last executing test programs: 33.121672664s ago: executing program 1 (id=226): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x5000000) 33.011024841s ago: executing program 1 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_THP_DISABLE(0x44, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e657665000050000280050008200000000004000600"], 0x88}}, 0x0) 32.941343165s ago: executing program 1 (id=234): unshare(0x6a040000) r0 = socket$inet6(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="fc0000001c000705ab092509ca9e1b7d0aab080102000000b85b0e932100b8c0f0060848050000010000000000039815fa2c53c28648000100b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f550294328080000001183b102b2b8f5566791cb0a020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3ab3, 0x0) 32.860115353s ago: executing program 1 (id=236): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="12e01b3989dd1341"], 0x1000f) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 31.982784814s ago: executing program 1 (id=245): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/4081, 0xff1}], 0x1, 0x15e, 0xb) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/79, 0x4f}], 0x1, 0x4, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x401, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}]}, 0x34}}, 0x0) 30.858951557s ago: executing program 1 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x500, {0x0, 0x0, 0x0, r1, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 30.721046647s ago: executing program 32 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x500, {0x0, 0x0, 0x0, r1, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 12.065664092s ago: executing program 3 (id=370): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 11.249932004s ago: executing program 3 (id=377): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, 0x0) 11.198010827s ago: executing program 3 (id=378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000300)="df1ee9943c0bf07f028954a3984452d1900ca39b1ccebaf2", 0x18}], 0x2) 10.639798032s ago: executing program 3 (id=389): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x14, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 10.575247382s ago: executing program 3 (id=392): bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x1, 0x419}}}, 0x7) 9.671745128s ago: executing program 3 (id=404): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.775404668s ago: executing program 5 (id=529): syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20b, &(0x7f0000001740)="$eJzsVUtrU0EU/s7N3NxGgwTcuTXYbrTNLYhLcWP3+gMM6bUWEx+diCYUjG66URD/RME/oQtB9y5EBDe6UNBFxVVFImfm3OnkUZtY0tV8cDnfec/MnccNfVcnAP7sbDZQgQGhjI9EUADmydp2i1b+FNkXfFVWr4n9hcgvInWn++6Jpd2b9WYz29Cdf5MEBBwQM0hGTZdePj05ef4Qeft40EKYJIvU//Q6HGkX7MqOup4NWJJxMZKL4cq1KzMefDxd1sWRETpS2tf1qwz4lm/OdeLQs4h5NWOMjSGaaq+PIVzAEMC5fpdHf9Mw+fDcdh4bU5D0EgaX5UDCp/jo9vP+hO8iQ6Kp0jXkf+jLjyL8ICDG+53NBluvyS3G7lX75UfCZLHy2os5pYAeQAX0TVGuoyR2HsBiu3VnUXe6Z9db9bVsLbuVpsvnl94clyPafwisN7MlMsOw6RETBQc+pyXPzzvt056/Bw/kDQ08L7GRVzK/nBdOuxBugMjL9WpI3VeufyK2e7qFqziDOQD3e+xOZYGq4GoK13lqKyAURKkpb5zALiLMGce5xu3m6hYIlKdtQ7katc+InZKKwo2y5Qtu+lsiqyJXRG7v9TPI3678TVKmwnfRFnpAEQ/q7faGebwsY1vRVTC2tOI6R9JVXsNK3qyaYEIcmzQwICAgICAgIGBG+BsAAP//ilI7xA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1348000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) 3.152923917s ago: executing program 5 (id=540): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x20000000) 3.053511765s ago: executing program 5 (id=543): syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x2000001, &(0x7f0000000500)=ANY=[], 0x9, 0x216, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) 3.040100317s ago: executing program 5 (id=545): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 2.957252793s ago: executing program 5 (id=547): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) 2.826074456s ago: executing program 0 (id=553): r0 = socket(0x2, 0xa, 0x300) recvmmsg$unix(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.637866129s ago: executing program 0 (id=555): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8840, &(0x7f0000000140)={0x11, 0x1, r2, 0x1, 0x6, 0x6, @multicast}, 0x14) 2.623791137s ago: executing program 0 (id=556): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.572590122s ago: executing program 0 (id=557): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.55370155s ago: executing program 0 (id=558): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\'\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.22803898s ago: executing program 2 (id=579): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) 1.165807899s ago: executing program 2 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000640)="000a18000000090000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, 0x0, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 1.165494559s ago: executing program 2 (id=581): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x28, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xeffa, 0x5, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x19, 0xff}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc091, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x67, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x8a4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa, 0x9, 0xa9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x73, 0x3, 0x3, 0x40, 0x9}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="c90a2900000029357adcd6291176b167"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.028579223s ago: executing program 0 (id=582): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x20000) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 929.209991ms ago: executing program 5 (id=583): clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000780)={r0, r1+10000000}) io_setup(0x8, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x634, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x48}}, 0x0) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x33) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x141042) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x3, 0x0, 0x6, 0x0}) preadv(r3, &(0x7f0000001880)=[{0x0}], 0x1, 0x179c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_getevents(r2, 0x1, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0) 456.098793ms ago: executing program 2 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) 431.417524ms ago: executing program 2 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000140001000abd7800fedbdf250100000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044048}, 0x20000000) 369.839893ms ago: executing program 2 (id=587): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="000e06000000060a"], 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x6, 0x1, 0x1, 0x6, 0x0, 0x1}, 0x0) 120.783407ms ago: executing program 4 (id=590): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}, 0x12002) 120.573946ms ago: executing program 4 (id=591): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x42000500) chdir(&(0x7f0000000000)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) 69.915498ms ago: executing program 4 (id=592): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000000000)=0x1) 69.685882ms ago: executing program 4 (id=593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) recvfrom$inet(r0, &(0x7f0000000200)=""/150, 0x96, 0x40000043, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) 15.675332ms ago: executing program 4 (id=594): socket(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') socket(0xa, 0x3, 0x3a) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/275, 0x113}], 0x1, 0x1000a3, 0xf9f) 0s ago: executing program 4 (id=595): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x2d, 0x9, 0x0, 0x17, 0xa, 0x1, 0x3, 0x1d, 0x1}) 0s ago: executing program 4 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000640)="000a18000600600000eb5500000b000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) kernel console output (not intermixed with test programs): ][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.788754][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.789013][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.790029][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.790288][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.791313][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.798709][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.800833][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.809577][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.817995][ T1890] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.819871][ T1890] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.824857][ T1890] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.826482][ T1890] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.830145][ T1890] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.831728][ T1890] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.841263][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.844927][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.846718][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.854545][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.854595][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.858995][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.859035][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.860863][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.869155][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.869190][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.869555][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.869574][ T1890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.870143][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.870165][ T1890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.878947][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.878993][ T1890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.894638][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.894671][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.913144][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.919203][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.937313][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.945813][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.947955][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.947990][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.955292][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.955329][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.967462][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.967499][ T1915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.970884][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.970919][ T1915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.979807][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.020898][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.022800][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.099690][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.116582][ T4715] veth0_vlan: entered promiscuous mode [ 32.120469][ T4715] veth1_vlan: entered promiscuous mode [ 32.127300][ T4715] veth0_macvtap: entered promiscuous mode [ 32.129610][ T4715] veth1_macvtap: entered promiscuous mode [ 32.135687][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.138164][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.143157][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.143293][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.143349][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.144215][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.222267][ T1890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.222294][ T1890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.241155][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.255678][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.263086][ T4716] veth0_vlan: entered promiscuous mode [ 32.284377][ T1355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.284407][ T1355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.288035][ T4722] veth0_vlan: entered promiscuous mode [ 32.290770][ T4716] veth1_vlan: entered promiscuous mode [ 32.298890][ T4722] veth1_vlan: entered promiscuous mode [ 32.300736][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.308427][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.325705][ T4716] veth0_macvtap: entered promiscuous mode [ 32.328153][ T4716] veth1_macvtap: entered promiscuous mode [ 32.348679][ T4722] veth0_macvtap: entered promiscuous mode [ 32.352234][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.353328][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.356567][ T4710] veth0_vlan: entered promiscuous mode [ 32.361687][ T4715] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.369746][ T4722] veth1_macvtap: entered promiscuous mode [ 32.370449][ T1355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.370652][ T1355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.370671][ T1355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.370687][ T1355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.378875][ T4710] veth1_vlan: entered promiscuous mode [ 32.392982][ T4710] veth0_macvtap: entered promiscuous mode [ 32.396372][ T4710] veth1_macvtap: entered promiscuous mode [ 32.400196][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.412635][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.416129][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.430396][ T1890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.430445][ T1890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.430478][ T1890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.430499][ T1890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.438367][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.440961][ T4890] netlink: 'syz.2.3': attribute type 46 has an invalid length. [ 32.447512][ T4890] syz_tun: refused to change device tx_queue_len [ 32.448838][ T4890] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 32.452861][ T1939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.453012][ T1939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.453085][ T1939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.453132][ T1939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.463906][ T4890] syz_tun: refused to change device tx_queue_len [ 32.463933][ T4890] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 32.464882][ T4890] Zero length