T4359] x20: ffff0000c9070648 x19: ffff0000c889d840 x18: 00000000ffffffff [ 167.509716][ T4359] x17: 3034386439383863 x16: 3030303066666666 x15: 28207478656e2065 [ 167.511283][ T4359] x14: 00000000001c81fa x13: 0000000000000001 x12: 0000000000000003 [ 167.512863][ T4359] x11: 0000000000000000 x10: 0000000000000002 x9 : 279a1cbfb1f18b00 [ 167.514382][ T4359] x8 : 279a1cbfb1f18b00 x7 : 756372735f656c6f x6 : 5f656c6f736e6f63 [ 167.515978][ T4359] x5 : ffff0000c00529a0 x4 : 0000000000000000 x3 : ffff80008049b04c [ 167.517735][ T4359] x2 : 0000000100000001 x1 : ffff0000d5c8bb00 x0 : 0000000000000075 [ 167.519545][ T4359] Call trace: [ 167.520276][ T4359] __list_add_valid_or_report+0x144/0x148 (P) [ 167.521550][ T4359] blk_mq_request_bypass_insert+0x130/0x1cc [ 167.522768][ T4359] blk_mq_requeue_work+0x3a4/0x52c [ 167.523820][ T4359] process_scheduled_works+0x91c/0x1250 [ 167.524983][ T4359] worker_thread+0x798/0xbd0 [ 167.525928][ T4359] kthread+0x304/0x3d4 [ 167.526696][ T4359] ret_from_fork+0x10/0x20 [ 167.527522][ T4359] Code: 912f0000 aa1303e1 aa1403e3 979a9561 (d4210000) [ 167.528810][ T4359] ---[ end trace 0000000000000000 ]--- [ 167.881407][ T4359] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 167.882775][ T4359] Dumping ftrace buffer: [ 167.883610][ T4359] (ftrace buffer empty) [ 167.884400][ T4359] Kernel Offset: disabled [ 167.885194][ T4359] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 167.886474][ T4359] Memory Limit: none [ 168.235130][ T4359] Rebooting in 86400 seconds..