last executing test programs: 7.003247238s ago: executing program 0 (id=662): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r0, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x9}}, 0x30) 6.941970993s ago: executing program 0 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1c0000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 6.831022757s ago: executing program 0 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/98, 0x62}], 0x1, 0xd13, 0xffff) 6.761603964s ago: executing program 0 (id=667): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 6.710490577s ago: executing program 0 (id=670): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r1], 0x48}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 6.305701791s ago: executing program 0 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) 6.299554107s ago: executing program 32 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) 1.160510023s ago: executing program 1 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)="ae59", 0x2) 1.160229843s ago: executing program 5 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x4080) 1.096136544s ago: executing program 5 (id=892): r0 = syz_io_uring_setup(0x141c, &(0x7f00000000c0)={0x0, 0xf9ee, 0x400, 0x3, 0x212}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r4 = openat$ublk_ctrl(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000500)=@ublk_get_features_sqe={0x2e, 0x0, 0x0, r4, 0x80207513, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000000400)}}) io_uring_enter(r0, 0x20, 0xd9db, 0x8, 0x0, 0x0) 1.09565604s ago: executing program 1 (id=893): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10001, 0xb, 0x1}}}}]}, 0x40}}, 0x44080) 1.084578487s ago: executing program 4 (id=894): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) close(0x3) 1.042780506s ago: executing program 5 (id=896): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000005c0)={{&(0x7f00004e5000/0x8000)=nil, 0x8000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 1.032173968s ago: executing program 4 (id=897): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4b6, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="040e05033b20"], 0x8) 1.000462975s ago: executing program 1 (id=899): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xff97}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.000260022s ago: executing program 5 (id=900): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 937.896997ms ago: executing program 4 (id=902): signalfd4(0xffffffffffffffff, &(0x7f0000002180)={[0xfffffffffffffff7]}, 0x8, 0x80000) openat$smackfs_cipso(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000680)=""/235, 0xeb, 0x10002) 928.539928ms ago: executing program 5 (id=903): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x1, {0x0, 0x1, 0x1}}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x3, 0x1, 0x1}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x2404c0c1) 923.002287ms ago: executing program 1 (id=904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x1, 0xd) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 875.799253ms ago: executing program 5 (id=906): r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000000), &(0x7f0000000000)) io_uring_enter(r0, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0xcf, 0x5], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 868.954239ms ago: executing program 4 (id=908): unshare(0x2040400) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 825.717199ms ago: executing program 4 (id=909): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x280) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, 0x0) 380.724081ms ago: executing program 3 (id=923): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) 347.449271ms ago: executing program 3 (id=925): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x200, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 287.608783ms ago: executing program 3 (id=928): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 241.180288ms ago: executing program 2 (id=929): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) 215.459386ms ago: executing program 2 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 158.639091ms ago: executing program 2 (id=931): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0xc000, 0x8003fffe) 137.078229ms ago: executing program 3 (id=932): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r1, 0xfffe}, 0x8) 133.057365ms ago: executing program 2 (id=933): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x1d, 0x1c, "6bf125058e637b44e58c1c72a4c01c47e54a2793c042d4aea496bdbdce2feb94cb576a5d539a0f68412e32c700", "563e7e5b61a321b296a4d887df2f85a1df244fa2aa8ca412c1f9ec49aa05000200842300", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56224563b3", [0x3, 0x355f]}) 107.758419ms ago: executing program 3 (id=934): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000003980)={0xb, {{0xa, 0x0, 0x0, @mcast2, 0x1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @empty}}, {{0xa, 0xfffc, 0x0, @remote, 0x7}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd001829fffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 78.70058ms ago: executing program 2 (id=935): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 69.338849ms ago: executing program 3 (id=936): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 60.042302ms ago: executing program 1 (id=937): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r0, 0x0, &(0x7f00000000c0)) 2.427476ms ago: executing program 2 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f646500000000000000002f4b000000000000000000000000000000000000050003000e00"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) 2.139646ms ago: executing program 4 (id=939): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)='D', 0x1) 0s ago: executing program 1 (id=940): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x7, 0x85, 0x4, 0x6, "67833a47f0082149f56e5a7747b6a80a932e8e", 0x7f, 0x3}) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3272078b089b34383a3b350838e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 21.627958][ T4674] cgroup: Unknown subsys name 'net' [ 21.728028][ T4674] cgroup: Unknown subsys name 'cpuset' [ 21.730002][ T4674] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.899163][ T4674] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 22.600638][ T4705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 22.602488][ T4705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 22.606084][ T4708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 22.607987][ T4708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 22.610027][ T4708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 22.613043][ T4708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 22.614466][ T4708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 22.615584][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 22.615820][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 22.616638][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 22.620742][ T4705] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 22.622601][ T4705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 22.624329][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 22.626808][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 22.628715][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 22.647676][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 22.649480][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 22.651209][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 22.652914][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 22.654599][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 22.660835][ T4712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 22.668726][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 22.670518][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 22.672523][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 22.674106][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 23.022406][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.024100][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.025678][ T4706] bridge_slave_0: entered allmulticast mode [ 23.027713][ T4706] bridge_slave_0: entered promiscuous mode [ 23.030285][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.031723][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.033304][ T4706] bridge_slave_1: entered allmulticast mode [ 23.034988][ T4706] bridge_slave_1: entered promiscuous mode [ 23.055978][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.058374][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.075380][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.075452][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.075546][ T4703] bridge_slave_0: entered allmulticast mode [ 23.076384][ T4703] bridge_slave_0: entered promiscuous mode [ 23.083042][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.083108][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.083166][ T4716] bridge_slave_0: entered allmulticast mode [ 23.083601][ T4716] bridge_slave_0: entered promiscuous mode [ 23.084289][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.084313][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.084399][ T4716] bridge_slave_1: entered allmulticast mode [ 23.084796][ T4716] bridge_slave_1: entered promiscuous mode [ 23.089800][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.089826][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.089890][ T4703] bridge_slave_1: entered allmulticast mode [ 23.090303][ T4703] bridge_slave_1: entered promiscuous mode [ 23.097922][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.100440][ T4706] team0: Port device team_slave_0 added [ 23.101192][ T4706] team0: Port device team_slave_1 added [ 23.117055][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.120783][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.122031][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.126622][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.136436][ T4703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.137544][ T4703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.140656][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.140678][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.140703][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.163558][ T4706] hsr_slave_0: entered promiscuous mode [ 23.165259][ T4706] hsr_slave_1: entered promiscuous mode [ 23.182234][ T4716] team0: Port device team_slave_0 added [ 23.184111][ T4703] team0: Port device team_slave_0 added [ 23.184942][ T4703] team0: Port device team_slave_1 added [ 23.191409][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.191511][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.191598][ T4711] bridge_slave_0: entered allmulticast mode [ 23.192028][ T4711] bridge_slave_0: entered promiscuous mode [ 23.206053][ T4716] team0: Port device team_slave_1 added [ 23.212341][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.212367][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.212381][ T4703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.212945][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.212952][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.212967][ T4703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.218362][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.218390][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.218447][ T4711] bridge_slave_1: entered allmulticast mode [ 23.218857][ T4711] bridge_slave_1: entered promiscuous mode [ 23.240871][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.245459][ T4703] hsr_slave_0: entered promiscuous mode [ 23.246984][ T4703] hsr_slave_1: entered promiscuous mode [ 23.248361][ T4703] debugfs: 'hsr0' already exists in 'hsr' [ 23.249521][ T4703] Cannot create hsr debugfs directory [ 23.250761][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.250836][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.250917][ T4719] bridge_slave_0: entered allmulticast mode [ 23.251759][ T4719] bridge_slave_0: entered promiscuous mode [ 23.252787][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.252806][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.252856][ T4719] bridge_slave_1: entered allmulticast mode [ 23.253309][ T4719] bridge_slave_1: entered promiscuous mode [ 