message leads to an empty skb [ 32.502874][ T1355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.505584][ T1355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.521217][ T1355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.522672][ T1355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.527813][ T4711] veth0_vlan: entered promiscuous mode [ 32.530971][ T1890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.531003][ T1890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.541786][ T4711] veth1_vlan: entered promiscuous mode [ 32.541913][ T1355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.541923][ T1355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.568008][ T1355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.568038][ T1355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.588607][ T4711] veth0_macvtap: entered promiscuous mode [ 32.590951][ T4711] veth1_macvtap: entered promiscuous mode [ 32.594245][ T1890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.594272][ T1890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.599322][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.607175][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.611757][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611940][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.612048][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.612134][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.649827][ T4899] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 32.657097][ T4901] FAULT_INJECTION: forcing a failure. [ 32.657097][ T4901] name failslab, interval 1, probability 0, space 0, times 1 [ 32.660012][ T4901] CPU: 1 UID: 0 PID: 4901 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT [ 32.660048][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 32.660054][ T4901] Call trace: [ 32.660058][ T4901] show_stack+0x2c/0x3c (C) [ 32.660080][ T4901] __dump_stack+0x30/0x40 [ 32.660092][ T4901] dump_stack_lvl+0xd8/0x12c [ 32.660102][ T4901] dump_stack+0x1c/0x28 [ 32.660111][ T4901] should_fail_ex+0x414/0x588 [ 32.660121][ T4901] should_failslab+0xc4/0x124 [ 32.660129][ T4901] __kmalloc_noprof+0x100/0x6f0 [ 32.660138][ T4901] tomoyo_realpath_from_path+0xbc/0x4cc [ 32.660150][ T4901] tomoyo_path_number_perm+0x1f4/0x514 [ 32.660159][ T4901] tomoyo_file_ioctl+0x2c/0x3c [ 32.660166][ T4901] security_file_ioctl+0xdc/0x2b0 [ 32.660176][ T4901] __arm64_sys_ioctl+0xa8/0x1c4 [ 32.660186][ T4901] invoke_syscall+0x98/0x244 [ 32.660196][ T4901] el0_svc_common+0xe8/0x23c [ 32.660206][ T4901] do_el0_svc+0x48/0x58 [ 32.660215][ T4901] el0_svc+0x64/0x260 [ 32.660223][ T4901] el0t_64_sync_handler+0x48/0x148 [ 32.660230][ T4901] el0t_64_sync+0x198/0x19c [ 32.677679][ T4901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 32.698614][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.698639][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.709405][ T1355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.709430][ T1355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.793331][ T4908] loop2: detected capacity change from 0 to 8192 [ 32.806243][ T4913] syzkaller0: entered promiscuous mode [ 32.806281][ T4913] syzkaller0: entered allmulticast mode [ 32.812486][ T4913] tipc: Started in network mode [ 32.812522][ T4913] tipc: Node identity ee68b364a236, cluster identity 4711 [ 32.812599][ T4913] tipc: Enabled bearer , priority 0 [ 32.824976][ T4912] tipc: Resetting bearer [ 32.829309][ T4912] tipc: Disabling bearer [ 32.873987][ T4719] Bluetooth: hci2: command tx timeout [ 32.874090][ T4719] Bluetooth: hci3: command tx timeout [ 32.874154][ T4719] Bluetooth: hci4: command tx timeout [ 32.874214][ T4719] Bluetooth: hci0: command tx timeout [ 32.874273][ T4719] Bluetooth: hci1: command tx timeout [ 32.885112][ T4918] FAULT_INJECTION: forcing a failure. [ 32.885112][ T4918] name failslab, interval 1, probability 0, space 0, times 0 [ 32.885165][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT [ 32.885177][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 32.885181][ T4918] Call trace: [ 32.885184][ T4918] show_stack+0x2c/0x3c (C) [ 32.885201][ T4918] __dump_stack+0x30/0x40 [ 32.885211][ T4918] dump_stack_lvl+0xd8/0x12c [ 32.885221][ T4918] dump_stack+0x1c/0x28 [ 32.885230][ T4918] should_fail_ex+0x414/0x588 [ 32.885239][ T4918] should_failslab+0xc4/0x124 [ 32.885247][ T4918] __kvmalloc_node_noprof+0x160/0x880 [ 32.885257][ T4918] bpf_compute_scc+0xb4/0x910 [ 32.885268][ T4918] bpf_check+0x338c/0x3c88 [ 32.885276][ T4918] bpf_prog_load+0xf40/0x1434 [ 32.885286][ T4918] __sys_bpf+0x3f4/0x5f0 [ 32.885295][ T4918] __arm64_sys_bpf+0x80/0x98 [ 32.885304][ T4918] invoke_syscall+0x98/0x244 [ 32.885314][ T4918] el0_svc_common+0xe8/0x23c [ 32.885323][ T4918] do_el0_svc+0x48/0x58 [ 32.885332][ T4918] el0_svc+0x64/0x260 [ 32.885340][ T4918] el0t_64_sync_handler+0x48/0x148 [ 32.885347][ T4918] el0t_64_sync+0x198/0x19c [ 33.057390][ T4908] loop2: p1 p2 p3 p4[EZD] [ 33.057415][ T4908] loop2: partition table partially beyond EOD, truncated [ 33.061199][ T4908] loop2: p1 start 16384 is beyond EOD, truncated [ 33.063149][ T4908] loop2: p2 size 150994944 extends beyond EOD, truncated [ 33.068168][ T4920] binder: 4916:4920 BC_INCREFS_DONE node 1 has no pending increfs request [ 33.072256][ T4908] loop2: p3 start 67108864 is beyond EOD, truncated [ 33.072298][ T4908] loop2: p4 size 33555584 extends beyond EOD, truncated [ 33.140301][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.140338][ T4920] netlink: 'syz.4.5': attribute type 5 has an invalid length. [ 33.140357][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.147801][ T4920] geneve2: entered promiscuous mode [ 33.147815][ T4920] geneve2: entered allmulticast mode [ 33.148451][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 56820 - 0 [ 33.148472][ T12] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 45833 - 0 [ 33.149815][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 56820 - 0 [ 33.149834][ T12] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 45833 - 0 [ 33.149855][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 56820 - 0 [ 33.149866][ T12] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 45833 - 0 [ 33.149879][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 56820 - 0 [ 33.149888][ T12] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 45833 - 0 [ 33.150617][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 33.152379][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 34.170726][ T4932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14'. [ 34.244870][ T4934] 9p: Bad value for 'wfdno' [ 34.249173][ T4934] fuse: Unknown parameter 'grup_id' [ 34.367838][ T4947] loop0: detected capacity change from 0 to 256 [ 34.372199][ T4947] FAT-fs (loop0): bogus sectors per cluster 0 [ 34.372231][ T4947] FAT-fs (loop0): Can't find a valid FAT filesystem [ 34.389294][ T4949] vlan2: entered allmulticast mode [ 34.389393][ T4949] veth0_to_bond: entered allmulticast mode [ 34.598945][ T4956] loop0: detected capacity change from 0 to 256 [ 34.659968][ T4956] FAT-fs (loop0): Directory bread(block 64) failed [ 34.660229][ T4956] FAT-fs (loop0): Directory bread(block 65) failed [ 34.660404][ T4956] FAT-fs (loop0): Directory bread(block 66) failed [ 34.660473][ T4956] FAT-fs (loop0): Directory bread(block 67) failed [ 34.660614][ T4956] FAT-fs (loop0): Directory bread(block 68) failed [ 34.660671][ T4956] FAT-fs (loop0): Directory bread(block 69) failed [ 34.660826][ T4956] FAT-fs (loop0): Directory bread(block 70) failed [ 34.660894][ T4956] FAT-fs (loop0): Directory bread(block 71) failed [ 34.661060][ T4956] FAT-fs (loop0): Directory bread(block 72) failed [ 34.661115][ T4956] FAT-fs (loop0): Directory bread(block 73) failed [ 34.953541][ T4712] Bluetooth: hci1: command tx timeout [ 34.953581][ T4712] Bluetooth: hci0: command tx timeout [ 34.953597][ T4712] Bluetooth: hci4: command tx timeout [ 34.953611][ T4712] Bluetooth: hci3: command tx timeout [ 34.953624][ T4712] Bluetooth: hci2: command tx timeout [ 34.993122][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 35.014707][ T4971] loop2: detected capacity change from 0 to 256 [ 35.018261][ T4971] FAT-fs (loop2): bogus sectors per cluster 0 [ 35.019753][ T4971] FAT-fs (loop2): Can't find a valid FAT filesystem [ 35.135004][ T4974] loop1: detected capacity change from 0 to 256 [ 35.138962][ T4974] FAT-fs (loop1): bogus sectors per cluster 0 [ 35.221786][ T4975] loop2: detected capacity change from 0 to 256 [ 35.324273][ T4975] FAT-fs (loop2): Directory bread(block 64) failed [ 35.324382][ T4975] FAT-fs (loop2): Directory bread(block 65) failed [ 35.324529][ T4975] FAT-fs (loop2): Directory bread(block 66) failed [ 35.324586][ T4975] FAT-fs (loop2): Directory bread(block 67) failed [ 35.324725][ T4975] FAT-fs (loop2): Directory bread(block 68) failed [ 35.324790][ T4975] FAT-fs (loop2): Directory bread(block 69) failed [ 35.324933][ T4975] FAT-fs (loop2): Directory bread(block 70) failed [ 35.325003][ T4975] FAT-fs (loop2): Directory bread(block 71) failed [ 35.325159][ T4975] FAT-fs (loop2): Directory bread(block 72) failed [ 35.325215][ T4975] FAT-fs (loop2): Directory bread(block 73) failed [ 35.353936][ T4974] FAT-fs (loop1): Can't find a valid FAT filesystem [ 35.374140][ T4972] syz.2.27: attempt to access beyond end of device [ 35.374140][ T4972] loop2: rw=2049, sector=1192, nr_sectors = 68 limit=256 [ 35.580837][ T4977] loop1: detected capacity change from 0 to 256 [ 35.682166][ T4977] FAT-fs (loop1): Directory bread(block 64) failed [ 35.682266][ T4977] FAT-fs (loop1): Directory bread(block 65) failed [ 35.682441][ T4977] FAT-fs (loop1): Directory bread(block 66) failed [ 35.682523][ T4977] FAT-fs (loop1): Directory bread(block 67) failed [ 35.682666][ T4977] FAT-fs (loop1): Directory bread(block 68) failed [ 35.682713][ T4977] FAT-fs (loop1): Directory bread(block 69) failed [ 35.682860][ T4977] FAT-fs (loop1): Directory bread(block 70) failed [ 35.682928][ T4977] FAT-fs (loop1): Directory bread(block 71) failed [ 35.683153][ T4977] FAT-fs (loop1): Directory bread(block 72) failed [ 35.683269][ T4977] FAT-fs (loop1): Directory bread(block 73) failed [ 35.760939][ T4976] syz.1.28: attempt to access beyond end of device [ 35.760939][ T4976] loop1: rw=2049, sector=1192, nr_sectors = 68 limit=256 [ 35.806946][ T4981] FAULT_INJECTION: forcing a failure. [ 35.806946][ T4981] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.806979][ T4981] CPU: 0 UID: 0 PID: 4981 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT [ 35.806991][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 35.806997][ T4981] Call trace: [ 35.807001][ T4981] show_stack+0x2c/0x3c (C) [ 35.807023][ T4981] __dump_stack+0x30/0x40 [ 35.807035][ T4981] dump_stack_lvl+0xd8/0x12c [ 35.807045][ T4981] dump_stack+0x1c/0x28 [ 35.807054][ T4981] should_fail_ex+0x414/0x588 [ 35.807064][ T4981] should_fail+0x14/0x24 [ 35.807072][ T4981] should_fail_usercopy+0x20/0x30 [ 35.807081][ T4981] _inline_copy_from_user+0x40/0x180 [ 35.807090][ T4981] move_addr_to_kernel+0x88/0x168 [ 35.807100][ T4981] __copy_msghdr+0x2d4/0x3c8 [ 35.807107][ T4981] copy_msghdr_from_user+0xe8/0x194 [ 35.807115][ T4981] ___sys_sendmsg+0x14c/0x224 [ 35.807121][ T4981] __sys_sendmsg+0x160/0x214 [ 35.807128][ T4981] __arm64_sys_sendmsg+0x80/0x94 [ 35.807135][ T4981] invoke_syscall+0x98/0x244 [ 35.807145][ T4981] el0_svc_common+0xe8/0x23c [ 35.807155][ T4981] do_el0_svc+0x48/0x58 [ 35.807164][ T4981] el0_svc+0x64/0x260 [ 35.807172][ T4981] el0t_64_sync_handler+0x48/0x148 [ 35.807180][ T4981] el0t_64_sync+0x198/0x19c [ 36.369440][ T5007] loop2: detected capacity change from 0 to 512 [ 36.411594][ T5007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.449459][ T5009] futex_wake_op: syz.4.39 tries to shift op by 32; fix this program [ 37.235859][ T5015] loop4: detected capacity change from 0 to 128 [ 37.333466][ T4719] Bluetooth: hci2: command tx timeout [ 37.333497][ T4719] Bluetooth: hci3: command tx timeout [ 37.333522][ T4719] Bluetooth: hci4: command tx timeout [ 37.333540][ T4719] Bluetooth: hci0: command tx timeout [ 37.333557][ T4719] Bluetooth: hci1: command tx timeout [ 37.550211][ T5024] netlink: 72 bytes leftover after parsing attributes in process `syz.0.43'. [ 38.205544][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.205741][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.205828][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.205880][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.205952][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.206024][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.206096][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.206294][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.206361][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.206433][ T5015] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 38.295428][ T1282] wlan1: Trigger new scan to find an IBSS to join [ 38.498222][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.660451][ T5036] fuse: Unknown parameter 'group_id00000000000000000000' [ 38.662411][ T5035] netlink: 332 bytes leftover after parsing attributes in process `syz.0.47'. [ 38.664532][ T5035] netlink: 108 bytes leftover after parsing attributes in process `syz.0.47'. [ 38.667682][ T5035] netlink: 32 bytes leftover after parsing attributes in process `syz.0.47'. [ 38.839410][ T5049] loop1: detected capacity change from 0 to 512 [ 38.842639][ T5049] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.847934][ T5049] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 38.848070][ T5049] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.848078][ T5049] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.52: Bad quota inum: 2, type: 0 [ 38.848116][ T5049] loop1: lost filesystem error report for type 5 error -117 [ 38.848420][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 38.848429][ T5049] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 38.848439][ T5049] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 38.850992][ T5049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.935990][ T5055] overlay: ./file0 is not a directory [ 39.563489][ T4712] Bluetooth: hci1: command tx timeout [ 39.563769][ T4712] Bluetooth: hci0: command tx timeout [ 39.563955][ T4712] Bluetooth: hci4: command tx timeout [ 39.564307][ T4712] Bluetooth: hci3: command tx timeout [ 39.564480][ T4712] Bluetooth: hci2: command tx timeout [ 39.835946][ T5070] netlink: 36 bytes leftover after parsing attributes in process `syz.4.58'. [ 39.908457][ T5072] FAULT_INJECTION: forcing a failure. [ 39.908457][ T5072] name failslab, interval 1, probability 0, space 0, times 0 [ 39.910881][ T5072] CPU: 1 UID: 0 PID: 5072 Comm: syz.4.60 Not tainted syzkaller #0 PREEMPT [ 39.910905][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.910911][ T5072] Call trace: [ 39.910914][ T5072] show_stack+0x2c/0x3c (C) [ 39.910939][ T5072] __dump_stack+0x30/0x40 [ 39.910950][ T5072] dump_stack_lvl+0xd8/0x12c [ 39.910960][ T5072] dump_stack+0x1c/0x28 [ 39.910970][ T5072] should_fail_ex+0x414/0x588 [ 39.910979][ T5072] should_failslab+0xc4/0x124 [ 39.910988][ T5072] __kmalloc_noprof+0x100/0x6f0 [ 39.910997][ T5072] tomoyo_realpath_from_path+0xbc/0x4cc [ 39.911008][ T5072] tomoyo_path_number_perm+0x1f4/0x514 [ 39.911018][ T5072] tomoyo_file_ioctl+0x2c/0x3c [ 39.911025][ T5072] security_file_ioctl+0xdc/0x2b0 [ 39.911035][ T5072] __arm64_sys_ioctl+0xa8/0x1c4 [ 39.911045][ T5072] invoke_syscall+0x98/0x244 [ 39.911055][ T5072] el0_svc_common+0xe8/0x23c [ 39.911065][ T5072] do_el0_svc+0x48/0x58 [ 39.911074][ T5072] el0_svc+0x64/0x260 [ 39.911082][ T5072] el0t_64_sync_handler+0x48/0x148 [ 39.911090][ T5072] el0t_64_sync+0x198/0x19c [ 39.934108][ T5072] ERROR: Out of memory at tomoyo_realpath_from_path. [ 39.992161][ T30] audit: type=1326 audit(39.