last executing test programs: 3m27.312918269s ago: executing program 4 (id=317): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) 3m27.26191108s ago: executing program 4 (id=321): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, 'sys_mnt/block/zram0/disksize\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r4, 0xa1) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f00, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xf3, @time={0xffff, 0x400006}, 0x0, {0x0, 0x9a}}) 3m26.171267188s ago: executing program 4 (id=343): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) 3m26.115723479s ago: executing program 4 (id=345): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setuid(0xee00) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1}, 0xe) 3m26.07526585s ago: executing program 4 (id=348): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) 3m26.035109811s ago: executing program 4 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffffffffffff}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3m10.432065626s ago: executing program 32 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffffffffffff}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3.146383081s ago: executing program 3 (id=1900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010020000000000000000000000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f508000440000000ce0800064000000002080001400000001308000540000000010900010073797a30000000000900020073797a3200"], 0x9c}}, 0x0) 3.004223034s ago: executing program 3 (id=1906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}]}}]}, 0x170}}, 0x24040004) 2.124313207s ago: executing program 3 (id=1910): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, 'sys_mnt/block/zram0/disksize\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r4, 0xa1) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b700000002000000"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xf3, @time={0xffff, 0x400006}, 0x0, {0x0, 0x9a}}) 1.546827962s ago: executing program 5 (id=1916): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x20040804) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0022, 0x4) 1.499316573s ago: executing program 5 (id=1917): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) 1.448118493s ago: executing program 5 (id=1919): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0xc) 1.430614684s ago: executing program 5 (id=1920): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, 'sys_mnt/block/zram0/disksize\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r4, 0xa1) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f00, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xf3, @time={0xffff, 0x400006}, 0x0, {0x0, 0x9a}}) 1.401496825s ago: executing program 0 (id=1921): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.278080228s ago: executing program 2 (id=1923): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x4000051, r0, 0x252eb000) 1.277523928s ago: executing program 3 (id=1924): r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x8000040, 0xd, 0x8ef}}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0xb, 0x184, 0x8, 0x7, 0x1, 0x1, 0x9, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0xe8, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x200, 0x4, 0x3, 0x3, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0x0, 0x6, 0x1000, 0x6, 0x6, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x313, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x8, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0xc2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x9b, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x0, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x9, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x7, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x9, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.262175258s ago: executing program 1 (id=1925): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="d80000001800d1fc2b300c72813eb904021d0800067c7c09e8fe0ba1bc0008000600000003600e1208000c0002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277c312ebace010400004c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360de29a262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec9ecbee5de6ccd40dd6e4edef3d93452a92080000000e9703920723f9a941", 0xd5}, {&(0x7f0000000080)="59b6b5", 0x3}], 0x2}, 0x0) 1.20845397s ago: executing program 2 (id=1926): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000001280)) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.20823472s ago: executing program 0 (id=1927): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x31f146a93e90ee79, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x401}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x36, &(0x7f0000000000)=""/54, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.20417292s ago: executing program 0 (id=1928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd28, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x6}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1.19570309s ago: executing program 1 (id=1929): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.124417532s ago: executing program 1 (id=1930): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8142, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x1, r2, 0x0, 0x0}, 0x10) 1.030570564s ago: executing program 1 (id=1931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000010) 1.023601155s ago: executing program 0 (id=1932): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 1.004711365s ago: executing program 2 (id=1933): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000015c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x4}, 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket(0x3, 0xa, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0xff, 0x9, 0x0, 0x4}, 0x20) 1.003831555s ago: executing program 0 (id=1934): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1.000181735s ago: executing program 3 (id=1935): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, 'sys_mnt/block/zram0/disksize\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r4, 0xa1) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b700000002000000"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xf3, @time={0xffff, 0x400006}, 0x0, {0x0, 0x9a}}) 108.277638ms ago: executing program 3 (id=1936): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) 108.002028ms ago: executing program 5 (id=1937): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x30000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f0000000280)={[{@commit={'commit', 0x3d, 0xf2a}}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@errors_remount}, {@quota}, {@barrier_val={'barrier', 0x3d, 0xf8c}}, {@discard}, {@orlov}, {@grpjquota}]}, 0xee, 0x43e, &(0x7f00000008c0)="$eJzs281vFOUfAPDvzLbl9wOhFRGlglbR2PjS0oLKwYtGEw+amOgBj7UtpLJQQ2sipNFqDB4NiXfj0cS/wJNejHoy8ap3Q0K0MQE91czsTNku3dKXXRbZzyeZ9Hl2nunzfHfm2XnmeXYD6Gq9EXFXRPwaEf0RkdTvHKpt2Z9rSwuTfy8tTCaxvPzGH0le7urSwmRZtDxuV5EZTiPST5LawQ3mzl84PVGtTp8r8qPzZ94dnTt/4emZMxOnpk9Nnx0/fvzY0bHnnh1/piUxZnFdHfxg9uCBV9669NrkiUtv//h11t79h2r76+NolaEs8D+Xc437Hmt1ZR22uy6d9HSwIWxKJSKy05Xm/b8/KnH95PXHyx93tHFAW2X3ph3Ndy8uA3ewJDrdAqAzyht99vxbbrdo6HFbuPJC7QEoi/tasdX29OTPRFHMj7TLUEScWPzni2yLNs1DAADU+zYb/zy11vgvjf115fYUaygDEXF3ROyNiHsiYl9E3BuRl70vIu7fZP2NS0M3jn/Sy1sKbIOy8d/zxdrW6vFfOfqLgUqR253H35ucnKlOHynek+Ho3ZHlx9ap47uXfvms2b768V+2ZfWXY8GiHZd7GibopibmJ1o1KL3yUcRgz1rxJysrAUlEHIiIwc396z1lYuaJrw42K3Tz+NfRgnWm5S8jHq+d/8VoiL+UrL8+Ofq/qE4fGS2vihv99PPF15vVv634WyA7/ztXX/8NJfr/SurXa+c2X8fF3z5t+kyz1eu/L3kzX7PuK157f2J+/txYRF/yap5f9fr49WPLfFk+i3/48Nr9f29xTBb/AxGRXcSHIuLBiHioaPvDEfFIRBxeJ/4fXnz0na3H315Z/FNrfv6tXP8Dq8//5hOV099/06z+jZ3/Y3lquHgl//y7iY02cDvvHQAAAPxXpPl3/5N0ZCWdpiMjte/w74udaXV2bv7Jk7PvnZ2q/UZgIHrTcqarv24+dCxZLP5jLT9ezBWX+48W88afV/6f50cmZ6tTHY4dut2uJv0/83ul060D2s7vtaB7Nfb/tEPtAG4993/oXvo/dC/9H7rXWv3/w4a8tQC4M7n/Q/fS/6F76f/QvfR/6Erb+V2/RDcnIr0tmiHRpkSnP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa498AAAD//6ZX7n0=") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 103.891348ms ago: executing program 0 (id=1946): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, 'sys_mnt/block/zram0/disksize\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r4, 0xa1) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b700000002000000"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xf3, @time={0xffff, 0x400006}, 0x0, {0x0, 0x9a}}) 103.634068ms ago: executing program 1 (id=1938): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x5, 0x0, 0x0) 103.492938ms ago: executing program 2 (id=1939): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0x6ef, 0x8) 65.898709ms ago: executing program 2 (id=1940): socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 451.04µs ago: executing program 2 (id=1941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 167.44µs ago: executing program 1 (id=1942): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r4, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.u'}, 0xfe78) 0s ago: executing program 5 (id=1943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x128 [ 50.782617][ T5169] el0t_64_sync_handler+0x84/0xf0 [ 50.783495][ T5169] el0t_64_sync+0x18c/0x190 [ 50.967061][ T5193] FAULT_INJECTION: forcing a failure. [ 50.967061][ T5193] name failslab, interval 1, probability 0, space 0, times 0 [ 50.974804][ T5193] CPU: 1 PID: 5193 Comm: syz.0.307 Not tainted syzkaller #0 [ 50.976073][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 50.977940][ T5193] Call trace: [ 50.978546][ T5193] dump_backtrace+0x1c4/0x1f0 [ 50.979424][ T5193] show_stack+0x2c/0x3c [ 50.980185][ T5193] __dump_stack+0x30/0x40 [ 50.981011][ T5193] dump_stack_lvl+0xf4/0x15c [ 50.981871][ T5193] dump_stack+0x1c/0x5c [ 50.982661][ T5193] should_fail_ex+0x3cc/0x524 [ 50.983684][ T5193] __should_failslab+0xc0/0x11c [ 50.984690][ T5193] should_failslab+0x10/0x28 [ 50.985633][ T5193] kmem_cache_alloc+0x88/0x310 [ 50.986611][ T5193] getname_flags+0xb8/0x458 [ 50.987527][ T5193] __arm64_sys_mkdirat+0x80/0xa8 [ 50.988515][ T5193] invoke_syscall+0x98/0x290 [ 50.989454][ T5193] el0_svc_common+0x13c/0x258 [ 50.990406][ T5193] do_el0_svc+0x5c/0x134 [ 50.991239][ T5193] el0_svc+0x58/0x128 [ 50.992027][ T5193] el0t_64_sync_handler+0x84/0xf0 [ 50.992967][ T5193] el0t_64_sync+0x18c/0x190 [ 51.335904][ T5205] FAULT_INJECTION: forcing a failure. [ 51.335904][ T5205] name fail_futex, interval 1, probability 0, space 0, times 0 [ 51.344718][ T5205] CPU: 0 PID: 5205 Comm: syz.1.309 Not tainted syzkaller #0 [ 51.345989][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 51.347939][ T5205] Call trace: [ 51.348575][ T5205] dump_backtrace+0x1c4/0x1f0 [ 51.349510][ T5205] show_stack+0x2c/0x3c [ 51.350290][ T5205] __dump_stack+0x30/0x40 [ 51.351196][ T5205] dump_stack_lvl+0xf4/0x15c [ 51.352007][ T5205] dump_stack+0x1c/0x5c [ 51.352738][ T5205] should_fail_ex+0x3cc/0x524 [ 51.353624][ T5205] should_fail+0x14/0x24 [ 51.354423][ T5205] get_futex_key+0x904/0xfb0 [ 51.355226][ T5205] futex_wait_setup+0xbc/0x320 [ 51.356063][ T5205] futex_wait+0x164/0x424 [ 51.356806][ T5205] do_futex+0x2e8/0x340 [ 51.357516][ T5205] __arm64_sys_futex+0x390/0x414 [ 51.358384][ T5205] invoke_syscall+0x98/0x290 [ 51.359214][ T5205] el0_svc_common+0x13c/0x258 [ 51.360200][ T5205] do_el0_svc+0x5c/0x134 [ 51.361006][ T5205] el0_svc+0x58/0x128 [ 51.361691][ T5205] el0t_64_sync_handler+0x84/0xf0 [ 51.362613][ T5205] el0t_64_sync+0x18c/0x190 [ 51.394563][ T5208] FAULT_INJECTION: forcing a failure. [ 51.394563][ T5208] name failslab, interval 1, probability 0, space 0, times 0 [ 51.396792][ T5208] CPU: 1 PID: 5208 Comm: syz.0.312 Not tainted syzkaller #0 [ 51.398082][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 51.399770][ T5208] Call trace: [ 51.400339][ T5208] dump_backtrace+0x1c4/0x1f0 [ 51.401165][ T5208] show_stack+0x2c/0x3c [ 51.401972][ T5208] __dump_stack+0x30/0x40 [ 51.402822][ T5208] dump_stack_lvl+0xf4/0x15c [ 51.403717][ T5208] dump_stack+0x1c/0x5c [ 51.404494][ T5208] should_fail_ex+0x3cc/0x524 [ 51.405405][ T5208] __should_failslab+0xc0/0x11c [ 51.406362][ T5208] should_failslab+0x10/0x28 [ 51.407250][ T5208] __kmem_cache_alloc_node+0x7c/0x318 [ 51.408287][ T5208] __kmalloc+0xc4/0x180 [ 51.409049][ T5208] __register_sysctl_table+0x844/0xc88 [ 51.410110][ T5208] setup_mq_sysctls+0x4b4/0x5b0 [ 51.411031][ T5208] copy_ipcs+0x298/0x4d4 [ 51.411786][ T5208] create_new_namespaces+0x1b0/0x604 [ 51.412791][ T5208] unshare_nsproxy_namespaces+0x108/0x160 [ 51.413810][ T5208] ksys_unshare+0x3f0/0x70c [ 51.414656][ T5208] __arm64_sys_unshare+0x3c/0x50 [ 51.415559][ T5208] invoke_syscall+0x98/0x290 [ 51.416420][ T5208] el0_svc_common+0x13c/0x258 [ 51.417292][ T5208] do_el0_svc+0x5c/0x134 [ 51.418076][ T5208] el0_svc+0x58/0x128 [ 51.418782][ T5208] el0t_64_sync_handler+0x84/0xf0 [ 51.419678][ T5208] el0t_64_sync+0x18c/0x190 [ 51.437403][ T5208] sysctl could not get directory: /fs -12 [ 51.438481][ T5208] CPU: 1 PID: 5208 Comm: syz.0.312 Not tainted syzkaller #0 [ 51.439690][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 51.441212][ T5208] Call trace: [ 51.441785][ T5208] dump_backtrace+0x1c4/0x1f0 [ 51.442660][ T5208] show_stack+0x2c/0x3c [ 51.443415][ T5208] __dump_stack+0x30/0x40 [ 51.444233][ T5208] dump_stack_lvl+0xf4/0x15c [ 51.445073][ T5208] dump_stack+0x1c/0x5c [ 51.445849][ T5208] __register_sysctl_table+0xc10/0xc88 [ 51.446925][ T5208] setup_mq_sysctls+0x4b4/0x5b0 [ 51.447892][ T5208] copy_ipcs+0x298/0x4d4 [ 51.448710][ T5208] create_new_namespaces+0x1b0/0x604 [ 51.449726][ T5208] unshare_nsproxy_namespaces+0x108/0x160 [ 51.450828][ T5208] ksys_unshare+0x3f0/0x70c [ 51.451681][ T5208] __arm64_sys_unshare+0x3c/0x50 [ 51.452614][ T5208] invoke_syscall+0x98/0x290 [ 51.453417][ T5208] el0_svc_common+0x13c/0x258 [ 51.454241][ T5208] do_el0_svc+0x5c/0x134 [ 51.454994][ T5208] el0_svc+0x58/0x128 [ 51.455732][ T5208] el0t_64_sync_handler+0x84/0xf0 [ 51.456625][ T5208] el0t_64_sync+0x18c/0x190 [ 51.600128][ T5234] netlink: 816 bytes leftover after parsing attributes in process `syz.0.320'. [ 51.631093][ T5238] x_tables: duplicate entry at hook 4 [ 51.988026][ T27] audit: type=1326 audit(51.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.3.330" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff891792a8 code=0x7ffc0000 [ 51.993311][ T27] audit: type=1326 audit(51.