23.254832][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.264075][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.265545][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.266701][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.270364][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.270372][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.270384][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.291594][ T4711] team0: Port device team_slave_0 added [ 23.293527][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.298930][ T4716] hsr_slave_0: entered promiscuous mode [ 23.299294][ T4716] hsr_slave_1: entered promiscuous mode [ 23.299496][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 23.299505][ T4716] Cannot create hsr debugfs directory [ 23.307765][ T4711] team0: Port device team_slave_1 added [ 23.311316][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.327582][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.327630][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.327646][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.328219][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.328226][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.328242][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.340629][ T4719] team0: Port device team_slave_0 added [ 23.341380][ T4719] team0: Port device team_slave_1 added [ 23.361176][ T4711] hsr_slave_0: entered promiscuous mode [ 23.361511][ T4711] hsr_slave_1: entered promiscuous mode [ 23.361682][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 23.361691][ T4711] Cannot create hsr debugfs directory [ 23.362022][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.362028][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.362042][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.362928][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.362936][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.362951][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.409063][ T4719] hsr_slave_0: entered promiscuous mode [ 23.409425][ T4719] hsr_slave_1: entered promiscuous mode [ 23.410036][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 23.410046][ T4719] Cannot create hsr debugfs directory [ 23.480934][ T4703] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.484604][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.488406][ T4703] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.490792][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.491242][ T4703] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.493179][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.495382][ T4703] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.498405][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.509678][ T4706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.512042][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.514029][ T4706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.516190][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.518052][ T4706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.520437][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.525496][ T4706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.528301][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.531288][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.531336][ T4703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.531503][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.531538][ T4703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.544002][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.544045][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.544149][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.544189][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.556283][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.561922][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.566305][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.569750][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.570258][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.571851][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.578319][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.580555][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.589559][ T4703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.596351][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.596395][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.596485][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.596551][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.605260][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.607268][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.608847][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.610543][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.612248][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.613711][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.626945][ T4703] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.642104][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.645107][ T4703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.646116][ T4703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.648159][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.652429][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.656405][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.656465][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.658260][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.658281][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.665624][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.669606][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.669914][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.671671][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.675844][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.682219][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.684484][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.688478][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.688521][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.697485][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.701646][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.701688][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.717064][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.721007][ T2670] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.721056][ T2670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.732125][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.734824][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.742258][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.742313][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.748074][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.750497][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.754804][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.757588][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.759346][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.761901][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.797099][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.807789][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.814725][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.843567][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.843614][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.843959][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.843977][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.855676][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.860314][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.874073][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.906478][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.911311][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.911365][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.911948][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.911968][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.956491][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.980338][ T4703] veth0_vlan: entered promiscuous mode [ 23.990297][ T4703] veth1_vlan: entered promiscuous mode [ 23.997319][ T4703] veth0_macvtap: entered promiscuous mode [ 23.999894][ T4703] veth1_macvtap: entered promiscuous mode [ 24.006289][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.009177][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.013400][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.013500][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.013560][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.013615][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.067759][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.067795][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.090018][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.101716][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.101748][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.107211][ T4706] veth0_vlan: entered promiscuous mode [ 24.117606][ T4706] veth1_vlan: entered promiscuous mode [ 24.137040][ T4706] veth0_macvtap: entered promiscuous mode [ 24.138295][ T4706] veth1_macvtap: entered promiscuous mode [ 24.142016][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.144027][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.153704][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.155493][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.161941][ T4703] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.187699][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.189324][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.189346][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.189365][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.199884][ T4711] veth0_vlan: entered promiscuous mode [ 24.228689][ T4711] veth1_vlan: entered promiscuous mode [ 24.235067][ T4716] veth0_vlan: entered promiscuous mode [ 24.242958][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.250264][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.250300][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.266406][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.266438][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.280879][ T4716] veth1_vlan: entered promiscuous mode [ 24.288093][ T4711] veth0_macvtap: entered promiscuous mode [ 24.291458][ T4711] veth1_macvtap: entered promiscuous mode [ 24.300294][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.306012][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.327264][ T4846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.327558][ T4846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.327600][ T4846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.327628][ T4846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.339421][ T4716] veth0_macvtap: entered promiscuous mode [ 24.366765][ T4716] veth1_macvtap: entered promiscuous mode [ 24.370250][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.382527][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.420543][ T4719] veth0_vlan: entered promiscuous mode [ 24.423004][ T4719] veth1_vlan: entered promiscuous mode [ 24.444290][ T4719] veth0_macvtap: entered promiscuous mode [ 24.445408][ T4719] veth1_macvtap: entered promiscuous mode [ 24.468763][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.471675][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.476896][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.476926][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.508001][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.508033][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.524870][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.524906][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.537255][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.537896][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.538250][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.538307][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.538334][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.538354][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.538374][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.538392][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.553699][ T2670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.553737][ T2670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.583314][ T2670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.583353][ T2670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.593302][ T2670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.593343][ T2670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.667746][ T4708] Bluetooth: hci3: command