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177aa8 code=0x7ffc0000 [ 40.007569][ T5082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.63'. [ 40.009134][ T5082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.63'. [ 40.086813][ T30] audit: type=1326 audit(40.080:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177aa8 code=0x7ffc0000 [ 40.091740][ T30] audit: type=1326 audit(40.080:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffff7f177aa8 code=0x7ffc0000 [ 40.096482][ T30] audit: type=1326 audit(40.080:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177aa8 code=0x7ffc0000 [ 40.100907][ T30] audit: type=1326 audit(40.090:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7f15a96c code=0x7ffc0000 [ 40.107795][ T30] audit: type=1326 audit(40.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177aa8 code=0x7ffc0000 [ 40.112326][ T30] audit: type=1326 audit(40.100:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=184 compat=0 ip=0xffff7f177aa8 code=0x7ffc0000 [ 40.116865][ T30] audit: type=1326 audit(40.100:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177aa8 code=0x7ffc0000 [ 40.116899][ T30] audit: type=1326 audit(40.100:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177aa8 code=0x7ffc0000 [ 40.126576][ T30] audit: type=1326 audit(40.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5084 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff7f177aa8 code=0x7ffc0000 [ 40.387772][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.395527][ T5085] loop3: detected capacity change from 0 to 1024 [ 40.406324][ T5092] fuse: Unknown parameter 'group_id00000000000000000000' [ 40.502108][ T5100] netlink: 64 bytes leftover after parsing attributes in process `syz.3.71'. [ 41.035251][ T1355] wlan1: Trigger new scan to find an IBSS to join [ 41.262393][ T5103] overlay: ./file0 is not a directory [ 41.390550][ T5111] FAULT_INJECTION: forcing a failure. [ 41.390550][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 41.390582][ T5111] CPU: 1 UID: 0 PID: 5111 Comm: syz.2.74 Not tainted syzkaller #0 PREEMPT [ 41.390595][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.390600][ T5111] Call trace: [ 41.390603][ T5111] show_stack+0x2c/0x3c (C) [ 41.390623][ T5111] __dump_stack+0x30/0x40 [ 41.390636][ T5111] dump_stack_lvl+0xd8/0x12c [ 41.390646][ T5111] dump_stack+0x1c/0x28 [ 41.390655][ T5111] should_fail_ex+0x414/0x588 [ 41.390666][ T5111] should_failslab+0xc4/0x124 [ 41.390675][ T5111] __kmalloc_noprof+0x100/0x6f0 [ 41.390684][ T5111] tomoyo_encode2+0x10c/0x33c [ 41.390695][ T5111] tomoyo_encode+0x34/0x50 [ 41.390705][ T5111] tomoyo_realpath_from_path+0x478/0x4cc [ 41.390715][ T5111] tomoyo_path_number_perm+0x1f4/0x514 [ 41.390731][ T5111] tomoyo_file_ioctl+0x2c/0x3c [ 41.390738][ T5111] security_file_ioctl+0xdc/0x2b0 [ 41.390749][ T5111] __arm64_sys_ioctl+0xa8/0x1c4 [ 41.390760][ T5111] invoke_syscall+0x98/0x244 [ 41.390770][ T5111] el0_svc_common+0xe8/0x23c [ 41.390780][ T5111] do_el0_svc+0x48/0x58 [ 41.390789][ T5111] el0_svc+0x64/0x260 [ 41.390797][ T5111] el0t_64_sync_handler+0x48/0x148 [ 41.390804][ T5111] el0t_64_sync+0x198/0x19c [ 41.422734][ T5111] ERROR: Out of memory at tomoyo_realpath_from_path. [ 41.519458][ T5115] batadv_slave_1: entered promiscuous mode [ 41.537951][ T5115] loop3: detected capacity change from 0 to 512 [ 41.546155][ T5115] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 41.558760][ T5115] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.75: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 41.558822][ T5115] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.559433][ T5115] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.75: couldn't read orphan inode 15 (err -117) [ 41.559487][ T5115] loop3: lost filesystem error report for type 5 error -117 [ 41.564076][ T5115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.571016][ T5115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.623793][ T5115] batadv_slave_1: left promiscuous mode [ 41.827531][ T5143] fuse: Bad value for 'user_id' [ 41.828567][ T5143] fuse: Bad value for 'user_id' [ 41.842980][ T5146] loop0: detected capacity change from 0 to 1024 [ 41.845661][ T5146] ======================================================= [ 41.845661][ T5146] WARNING: The mand mount option has been deprecated and [ 41.845661][ T5146] and is ignored by this kernel. Remove the mand [ 41.845661][ T5146] option from the mount to silence this warning. [ 41.845661][ T5146] ======================================================= [ 41.845748][ T5146] EXT4-fs: Ignoring removed bh option [ 41.847638][ T5146] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.855126][ T5146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.872475][ T5150] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 42.117837][ T5146] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.181813][ T5156] overlay: ./file0 is not a directory [ 42.192645][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.036440][ T40] wlan1: Trigger new scan to find an IBSS to join [ 43.127156][ T5164] netlink: 148 bytes leftover after parsing attributes in process `syz.2.88'. [ 43.127189][ T5164] netlink: 35 bytes leftover after parsing attributes in process `syz.2.88'. [ 43.127511][ T5164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.88'. [ 43.202186][ T5168] loop2: detected capacity change from 0 to 256 [ 43.214765][ T5168] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.230877][ T5170] syz.3.89 uses obsolete (PF_INET,SOCK_PACKET) [ 43.318959][ T5175] loop1: detected capacity change from 0 to 256 [ 43.328961][ T5175] FAT-fs (loop1): bogus sectors per cluster 0 [ 43.329012][ T5175] FAT-fs (loop1): Can't find a valid FAT filesystem [ 43.422401][ T5183] loop0: detected capacity change from 0 to 256 [ 43.437692][ T5183] FAT-fs (loop0): bogus sectors per cluster 0 [ 43.437728][ T5183] FAT-fs (loop0): Can't find a valid FAT filesystem [ 43.531842][ T5186] loop1: detected capacity change from 0 to 256 [ 43.561351][ T5186] FAT-fs (loop1): Directory bread(block 64) failed [ 43.561440][ T5186] FAT-fs (loop1): Directory bread(block 65) failed [ 43.561588][ T5186] FAT-fs (loop1): Directory bread(block 66) failed [ 43.561645][ T5186] FAT-fs (loop1): Directory bread(block 67) failed [ 43.561812][ T5186] FAT-fs (loop1): Directory bread(block 68) failed [ 43.561880][ T5186] FAT-fs (loop1): Directory bread(block 69) failed [ 43.562012][ T5186] FAT-fs (loop1): Directory bread(block 70) failed [ 43.562091][ T5186] FAT-fs (loop1): Directory bread(block 71) failed [ 43.562310][ T5186] FAT-fs (loop1): Directory bread(block 72) failed [ 43.562379][ T5186] FAT-fs (loop1): Directory bread(block 73) failed [ 43.786329][ T5193] syz_tun: entered allmulticast mode [ 43.791262][ T5193] dvmrp8: entered allmulticast mode [ 43.900216][ T5197] loop0: detected capacity change from 0 to 256 [ 43.927245][ T5197] FAT-fs (loop0): Directory bread(block 64) failed [ 43.927359][ T5197] FAT-fs (loop0): Directory bread(block 65) failed [ 43.927510][ T5197] FAT-fs (loop0): Directory bread(block 66) failed [ 43.927568][ T5197] FAT-fs (loop0): Directory bread(block 67) failed [ 43.927718][ T5197] FAT-fs (loop0): Directory bread(block 68) failed [ 43.927813][ T5197] FAT-fs (loop0): Directory bread(block 69) failed [ 43.927952][ T5197] FAT-fs (loop0): Directory bread(block 70) failed [ 43.928010][ T5197] FAT-fs (loop0): Directory bread(block 71) failed [ 43.928224][ T5197] FAT-fs (loop0): Directory bread(block 72) failed [ 43.928305][ T5197] FAT-fs (loop0): Directory bread(block 73) failed [ 44.012884][ T5197] syz.0.95: attempt to access beyond end of device [ 44.012884][ T5197] loop0: rw=2049, sector=1192, nr_sectors = 68 limit=256 [ 44.083164][ T5198] vlan2: entered allmulticast mode [ 44.084287][ T5198] veth0_to_bond: entered allmulticast mode [ 44.084463][ T40] wlan1: Creating new IBSS network, BSSID ca:59:26:86:3c:0d [ 44.206225][ T5176] syz_tun: left allmulticast mode [ 44.275538][ T5207] loop2: detected capacity change from 0 to 4096 [ 44.284865][ T5207] ext2: block size(16384) > page size(4096) not supported by filesystem [ 44.284897][ T5207] EXT4-fs (loop2): bad block size 16384 [ 44.297353][ T5207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 44.409930][ T5214] loop2: detected capacity change from 0 to 1024 [ 44.424177][ T5214] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 45.049478][ T5239] loop4: detected capacity change from 0 to 256 [ 45.056145][ T5239] FAT-fs (loop4): bogus sectors per cluster 0 [ 45.056182][ T5239] FAT-fs (loop4): Can't find a valid FAT filesystem [ 45.140316][ T5242] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 45.152388][ T5242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.114'. [ 45.191180][ T5242] netlink: 756 bytes leftover after parsing attributes in process `syz.3.114'. [ 45.262522][ T5260] loop4: detected capacity change from 0 to 256 [ 45.586561][ T5260] FAT-fs (loop4): Directory bread(block 64) failed [ 45.586594][ T5260] FAT-fs (loop4): Directory bread(block 65) failed [ 45.586625][ T5260] FAT-fs (loop4): Directory bread(block 66) failed [ 45.586640][ T5260] FAT-fs (loop4): Directory bread(block 67) failed [ 45.586664][ T5260] FAT-fs (loop4): Directory bread(block 68) failed [ 45.586678][ T5260] FAT-fs (loop4): Directory bread(block 69) failed [ 45.586701][ T5260] FAT-fs (loop4): Directory bread(block 70) failed [ 45.586715][ T5260] FAT-fs (loop4): Directory bread(block 71) failed [ 45.586744][ T5260] FAT-fs (loop4): Directory bread(block 72) failed [ 45.586757][ T5260] FAT-fs (loop4): Directory bread(block 73) failed [ 46.208222][ T1282] wlan1: Trigger new scan to find an IBSS to join [ 46.341764][ T5281] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 46.344371][ T5281] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 46.750591][ T5281] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 46.750634][ T5281] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 46.786186][ T5308] loop0: detected capacity change from 0 to 128 [ 46.791323][ T5308] EXT4-fs (loop0): Test dummy encryption mode enabled [ 46.801801][ T5308] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.809830][ T5308] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 46.819745][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 46.835303][ T5312] capability: warning: `syz.2.124' uses deprecated v2 capabilities in a way that may be insecure [ 46.835643][ T5281] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 46.835654][ T5281] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 46.873300][ T5317] macsec1: entered allmulticast mode [ 46.873334][ T5317] bond0: entered allmulticast mode [ 46.873357][ T5317] bond_slave_0: entered allmulticast mode [ 46.873538][ T5317] bond_slave_1: entered allmulticast mode [ 46.873590][ T5317] bond_slave_0: entered promiscuous mode [ 46.873608][ T5317] bond_slave_1: entered promiscuous mode [ 46.874799][ T5317] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 46.887343][ T5317] bond0: left allmulticast mode [ 46.887373][ T5317] bond_slave_0: left allmulticast mode [ 46.887395][ T5317] bond_slave_1: left allmulticast mode [ 46.905473][ T4837] bond_slave_0: left promiscuous mode [ 46.905506][ T4837] bond_slave_1: left promiscuous mode [ 46.911856][ T5322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.125'. [ 46.974893][ T5281] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 46.974922][ T5281] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 47.036350][ T5281] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 47.036374][ T5281] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 47.170863][ T5356] loop2: detected capacity change from 0 to 128 [ 47.813663][ T40] wlan1: Creating new IBSS network, BSSID a2:b1:68:2f:16:d0 [ 47.832091][ T5369] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.833077][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.978636][ T4716] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.097457][ T5265] wlan1: Trigger new scan to find an IBSS to join [ 48.472925][ T5411] loop2: detected capacity change from 0 to 256 [ 48.509180][ T5411] FAT-fs (loop2): Directory bread(block 64) failed [ 48.510633][ T5411] FAT-fs (loop2): Directory bread(block 65) failed [ 48.512222][ T5411] FAT-fs (loop2): Directory bread(block 66) failed [ 48.512239][ T5411] FAT-fs (loop2): Directory bread(block 67) failed [ 48.512267][ T5411] FAT-fs (loop2): Directory bread(block 68) failed [ 48.512280][ T5411] FAT-fs (loop2): Directory bread(block 69) failed [ 48.512306][ T5411] FAT-fs (loop2): Directory bread(block 70) failed [ 48.512317][ T5411] FAT-fs (loop2): Directory bread(block 71) failed [ 48.512340][ T5411] FAT-fs (loop2): Directory bread(block 72) failed [ 48.512351][ T5411] FAT-fs (loop2): Directory bread(block 73) failed [ 48.730072][ T5422] loop1: detected capacity change from 0 to 512 [ 48.876375][ T5422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.891854][ T5415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 48.892252][ T5415] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28 [ 48.892276][ T5415] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.892276][ T5415] [ 48.892288][ T5415] EXT4-fs (loop1): Total free blocks count 0 [ 48.892300][ T5415] EXT4-fs (loop1): Free/Dirty block details [ 48.892314][ T5415] EXT4-fs (loop1): free_blocks=65280 [ 48.892328][ T5415] EXT4-fs (loop1): dirty_blocks=4 [ 48.892339][ T5415] EXT4-fs (loop1): Block reservation details [ 48.892348][ T5415] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 48.892840][ T5415] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28 [ 49.137609][ T5439] syzkaller0: entered promiscuous mode [ 49.139243][ T5439] syzkaller0: entered allmulticast mode [ 49.290581][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 49.290607][ T30] audit: type=1326 audit(50.275:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96177aa8 code=0x7ffc0000 [ 49.291104][ T30] audit: type=1326 audit(50.275:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff96156810 code=0x7ffc0000 [ 49.291183][ T30] audit: type=1326 audit(50.275:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96177aa8 code=0x7ffc0000 [ 49.291264][ T30] audit: type=1326 audit(50.275:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96177aa8 code=0x7ffc0000 [ 49.291397][ T30] audit: type=1326 audit(50.275:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96177aa8 code=0x7ffc0000 [ 49.303921][ T30] audit: type=1326 audit(50.295:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffff96155f10 code=0x7ffc0000 [ 49.304067][ T30] audit: type=1326 audit(50.295:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff96155f70 code=0x7ffc0000 [ 49.304260][ T30] audit: type=1326 audit(50.295:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff96177aa8 code=0x7ffc0000 [ 49.304517][ T30] audit: type=1326 audit(50.295:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96177aa8 code=0x7ffc0000 [ 49.304897][ T30] audit: type=1326 audit(50.295:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5446 comm="syz.0.148" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96177aa8 code=0x7ffc0000 [ 49.350661][ T4710] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 49.497314][ T5455] loop1: detected capacity change from 0 to 2048 [ 49.499506][ T5455] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 49.558344][ T5461] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 49.558381][ T5461] overlayfs: failed to set xattr on upper [ 49.558810][ T5461] overlayfs: ...falling back to redirect_dir=nofollow. [ 49.558827][ T5461] overlayfs: ...falling back to uuid=null. [ 49.692178][ T5464] netlink: 60 bytes leftover after parsing attributes in process `syz.2.154'. [ 49.692483][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 49.926943][ T5470] loop2: detected capacity change from 0 to 512 [ 49.936367][ T5470] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 49.938394][ T5470] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.938995][ T5470] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.156: Bad quota inum: 2, type: 0 [ 49.939022][ T5470] loop2: lost filesystem error report for type 5 error -117 [ 49.939216][ T5470] EXT4-fs (loop2): Remounting filesystem read-only [ 49.939224][ T5470] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 49.939235][ T5470] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 49.939674][ T5470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.882607][ T5482] xt_l2tp: invalid flags combination: 8 [ 50.890859][ T5482] validate_nla: 49 callbacks suppressed [ 50.890881][ T5482] netlink: 'syz.1.159': attribute type 12 has an invalid length. [ 50.929250][ T5483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.160'. [ 51.012976][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.061676][ T5495] x_tables: duplicate underflow at hook 1 [ 64.058112][ T5513] loop3: detected capacity change from 0 to 256 [ 64.071755][ T5513] FAT-fs (loop3): Directory bread(block 64) failed [ 64.071787][ T5513] FAT-fs (loop3): Directory bread(block 65) failed [ 64.071824][ T5513] FAT-fs (loop3): Directory bread(block 66) failed [ 64.071841][ T5513] FAT-fs (loop3): Directory bread(block 67) failed [ 64.071867][ T5513] FAT-fs (loop3): Directory bread(block 68) failed [ 64.071882][ T5513] FAT-fs (loop3): Directory bread(block 69) failed [ 64.071919][ T5513] FAT-fs (loop3): Directory bread(block 70) failed [ 64.071933][ T5513] FAT-fs (loop3): Directory bread(block 71) failed [ 64.071958][ T5513] FAT-fs (loop3): Directory bread(block 72) failed [ 64.071972][ T5513] FAT-fs (loop3): Directory bread(block 73) failed [ 64.146000][ T5517] 9p: Bad value for 'wfdno' [ 64.474863][ T1591] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.477616][ T1004] cfg80211: failed to load regulatory.db [ 73.653726][ T5530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.174'. [ 73.695287][ T5536] loop1: detected capacity change from 0 to 512 [ 73.717142][ T5536] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 73.717268][ T5536] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.717290][ T5536] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.176: Bad quota inum: 2, type: 0 [ 73.717312][ T5536] loop1: lost filesystem error report for type 5 error -117 [ 73.722310][ T5536] EXT4-fs (loop1): Remounting filesystem read-only [ 73.723809][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 73.723822][ C1] EXT4-fs (loop1): initial error at time 74: ext4_quota_enable:7221 [ 73.723840][ C1] EXT4-fs (loop1): last error at time 74: ext4_quota_enable:7221 [ 73.729904][ T5536] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 73.729932][ T5536] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 73.730389][ T5536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.662696][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.691144][ T5558] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.183'. [ 75.692980][ T5558] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 75.705575][ T5558] 0ªX¹¦Dö»: entered allmulticast mode [ 75.852416][ T5577] loop1: detected capacity change from 0 to 256 [ 75.875094][ T5580] netlink: 48 bytes leftover after parsing attributes in process `syz.3.190'. [ 75.913650][ T5577] FAT-fs (loop1): Directory bread(block 64) failed [ 75.913680][ T5577] FAT-fs (loop1): Directory bread(block 65) failed [ 75.913718][ T5577] FAT-fs (loop1): Directory bread(block 66) failed [ 75.913740][ T5577] FAT-fs (loop1): Directory bread(block 67) failed [ 75.913831][ T5577] FAT-fs (loop1): Directory bread(block 68) failed [ 75.913849][ T5577] FAT-fs (loop1): Directory bread(block 69) failed [ 75.913881][ T5577] FAT-fs (loop1): Directory bread(block 70) failed [ 75.913897][ T5577] FAT-fs (loop1): Directory bread(block 71) failed [ 75.913923][ T5577] FAT-fs (loop1): Directory bread(block 72) failed [ 75.913938][ T5577] FAT-fs (loop1): Directory bread(block 73) failed [ 76.872688][ T5611] loop1: detected capacity change from 0 to 1024 [ 76.875706][ T5611] EXT4-fs: Ignoring removed i_version option [ 76.878228][ T5611] EXT4-fs: Ignoring removed oldalloc option [ 76.879846][ T5611] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.888593][ T5611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.968079][ T5615] loop4: detected capacity change from 0 to 8 [ 76.972117][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.005104][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006642][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006691][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006734][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006762][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006797][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006823][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006856][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006880][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006913][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006937][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.006969][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007452][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007480][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007505][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007532][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007556][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007583][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007607][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007633][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007658][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007686][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007710][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007741][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007766][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007794][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007818][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007844][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007868][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007894][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007918][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007945][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.007969][ T5615] SQUASHFS error: Failed to read block 0x4de: -5 [ 77.200976][ T5626] fuse: Bad value for 'fd' [ 77.264623][ T5625] fuse: Unknown parameter '000000000000000000000060x00000000000000096' [ 77.375144][ T5639] overlay: ./file0 is not a directory [ 77.831780][ T5670] futex_wake_op: syz.2.221 tries to shift op by 32; fix this program [ 78.048435][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.048671][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.048753][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.048824][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.048893][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.048963][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.049033][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.049050][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.049067][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.049127][ T5672] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 78.893200][ T5682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 78.893233][ T5682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'. [ 78.899869][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 78.899901][ T5683] netlink: 64 bytes leftover after parsing attributes in process `syz.4.225'. [ 78.899975][ T5683] FAULT_INJECTION: forcing a failure. [ 78.899975][ T5683] name failslab, interval 1, probability 0, space 0, times 0 [ 78.899993][ T5683] CPU: 0 UID: 0 PID: 5683 Comm: syz.4.225 Not tainted syzkaller #0 PREEMPT [ 78.900004][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.900008][ T5683] Call trace: [ 78.900011][ T5683] show_stack+0x2c/0x3c (C) [ 78.900028][ T5683] __dump_stack+0x30/0x40 [ 78.900038][ T5683] dump_stack_lvl+0xd8/0x12c [ 78.900047][ T5683] dump_stack+0x1c/0x28 [ 78.900057][ T5683] should_fail_ex+0x414/0x588 [ 78.900066][ T5683] should_failslab+0xc4/0x124 [ 78.900074][ T5683] __kvmalloc_node_noprof+0x160/0x880 [ 78.900084][ T5683] alloc_netdev_mqs+0x9e4/0xe60 [ 78.900093][ T5683] rtnl_create_link+0x2c8/0xb94 [ 78.900101][ T5683] rtnl_newlink_create+0x210/0x768 [ 78.900110][ T5683] rtnl_newlink+0xdc4/0x113c [ 78.900119][ T5683] rtnetlink_rcv_msg+0x66c/0x9c8 [ 78.900128][ T5683] netlink_rcv_skb+0x22c/0x410 [ 78.900138][ T5683] rtnetlink_rcv+0x28/0x38 [ 78.900147][ T5683] netlink_unicast+0x610/0x800 [ 78.900156][ T5683] netlink_sendmsg+0x63c/0x920 [ 78.900166][ T5683] __sock_sendmsg+0xc8/0x138 [ 78.900175][ T5683] ____sys_sendmsg+0x418/0x70c [ 78.900182][ T5683] ___sys_sendmsg+0x198/0x224 [ 78.900188][ T5683] __sys_sendmsg+0x160/0x214 [ 78.900195][ T5683] __arm64_sys_sendmsg+0x80/0x94 [ 78.900202][ T5683] invoke_syscall+0x98/0x244 [ 78.900211][ T5683] el0_svc_common+0xe8/0x23c [ 78.900221][ T5683] do_el0_svc+0x48/0x58 [ 78.900230][ T5683] el0_svc+0x64/0x260 [ 78.900239][ T5683] el0t_64_sync_handler+0x48/0x148 [ 78.900246][ T5683] el0t_64_sync+0x198/0x19c [ 78.995537][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 78.995571][ T5694] netlink: 64 bytes leftover after parsing attributes in process `syz.1.230'. [ 79.063359][ T5707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.233'. [ 79.129756][ T5711] netlink: 148 bytes leftover after parsing attributes in process `syz.0.235'. [ 79.190636][ T5711] loop0: detected capacity change from 0 to 2048 [ 79.219988][ T5717] loop1: detected capacity change from 0 to 512 [ 79.220328][ T5717] EXT4-fs: Ignoring removed bh option [ 79.223170][ T5717] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 79.227494][ T5711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.230621][ T5723] loop3: detected capacity change from 0 to 256 [ 79.237347][ T5717] EXT4-fs (loop1): 1 truncate cleaned up [ 79.244393][ T5717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.255880][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.524312][ T5723] FAT-fs (loop3): Directory bread(block 64) failed [ 79.524343][ T5723] FAT-fs (loop3): Directory bread(block 65) failed [ 79.524382][ T5723] FAT-fs (loop3): Directory bread(block 66) failed [ 79.524400][ T5723] FAT-fs (loop3): Directory bread(block 67) failed [ 79.524428][ T5723] FAT-fs (loop3): Directory bread(block 68) failed [ 79.524443][ T5723] FAT-fs (loop3): Directory bread(block 69) failed [ 79.524470][ T5723] FAT-fs (loop3): Directory bread(block 70) failed [ 79.524484][ T5723] FAT-fs (loop3): Directory bread(block 71) failed [ 79.524511][ T5723] FAT-fs (loop3): Directory bread(block 72) failed [ 79.524525][ T5723] FAT-fs (loop3): Directory bread(block 73) failed [ 79.539080][ T5730] overlayfs: upper fs needs to support d_type. [ 79.648895][ T5741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.243'. [ 79.998341][ T4710] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 79.999650][ T4710] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 80.116138][ T5759] loop3: detected capacity change from 0 to 512 [ 80.162701][ T5759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.172761][ T5759] overlayfs: failed to resolve './bus': -2 [ 80.185291][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.331116][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.402904][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.117959][ T5764] Injecting memory failure for pfn 0x13485c at process virtual address 0x20000000 [ 81.248406][ T5764] Memory failure: 0x13485c: Sending SIGBUS to syz.3.250:5764 due to hardware memory corruption [ 81.248489][ T5764] Memory failure: 0x13485c: recovery action for dirty LRU page: Recovered [ 81.248515][ T5764] Injecting memory failure for pfn 0x122c05 at process virtual address 0x20001000 [ 81.274441][ T5764] Memory failure: 0x122c05: Sending SIGBUS to