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.3.330" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff891792a8 code=0x7ffc0000 [ 52.004234][ T27] audit: type=1326 audit(51.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.3.330" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff891792a8 code=0x7ffc0000 [ 52.019225][ T27] audit: type=1326 audit(51.980:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.3.330" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff891792a8 code=0x7ffc0000 [ 52.026682][ T27] audit: type=1326 audit(51.980:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.3.330" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff891792a8 code=0x7ffc0000 [ 52.036463][ T27] audit: type=1326 audit(51.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.3.330" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff891792a8 code=0x7ffc0000 [ 52.041126][ T27] audit: type=1326 audit(51.980:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.3.330" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff891792a8 code=0x7ffc0000 [ 52.117253][ T5259] loop0: detected capacity change from 0 to 2048 [ 52.141755][ T5259] EXT4-fs: Ignoring removed orlov option [ 52.142768][ T5259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.169935][ T5259] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.218419][ T5268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.337'. [ 52.783586][ T5293] FAULT_INJECTION: forcing a failure. [ 52.783586][ T5293] name failslab, interval 1, probability 0, space 0, times 0 [ 52.789697][ T5293] CPU: 0 PID: 5293 Comm: syz.1.347 Not tainted syzkaller #0 [ 52.791064][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 52.792943][ T5293] Call trace: [ 52.793577][ T5293] dump_backtrace+0x1c4/0x1f0 [ 52.794410][ T5293] show_stack+0x2c/0x3c [ 52.795194][ T5293] __dump_stack+0x30/0x40 [ 52.795995][ T5293] dump_stack_lvl+0xf4/0x15c [ 52.796871][ T5293] dump_stack+0x1c/0x5c [ 52.797638][ T5293] should_fail_ex+0x3cc/0x524 [ 52.798511][ T5293] __should_failslab+0xc0/0x11c [ 52.799428][ T5293] should_failslab+0x10/0x28 [ 52.800401][ T5293] __kmem_cache_alloc_node+0x7c/0x318 [ 52.801441][ T5293] __kmalloc+0xc4/0x180 [ 52.802254][ T5293] __register_sysctl_table+0x844/0xc88 [ 52.803256][ T5293] setup_mq_sysctls+0x4b4/0x5b0 [ 52.804134][ T5293] copy_ipcs+0x298/0x4d4 [ 52.804930][ T5293] create_new_namespaces+0x1b0/0x604 [ 52.805896][ T5293] unshare_nsproxy_namespaces+0x108/0x160 [ 52.806916][ T5293] ksys_unshare+0x3f0/0x70c [ 52.807749][ T5293] __arm64_sys_unshare+0x3c/0x50 [ 52.808638][ T5293] invoke_syscall+0x98/0x290 [ 52.809477][ T5293] el0_svc_common+0x13c/0x258 [ 52.810297][ T5293] do_el0_svc+0x5c/0x134 [ 52.811069][ T5293] el0_svc+0x58/0x128 [ 52.811743][ T5293] el0t_64_sync_handler+0x84/0xf0 [ 52.812597][ T5293] el0t_64_sync+0x18c/0x190 [ 52.817074][ T5293] sysctl could not get directory: /fs -12 [ 52.818281][ T5293] CPU: 0 PID: 5293 Comm: syz.1.347 Not tainted syzkaller #0 [ 52.819577][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 52.821370][ T5293] Call trace: [ 52.821982][ T5293] dump_backtrace+0x1c4/0x1f0 [ 52.822817][ T5293] show_stack+0x2c/0x3c [ 52.823570][ T5293] __dump_stack+0x30/0x40 [ 52.824336][ T5293] dump_stack_lvl+0xf4/0x15c [ 52.825181][ T5293] dump_stack+0x1c/0x5c [ 52.825893][ T5293] __register_sysctl_table+0xc10/0xc88 [ 52.826886][ T5293] setup_mq_sysctls+0x4b4/0x5b0 [ 52.827739][ T5293] copy_ipcs+0x298/0x4d4 [ 52.828458][ T5293] create_new_namespaces+0x1b0/0x604 [ 52.829394][ T5293] unshare_nsproxy_namespaces+0x108/0x160 [ 52.830392][ T5293] ksys_unshare+0x3f0/0x70c [ 52.831213][ T5293] __arm64_sys_unshare+0x3c/0x50 [ 52.832065][ T5293] invoke_syscall+0x98/0x290 [ 52.832857][ T5293] el0_svc_common+0x13c/0x258 [ 52.833716][ T5293] do_el0_svc+0x5c/0x134 [ 52.834488][ T5293] el0_svc+0x58/0x128 [ 52.835192][ T5293] el0t_64_sync_handler+0x84/0xf0 [ 52.836072][ T5293] el0t_64_sync+0x18c/0x190 [ 53.000199][ T5302] loop1: detected capacity change from 0 to 1024 [ 53.006199][ T5302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.008816][ T5302] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 53.011624][ T5302] EXT4-fs (loop1): write access will be enabled during recovery [ 53.013861][ T5302] JBD2: no valid journal superblock found [ 53.015844][ T5302] EXT4-fs (loop1): error loading journal [ 53.069798][ T5305] loop1: detected capacity change from 0 to 512 [ 53.089963][ T5305] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.207249][ T5305] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.208808][ T5305] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 53.217786][ T5305] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 53.221918][ T5305] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.353: bad orphan inode 768 [ 53.228144][ T5305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.252810][ T5305] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 53.544801][ T5305] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 53.596710][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 54.057833][ T5346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 54.375872][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 54.882957][ T5386] loop2: detected capacity change from 0 to 512 [ 54.892784][ T5386] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.901457][ T5386] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.902884][ T5386] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 54.910526][ T5386] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 54.917177][ T5386] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.386: bad orphan inode 768 [ 54.920657][ T5386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.213360][ T5386] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 55.231902][ T5386] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 55.284008][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 55.307000][ T5400] raw_sendmsg: syz.0.391 forgot to set AF_INET. Fix it! [ 55.412263][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.414041][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.765577][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.778277][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.028219][ T5395] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.029922][ T5395] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.031538][ T5395] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.033009][ T5395] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.264965][ T5408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 56.357750][ T5435] batman_adv: batadv0: Adding interface: veth0 [ 56.360156][ T5435] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.369507][ T5435] batman_adv: batadv0: Interface activated: veth0 [ 56.377566][ T5435] batman_adv: batadv0: Interface deactivated: veth0 [ 56.378792][ T5435] batman_adv: batadv0: Removing interface: veth0 [ 56.384434][ T5435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.385991][ T5435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.387710][ T5435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.389411][ T5435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.121395][ T5264] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 64.482771][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.484211][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.427362][ T4338] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.429328][ T4338] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.431568][ T4338] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.435116][ T4338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.436596][ T4338] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.437985][ T4338] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.523770][ T5491] chnl_net:caif_netlink_parms(): no params data found [ 68.538115][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.539441][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.540976][ T5491] device bridge_slave_0 entered promiscuous mode [ 68.545321][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.546545][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.548029][ T5491] device bridge_slave_1 entered promiscuous mode [ 68.555187][ T5491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.558234][ T5491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.565568][ T5491] team0: Port device team_slave_0 added [ 68.567712][ T5491] team0: Port device team_slave_1 added [ 68.572965][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.574228][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.578419][ T5491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.580760][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.582682][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.586999][ T5491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.632279][ T5491] device hsr_slave_0 entered promiscuous mode [ 68.681428][ T5491] device hsr_slave_1 entered promiscuous mode [ 68.721281][ T5491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.723114][ T5491] Cannot create hsr debugfs directory [ 68.759371][ T5491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.782363][ T5491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.822772][ T5491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.863109][ T5491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.907877][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.909240][ T5491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.910903][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.912334][ T5491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.929700][ T5491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.934207][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.936321][ T4569] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.938129][ T4569] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.940350][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.947774][ T5491] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.951863][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.953451][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.954739][ T4569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.957874][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.959434][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.960684][ T4569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.970457][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.972849][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.975987][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.979039][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.982613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.984998][ T5491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.037172][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.038657][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.043567][ T5491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.113168][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.119634][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.121490][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.123042][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.125502][ T5491] device veth0_vlan entered promiscuous mode [ 69.128858][ T5491] device veth1_vlan entered promiscuous mode [ 69.136674][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.138337][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.140106][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.143520][ T5491] device veth0_macvtap entered promiscuous mode [ 69.145931][ T5491] device veth1_macvtap entered promiscuous mode [ 69.150594][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.153905][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.155405][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.157121][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.158658][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.160273][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.162801][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.164364][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.166841][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.169673][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.172264][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.174028][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.176019][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.177744][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.179650][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.182172][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.183785][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.186471][ T5491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.187795][ T5491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.189173][ T5491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.190677][ T5491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.212899][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.214296][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.220088][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.226612][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.228069][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.229424][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.286350][ T5521] loop1: detected capacity change from 0 to 1024 [ 69.312141][ T5524] loop5: detected capacity change from 0 to 512 [ 69.315199][ T5524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.318498][ T5524] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.319955][ T5524] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 69.323965][ T5524] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 69.325138][ T5524] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.417: bad orphan inode 768 [ 69.327460][ T5524] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 69.346773][ T5521] EXT4-fs: Ignoring removed orlov option [ 69.393490][ T5521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c118, mo2=0002] [ 69.394943][ T5521] System zones: 0-1, 3-12 [ 69.398529][ T5521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 69.608559][ T111] cfg80211: failed to load regulatory.db [ 69.698358][ T5524] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 69.736672][ T5524] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 69.748699][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 69.785191][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 70.130528][ T5573] loop1: detected capacity change from 0 to 512 [ 70.149476][ T5573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.164371][ T5573] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.165666][ T5573] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 70.170603][ T5573] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 70.174177][ T5573] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.438: bad orphan inode 768 [ 70.179770][ T5573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.215185][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 70.264980][ T5582] netlink: 1388 bytes leftover after parsing attributes in process `syz.1.443'. [ 70.481833][ T4330] Bluetooth: hci5: command 0x0409 tx timeout [ 71.077586][ T5630] loop2: detected capacity change from 0 to 512 [ 71.123274][ T5630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.158039][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 71.219624][ T5642] loop2: detected capacity change from 0 to 512 [ 71.227403][ T5642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.238566][ T5642] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.239955][ T5642] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 71.246948][ T5642] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 71.248281][ T5642] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.468: bad orphan inode 768 [ 71.254719][ T5642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.285906][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 72.109597][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 72.190619][ T5691] loop5: detected capacity change from 0 to 512 [ 72.244683][ T5691] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 72.258688][ T5691] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 18: comm syz.5.491: lblock 23 mapped to illegal pblock 18 (length 1) [ 72.266071][ T5691] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.491: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 72.277548][ T5691] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.491: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 72.285016][ T5691] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.491: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 72.289298][ T5691] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 14: comm syz.5.491: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.293680][ T5691] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 15: comm syz.5.491: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 72.297663][ T5691] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.491: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 72.305540][ T5691] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.491: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 72.310757][ T5691] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 18: comm syz.5.491: lblock 23 mapped to illegal pblock 18 (length 1) [ 72.314246][ T5691] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 19: comm syz.5.491: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 72.561962][ T4330] Bluetooth: hci5: command 0x041b tx timeout [ 72.581770][ T5715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'. [ 72.647867][ T5723] loop2: detected capacity change from 0 to 512 [ 72.676290][ T5723] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.683783][ T5723] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.503: corrupted inode contents [ 72.705636][ T5723] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.503: mark_inode_dirty error [ 72.723423][ T5723] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.503: corrupted inode contents [ 72.742015][ T5723] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.503: mark_inode_dirty error [ 72.796737][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 73.032221][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 73.053210][ T5745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.512'. [ 73.117538][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 73.130752][ T5751] bridge0: port 3(vlan2) entered blocking state [ 73.136853][ T5751] bridge0: port 3(vlan2) entered disabled state [ 73.139511][ T5751] device vlan2 entered promiscuous mode [ 73.140662][ T5751] device macsec0 entered promiscuous mode [ 73.198121][ T5757] loop5: detected capacity change from 0 to 512 [ 73.222424][ T5757] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.228374][ T5757] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.229550][ T5757] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 73.234736][ T5757] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 73.235874][ T5757] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.517: bad orphan inode 768 [ 73.241489][ T5757] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.306387][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 73.366341][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 73.430714][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 73.751915][ T5781] loop1: detected capacity change from 0 to 1024 [ 73.764329][ T5781] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.526: lblock 2 mapped to illegal pblock 2 (length 1) [ 73.767430][ T5781] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 73.769274][ T5781] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.526: lblock 0 mapped to illegal pblock 48 (length 1) [ 73.772918][ T5781] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 73.775062][ T5781] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.526: Failed to acquire dquot type 0 [ 73.777263][ T5781] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 73.779946][ T5781] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.526: mark_inode_dirty error [ 73.782877][ T5781] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 73.784896][ T5781] EXT4-fs (loop1): 1 orphan inode deleted [ 73.786032][ T5781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 73.793534][ T299] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.797717][ T299] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 73.802681][ T299] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 73.808035][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 73.809254][ T4329] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 73.815597][ T4329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 73.820679][ T4329] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 73.997604][ T5797] loop1: detected capacity change from 0 to 512 [ 74.017348][ T5797] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.020262][ T5797] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.021676][ T5797] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 74.024347][ T5797] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 74.025661][ T5797] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.533: bad orphan inode 768 [ 74.027775][ T5797] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.049444][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 74.073104][ T5800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.095430][ T5800] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 74.122575][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 74.225641][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 74.293230][ T5828] set_capacity_and_notify: 1 callbacks suppressed [ 74.293240][ T5828] loop1: detected capacity change from 0 to 512 [ 74.318368][ T5828] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.325876][ T5828] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.327004][ T5828] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 74.329417][ T5828] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 74.330535][ T5828] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.547: bad orphan inode 768 [ 74.345851][ T5828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.387969][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 74.460373][ T5842] process 'syz.3.554' launched './file1' with NULL argv: empty string added [ 74.650481][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 75.277814][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 75.457854][ T5900] loop2: detected capacity change from 0 to 512 [ 75.461027][ T5900] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 75.507722][ T5538] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.269354][ T5945] FAULT_INJECTION: forcing a failure. [ 76.269354][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 76.272078][ T5945] CPU: 0 PID: 5945 Comm: syz.0.597 Not tainted syzkaller #0 [ 76.273377][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 76.275208][ T5945] Call trace: [ 76.275805][ T5945] dump_backtrace+0x1c4/0x1f0 [ 76.276674][ T5945] show_stack+0x2c/0x3c [ 76.277452][ T5945] __dump_stack+0x30/0x40 [ 76.278248][ T5945] dump_stack_lvl+0xf4/0x15c [ 76.279081][ T5945] dump_stack+0x1c/0x5c [ 76.279839][ T5945] should_fail_ex+0x3cc/0x524 [ 76.280715][ T5945] __should_failslab+0xc0/0x11c [ 76.281578][ T5945] should_failslab+0x10/0x28 [ 76.282354][ T5945] kmem_cache_alloc+0x88/0x310 [ 76.283169][ T5945] __sigqueue_alloc+0x3e0/0x4e4 [ 76.283966][ T5945] __send_signal_locked+0x1d8/0xc88 [ 76.284850][ T5945] do_notify_parent+0x9bc/0xbe4 [ 76.285680][ T5945] release_task+0x11d0/0x1510 [ 76.286519][ T5945] do_exit+0x10bc/0x19ac [ 76.287271][ T5945] do_group_exit+0x198/0x238 [ 76.288045][ T5945] get_signal+0x11f4/0x133c [ 76.288792][ T5945] do_notify_resume+0x364/0x2c84 [ 76.289655][ T5945] el0_svc+0x98/0x128 [ 76.290425][ T5945] el0t_64_sync_handler+0x84/0xf0 [ 76.291296][ T5945] el0t_64_sync+0x18c/0x190 [ 76.604899][ T5957] FAULT_INJECTION: forcing a failure. [ 76.604899][ T5957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.610269][ T5957] CPU: 0 PID: 5957 Comm: syz.1.603 Not tainted syzkaller #0 [ 76.611517][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 76.613380][ T5957] Call trace: [ 76.613981][ T5957] dump_backtrace+0x1c4/0x1f0 [ 76.614838][ T5957] show_stack+0x2c/0x3c [ 76.615564][ T5957] __dump_stack+0x30/0x40 [ 76.616388][ T5957] dump_stack_lvl+0xf4/0x15c [ 76.617221][ T5957] dump_stack+0x1c/0x5c [ 76.617968][ T5957] should_fail_ex+0x3cc/0x524 [ 76.618821][ T5957] should_fail+0x14/0x24 [ 76.619547][ T5957] should_fail_usercopy+0x20/0x30 [ 76.620466][ T5957] strncpy_from_user+0x48/0x59c [ 76.621338][ T5957] getname_flags+0xec/0x458 [ 76.622059][ T5957] getname+0x28/0x38 [ 76.622870][ T5957] __arm64_sys_quotactl+0x234/0x77c [ 76.623964][ T5957] invoke_syscall+0x98/0x290 [ 76.624934][ T5957] el0_svc_common+0x13c/0x258 [ 76.625873][ T5957] do_el0_svc+0x5c/0x134 [ 76.626680][ T5957] el0_svc+0x58/0x128 [ 76.627438][ T5957] el0t_64_sync_handler+0x84/0xf0 [ 76.628375][ T5957] el0t_64_sync+0x18c/0x190 [ 76.721381][ T4338] Bluetooth: hci5: command 0x0419 tx timeout [ 76.984369][ T5972] FAULT_INJECTION: forcing a failure. [ 76.984369][ T5972] name failslab, interval 1, probability 0, space 0, times 0 [ 76.986807][ T5972] CPU: 0 PID: 5972 Comm: syz.0.610 Not tainted syzkaller #0 [ 76.988173][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 76.989918][ T5972] Call trace: [ 76.990497][ T5972] dump_backtrace+0x1c4/0x1f0 [ 76.991358][ T5972] show_stack+0x2c/0x3c [ 76.992091][ T5972] __dump_stack+0x30/0x40 [ 76.992892][ T5972] dump_stack_lvl+0xf4/0x15c [ 76.993761][ T5972] dump_stack+0x1c/0x5c [ 76.994494][ T5972] should_fail_ex+0x3cc/0x524 [ 76.995330][ T5972] __should_failslab+0xc0/0x11c [ 76.996212][ T5972] should_failslab+0x10/0x28 [ 76.997073][ T5972] kmem_cache_alloc+0x88/0x310 [ 76.997942][ T5972] __sigqueue_alloc+0x3e0/0x4e4 [ 76.998788][ T5972] __send_signal_locked+0x1d8/0xc88 [ 76.999705][ T5972] do_notify_parent+0x9bc/0xbe4 [ 77.000542][ T5972] release_task+0x11d0/0x1510 [ 77.001364][ T5972] do_exit+0x10bc/0x19ac [ 77.002151][ T5972] do_group_exit+0x198/0x238 [ 77.003006][ T5972] get_signal+0x11f4/0x133c [ 77.003778][ T5972] do_notify_resume+0x364/0x2c84 [ 77.004606][ T5972] el0_svc+0x98/0x128 [ 77.005296][ T5972] el0t_64_sync_handler+0x84/0xf0 [ 77.006198][ T5972] el0t_64_sync+0x18c/0x190 [ 77.775328][ T6026] netlink: 'syz.5.630': attribute type 5 has an invalid length. [ 77.833797][ T6030] netlink: 140 bytes leftover after parsing attributes in process `syz.2.632'. [ 77.940889][ T6038] FAULT_INJECTION: forcing a failure. [ 77.940889][ T6038] name failslab, interval 1, probability 0, space 0, times 0 [ 77.943457][ T6038] CPU: 0 PID: 6038 Comm: syz.1.637 Not tainted syzkaller #0 [ 77.944808][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.946725][ T6038] Call trace: [ 77.947326][ T6038] dump_backtrace+0x1c4/0x1f0 [ 77.948177][ T6038] show_stack+0x2c/0x3c [ 77.948956][ T6038] __dump_stack+0x30/0x40 [ 77.949731][ T6038] dump_stack_lvl+0xf4/0x15c [ 77.950577][ T6038] dump_stack+0x1c/0x5c [ 77.951331][ T6038] should_fail_ex+0x3cc/0x524 [ 77.952170][ T6038] __should_failslab+0xc0/0x11c [ 77.953064][ T6038] should_failslab+0x10/0x28 [ 77.953907][ T6038] kmem_cache_alloc+0x88/0x310 [ 77.954813][ T6038] __sigqueue_alloc+0x3e0/0x4e4 [ 77.955723][ T6038] __send_signal_locked+0x1d8/0xc88 [ 77.956690][ T6038] do_notify_parent+0x9bc/0xbe4 [ 77.957563][ T6038] release_task+0x11d0/0x1510 [ 77.958396][ T6038] do_exit+0x10bc/0x19ac [ 77.959143][ T6038] do_group_exit+0x198/0x238 [ 77.959982][ T6038] get_signal+0x11f4/0x133c [ 77.960802][ T6038] do_notify_resume+0x364/0x2c84 [ 77.961658][ T6038] el0_svc+0x98/0x128 [ 77.962381][ T6038] el0t_64_sync_handler+0x84/0xf0 [ 77.963260][ T6038] el0t_64_sync+0x18c/0x190 [ 78.133740][ T6056] 8021q: VLANs not supported on ipvlan1 [ 78.206707][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.208668][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.210239][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.211711][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.213091][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.214568][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.215967][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.217476][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.218847][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.220237][ T6066] tc action pedit unable to extract header offset for header type (0x4) [ 78.221760][ T6066] 0: reclassify loop, rule prio 0, protocol 800 [ 78.592231][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 79.510413][ T6157] netlink: 56 bytes leftover after parsing attributes in process `syz.2.691'. [ 79.677979][ T6165] netlink: 256 bytes leftover after parsing attributes in process `syz.2.695'. [ 80.145543][ T6147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.146729][ T6147] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.150549][ T6147] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 80.154712][ T6147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.156004][ T6147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.374100][ T6147] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 80.375384][ T6147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.376451][ T6147] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.383614][ T6147] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 80.384896][ T6147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.385876][ T6147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.392895][ T6147] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 80.395514][ T6147] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.396545][ T6147] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.403286][ T6147] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 80.404907][ T6147] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 80.406069][ T6147] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 80.412735][ T6147] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 80.715362][ T6229] loop1: detected capacity change from 0 to 512 [ 80.731551][ T6229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.736095][ T6229] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 80.747458][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 81.079860][ T6262] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.081502][ T6262] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.082967][ T6262] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.084266][ T6262] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.085817][ T6262] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.087218][ T6262] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.088545][ T6262] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.090172][ T6262] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.091571][ T6262] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.179679][ T6270] loop1: detected capacity change from 0 to 128 [ 81.199399][ T6270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.234412][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 81.441474][ T4330] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.548153][ T27] audit: type=1326 audit(81.530:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.741" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 81.552621][ T27] audit: type=1326 audit(81.530:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.741" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 81.566172][ T27] audit: type=1326 audit(81.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.741" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 81.597641][ T27] audit: type=1326 audit(81.540:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.741" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 81.608382][ T27] audit: type=1326 audit(81.540:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.741" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 81.618418][ T27] audit: type=1326 audit(81.540:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.741" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 81.628944][ T27] audit: type=1326 audit(81.540:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.741" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 81.639416][ T27] audit: type=1326 audit(81.540:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.741" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 81.651756][ T27] audit: type=1326 audit(81.540:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.741" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 82.163780][ T4338] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.290622][ T6329] loop1: detected capacity change from 0 to 512 [ 82.355500][ T6335] FAULT_INJECTION: forcing a failure. [ 82.355500][ T6335] name failslab, interval 1, probability 0, space 0, times 0 [ 82.358150][ T6335] CPU: 0 PID: 6335 Comm: syz.0.765 Not tainted syzkaller #0 [ 82.359351][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 82.361051][ T6335] Call trace: [ 82.361613][ T6335] dump_backtrace+0x1c4/0x1f0 [ 82.362450][ T6335] show_stack+0x2c/0x3c [ 82.363200][ T6335] __dump_stack+0x30/0x40 [ 82.364022][ T6335] dump_stack_lvl+0xf4/0x15c [ 82.364817][ T6335] dump_stack+0x1c/0x5c [ 82.365555][ T6335] should_fail_ex+0x3cc/0x524 [ 82.366347][ T6335] __should_failslab+0xc0/0x11c [ 82.367221][ T6335] should_failslab+0x10/0x28 [ 82.367971][ T6335] __kmem_cache_alloc_node+0x7c/0x318 [ 82.368925][ T6335] __kmalloc+0xc4/0x180 [ 82.369648][ T6335] tomoyo_realpath_from_path+0xc4/0x508 [ 82.370679][ T6335] tomoyo_path_number_perm+0x1c4/0x540 [ 82.371613][ T6335] tomoyo_path_mknod+0x13c/0x18c [ 82.372526][ T6335] security_path_mknod+0xf8/0x14c [ 82.373519][ T6335] path_openat+0x8c0/0x27a0 [ 82.374366][ T6335] do_filp_open+0x198/0x38c [ 82.375211][ T6335] do_sys_openat2+0x134/0x3fc [ 82.376078][ T6335] __arm64_sys_openat+0x11c/0x150 [ 82.376969][ T6335] invoke_syscall+0x98/0x290 [ 82.377791][ T6335] el0_svc_common+0x13c/0x258 [ 82.378658][ T6335] do_el0_svc+0x5c/0x134 [ 82.379428][ T6335] el0_svc+0x58/0x128 [ 82.380137][ T6335] el0t_64_sync_handler+0x84/0xf0 [ 82.380983][ T6335] el0t_64_sync+0x18c/0x190 [ 82.382395][ T6335] ERROR: Out of memory at tomoyo_realpath_from_path. [ 82.401753][ T4330] Bluetooth: hci4: command 0x0c1a tx timeout [ 82.402922][ T4330] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.404084][ T4330] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.481567][ T4338] Bluetooth: hci5: command 0x0c1a tx timeout [ 82.890827][ T6380] loop1: detected capacity change from 0 to 512 [ 82.991410][ T6380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.060710][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 83.138861][ T6393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.140385][ T6393] IPv6: NLM_F_CREATE should be set when creating new route [ 83.238766][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.257267][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.311122][ T6404] netlink: 'syz.5.795': attribute type 1 has an invalid length. [ 83.330570][ T6404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.360337][ T6404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.366896][ T6404] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 83.376183][ T6404] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 83.523865][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 84.241453][ T4338] Bluetooth: hci1: command 0x0406 tx timeout [ 84.302356][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 84.481334][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 84.481359][ T4338] Bluetooth: hci2: command 0x0406 tx timeout [ 84.482567][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 84.512119][ T6433] bond0: (slave bond_slave_1): Releasing backup interface [ 84.561493][ T4332] Bluetooth: hci5: command 0x0406 tx timeout [ 85.201585][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.340859][ T6469] loop2: detected capacity change from 0 to 1024 [ 85.367439][ T6469] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.823: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.370351][ T6469] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 85.372081][ T6469] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.823: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.374732][ T6469] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.823: Failed to acquire dquot type 0 [ 85.377018][ T6469] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 85.378908][ T6469] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.823: mark_inode_dirty error [ 85.381082][ T6469] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 85.383261][ T6469] EXT4-fs (loop2): 1 orphan inode deleted [ 85.384286][ T6469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.393326][ T11] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.393738][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.396179][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 85.398025][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.406233][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.408389][ T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.409890][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.415918][ T6475] loop5: detected capacity change from 0 to 128 [ 85.416606][ T22] usb 1-1: config 0 descriptor?? [ 85.425266][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 85.426478][ T4337] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 85.430969][ T6475] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 85.431303][ T4337] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 85.434915][ T4337] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 85.472763][ T6478] loop2: detected capacity change from 0 to 1024 [ 85.478266][ T6478] EXT4-fs: Ignoring removed bh option [ 85.485457][ T6478] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.500739][ T6478] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.538933][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 85.570712][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 85.944689][ T6459] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 85.965744][ T6459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.039896][ T6459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.041665][ T6459] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 86.044458][ T6459] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 86.183091][ T6509] random: crng reseeded on system resumption [ 86.315214][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 86.317098][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 86.322329][ T22] usb 1-1: USB disconnect, device number 2 [ 86.488621][ T6518] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 86.952808][ T6542] random: crng reseeded on system resumption [ 87.126989][ T6556] loop1: detected capacity change from 0 to 512 [ 87.174439][ T6556] EXT4-fs (loop1): 1 orphan inode deleted [ 87.175582][ T6556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.192580][ T4375] __quota_error: 2 callbacks suppressed [ 87.192589][ T4375] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 87.195352][ T4375] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1 [ 87.233186][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 87.365038][ T6571] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 87.503232][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.510021][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.575704][ T6576] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 87.587046][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.637618][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.640611][ T6576] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 87.648939][ T6576] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 87.903689][ T6585] random: crng reseeded on system resumption [ 88.270842][ T6608] tipc: Failed to remove unknown binding: 66,0,0/0:655033122/655033123 [ 88.273237][ T6608] tipc: Failed to remove unknown binding: 66,0,0/0:655033122/655033123 [ 88.578942][ T6626] loop2: detected capacity change from 0 to 1764 [ 88.639665][ T6626] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 88.857413][ T6638] loop5: detected capacity change from 0 to 1024 [ 88.896209][ T6638] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.889: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.899347][ T6638] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 88.900911][ T6638] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.889: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.913926][ T6638] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 88.915528][ T6638] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.889: Failed to acquire dquot type 0 [ 88.917723][ T6638] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 88.923996][ T6638] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.889: mark_inode_dirty error [ 88.969649][ T6638] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 88.971893][ T6638] EXT4-fs (loop5): 1 orphan inode deleted [ 88.972951][ T6638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 88.992010][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 88.993592][ T4569] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.997687][ T4569] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 88.999852][ T4569] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0 [ 89.018177][ T5491] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 89.020857][ T5491] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 89.021854][ T6645] device syzkaller0 entered promiscuous mode [ 89.025491][ T5491] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 89.250919][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.252853][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.309917][ T6654] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 89.317177][ T6654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.338561][ T6654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.344046][ T6654] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 89.346843][ T6654] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 89.420761][ T6661] device syzkaller0 entered promiscuous mode [ 89.902106][ T6679] loop2: detected capacity change from 0 to 1024 [ 89.984506][ T6679] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.903: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.007540][ T6679] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 90.035140][ T6679] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.903: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.062035][ T6679] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 90.063669][ T6679] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.903: Failed to acquire dquot type 0 [ 90.065958][ T6679] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 90.068098][ T6679] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.903: mark_inode_dirty error [ 90.075432][ T6679] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 90.077482][ T6679] EXT4-fs (loop2): 1 orphan inode deleted [ 90.078618][ T6679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.084086][ T4569] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.087402][ T4569] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 90.088854][ T4569] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0 [ 90.127713][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 90.130147][ T4569] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.134729][ T4569] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 90.136511][ T4569] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0 [ 90.139100][ T4337] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 90.146879][ T4337] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 90.148852][ T4337] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 90.190064][ T6686] loop2: detected capacity change from 0 to 1024 [ 90.193769][ T6686] EXT4-fs: inline encryption not supported [ 90.219751][ T6686] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.906: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.229787][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 90.240277][ T6686] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 90.251634][ T6686] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.906: Invalid inode table block 1 in block_group 0 [ 90.265390][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 90.267948][ T6686] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 90.270224][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 90.271474][ T6686] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.906: mark_inode_dirty error [ 90.275474][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 90.276648][ T6686] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 90.282498][ T6686] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.906: Failed to acquire dquot type 0 [ 90.286447][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 90.287883][ T6686] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 90.289957][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 90.291540][ T6686] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.906: mark_inode_dirty error [ 90.294162][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 90.295439][ T6686] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 90.297602][ T6686] EXT4-fs (loop2): 1 orphan inode deleted [ 90.302963][ T4569] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.307612][ T4569] EXT4-fs (loop2): Remounting filesystem read-only [ 90.308968][ T4569] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0 [ 90.311546][ T4569] EXT4-fs (loop2): Remounting filesystem read-only [ 90.314076][ T6686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.320200][ T6686] EXT4-fs (loop2): unmounting filesystem. [ 90.326419][ T6693] device syzkaller0 entered promiscuous mode [ 90.328972][ T6686] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.906: Invalid inode table block 1 in block_group 0 [ 90.334447][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 90.336798][ T6686] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 90.345826][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 90.347142][ T6686] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz.2.906: mark_inode_dirty error [ 90.381579][ T6686] EXT4-fs (loop2): Remounting filesystem read-only [ 91.755703][ T6719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.927'. [ 91.769120][ T6722] loop1: detected capacity change from 0 to 1024 [ 91.798842][ T6722] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.918: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.801367][ T6722] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.918: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.810853][ T6722] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.918: Failed to acquire dquot type 0 [ 91.835028][ T6722] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 91.838127][ T6722] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.918: mark_inode_dirty error [ 91.840709][ T6722] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 91.843801][ T6722] EXT4-fs (loop1): 1 orphan inode deleted [ 91.844884][ T6722] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.870622][ T9] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.875728][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 91.969106][ T6728] loop5: detected capacity change from 0 to 512 [ 91.998752][ T6728] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 92.022177][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 92.195965][ T5281] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.199823][ T5281] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:13: Failed to release dquot type 0 [ 92.203980][ T4329] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 92.206634][ T4329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 92.208616][ T4329] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 92.212275][ T6728] EXT4-fs (loop5): unmounting filesystem. [ 92.262716][ T6741] loop5: detected capacity change from 0 to 1024 [ 92.274269][ T6741] EXT4-fs: inline encryption not supported [ 92.284599][ T6741] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.924: lblock 2 mapped to illegal pblock 2 (length 1) [ 92.290384][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.305857][ T6741] __quota_error: 5 callbacks suppressed [ 92.305872][ T6741] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 92.324062][ T6741] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.924: Invalid inode table block 1 in block_group 0 [ 92.334220][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.335565][ T6741] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 92.339475][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.340918][ T6741] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.924: mark_inode_dirty error [ 92.343588][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.344108][ T6746] loop1: detected capacity change from 0 to 1024 [ 92.345861][ T6741] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 92.349561][ T6746] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.352461][ T6741] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.924: Failed to acquire dquot type 0 [ 92.356543][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.358014][ T6741] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 92.359866][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.361536][ T6741] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.924: mark_inode_dirty error [ 92.363999][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.365314][ T6741] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 92.367252][ T6741] EXT4-fs (loop5): 1 orphan inode deleted [ 92.368609][ T6741] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 92.370913][ T5281] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.377750][ T5281] EXT4-fs (loop5): Remounting filesystem read-only [ 92.379020][ T5281] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 92.380658][ T5281] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:13: Failed to release dquot type 0 [ 92.383241][ T5281] EXT4-fs (loop5): Remounting filesystem read-only [ 92.387864][ T6741] EXT4-fs (loop5): unmounting filesystem. [ 92.389205][ T6746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.393852][ T6741] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.924: Invalid inode table block 1 in block_group 0 [ 92.398556][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.400889][ T6741] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 92.403203][ T6746] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.409188][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.412612][ T6741] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz.5.924: mark_inode_dirty error [ 92.421122][ T6741] EXT4-fs (loop5): Remounting filesystem read-only [ 92.437856][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 92.525872][ T6756] device syzkaller0 entered promiscuous mode [ 92.779782][ T6767] device syzkaller0 entered promiscuous mode [ 93.045904][ T6797] FAULT_INJECTION: forcing a failure. [ 93.045904][ T6797] name fail_futex, interval 1, probability 0, space 0, times 0 [ 93.045956][ T6797] CPU: 0 PID: 6797 Comm: syz.1.950 Not tainted syzkaller #0 [ 93.045965][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 93.045970][ T6797] Call trace: [ 93.045973][ T6797] dump_backtrace+0x1c4/0x1f0 [ 93.045985][ T6797] show_stack+0x2c/0x3c [ 93.045990][ T6797] __dump_stack+0x30/0x40 [ 93.045997][ T6797] dump_stack_lvl+0xf4/0x15c [ 93.046006][ T6797] dump_stack+0x1c/0x5c [ 93.046011][ T6797] should_fail_ex+0x3cc/0x524 [ 93.046021][ T6797] should_fail+0x14/0x24 [ 93.046028][ T6797] should_fail_futex+0x48/0x5c [ 93.046036][ T6797] futex_lock_pi_atomic+0x100/0xa78 [ 93.046045][ T6797] futex_lock_pi+0x1dc/0x7cc [ 93.046053][ T6797] do_futex+0x1d0/0x340 [ 93.046066][ T6797] __arm64_sys_futex+0x390/0x414 [ 93.046073][ T6797] invoke_syscall+0x98/0x290 [ 93.046083][ T6797] el0_svc_common+0x13c/0x258 [ 93.046092][ T6797] do_el0_svc+0x5c/0x134 [ 93.046100][ T6797] el0_svc+0x58/0x128 [ 93.046105][ T6797] el0t_64_sync_handler+0x84/0xf0 [ 93.046111][ T6797] el0t_64_sync+0x18c/0x190 [ 93.307362][ T6809] loop2: detected capacity change from 0 to 512 [ 93.338150][ T6809] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.374731][ T6809] EXT4-fs (loop2): unmounting filesystem. [ 93.409582][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.958'. [ 93.802243][ T6830] device syzkaller0 entered promiscuous mode [ 94.098576][ T6861] loop1: detected capacity change from 0 to 1024 [ 94.100118][ T6861] EXT4-fs: inline encryption not supported [ 94.130269][ T6861] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.976: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.134209][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.135411][ T6861] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 94.137491][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 94.139011][ T6861] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.976: Invalid inode table block 1 in block_group 0 [ 94.144112][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 94.145451][ T6866] netlink: 'syz.0.978': attribute type 6 has an invalid length. [ 94.146982][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 94.148497][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 94.150228][ T6866] netlink: 'syz.0.978': attribute type 6 has an invalid length. [ 94.156394][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.159361][ T6869] ucma_write: process 224 (syz.5.979) changed security contexts after opening file descriptor, this is not allowed. [ 94.166546][ T6861] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 94.168494][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.169595][ T6861] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.976: mark_inode_dirty error [ 94.188000][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.189202][ T6861] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 94.190970][ T6861] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.976: Failed to acquire dquot type 0 [ 94.205399][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.207156][ T6861] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 94.211777][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.213047][ T6861] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.976: mark_inode_dirty error [ 94.216943][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.218976][ T6861] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 94.258743][ T6861] EXT4-fs (loop1): 1 orphan inode deleted [ 94.270863][ T6861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.286247][ T5281] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.289333][ T5281] EXT4-fs (loop1): Remounting filesystem read-only [ 94.290768][ T5281] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 94.297186][ T5281] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:13: Failed to release dquot type 0 [ 94.303590][ T5281] EXT4-fs (loop1): Remounting filesystem read-only [ 94.308547][ T6861] EXT4-fs (loop1): unmounting filesystem. [ 94.309837][ T6861] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.976: Invalid inode table block 1 in block_group 0 [ 94.316479][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.318833][ T6861] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 94.328313][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.330728][ T6861] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz.1.976: mark_inode_dirty error [ 94.337224][ T6861] EXT4-fs (loop1): Remounting filesystem read-only [ 94.485259][ T6885] random: crng reseeded on system resumption [ 95.170388][ T6911] loop1: detected capacity change from 0 to 1024 [ 95.182744][ T6911] EXT4-fs: inline encryption not supported [ 95.196323][ T6911] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.997: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.200227][ T6911] EXT4-fs (loop1): Remounting filesystem read-only [ 95.208826][ T6911] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 95.210330][ T6911] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.997: Invalid inode table block 1 in block_group 0 [ 95.234761][ T6911] EXT4-fs (loop1): Remounting filesystem read-only [ 95.239823][ T6911] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 95.257228][ T6911] EXT4-fs (loop1): Remounting filesystem read-only [ 95.265741][ T6911] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.997: mark_inode_dirty error [ 95.296902][ T6911] EXT4-fs (loop1): Remounting filesystem read-only [ 95.304717][ T6911] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 95.306305][ T6911] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.997: Failed to acquire dquot type 0 [ 95.359165][ T6911] EXT4-fs (loop1): Remounting filesystem read-only [ 95.360635][ T6911] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 95.367609][ T6911] EXT4-fs (loop1): Remounting filesystem read-only [ 95.369004][ T6911] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.997: mark_inode_dirty error [ 95.371701][ T6911] EXT4-fs (loop1): Remounting filesystem read-only [ 95.373112][ T6911] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 95.375257][ T6911] EXT4-fs (loop1): 1 orphan inode deleted [ 95.376521][ T6911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.394880][ T5341] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.397962][ T5341] EXT4-fs (loop1): Remounting filesystem read-only [ 95.399406][ T5341] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 95.400904][ T5341] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 0 [ 95.411658][ T5341] EXT4-fs (loop1): Remounting filesystem read-only [ 95.415862][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 95.417139][ T4329] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 95.419697][ T4329] EXT4-fs (loop1): Remounting filesystem read-only [ 95.420935][ T4329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 95.426744][ T4329] EXT4-fs (loop1): Remounting filesystem read-only [ 95.427958][ T4329] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 95.430255][ T4329] EXT4-fs (loop1): Remounting filesystem read-only [ 95.494596][ T6934] loop1: detected capacity change from 0 to 512 [ 95.505554][ T6934] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.515215][ T6934] EXT4-fs (loop1): 1 truncate cleaned up [ 95.517424][ T6934] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.557906][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 95.601069][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 96.087659][ T6982] loop1: detected capacity change from 0 to 1024 [ 96.093144][ T6982] EXT4-fs: inline encryption not supported [ 96.108889][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.1026: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.112269][ T6982] EXT4-fs (loop1): Remounting filesystem read-only [ 96.113675][ T6982] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 96.115383][ T6982] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.1026: Invalid inode table block 1 in block_group 0 [ 96.117954][ T6982] EXT4-fs (loop1): Remounting filesystem read-only [ 96.119429][ T6982] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 96.127124][ T6982] EXT4-fs (loop1): Remounting filesystem read-only [ 96.128571][ T6982] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.1026: mark_inode_dirty error [ 96.130896][ T6982] EXT4-fs (loop1): Remounting filesystem read-only [ 96.132463][ T6982] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1026: Failed to acquire dquot type 0 [ 96.140218][ T6982] EXT4-fs (loop1): Remounting filesystem read-only [ 96.141857][ T6982] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 96.143872][ T6982] EXT4-fs (loop1): Remounting filesystem read-only [ 96.145181][ T6982] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.1026: mark_inode_dirty error [ 96.147777][ T6982] EXT4-fs (loop1): Remounting filesystem read-only [ 96.158442][ T6982] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 96.164739][ T6982] EXT4-fs (loop1): 1 orphan inode deleted [ 96.168344][ T6982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.185086][ T4791] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.189882][ T4791] EXT4-fs (loop1): Remounting filesystem read-only [ 96.191033][ T4791] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 0 [ 96.197108][ T4791] EXT4-fs (loop1): Remounting filesystem read-only [ 96.199231][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 96.200535][ T4329] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 96.206534][ T4329] EXT4-fs (loop1): Remounting filesystem read-only [ 96.207728][ T4329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 96.211264][ T4329] EXT4-fs (loop1): Remounting filesystem read-only [ 96.212477][ T4329] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 96.223869][ T4329] EXT4-fs (loop1): Remounting filesystem read-only [ 96.248898][ T6990] device syzkaller0 entered promiscuous mode [ 96.457223][ T7012] loop1: detected capacity change from 0 to 164 [ 96.498554][ T7012] rock: directory entry would overflow storage [ 96.499917][ T7012] rock: sig=0x4543, size=28, remaining=18 [ 96.518923][ T7015] loop5: detected capacity change from 0 to 1024 [ 96.520699][ T7015] EXT4-fs: inline encryption not supported [ 96.546710][ T7015] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.1040: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.555298][ T7015] EXT4-fs (loop5): Remounting filesystem read-only [ 96.562890][ T7015] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.1040: Invalid inode table block 1 in block_group 0 [ 96.577386][ T7015] EXT4-fs (loop5): Remounting filesystem read-only [ 96.584331][ T7015] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 96.600632][ T7015] EXT4-fs (loop5): Remounting filesystem read-only [ 96.607448][ T7015] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1040: mark_inode_dirty error [ 96.613229][ T7015] EXT4-fs (loop5): Remounting filesystem read-only [ 96.614500][ T7015] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1040: Failed to acquire dquot type 0 [ 96.617653][ T7015] EXT4-fs (loop5): Remounting filesystem read-only [ 96.627633][ T7015] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 96.632785][ T7015] EXT4-fs (loop5): Remounting filesystem read-only [ 96.634106][ T7015] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.1040: mark_inode_dirty error [ 96.636644][ T7015] EXT4-fs (loop5): Remounting filesystem read-only [ 96.638013][ T7015] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 96.639901][ T7015] EXT4-fs (loop5): 1 orphan inode deleted [ 96.641147][ T7015] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 96.643286][ T4791] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.659077][ T4791] EXT4-fs (loop5): Remounting filesystem read-only [ 96.660490][ T4791] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 0 [ 96.663318][ T4791] EXT4-fs (loop5): Remounting filesystem read-only [ 96.668418][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 96.669871][ T5491] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 96.686350][ T5491] EXT4-fs (loop5): Remounting filesystem read-only [ 96.690528][ T5491] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 96.694967][ T5491] EXT4-fs (loop5): Remounting filesystem read-only [ 96.696932][ T5491] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 96.699228][ T7025] loop1: detected capacity change from 0 to 512 [ 96.699464][ T5491] EXT4-fs (loop5): Remounting filesystem read-only [ 96.713026][ T7025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1045: bg 0: block 393: padding at end of block bitmap is not set [ 96.724428][ T7025] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 96.728918][ T7025] EXT4-fs (loop1): 2 truncates cleaned up [ 97.298234][ T7079] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 97.329804][ T7081] device syzkaller0 entered promiscuous mode [ 97.365695][ T7084] loop2: detected capacity change from 0 to 1024 [ 97.367247][ T7084] EXT4-fs: inline encryption not supported [ 97.390130][ T7084] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.1069: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.392971][ T7084] EXT4-fs (loop2): Remounting filesystem read-only [ 97.394840][ T7084] __quota_error: 13 callbacks suppressed [ 97.394847][ T7084] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 97.397148][ T7084] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1069: Invalid inode table block 1 in block_group 0 [ 97.399371][ T7084] EXT4-fs (loop2): Remounting filesystem read-only [ 97.400457][ T7084] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 97.404514][ T7084] EXT4-fs (loop2): Remounting filesystem read-only [ 97.405702][ T7084] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1069: mark_inode_dirty error [ 97.407706][ T7084] EXT4-fs (loop2): Remounting filesystem read-only [ 97.408854][ T7084] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 97.410266][ T7084] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1069: Failed to acquire dquot type 0 [ 97.412422][ T7084] EXT4-fs (loop2): Remounting filesystem read-only [ 97.413613][ T7084] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 97.415586][ T7084] EXT4-fs (loop2): Remounting filesystem read-only [ 97.416746][ T7084] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.1069: mark_inode_dirty error [ 97.418859][ T7084] EXT4-fs (loop2): Remounting filesystem read-only [ 97.420001][ T7084] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 97.424072][ T7084] EXT4-fs (loop2): 1 orphan inode deleted [ 97.444189][ T4791] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.446928][ T4791] EXT4-fs (loop2): Remounting filesystem read-only [ 97.448140][ T4791] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 97.449814][ T4791] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 0 [ 97.458111][ T4791] EXT4-fs (loop2): Remounting filesystem read-only [ 97.462244][ T4337] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 97.464712][ T4337] EXT4-fs (loop2): Remounting filesystem read-only [ 97.466201][ T4337] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 97.468122][ T4337] EXT4-fs (loop2): Remounting filesystem read-only [ 97.482612][ T4337] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 97.484653][ T4337] EXT4-fs (loop2): Remounting filesystem read-only [ 97.547607][ T27] audit: type=1326 audit(97.530:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.0.1071" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 97.552186][ T7088] netlink: 1064 bytes leftover after parsing attributes in process `syz.2.1070'. [ 97.562053][ T27] audit: type=1326 audit(97.550:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.0.1071" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 97.573107][ T27] audit: type=1326 audit(97.550:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.0.1071" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 97.588683][ T27] audit: type=1326 audit(97.550:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.0.1071" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=17 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 97.601525][ T27] audit: type=1326 audit(97.550:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.0.1071" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 97.611672][ T27] audit: type=1326 audit(97.550:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.0.1071" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 97.634940][ T27] audit: type=1326 audit(97.550:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.0.1071" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 98.889055][ T7176] loop5: detected capacity change from 0 to 512 [ 98.908335][ T7176] EXT4-fs: Ignoring removed nobh option [ 98.922142][ T7176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 98.923958][ T7176] System zones: 1-12 [ 98.928157][ T7176] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.1107: corrupted in-inode xattr [ 98.935649][ T7176] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1107: couldn't read orphan inode 15 (err -117) [ 99.624644][ T7218] tipc: Invalid UDP bearer configuration [ 99.624667][ T7218] tipc: Enabling of bearer rejected, failed to enable media [ 99.723564][ T7227] net_ratelimit: 45 callbacks suppressed [ 99.723575][ T7227] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.806760][ T7235] loop2: detected capacity change from 0 to 164 [ 99.817052][ T7235] Unable to read rock-ridge attributes [ 99.821139][ T7235] Unable to read rock-ridge attributes [ 99.830769][ T7235] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 99.988257][ T7250] loop5: detected capacity change from 0 to 512 [ 100.001726][ T7250] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 100.003353][ T7250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 100.006344][ T7250] EXT4-fs (loop5): orphan cleanup on readonly fs [ 100.019913][ T7250] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.1134: iget: bad i_size value: 12154761577498 [ 100.039117][ T7250] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1134: couldn't read orphan inode 13 (err -117) [ 100.041862][ T7250] EXT4-fs mount: 6 callbacks suppressed [ 100.041873][ T7250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 100.045839][ T7250] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.1134: dx entry: limit 65535 != root limit 120 [ 100.049228][ T7250] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1134: Corrupt directory, running e2fsck is recommended [ 100.079681][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 100.299516][ T7259] device syzkaller0 entered promiscuous mode [ 101.004545][ T7267] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.010280][ T7267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.018010][ T7267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.019513][ T7267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.020949][ T7267] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.023439][ T7267] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 101.024883][ T7267] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 101.027867][ T7267] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 101.176930][ T7297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1147'. [ 102.401370][ T4330] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.041408][ T4332] Bluetooth: hci5: command 0x0c1a tx timeout [ 103.042728][ T4332] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.043921][ T4332] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.044957][ T4332] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.045984][ T4332] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.905161][ T7377] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.121825][ T4330] Bluetooth: hci5: command 0x0406 tx timeout [ 107.740357][ T7372] device ip6gre1 entered promiscuous mode [ 107.887003][ T7412] capability: warning: `syz.1.1186' uses 32-bit capabilities (legacy support in use) [ 107.942614][ T7427] device syzkaller0 entered promiscuous mode [ 108.442220][ T7443] loop2: detected capacity change from 0 to 128 [ 108.466599][ T7443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.557652][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 109.393999][ T7470] device syzkaller0 entered promiscuous mode [ 120.239809][ T7498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.744144][ T7540] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1231'. [ 120.758956][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'. [ 120.995700][ T7549] device syzkaller0 entered promiscuous mode [ 121.307644][ T7577] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1248'. [ 121.347899][ T7583] tipc: Failed to remove unknown binding: 66,0,0/0:3719173321/3719173322 [ 121.349931][ T7583] tipc: Failed to remove unknown binding: 66,0,0/0:3719173321/3719173322 [ 125.921651][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.922949][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.686860][ T7651] loop1: detected capacity change from 0 to 128 [ 132.942029][ T7671] FAULT_INJECTION: forcing a failure. [ 132.942029][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 133.069435][ T7671] CPU: 1 PID: 7671 Comm: syz.1.1283 Not tainted syzkaller #0 [ 133.070865][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 133.072739][ T7671] Call trace: [ 133.073379][ T7671] dump_backtrace+0x1c4/0x1f0 [ 133.074258][ T7671] show_stack+0x2c/0x3c [ 133.075054][ T7671] __dump_stack+0x30/0x40 [ 133.075869][ T7671] dump_stack_lvl+0xf4/0x15c [ 133.076739][ T7671] dump_stack+0x1c/0x5c [ 133.077534][ T7671] should_fail_ex+0x3cc/0x524 [ 133.078434][ T7671] __should_failslab+0xc0/0x11c [ 133.079359][ T7671] should_failslab+0x10/0x28 [ 133.080224][ T7671] __kmem_cache_alloc_node+0x7c/0x318 [ 133.081401][ T7671] __kmalloc_node_track_caller+0xb8/0x174 [ 133.082526][ T7671] kstrdup_const+0x90/0xdc [ 133.083420][ T7671] __kernfs_new_node+0xb0/0x5fc [ 133.084377][ T7671] kernfs_new_node+0x120/0x230 [ 133.085327][ T7671] kernfs_create_dir_ns+0x58/0x138 [ 133.086320][ T7671] sysfs_create_dir_ns+0x120/0x264 [ 133.087301][ T7671] kobject_add_internal+0x5a8/0xb18 [ 133.088285][ T7671] kobject_init_and_add+0x128/0x194 [ 133.089252][ T7671] bus_add_driver+0x1a8/0x518 [ 133.090160][ T7671] driver_register+0x200/0x37c [ 133.091082][ T7671] usb_gadget_register_driver_owner+0xf0/0x25c [ 133.092207][ T7671] raw_ioctl+0x1014/0x326c [ 133.093050][ T7671] __arm64_sys_ioctl+0x14c/0x1c8 [ 133.093978][ T7671] invoke_syscall+0x98/0x290 [ 133.094882][ T7671] el0_svc_common+0x13c/0x258 [ 133.095813][ T7671] do_el0_svc+0x5c/0x134 [ 133.096624][ T7671] el0_svc+0x58/0x128 [ 133.097354][ T7671] el0t_64_sync_handler+0x84/0xf0 [ 133.098304][ T7671] el0t_64_sync+0x18c/0x190 [ 133.133108][ T7671] kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers) [ 133.135593][ T7671] UDC core: USB Raw Gadget: driver registration failed: -12 [ 133.137134][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 133.205692][ T7681] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 133.264646][ T7687] loop2: detected capacity change from 0 to 256 [ 133.267558][ T7687] FAT-fs (loop2): Directory bread(block 1285) failed [ 133.268969][ T7687] FAT-fs (loop2): Directory bread(block 1286) failed [ 133.270273][ T7687] FAT-fs (loop2): Directory bread(block 1287) failed [ 133.272510][ T7687] FAT-fs (loop2): Directory bread(block 1288) failed [ 133.278169][ T7687] FAT-fs (loop2): Directory bread(block 1285) failed [ 133.279679][ T7687] FAT-fs (loop2): Directory bread(block 1286) failed [ 133.281056][ T7687] FAT-fs (loop2): Directory bread(block 1287) failed [ 133.283178][ T7687] FAT-fs (loop2): Directory bread(block 1288) failed [ 133.284840][ T7687] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 133.316268][ T7689] device syzkaller0 entered promiscuous mode [ 146.805866][ T7840] loop1: detected capacity change from 0 to 128 [ 146.827736][ T7837] device syzkaller0 entered promiscuous mode [ 146.948006][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 146.948015][ T27] audit: type=1326 audit(146.930:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 146.956990][ T27] audit: type=1326 audit(146.940:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 146.971972][ T27] audit: type=1326 audit(146.950:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 146.977035][ T7847] loop1: detected capacity change from 0 to 512 [ 146.987552][ T7847] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.992507][ T27] audit: type=1326 audit(146.950:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 146.996589][ T27] audit: type=1326 audit(146.950:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 147.026061][ T7847] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.032661][ T27] audit: type=1326 audit(146.950:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9e378fa0 code=0x7ffc0000 [ 147.058118][ T27] audit: type=1326 audit(146.950:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9e35c16c code=0x7ffc0000 [ 147.077695][ T27] audit: type=1326 audit(146.950:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff9e37904c code=0x7ffc0000 [ 147.094944][ T27] audit: type=1326 audit(146.960:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9e35c16c code=0x7ffc0000 [ 147.104197][ T27] audit: type=1326 audit(146.960:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.1345" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9e378ed0 code=0x7ffc0000 [ 147.222542][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 160.078116][ T7992] device syzkaller0 entered promiscuous mode [ 160.078985][ T7995] loop2: detected capacity change from 0 to 128 [ 160.098384][ T7995] syz.2.1400: attempt to access beyond end of device [ 160.098384][ T7995] loop2: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 160.101594][ T7995] syz.2.1400: attempt to access beyond end of device [ 160.101594][ T7995] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 160.315828][ T8007] loop5: detected capacity change from 0 to 164 [ 160.353157][ T8007] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 172.070544][ T8094] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 172.542960][ T8135] device syzkaller0 entered promiscuous mode [ 172.999792][ T8194] < [ 174.059095][ T8239] loop2: detected capacity change from 0 to 512 [ 174.061063][ T8239] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.076228][ T8239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.077809][ T8239] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.109853][ T8239] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.1477: Allocating blocks 41-42 which overlap fs metadata [ 174.114390][ T8239] __quota_error: 21 callbacks suppressed [ 174.114400][ T8239] Quota error (device loop2): write_blk: dquota write failed [ 174.116819][ T8239] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 174.118577][ T8239] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.1477: Allocating blocks 41-42 which overlap fs metadata [ 174.124080][ T8239] Quota error (device loop2): write_blk: dquota write failed [ 174.125668][ T8239] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 174.127492][ T8239] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1477: Failed to acquire dquot type 1 [ 174.129731][ T8239] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 174.133590][ T8239] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1477: corrupted inode contents [ 174.136102][ T8239] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #12: comm syz.2.1477: mark_inode_dirty error [ 174.138499][ T8239] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1477: corrupted inode contents [ 174.143544][ T8239] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.1477: mark_inode_dirty error [ 174.148170][ T8239] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1477: corrupted inode contents [ 174.158064][ T8239] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 174.160042][ T8239] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1477: corrupted inode contents [ 174.168362][ T8239] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.1477: mark_inode_dirty error [ 174.170628][ T8239] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 174.174460][ T8239] EXT4-fs (loop2): 1 truncate cleaned up [ 174.175618][ T8239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.186130][ T8239] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 174.201554][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 184.516064][ T8206] netlink: 'syz.1.1468': attribute type 15 has an invalid length. [ 184.517655][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'. [ 185.121034][ T8319] loop2: detected capacity change from 0 to 128 [ 185.512588][ T8326] device syzkaller0 entered promiscuous mode [ 185.645747][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 186.177213][ T8366] loop5: detected capacity change from 0 to 512 [ 186.179244][ T8366] ext4: Unknown parameter 'seclabel' [ 186.222146][ T8366] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.223581][ T8366] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.407340][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.409874][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.447448][ T8393] FAULT_INJECTION: forcing a failure. [ 187.447448][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 187.449682][ T8393] CPU: 0 PID: 8393 Comm: syz.5.1539 Not tainted syzkaller #0 [ 187.450918][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 187.452635][ T8393] Call trace: [ 187.453213][ T8393] dump_backtrace+0x1c4/0x1f0 [ 187.454000][ T8393] show_stack+0x2c/0x3c [ 187.454764][ T8393] __dump_stack+0x30/0x40 [ 187.455549][ T8393] dump_stack_lvl+0xf4/0x15c [ 187.456372][ T8393] dump_stack+0x1c/0x5c [ 187.457118][ T8393] should_fail_ex+0x3cc/0x524 [ 187.457953][ T8393] __should_failslab+0xc0/0x11c [ 187.458823][ T8393] should_failslab+0x10/0x28 [ 187.459657][ T8393] kmem_cache_alloc+0x88/0x310 [ 187.460548][ T8393] __alloc_file+0x30/0x234 [ 187.461333][ T8393] alloc_empty_file+0xa0/0x184 [ 187.462195][ T8393] path_openat+0xe0/0x27a0 [ 187.462955][ T8393] do_filp_open+0x198/0x38c [ 187.463759][ T8393] do_sys_openat2+0x134/0x3fc [ 187.464564][ T8393] __arm64_sys_openat+0x11c/0x150 [ 187.465439][ T8393] invoke_syscall+0x98/0x290 [ 187.466271][ T8393] el0_svc_common+0x13c/0x258 [ 187.467154][ T8393] do_el0_svc+0x5c/0x134 [ 187.467922][ T8393] el0_svc+0x58/0x128 [ 187.468593][ T8393] el0t_64_sync_handler+0x84/0xf0 [ 187.469473][ T8393] el0t_64_sync+0x18c/0x190 [ 197.535046][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.536579][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.347970][ T8340] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.349550][ T8340] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.350994][ T8340] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.352727][ T8340] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.455475][ T8456] loop1: detected capacity change from 0 to 256 [ 198.648988][ T8424] tipc: Enabling of bearer rejected, failed to enable media [ 198.667106][ T8462] loop2: detected capacity change from 0 to 128 [ 198.702714][ T8462] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.724552][ T8462] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.725107][ T8464] device syzkaller0 entered promiscuous mode [ 198.745654][ T8473] x_tables: duplicate underflow at hook 4 [ 200.299668][ T27] audit: type=1326 audit(200.280:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 200.304437][ T27] audit: type=1326 audit(200.280:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 200.309277][ T27] audit: type=1326 audit(200.280:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 200.316919][ T27] audit: type=1326 audit(200.280:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=132 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 200.327708][ T27] audit: type=1326 audit(200.280:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 200.336396][ T27] audit: type=1326 audit(200.280:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 200.340936][ T27] audit: type=1326 audit(200.280:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 200.348616][ T27] audit: type=1326 audit(200.280:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffffa2b792a8 code=0x7ffc0000 [ 200.353746][ T27] audit: type=1326 audit(200.280:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffa2b72d4c code=0x7ffc0000 [ 200.358715][ T27] audit: type=1326 audit(200.280:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1592" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa3a0b81c code=0x7ffc0000 [ 206.014471][ T8573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.109475][ T8580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.125792][ T8580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.127463][ T8580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.129095][ T8580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.536201][ T8600] netlink: 'syz.5.1616': attribute type 16 has an invalid length. [ 210.537700][ T8600] netlink: 'syz.5.1616': attribute type 17 has an invalid length. [ 210.562441][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.563876][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.565166][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.601275][ T8600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.688702][ T8612] loop1: detected capacity change from 0 to 164 [ 211.073461][ T8616] rock: directory entry would overflow storage [ 211.074843][ T8616] rock: sig=0x4f50, size=4, remaining=3 [ 211.075837][ T8616] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 211.779673][ T8660] loop5: detected capacity change from 0 to 512 [ 211.817675][ T8662] device syzkaller0 entered promiscuous mode [ 211.829474][ T8660] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.1643: missing EA_INODE flag [ 211.840946][ T8660] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1643: error while reading EA inode 2 err=-117 [ 211.851408][ T8660] EXT4-fs (loop5): 1 orphan inode deleted [ 211.853723][ T8660] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 211.906135][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 212.944652][ T27] kauditd_printk_skb: 7008 callbacks suppressed [ 212.944663][ T27] audit: type=1326 audit(212.930:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff891792a8 code=0x0 [ 223.557268][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1649'. [ 223.888822][ T8789] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 223.890595][ T8789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.323632][ T8794] device syzkaller0 entered promiscuous mode [ 225.841310][ T4332] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 225.841730][ T4330] Bluetooth: hci6: command 0x1003 tx timeout [ 235.191305][ T8816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1702'. [ 235.192945][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 235.304432][ T8836] loop2: detected capacity change from 0 to 128 [ 235.388320][ T27] audit: type=1326 audit(235.365:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.1.1705" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 235.395386][ T27] audit: type=1326 audit(235.365:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.1.1705" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 235.399720][ T27] audit: type=1326 audit(235.375:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.1.1705" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 235.435529][ T27] audit: type=1326 audit(235.375:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.1.1705" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 235.439604][ T27] audit: type=1326 audit(235.405:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.1.1705" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 235.444507][ T27] audit: type=1326 audit(235.405:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.1.1705" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 235.448919][ T27] audit: type=1326 audit(235.405:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.1.1705" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 235.465901][ T27] audit: type=1326 audit(235.405:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.1.1705" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 235.469987][ T27] audit: type=1326 audit(235.405:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.1.1705" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9e3792a8 code=0x7ffc0000 [ 236.286224][ T8854] netlink: 'syz.1.1716': attribute type 4 has an invalid length. [ 236.309266][ T8858] loop5: detected capacity change from 0 to 1024 [ 236.354889][ T8858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 236.403062][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 236.596629][ T8891] loop1: detected capacity change from 0 to 1024 [ 236.609445][ T8891] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 236.891756][ T8891] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 236.893610][ T8891] EXT4-fs (loop1): orphan cleanup on readonly fs [ 236.910226][ T8891] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.1727: Inode bitmap for bg 0 marked uninitialized [ 236.913341][ T8891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 236.926698][ T8891] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 236.952017][ T8899] loop5: detected capacity change from 0 to 256 [ 236.954007][ T8899] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 236.959251][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 236.959466][ T8899] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.031402][ T8907] device syzkaller0 entered promiscuous mode [ 237.978635][ T8926] loop2: detected capacity change from 0 to 512 [ 237.998466][ T8926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.016889][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 238.034156][ T8930] netlink: 'syz.2.1744': attribute type 1 has an invalid length. [ 248.268198][ T8962] netlink: 'syz.0.1758': attribute type 10 has an invalid length. [ 248.276971][ T8962] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.279414][ T8962] bond0: (slave team0): Enslaving as an active interface with an up link [ 248.310318][ T8972] loop5: detected capacity change from 0 to 512 [ 248.341500][ T8972] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 248.370289][ T8972] EXT4-fs (loop5): 1 truncate cleaned up [ 248.372134][ T8972] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 248.633516][ T5491] EXT4-fs (loop5): unmounting filesystem. [ 248.687686][ T8989] loop1: detected capacity change from 0 to 256 [ 248.701324][ T8989] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.707166][ T8989] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 248.709266][ T8989] FAT-fs (loop1): Filesystem has been set read-only [ 248.802005][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.803791][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.059977][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.062354][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.186044][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 249.474503][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.489677][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.910959][ T9013] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.913824][ T9013] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.915576][ T9013] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.917441][ T9013] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.154863][ T9013] device ip6gre1 left promiscuous mode [ 250.557273][ T9087] tipc: Started in network mode [ 250.558661][ T9087] tipc: Node identity 96f0449854c, cluster identity 4711 [ 250.560168][ T9087] tipc: Enabled bearer , priority 0 [ 250.567261][ T9087] device syzkaller0 entered promiscuous mode [ 250.606084][ T9087] tipc: Resetting bearer [ 250.614310][ T9085] tipc: Resetting bearer [ 250.731724][ T9085] tipc: Disabling bearer [ 250.758645][ T9101] bridge0: port 3(team0) entered blocking state [ 250.760065][ T9101] bridge0: port 3(team0) entered disabled state [ 250.765709][ T9101] device team0 entered promiscuous mode [ 250.766755][ T9101] device team_slave_0 entered promiscuous mode [ 250.768140][ T9101] device team_slave_1 entered promiscuous mode [ 250.786662][ T9101] device xfrm0 entered promiscuous mode [ 250.787788][ T9101] team0: Device xfrm0 is of different type [ 251.326849][ T9128] loop2: detected capacity change from 0 to 256 [ 251.337605][ T9128] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1819'. [ 251.870694][ T9164] tmpfs: Bad value for 'size' [ 252.504623][ T9197] xt_hashlimit: size too large, truncated to 1048576 [ 252.899794][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 253.858648][ T9254] tipc: Enabling of bearer rejected, failed to enable media [ 253.894757][ T9258] device syzkaller0 entered promiscuous mode [ 254.167172][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 254.175544][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.386068][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.527139][ T9277] xt_hashlimit: size too large, truncated to 1048576 [ 254.802046][ T9287] device syzkaller0 entered promiscuous mode [ 255.295551][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1895'. [ 255.297676][ T9309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.403124][ T9309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.358123][ T9336] device syzkaller0 entered promiscuous mode [ 257.063462][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 257.140231][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 257.169959][ T9363] loop5: detected capacity change from 0 to 512 [ 257.208528][ T9363] EXT4-fs (loop5): 1 orphan inode deleted [ 257.209658][ T9363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.221369][ T4430] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 257.223277][ T4430] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 257.227929][ T9363] EXT4-fs (loop5): unmounting filesystem. [ 257.252363][ T9357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.380961][ T27] audit: type=1326 audit(257.355:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.5.1919" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d7792a8 code=0x7ffc0000 [ 257.386024][ T27] audit: type=1326 audit(257.365:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.5.1919" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d7792a8 code=0x7ffc0000 [ 257.412851][ T27] audit: type=1326 audit(257.365:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.5.1919" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d7792a8 code=0x7ffc0000 [ 257.470260][ T27] audit: type=1326 audit(257.365:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.5.1919" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=276 compat=0 ip=0xffff8d7792a8 code=0x7ffc0000 [ 257.470384][ T9381] FAULT_INJECTION: forcing a failure. [ 257.470384][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 257.475101][ T27] audit: type=1326 audit(257.365:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.5.1919" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d7792a8 code=0x7ffc0000 [ 257.484224][ T27] audit: type=1326 audit(257.365:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.5.1919" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8d7792a8 code=0x7ffc0000 [ 257.487456][ T9381] CPU: 1 PID: 9381 Comm: syz.0.1921 Not tainted syzkaller #0 [ 257.488976][ T27] audit: type=1326 audit(257.365:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.5.1919" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8d7792a8 code=0x7ffc0000 [ 257.490297][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 257.496316][ T9381] Call trace: [ 257.496944][ T9381] dump_backtrace+0x1c4/0x1f0 [ 257.497826][ T9381] show_stack+0x2c/0x3c [ 257.498601][ T9381] __dump_stack+0x30/0x40 [ 257.499466][ T9381] dump_stack_lvl+0xf4/0x15c [ 257.500415][ T9381] dump_stack+0x1c/0x5c [ 257.501212][ T9381] should_fail_ex+0x3cc/0x524 [ 257.502109][ T9381] __should_failslab+0xc0/0x11c [ 257.503018][ T9381] should_failslab+0x10/0x28 [ 257.503905][ T9381] __kmem_cache_alloc_node+0x7c/0x318 [ 257.504972][ T9381] __kmalloc_node+0xc8/0x184 [ 257.505826][ T9381] __vmalloc_node_range+0x448/0xe70 [ 257.506932][ T9381] __vmalloc+0xa4/0xe0 [ 257.507761][ T9381] bpf_prog_alloc_no_stats+0x4c/0x3a0 [ 257.508805][ T9381] bpf_prog_alloc+0x38/0x1dc [ 257.509801][ T9381] bpf_prog_load+0x69c/0x12c0 [ 257.510689][ T9381] __sys_bpf+0x494/0x660 [ 257.511552][ T9381] __arm64_sys_bpf+0x80/0x98 [ 257.512463][ T9381] invoke_syscall+0x98/0x290 [ 257.513341][ T9381] el0_svc_common+0x13c/0x258 [ 257.514203][ T9381] do_el0_svc+0x5c/0x134 [ 257.514957][ T9381] el0_svc+0x58/0x128 [ 257.515716][ T9381] el0t_64_sync_handler+0x84/0xf0 [ 257.516628][ T9381] el0t_64_sync+0x18c/0x190 [ 257.598146][ T9391] device bridge_slave_0 left promiscuous mode [ 257.607087][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.643182][ T9391] device bridge_slave_1 left promiscuous mode [ 257.644626][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.692925][ T9391] bond0: (slave bond_slave_0): Releasing backup interface [ 257.742461][ T9391] bond0: (slave bond_slave_1): Releasing backup interface [ 257.765360][ T9391] team0: Port device team_slave_0 removed [ 257.768001][ T9391] team0: Port device team_slave_1 removed [ 257.769519][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1928'. [ 257.772943][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'. [ 257.774638][ T9399] netlink: 'syz.0.1928': attribute type 15 has an invalid length. [ 258.736423][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 258.737773][ T9420] loop5: detected capacity change from 0 to 512 [ 258.747690][ T9420] EXT4-fs: Ignoring removed orlov option [ 258.749158][ T9420] EXT4-fs (loop5): inodes count not valid: 0 vs 32 [ 258.991412][ T5261] ------------[ cut here ]------------ [ 258.992853][ T5261] kernel BUG at fs/buffer.c:2666! [ 258.993874][ T5261] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 258.995278][ T5261] Modules linked in: [ 258.996092][ T5261] CPU: 0 PID: 5261 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 258.997640][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 258.999728][ T5261] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 259.001038][ T5261] pc : submit_bh_wbc+0x3e0/0x44c [ 259.001946][ T5261] lr : submit_bh_wbc+0x3e0/0x44c [ 259.002837][ T5261] sp : ffff800020fc7bb0 [ 259.003591][ T5261] x29: ffff800020fc7bc0 x28: 0000000000000000 x27: 000000000000022b [ 259.005035][ T5261] x26: dfff800000000000 x25: ffff800020fc7c40 x24: dfff800000000000 [ 259.006504][ T5261] x23: 1fffe0001c06ea1d x22: ffff0000de728000 x21: 0000000000003801 [ 259.007986][ T5261] x20: ffff0000e03750e8 x19: 0000000000000005 x18: 1fffe00033e7037e [ 259.009458][ T5261] x17: ffff80001538d000 x16: ffff8000082dbd50 x15: ffff00019f381bfc [ 259.010874][ T5261] x14: 0000000000000001 x13: 1fffe0001c06ea29 x12: 0000000000000000 [ 259.012276][ T5261] x11: ff00800008aa48c4 x10: 0000000000000000 x9 : ffff800008aa48c4 [ 259.013656][ T5261] x8 : ffff0000f68a9c00 x7 : ffff80000825ab48 x6 : 0000000000000000 [ 259.015140][ T5261] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800008de1d84 [ 259.016582][ T5261] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 259.017994][ T5261] Call trace: [ 259.018580][ T5261] submit_bh_wbc+0x3e0/0x44c [ 259.019440][ T5261] submit_bh+0x2c/0x3c [ 259.020266][ T5261] write_mmp_block_thawed+0x324/0x4d8 [ 259.021326][ T5261] write_mmp_block+0x1e4/0x5f0 [ 259.022265][ T5261] kmmpd+0x338/0x978 [ 259.022950][ T5261] kthread+0x254/0x2e0 [ 259.023725][ T5261] ret_from_fork+0x10/0x20 [ 259.024567][ T5261] Code: 17ffffad 97e83922 d4210000 97e83920 (d4210000) [ 259.025890][ T5261] ---[ end trace 0000000000000000 ]--- [ 259.350978][ T5261] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 259.352238][ T5261] SMP: stopping secondary CPUs [ 259.353095][ T5261] Kernel Offset: disabled [ 259.353882][ T5261] CPU features: 0x0a0000,000f0097,a65bfea7 [ 259.354963][ T5261] Memory Limit: none [ 259.648284][ T5261] Rebooting in 86400 seconds..