syz.3.250:5764 due to hardware memory corruption [ 81.274487][ T5764] Memory failure: 0x122c05: recovery action for dirty LRU page: Recovered [ 81.274521][ T5764] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20002000 [ 81.281657][ T5764] Memory failure: 0x21cf58: unhandlable page. [ 81.281686][ T5764] Memory failure: 0x21cf58: recovery action for get hwpoison page: Ignored [ 81.282300][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.296797][ T5773] futex_wake_op: syz.0.252 tries to shift op by 32; fix this program [ 82.122020][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.183091][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.263619][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.602523][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.609952][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.614978][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.622984][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.624188][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.627886][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.630873][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.631285][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.631536][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.944349][ T5795] Soft offlining pfn 0x11c6f3 at process virtual address 0x20ffb000 [ 83.087605][ T5795] Soft offlining pfn 0x12286c at process virtual address 0x20ffc000 [ 83.492392][ T5796] syz.4.260 (5796): drop_caches: 2 [ 83.525180][ T5795] Soft offlining pfn 0x121ee8 at process virtual address 0x20ffd000 [ 83.531634][ T5804] tipc: Started in network mode [ 83.531663][ T5804] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.532297][ T5804] tipc: Enabled bearer , priority 10 [ 83.534548][ T5804] tipc: Enabled bearer , priority 0 [ 83.698481][ T5818] vlan2: entered allmulticast mode [ 83.699502][ T5818] veth0_to_bond: entered allmulticast mode [ 83.766701][ T5825] loop4: detected capacity change from 0 to 256 [ 83.770659][ T5825] FAT-fs (loop4): bogus sectors per cluster 0 [ 83.772140][ T5825] FAT-fs (loop4): Can't find a valid FAT filesystem [ 83.781765][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 84.213922][ T5832] loop4: detected capacity change from 0 to 256 [ 84.223139][ T5832] FAT-fs (loop4): Directory bread(block 64) failed [ 84.223177][ T5832] FAT-fs (loop4): Directory bread(block 65) failed [ 84.223205][ T5832] FAT-fs (loop4): Directory bread(block 66) failed [ 84.223216][ T5832] FAT-fs (loop4): Directory bread(block 67) failed [ 84.223237][ T5832] FAT-fs (loop4): Directory bread(block 68) failed [ 84.223248][ T5832] FAT-fs (loop4): Directory bread(block 69) failed [ 84.223268][ T5832] FAT-fs (loop4): Directory bread(block 70) failed [ 84.223278][ T5832] FAT-fs (loop4): Directory bread(block 71) failed [ 84.223299][ T5832] FAT-fs (loop4): Directory bread(block 72) failed [ 84.223309][ T5832] FAT-fs (loop4): Directory bread(block 73) failed [ 84.228362][ T40] bridge_slave_1: left allmulticast mode [ 84.228395][ T40] bridge_slave_1: left promiscuous mode [ 84.229285][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.232534][ T40] bridge_slave_0: left allmulticast mode [ 84.232547][ T40] bridge_slave_0: left promiscuous mode [ 84.232613][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.477254][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.496356][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.545896][ T40] bond0 (unregistering): Released all slaves [ 84.764545][ T4719] Bluetooth: hci1: command tx timeout [ 84.798785][ T4798] tipc: Node number set to 2886997162 [ 85.090238][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.092046][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.094027][ T5781] bridge_slave_0: entered allmulticast mode [ 85.096029][ T5781] bridge_slave_0: entered promiscuous mode [ 85.098533][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.100220][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.101790][ T5781] bridge_slave_1: entered allmulticast mode [ 85.107275][ T5781] bridge_slave_1: entered promiscuous mode [ 85.159586][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.171041][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.192481][ T5781] team0: Port device team_slave_0 added [ 85.194643][ T5781] team0: Port device team_slave_1 added [ 85.227185][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.228680][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.237301][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.254775][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.254798][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.254824][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.287441][ T40] hsr_slave_0: left promiscuous mode [ 85.289014][ T40] hsr_slave_1: left promiscuous mode [ 85.290658][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.292412][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.294702][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.296233][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.302622][ T40] veth1_macvtap: left promiscuous mode [ 85.304500][ T40] veth0_macvtap: left promiscuous mode [ 85.304537][ T40] veth1_vlan: left promiscuous mode [ 85.304570][ T40] veth0_vlan: left promiscuous mode [ 85.362129][ T5894] mmap: syz.4.276 (5894) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.428599][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 85.428630][ T5896] netlink: 56 bytes leftover after parsing attributes in process `syz.3.277'. [ 85.500676][ T40] team0 (unregistering): Port device team_slave_1 removed [ 85.508634][ T40] team0 (unregistering): Port device team_slave_0 removed [ 85.641570][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 85.661029][ T5781] hsr_slave_0: entered promiscuous mode [ 85.667236][ T5781] hsr_slave_1: entered promiscuous mode [ 85.668834][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 85.669940][ T5781] Cannot create hsr debugfs directory [ 85.862961][ T5781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.868755][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.869238][ T5781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.872305][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.872807][ T5781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.881885][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.882194][ T5781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.886684][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.949940][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.962124][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.970153][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.970207][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.979129][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.979173][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.015284][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 86.257727][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 86.263113][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.379540][ T5781] veth0_vlan: entered promiscuous mode [ 86.382116][ T5781] veth1_vlan: entered promiscuous mode [ 86.401364][ T5781] veth0_macvtap: entered promiscuous mode [ 86.410701][ T5781] veth1_macvtap: entered promiscuous mode [ 86.423191][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.427508][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.432205][ T5848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.432261][ T5848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.432279][ T5848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.432293][ T5848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.441522][ T5980] loop4: detected capacity change from 0 to 4096 [ 86.465462][ T5980] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.479444][ T5980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.496417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.496446][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.530480][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.530511][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.559229][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.687614][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 86.976196][ T4719] Bluetooth: hci1: command tx timeout [ 87.702845][ T6005] fuse: Invalid rootmode [ 87.813326][ T6016] validate_nla: 103 callbacks suppressed [ 87.815048][ T6016] netlink: 'syz.0.293': attribute type 12 has an invalid length. [ 87.834330][ T6019] futex_wake_op: syz.2.291 tries to shift op by 32; fix this program [ 88.097412][ T6021] loop2: detected capacity change from 0 to 128 [ 88.153633][ T6021] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 88.153677][ T6021] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 88.153701][ T6021] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 88.153725][ T6021] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 88.153746][ T6021] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 88.153765][ T6021] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 88.153784][ T6021] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 88.153807][ T6021] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 88.153825][ T6021] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 88.719921][ T6032] overlay: ./file0 is not a directory [ 88.770111][ T6037] loop5: detected capacity change from 0 to 512 [ 88.807479][ T6037] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 88.807612][ T6037] EXT4-fs (loop5): orphan cleanup on readonly fs [ 88.807631][ T6037] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.298: Bad quota inum: 2, type: 0 [ 88.807648][ T6037] loop5: lost filesystem error report for type 5 error -117 [ 88.813504][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 88.813517][ C0] EXT4-fs (loop5): initial error at time 89: ext4_quota_enable:7221 [ 88.813532][ C0] EXT4-fs (loop5): last error at time 89: ext4_quota_enable:7221 [ 88.821223][ T6037] EXT4-fs (loop5): Remounting filesystem read-only [ 88.821263][ T6037] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 88.821288][ T6037] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 88.821770][ T6037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.065661][ T4719] Bluetooth: hci1: command tx timeout [ 89.920065][ T6066] loop0: detected capacity change from 0 to 256 [ 89.931299][ T6066] FAT-fs (loop0): bogus sectors per cluster 0 [ 89.931344][ T6066] FAT-fs (loop0): Can't find a valid FAT filesystem [ 90.714261][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.966296][ T6075] loop0: detected capacity change from 0 to 256 [ 90.997239][ T6075] FAT-fs (loop0): Directory bread(block 64) failed [ 90.997366][ T6075] FAT-fs (loop0): Directory bread(block 65) failed [ 90.997653][ T6075] FAT-fs (loop0): Directory bread(block 66) failed [ 90.997722][ T6075] FAT-fs (loop0): Directory bread(block 67) failed [ 90.997866][ T6075] FAT-fs (loop0): Directory bread(block 68) failed [ 90.997942][ T6075] FAT-fs (loop0): Directory bread(block 69) failed [ 90.998087][ T6075] FAT-fs (loop0): Directory bread(block 70) failed [ 90.998149][ T6075] FAT-fs (loop0): Directory bread(block 71) failed [ 90.998303][ T6075] FAT-fs (loop0): Directory bread(block 72) failed [ 90.998374][ T6075] FAT-fs (loop0): Directory bread(block 73) failed [ 91.033342][ T6075] syz.0.307: attempt to access beyond end of device [ 91.033342][ T6075] loop0: rw=2049, sector=1192, nr_sectors = 68 limit=256 [ 91.204954][ T4719] Bluetooth: hci1: command tx timeout [ 91.277027][ T6080] loop5: detected capacity change from 0 to 512 [ 91.313655][ T6080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.335758][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.388347][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 91.390262][ T6089] netlink: 56 bytes leftover after parsing attributes in process `syz.3.314'. [ 91.517836][ T6100] loop5: detected capacity change from 0 to 512 [ 91.557491][ T6100] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 91.557630][ T6100] EXT4-fs (loop5): orphan cleanup on readonly fs [ 91.557652][ T6100] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.319: Bad quota inum: 2, type: 0 [ 91.557676][ T6100] loop5: lost filesystem error report for type 5 error -117 [ 91.563403][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 91.563416][ C1] EXT4-fs (loop5): initial error at time 92: ext4_quota_enable:7221 [ 91.563431][ C1] EXT4-fs (loop5): last error at time 92: ext4_quota_enable:7221 [ 91.574427][ T6100] EXT4-fs (loop5): Remounting filesystem read-only [ 91.574462][ T6100] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 91.574490][ T6100] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 91.574957][ T6100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.587037][ T6105] Bluetooth: MGMT ver 1.23 [ 92.625776][ T6115] futex_wake_op: syz.0.321 tries to shift op by 32; fix this program [ 92.932152][ T6117] loop0: detected capacity change from 0 to 128 [ 93.207406][ T6117] validate_nla: 45 callbacks suppressed [ 93.207446][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.207585][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.207661][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.207726][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.207810][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.207880][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.207949][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.208030][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.208127][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.208200][ T6117] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 93.622006][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.277067][ T6146] loop4: detected capacity change from 0 to 128 [ 94.279005][ T6146] EXT4-fs (loop4): Test dummy encryption mode enabled [ 94.287233][ T6146] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.754588][ T6155] nbd: couldn't find a device at index 79 [ 94.933845][ T6170] overlayfs: missing 'lowerdir' [ 94.937836][ T6170] overlay: ./file1 is not a directory [ 94.991332][ T6174] loop2: detected capacity change from 0 to 512 [ 95.045124][ T6174] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 95.048206][ T6174] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.048237][ T6174] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.343: Bad quota inum: 2, type: 0 [ 95.048263][ T6174] loop2: lost filesystem error report for type 5 error -117 [ 95.052077][ T6174] EXT4-fs (loop2): Remounting filesystem read-only [ 95.052112][ T6174] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 95.052142][ T6174] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 95.052617][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.230074][ T4719] Bluetooth: Wrong link type (-71) [ 96.048589][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.366063][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.547314][ T6189] loop5: detected capacity change from 0 to 1024 [ 96.558983][ T6206] vlan2: entered allmulticast mode [ 96.559018][ T6206] veth0_to_bond: entered allmulticast mode [ 96.570856][ T6208] loop2: detected capacity change from 0 to 256 [ 96.573982][ T6189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.585492][ T6208] FAT-fs (loop2): bogus sectors per cluster 0 [ 96.585543][ T6208] FAT-fs (loop2): Can't find a valid FAT filesystem [ 96.589186][ T6212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.772019][ T6216] loop3: detected capacity change from 0 to 512 [ 96.804412][ T6216] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 96.804650][ T6216] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 96.809525][ T6216] EXT4-fs (loop3): 1 truncate cleaned up [ 96.811843][ T6216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.829821][ T6212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.513225][ T6223] loop4: detected capacity change from 0 to 512 [ 97.558515][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.568220][ T6225] loop0: detected capacity change from 0 to 512 [ 97.582442][ T6223] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.586371][ T6223] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.586435][ T6223] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.357: Bad quota inum: 2, type: 0 [ 97.586459][ T6223] loop4: lost filesystem error report for type 5 error -117 [ 97.590271][ T6223] EXT4-fs (loop4): Remounting filesystem read-only [ 97.590366][ T6223] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 97.590454][ T6223] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 97.606979][ T6223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.680948][ T6225] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 97.681069][ T6225] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.681089][ T6225] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.358: Bad quota inum: 2, type: 0 [ 97.681107][ T6225] loop0: lost filesystem error report for type 5 error -117 [ 97.684194][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 97.684204][ C1] EXT4-fs (loop0): initial error at time 98: ext4_quota_enable:7221 [ 97.684215][ C1] EXT4-fs (loop0): last error at time 98: ext4_quota_enable:7221 [ 97.692942][ T6225] EXT4-fs (loop0): Remounting filesystem read-only [ 97.692975][ T6225] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 97.693003][ T6225] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 97.699376][ T6225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.708698][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.813963][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.604601][ T6243] FAULT_INJECTION: forcing a failure. [ 98.604601][ T6243] name failslab, interval 1, probability 0, space 0, times 0 [ 98.604642][ T6243] CPU: 1 UID: 0 PID: 6243 Comm: syz.3.361 Not tainted syzkaller #0 PREEMPT [ 98.604657][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.604664][ T6243] Call trace: [ 98.604668][ T6243] show_stack+0x2c/0x3c (C) [ 98.604686][ T6243] __dump_stack+0x30/0x40 [ 98.604697][ T6243] dump_stack_lvl+0xd8/0x12c [ 98.604707][ T6243] dump_stack+0x1c/0x28 [ 98.604716][ T6243] should_fail_ex+0x414/0x588 [ 98.604732][ T6243] should_failslab+0xc4/0x124 [ 98.604742][ T6243] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 98.604751][ T6243] __alloc_skb+0x1f0/0x5f8 [ 98.604764][ T6243] netlink_alloc_large_skb+0xd4/0x114 [ 98.604775][ T6243] netlink_sendmsg+0x4bc/0x920 [ 98.604785][ T6243] __sock_sendmsg+0xc8/0x138 [ 98.604795][ T6243] ____sys_sendmsg+0x418/0x70c [ 98.604802][ T6243] ___sys_sendmsg+0x198/0x224 [ 98.604809][ T6243] __sys_sendmsg+0x160/0x214 [ 98.604815][ T6243] __arm64_sys_sendmsg+0x80/0x94 [ 98.604822][ T6243] invoke_syscall+0x98/0x244 [ 98.604832][ T6243] el0_svc_common+0xe8/0x23c [ 98.604842][ T6243] do_el0_svc+0x48/0x58 [ 98.604851][ T6243] el0_svc+0x64/0x260 [ 98.604860][ T6243] el0t_64_sync_handler+0x48/0x148 [ 98.604867][ T6243] el0t_64_sync+0x198/0x19c [ 98.798796][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.807102][ T6268] loop3: detected capacity change from 0 to 512 [ 99.832228][ T6268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.868657][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.094819][ T4720] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.162286][ T6304] bridge0: port 3(syz_tun) entered blocking state [ 100.167907][ T6304] bridge0: port 3(syz_tun) entered disabled state [ 100.168498][ T6304] syz_tun: entered allmulticast mode [ 100.169213][ T6304] syz_tun: entered promiscuous mode [ 100.257196][ T4720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.257229][ T4720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.257252][ T4720] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.257277][ T4720] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.257291][ T4720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.266501][ T4720] usb 1-1: config 0 descriptor?? [ 100.690187][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.690228][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.690238][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.690248][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.690257][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.690266][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.690274][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.690283][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.690291][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.690300][ T4720] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 100.708350][ T4720] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 100.896389][ T4837] usb 1-1: USB disconnect, device number 2 [ 100.908425][ T6338] tipc: Enabled bearer , priority 0 [ 101.008976][ T6340] loop4: detected capacity change from 0 to 4096 [ 101.009323][ T6340] EXT4-fs: Ignoring removed nobh option [ 101.011619][ T6340] EXT4-fs (loop4): Test dummy encryption mode enabled [ 101.013771][ T6340] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 101.013817][ T6340] System zones: 0-5 [ 101.020585][ T6340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.100496][ T6297] Set syz1 is full, maxelem 65536 reached [ 101.181208][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.247448][ T6354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.262336][ T4837] IPVS: starting estimator thread 0... [ 101.271646][ T6354] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.272585][ T6354] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 101.272646][ T4720] bond_slave_0: entered promiscuous mode [ 101.272661][ T4720] bond_slave_1: entered promiscuous mode [ 101.279838][ T6354] validate_nla: 44 callbacks suppressed [ 101.279864][ T6354] netlink: 'syz.4.383': attribute type 10 has an invalid length. [ 101.309376][ T6325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.309439][ T6325] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.315730][ T6325] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.347646][ T6362] loop4: detected capacity change from 0 to 2048 [ 101.358932][ T6362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.370348][ T6368] binder: 6366:6368 tried to acquire reference to desc 0, got 1 instead [ 101.374516][ T6368] binder: 6366:6368 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 101.374547][ T6368] binder: 6368 RLIMIT_NICE not set [ 101.374613][ T6368] binder: 6368 RLIMIT_NICE not set [ 101.374915][ T6368] binder: 6368 RLIMIT_NICE not set [ 101.374958][ T6368] binder: 6366:6368 got transaction with invalid handle, 2 [ 101.374990][ T6368] binder: 6368:6366 translate handle failed [ 101.375039][ T6368] binder: 6366:6368 transaction reply to 6366:6368 failed 7/29201/-22, code 0 size 72-24 line 3556 [ 101.375061][ T6368] binder: send failed reply for transaction 6 to 6366:6368 [ 101.384636][ T6360] IPVS: using max 58 ests per chain, 139200 per kthread [ 101.386264][ T4720] binder: undelivered TRANSACTION_COMPLETE [ 101.386281][ T4720] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.386409][ T4720] binder: undelivered TRANSACTION_ERROR: 29190 [ 101.444993][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.492748][ T6380] loop4: detected capacity change from 0 to 512 [ 101.511531][ T6380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.611865][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.664167][ T6397] loop4: detected capacity change from 0 to 8 [ 101.673110][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673160][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673182][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673205][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673226][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673249][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673270][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673293][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673314][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673336][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673357][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673508][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673530][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673553][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673574][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673604][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673624][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673652][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673672][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673700][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673720][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673758][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673781][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673808][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673829][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673856][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673876][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673904][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673924][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673952][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.673973][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.674001][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.674022][ T6397] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.258596][ T6385] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.415637][ T6423] bridge_slave_0: left allmulticast mode [ 102.415678][ T6423] bridge_slave_0: left promiscuous mode [ 102.415760][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.421938][ T6423] bridge_slave_1: left allmulticast mode [ 102.423324][ T6423] bridge_slave_1: left promiscuous mode [ 102.425300][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.434443][ T6423] bond0: (slave bond_slave_0): Releasing backup interface [ 102.477550][ T6423] bond0: (slave bond_slave_1): Releasing backup interface [ 102.514207][ T6423] team0: Port device team_slave_0 removed [ 102.523766][ T6423] team0: Port device team_slave_1 removed [ 102.524064][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.524081][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.529193][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.530976][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.533183][ T6423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.539010][ T6425] team0: Mode changed to "roundrobin" [ 102.539266][ T6429] vlan0: entered promiscuous mode [ 102.548030][ T6429] team0: Port device vlan0 added [ 102.570696][ T6423] tipc: Enabled bearer , priority 0 [ 102.583866][ T6437] loop2: detected capacity change from 0 to 256 [ 102.666137][ T6447] loop0: detected capacity change from 0 to 256 [ 102.672075][ T6447] FAT-fs (loop0): bogus sectors per cluster 0 [ 102.674701][ T6447] FAT-fs (loop0): Can't find a valid FAT filesystem [ 103.045483][ T6457] binder: 6455:6457 tried to acquire reference to desc 0, got 1 instead [ 103.048058][ T6457] binder: 6455:6457 got reply transaction with no transaction stack [ 103.049803][ T6457] binder: 6455:6457 transaction reply to 0:0 failed 13/29201/-71, code 0 size 72-24 line 3139 [ 103.055977][ T1521] binder: release 6455:6457 transaction 12 out, still active [ 103.056004][ T1521] binder: undelivered TRANSACTION_COMPLETE [ 103.057371][ T1521] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.086528][ T6462] loop5: detected capacity change from 0 to 512 [ 103.087911][ T6462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.092171][ T6462] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.421: corrupted in-inode xattr: invalid ea_ino [ 103.092219][ T6462] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.094973][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 103.094988][ C1] EXT4-fs (loop5): initial error at time 104: ext4_iget_extra_inode:5128: inode 15 [ 103.095026][ C1] EXT4-fs (loop5): last error at time 104: ext4_iget_extra_inode:5128: inode 15 [ 103.103331][ T6462] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.421: couldn't read orphan inode 15 (err -117) [ 103.105988][ T6462] loop5: lost filesystem error report for type 5 error -117 [ 103.106932][ T6462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.134614][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.150244][ T30] kauditd_printk_skb: 594 callbacks suppressed [ 103.150274][ T30] audit: type=1326 audit(104.135:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.158480][ T30] audit: type=1326 audit(104.145:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.163118][ T30] audit: type=1326 audit(104.145:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.168384][ T30] audit: type=1326 audit(104.155:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.172745][ T30] audit: type=1326 audit(104.155:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.172769][ T30] audit: type=1326 audit(104.155:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=50 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.172786][ T30] audit: type=1326 audit(104.155:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.177396][ T30] audit: type=1326 audit(104.155:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.177416][ T30] audit: type=1326 audit(104.155:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.177432][ T30] audit: type=1326 audit(104.155:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.2.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffffaed77aa8 code=0x7ffc0000 [ 103.364624][ T6476] dvmrp8: left allmulticast mode [ 103.593536][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.684308][ T1004] tipc: Node number set to 1281274724 [ 103.772825][ T6495] infiniband syz1: set active [ 103.773291][ T6495] infiniband syz1: added syz_tun [ 103.794684][ T6495] RDS/IB: syz1: added [ 103.794825][ T6495] smc: adding ib device syz1 with port count 1 [ 103.794879][ T6495] smc: ib device syz1 port 1 has no pnetid [ 103.964040][ T1004] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.001091][ T6504] input: syz0 as /devices/virtual/input/input2 [ 104.105609][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.105843][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.113471][ T1004] usb 1-1: Using ep0 maxpacket: 8 [ 104.115870][ T1004] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.119750][ T1004] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 104.119781][ T1004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.119805][ T1004] usb 1-1: Product: syz [ 104.119819][ T1004] usb 1-1: Manufacturer: syz [ 104.119831][ T1004] usb 1-1: SerialNumber: syz [ 104.120612][ T6512] netlink: 'syz.2.441': attribute type 4 has an invalid length. [ 104.141420][ T6514] netlink: 'syz.2.442': attribute type 10 has an invalid length. [ 104.146586][ T6514] bridge0: port 3(syz_tun) entered disabled state [ 104.146849][ T6514] syz_tun: left allmulticast mode [ 104.146926][ T6514] bridge0: port 3(syz_tun) entered disabled state [ 104.152495][ T6514] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 104.339827][ T1004] usb 1-1: USB disconnect, device number 3 [ 104.662747][ T6533] loop4: detected capacity change from 0 to 1024 [ 104.684407][ T6533] EXT4-fs (loop4): mounted filesystem 00000009-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.696671][ T6538] loop5: detected capacity change from 0 to 512 [ 104.705008][ T4711] EXT4-fs (loop4): unmounting filesystem 00000009-0000-0000-0000-000000000000. [ 104.716027][ T6538] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 104.716059][ T6538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 104.716087][ T6538] System zones: 0-1, 15-15, 18-18, 34-34 [ 104.716198][ T6538] EXT4-fs (loop5): orphan cleanup on readonly fs [ 104.716255][ T6538] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.716267][ T6538] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 104.717976][ T6538] EXT4-fs (loop5): 1 truncate cleaned up [ 104.718503][ T6538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.737291][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.795254][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.795434][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.811004][ T6550] Illegal XDP return value 4294967274 on prog (id 42) dev syz_tun, expect packet loss! [ 104.892599][ T6556] loop5: detected capacity change from 0 to 8192 [ 104.995346][ T6564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.027120][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.077774][ T6572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.189266][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 105.189299][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.469'. [ 105.208328][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.265659][ T6588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.277391][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.282908][ T6592] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.473: corrupted in-inode xattr: invalid ea_ino [ 105.282957][ T6592] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.285880][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 105.285893][ C1] EXT4-fs (loop5): initial error at time 106: ext4_iget_extra_inode:5128: inode 15 [ 105.285914][ C1] EXT4-fs (loop5): last error at time 106: ext4_iget_extra_inode:5128: inode 15 [ 105.293288][ T6592] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.473: couldn't read orphan inode 15 (err -117) [ 105.293306][ T6592] loop5: lost filesystem error report for type 5 error -117 [ 105.297116][ T6592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.305149][ T6595] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 105.321970][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.323334][ T6595] bond1: entered promiscuous mode [ 105.323533][ T6595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.386665][ T6595] bond1: (slave bridge1): making interface the new active one [ 105.388433][ T6595] bridge1: entered promiscuous mode [ 105.390311][ T6595] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 105.393655][ T867] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 105.687457][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.761648][ T867] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.763767][ T867] usb 1-1: not running at top speed; connect to a high speed hub [ 105.766066][ T867] usb 1-1: config 249 has an invalid interface number: 203 but max is 0 [ 105.766093][ T867] usb 1-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 105.766107][ T867] usb 1-1: config 249 has no interface number 0 [ 105.766124][ T867] usb 1-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.766138][ T867] usb 1-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.766152][ T867] usb 1-1: config 249 interface 203 has no altsetting 0 [ 105.772619][ T6615] vfat: Bad value for 'time_offset' [ 105.785052][ T867] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 105.785080][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.785099][ T867] usb 1-1: Product: syz [ 105.785110][ T867] usb 1-1: Manufacturer: syz [ 105.785120][ T867] usb 1-1: SerialNumber: syz [ 105.812776][ T6617] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.825496][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.001485][ T867] rtl8150 1-1:249.203: couldn't find required endpoints [ 106.001583][ T867] rtl8150 1-1:249.203: probe with driver rtl8150 failed with error -5 [ 106.006655][ T867] usb 1-1: USB disconnect, device number 4 [ 106.008085][ T6639] FAT-fs (loop5): Directory bread(block 64) failed [ 106.008102][ T6639] FAT-fs (loop5): Directory bread(block 65) failed [ 106.008125][ T6639] FAT-fs (loop5): Directory bread(block 66) failed [ 106.008137][ T6639] FAT-fs (loop5): Directory bread(block 67) failed [ 106.008158][ T6639] FAT-fs (loop5): Directory bread(block 68) failed [ 106.008169][ T6639] FAT-fs (loop5): Directory bread(block 69) failed [ 106.008190][ T6639] FAT-fs (loop5): Directory bread(block 70) failed [ 106.008200][ T6639] FAT-fs (loop5): Directory bread(block 71) failed [ 106.008222][ T6639] FAT-fs (loop5): Directory bread(block 72) failed [ 106.008232][ T6639] FAT-fs (loop5): Directory bread(block 73) failed [ 106.137315][ T6659] set_capacity_and_notify: 7 callbacks suppressed [ 106.137350][ T6659] loop5: detected capacity change from 0 to 512 [ 106.145017][ T6659] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #11: comm syz.5.494: corrupted in-inode xattr: e_name out of bounds [ 106.147895][ T6659] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.149015][ T6659] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.494: couldn't read orphan inode 11 (err -117) [ 106.149046][ T6659] loop5: lost filesystem error report for type 5 error -117 [ 106.153467][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 106.153480][ C0] EXT4-fs (loop5): initial error at time 107: ext4_iget_extra_inode:5128: inode 11 [ 106.153501][ C0] EXT4-fs (loop5): last error at time 107: ext4_orphan_get:1402 [ 106.160907][ T6659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.187553][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.252698][ T6671] netlink: 36 bytes leftover after parsing attributes in process `syz.5.497'. [ 106.255472][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.497'. [ 106.290308][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.298597][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.467995][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.500'. [ 107.141251][ T6759] bridge_slave_0: left allmulticast mode [ 107.142409][ T6759] bridge_slave_0: left promiscuous mode [ 107.142658][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.158408][ T6759] bridge_slave_1: left allmulticast mode [ 107.158441][ T6759] bridge_slave_1: left promiscuous mode [ 107.158520][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.171040][ T6759] bond0: (slave bond_slave_0): Releasing backup interface [ 107.214079][ T6759] bond_slave_0: left promiscuous mode [ 107.217652][ T6759] bond0: (slave bond_slave_1): Releasing backup interface [ 107.254637][ T6759] bond_slave_1: left promiscuous mode [ 107.270690][ T6759] team0: Port device team_slave_0 removed [ 107.276522][ T6759] team0: Port device team_slave_1 removed [ 107.276936][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.276948][ T6759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.279290][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.279301][ T6759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.282126][ T6759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.286312][ T1890] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 107.291295][ T6763] team0: Mode changed to "roundrobin" [ 107.292494][ T6769] vlan0: entered promiscuous mode [ 107.307346][ T6769] team0: Port device vlan0 added [ 107.324307][ T1890] bond1: (slave macvlan2): link status definitely down, disabling slave [ 107.376266][ T6778] loop2: detected capacity change from 0 to 512 [ 107.413242][ T6778] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 107.424906][ T6778] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.508: bad orphan inode 15 [ 107.424939][ T6778] loop2: lost filesystem error report for type 5 error -117 [ 107.429522][ T6785] input: syz0 as /devices/virtual/input/input4 [ 107.429785][ T6778] ext4_test_bit(bit=14, block=18) = 1 [ 107.429817][ T6778] is_bad_inode(inode)=0 [ 107.429835][ T6778] NEXT_ORPHAN(inode)=1023 [ 107.429848][ T6778] max_ino=32 [ 107.429858][ T6778] i_nlink=0 [ 107.432074][ T6778] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.508: bg 0: block 161: padding at end of block bitmap is not set [ 107.432103][ T6778] loop2: lost filesystem error report for type 5 error -117 [ 107.433047][ T6778] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 107.433075][ T6778] loop2: lost filesystem error report for type 5 error -117 [ 107.433429][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 107.433448][ C1] EXT4-fs (loop2): initial error at time 108: ext4_orphan_get:1423 [ 107.433477][ C1] EXT4-fs (loop2): last error at time 108: ext4_mb_clear_bb:6679 [ 107.436428][ T6778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.577133][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.684288][ T6804] loop5: detected capacity change from 0 to 1024 [ 107.688514][ T6804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.715227][ T6804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.793498][ T4712] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.796395][ T6804] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 107.862548][ T4837] kernel read not supported for file / (pid: 4837 comm: kworker/0:5) [ 108.091686][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.121797][ T6826] loop5: detected capacity change from 0 to 1024 [ 108.134901][ T6826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.199280][ T5781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.222978][ T6833] loop5: detected capacity change from 0 to 8 [ 108.235027][ T6833] SQUASHFS error: Failed to read block 0x6e6: -5 [ 108.235056][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235077][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235117][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235149][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235164][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235182][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235205][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235215][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235238][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235260][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235269][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235281][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235297][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235302][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235321][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235339][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235344][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235355][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235371][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235376][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235395][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235411][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235416][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235427][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235443][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235448][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235467][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235483][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235488][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235499][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235515][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235520][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235539][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235555][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235560][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235570][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235587][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235592][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235610][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235627][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235632][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235643][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235658][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235663][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235682][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235698][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235703][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235713][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235735][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235742][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235761][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235777][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235782][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235793][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235809][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235814][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235833][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235849][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235854][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235865][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235881][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235886][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.235904][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.235920][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.235925][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237063][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237095][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237101][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237132][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237152][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237158][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237171][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237189][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237194][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237213][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237230][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237235][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237246][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237262][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237267][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237286][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237303][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237307][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237756][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237774][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237779][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237792][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237808][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237813][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237824][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237840][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237845][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237859][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237875][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237880][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237892][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237908][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237913][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237927][ T6833] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.237954][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237959][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.237984][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.237990][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.238016][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.238021][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.238946][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.238952][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.239944][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.239952][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.239975][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.239980][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.239998][ T6833] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 108.240003][ T6833] SQUASHFS error: read_indexes: reading block [6e4:0] [ 108.684206][ T6847] loop2: detected capacity change from 0 to 512 [ 108.686250][ T6847] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 108.691074][ T6847] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 108.691568][ T6847] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.697151][ T6847] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 108.697178][ T6847] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 108.701686][ T6847] EXT4-fs (loop2): 1 orphan inode deleted [ 108.702153][ T6847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.709741][ T6847] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.535: iget: bad extended attribute block 2147483667 [ 108.732517][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.781617][ T6854] loop2: detected capacity change from 0 to 256 [ 108.801755][ T6854] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.835261][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 108.835290][ T30] audit: type=1326 audit(109.825:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.5.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f77aa8 code=0x7ffc0000 [ 108.835584][ T30] audit: type=1326 audit(109.825:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.5.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f77aa8 code=0x7ffc0000 [ 108.837626][ T30] audit: type=1326 audit(109.825:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.5.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa4f77aa8 code=0x7ffc0000 [ 108.841038][ T30] audit: type=1326 audit(109.825:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.5.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f77aa8 code=0x7ffc0000 [ 108.842070][ T30] audit: type=1326 audit(109.825:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.5.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa4f77aa8 code=0x7ffc0000 [ 108.842142][ T30] audit: type=1326 audit(109.825:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.5.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f77aa8 code=0x7ffc0000 [ 108.842258][ T30] audit: type=1326 audit(109.825:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.5.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=69 compat=0 ip=0xffffa4f77aa8 code=0x7ffc0000 [ 108.842336][ T30] audit: type=1326 audit(109.825:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.5.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f77aa8 code=0x7ffc0000 [ 108.851170][ T30] audit: type=1326 audit(109.835:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.5.540" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f77aa8 code=0x7ffc0000 [ 108.901698][ T6865] loop5: detected capacity change from 0 to 8 [ 108.914471][ T6865] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.914499][ T6865] SQUASHFS error: Unable to read data cache entry [4de] [ 108.914519][ T6865] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 108.914554][ T6865] SQUASHFS error: Unable to read data cache entry [4de] [ 108.914567][ T6865] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 108.914613][ T6865] SQUASHFS error: Unable to read data cache entry [4de] [ 108.914619][ T6865] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 108.914639][ T6865] SQUASHFS error: Unable to read data cache entry [4de] [ 108.914644][ T6865] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 109.027703][ T6875] syzkaller1: entered promiscuous mode [ 109.028943][ T6875] syzkaller1: entered allmulticast mode [ 109.031382][ T30] audit: type=1326 audit(110.015:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.5.547" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f77aa8 code=0x0 [ 109.095677][ T6880] vhci_hcd vhci_hcd.3: invalid port number 150 [ 109.095707][ T6880] vhci_hcd vhci_hcd.3: invalid port number 150 [ 109.137432][ T6882] syzkaller1: entered promiscuous mode [ 109.138680][ T6882] syzkaller1: entered allmulticast mode [ 109.673460][ T1521] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.783819][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.784001][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.823576][ T1521] usb 1-1: Using ep0 maxpacket: 8 [ 109.824898][ T1521] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.825188][ T1521] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.825201][ T1521] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.825217][ T1521] usb 1-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 109.825227][ T1521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.826876][ T1521] usb 1-1: config 0 descriptor?? [ 109.843444][ T4712] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.218613][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.220556][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.232722][ T1521] hid_parser_main: 5 callbacks suppressed [ 110.232761][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.232775][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.232786][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.232796][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.232806][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.232815][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.232823][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.232832][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.232841][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.232849][ T1521] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x0 [ 110.436699][ T4720] usb 1-1: USB disconnect, device number 5 [ 110.577637][ T6935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.580137][ T6935] team0: No ports can be present during mode change [ 110.580352][ T6935] tipc: Started in network mode [ 110.580363][ T6935] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 110.580448][ T6935] tipc: Enabled bearer , priority 0 [ 110.595536][ T6937] syz_tun: entered allmulticast mode [ 110.610648][ T6939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.610846][ T6939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.791686][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.791873][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.793265][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.794563][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.033459][ T4712] Bluetooth: hci5: command 0x1003 tx timeout [ 111.033477][ T4719] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.137738][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.140538][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.408456][ T1521] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.530526][ T6958] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 111.533359][ T6958] evm: overlay not supported [ 111.566526][ T1521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.566559][ T1521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.566569][ T1521] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.566585][ T1521] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.566595][ T1521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.570205][ T1521] usb 1-1: config 0 descriptor?? [ 111.581543][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.583020][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.693436][ T4720] tipc: Node number set to 11578026 [ 111.979251][ T1521] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 112.012720][ T6983] ------------[ cut here ]------------ [ 112.012733][ T6983] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2235 at mac80211_hwsim_tx+0x13d8/0x1c14, CPU#0: syz.4.596/6983 [ 112.016257][ T6983] Modules linked in: [ 112.017049][ T6983] CPU: 0 UID: 0 PID: 6983 Comm: syz.4.596 Not tainted syzkaller #0 PREEMPT [ 112.018892][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 112.020761][ T6983] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 112.022184][ T6983] pc : mac80211_hwsim_tx+0x13d8/0x1c14 [ 112.023257][ T6983] lr : mac80211_hwsim_tx+0x13d8/0x1c14 [ 112.024335][ T6983] sp : ffff800094df6db0 [ 112.025153][ T6983] x29: ffff800094df6e60 x28: 0000000000000000 x27: ffff0000d44533f0 [ 112.026746][ T6983] x26: ffff0000f3357a38 x25: 0000000000000014 x24: dfff800000000000 [ 112.028254][ T6983] x23: 0000000000000005 x22: 0000000000000000 x21: 0000000000000000 [ 112.029766][ T6983] x20: 00000000000000a0 x19: ffff0000d44533c0 x18: 0000000000000000 [ 112.031294][ T6983] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 112.032773][ T6983] x14: 0000000000000000 x13: 0000000000000002 x12: 0000000000000000 [ 112.034272][ T6983] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000004ef [ 112.035785][ T6983] x8 : ffff80009cae2000 x7 : 0000000000000000 x6 : 0000000000000000 [ 112.037280][ T6983] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff800082e60b2c [ 112.038763][ T6983] x2 : 0000000000000014 x1 : ffff0000f663d700 x0 : 0000000000000001 [ 112.040237][ T6983] Call trace: [ 112.040866][ T6983] mac80211_hwsim_tx+0x13d8/0x1c14 (P) [ 112.041849][ T6983] ieee80211_tx_frags+0x304/0x6e4 [ 112.042794][ T6983] __ieee80211_tx+0x1d8/0x458 [ 112.043694][ T6983] ieee80211_tx+0x2ec/0x40c [ 112.044541][ T6983] ieee80211_xmit+0x274/0x350 [ 112.045474][ T6983] ieee80211_monitor_start_xmit+0x8cc/0xf9c [ 112.046639][ T6983] dev_hard_start_xmit+0x1e8/0x9ec [ 112.047651][ T6983] __dev_queue_xmit+0xfc0/0x2c18 [ 112.048617][ T6983] packet_xmit+0x6c/0x310 [ 112.049461][ T6983] packet_sendmsg+0x2fcc/0x3f4c [ 112.050371][ T6983] __sock_sendmsg+0xc8/0x138 [ 112.051279][ T6983] __sys_sendto+0x254/0x338 [ 112.052172][ T6983] __arm64_sys_sendto+0xd8/0xf8 [ 112.053123][ T6983] invoke_syscall+0x98/0x244 [ 112.053986][ T6983] el0_svc_common+0xe8/0x23c [ 112.054837][ T6983] do_el0_svc+0x48/0x58 [ 112.055652][ T6983] el0_svc+0x64/0x260 [ 112.056431][ T6983] el0t_64_sync_handler+0x48/0x148 [ 112.057369][ T6983] el0t_64_sync+0x198/0x19c [ 112.058195][ T6983] irq event stamp: 1939 [ 112.058957][ T6983] hardirqs last enabled at (1938): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 112.060889][ T6983] hardirqs last disabled at (1939): [] el1_brk64+0x20/0x54 [ 112.062557][ T6983] softirqs last enabled at (1934): [] __alloc_skb+0x1c0/0x5f8 [ 112.064174][ T6983] softirqs last disabled at (1936): [] __dev_queue_xmit+0x210/0x2c18 [ 112.065861][ T6983] ---[ end trace 0000000000000000 ]--- [ 112.245815][ T4720] usb 1-1: USB disconnect, device number 6