tx timeout [ 24.667870][ T4708] Bluetooth: hci0: command tx timeout [ 24.667943][ T4708] Bluetooth: hci2: command tx timeout [ 24.668004][ T4708] Bluetooth: hci1: command tx timeout [ 24.707429][ T30] audit: type=1400 audit(24.670:2): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="_" object="lowerdir" requested=w pid=4911 comm="syz.2.3" name="file1" dev="tmpfs" ino=18 [ 24.748526][ T50] Bluetooth: hci4: command tx timeout [ 25.008751][ T4948] Injecting memory failure for pfn 0x11f55e at process virtual address 0x20945000 [ 25.013079][ T4948] Memory failure: 0x11f55e: recovery action for clean LRU page: Recovered [ 25.013354][ T4948] Injecting memory failure for pfn 0x11f55f at process virtual address 0x20946000 [ 25.013452][ T4948] Memory failure: 0x11f55f: recovery action for clean LRU page: Recovered [ 25.013463][ T4948] Injecting memory failure for pfn 0x11f560 at process virtual address 0x20947000 [ 25.013503][ T4948] Memory failure: 0x11f560: recovery action for clean LRU page: Recovered [ 25.013512][ T4948] Injecting memory failure for pfn 0x11f561 at process virtual address 0x20948000 [ 25.013546][ T4948] Memory failure: 0x11f561: recovery action for clean LRU page: Recovered [ 25.143132][ T4958] loop3: detected capacity change from 0 to 128 [ 25.153001][ T4958] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 25.153038][ T4958] FAT-fs (loop3): Filesystem has been set read-only [ 25.154057][ T4958] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.214310][ T4962] loop4: detected capacity change from 0 to 2048 [ 25.239570][ T4962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.281252][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.286125][ T4968] loop3: detected capacity change from 0 to 4096 [ 25.289435][ T4968] EXT4-fs: Ignoring removed orlov option [ 25.291325][ T4968] EXT4-fs (loop3): Test dummy encryption mode enabled [ 25.305558][ T4968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.323214][ T4968] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 25.348172][ T4968] fscrypt: AES-256-XTS using blk-crypto-fallback [ 25.383533][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.385630][ T4974] loop4: detected capacity change from 0 to 512 [ 25.392854][ T4974] EXT4-fs (loop4): Test dummy encryption mode enabled [ 25.401941][ T4974] EXT4-fs (loop4): 1 truncate cleaned up [ 25.402455][ T4974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.439113][ T2670] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm kworker/u8:7: bg 0: block 465: padding at end of block bitmap is not set [ 25.440114][ T2670] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 25.440130][ T2670] EXT4-fs (loop4): This should not happen!! Data will be lost [ 25.440130][ T2670] [ 25.440138][ T2670] EXT4-fs (loop4): Total free blocks count 0 [ 25.440144][ T2670] EXT4-fs (loop4): Free/Dirty block details [ 25.440153][ T2670] EXT4-fs (loop4): free_blocks=0 [ 25.440163][ T2670] EXT4-fs (loop4): dirty_blocks=4 [ 25.440169][ T2670] EXT4-fs (loop4): Block reservation details [ 25.440175][ T2670] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 25.441356][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.608322][ T4995] ======================================================= [ 25.608322][ T4995] WARNING: The mand mount option has been deprecated and [ 25.608322][ T4995] and is ignored by this kernel. Remove the mand [ 25.608322][ T4995] option from the mount to silence this warning. [ 25.608322][ T4995] ======================================================= [ 25.608393][ T4995] bpf: Bad value for 'uid' [ 25.691771][ T4998] Bluetooth: MGMT ver 1.23 [ 25.724502][ T5006] Bluetooth: MGMT ver 1.23 [ 25.724937][ T5006] Bluetooth: hci1: too big key_count value 4608 [ 25.746186][ T5011] team0: entered allmulticast mode [ 25.748342][ T5011] team_slave_0: entered allmulticast mode [ 25.749533][ T5011] team_slave_1: entered allmulticast mode [ 25.751194][ T5011] team0: left allmulticast mode [ 25.752304][ T5011] team_slave_0: left allmulticast mode [ 25.753502][ T5011] team_slave_1: left allmulticast mode [ 25.859197][ T5026] loop2: detected capacity change from 0 to 512 [ 25.897946][ T5026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.942307][ T5026] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 25.951855][ T5026] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 25.955429][ T5026] EXT4-fs (loop2): This should not happen!! Data will be lost [ 25.955429][ T5026] [ 25.955485][ T5026] EXT4-fs (loop2): Total free blocks count 0 [ 25.955504][ T5026] EXT4-fs (loop2): Free/Dirty block details [ 25.955529][ T5026] EXT4-fs (loop2): free_blocks=65280 [ 25.955549][ T5026] EXT4-fs (loop2): dirty_blocks=33 [ 25.955564][ T5026] EXT4-fs (loop2): Block reservation details [ 25.955578][ T5026] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 25.988785][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.070387][ T5051] bonding: no command found in bonding_masters - use +ifname or -ifname [ 26.165425][ T5060] ima: policy update failed [ 26.166912][ T30] audit: type=1802 audit(26.130:3): pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.84" res=0 errno=0 [ 26.230596][ T5074] loop1: detected capacity change from 0 to 128 [ 26.231099][ T5074] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.234088][ T5069] capability: warning: `syz.4.88' uses deprecated v2 capabilities in a way that may be insecure [ 26.235364][ T5074] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 26.240781][ T5069] overlayfs: upper fs does not support tmpfile. [ 26.243305][ T5067] netlink: 40 bytes leftover after parsing attributes in process `syz.0.87'. [ 26.295266][ T4891] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 26.298718][ T4891] wiimote 0005:057E:0306.0001: New device registered [ 26.382407][ T5090] loop2: detected capacity change from 0 to 512 [ 26.385849][ T5090] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.387204][ T5088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.95'. [ 26.415058][ T5090] syz.2.97: attempt to access beyond end of device [ 26.415058][ T5090] loop2: rw=0, sector=17179852706, nr_sectors = 16 limit=512 [ 26.656169][ T5125] ieee802154 phy0 wpan0: encryption failed: -22 [ 26.748408][ T4708] Bluetooth: hci2: command tx timeout [ 26.748443][ T4705] Bluetooth: hci3: command tx timeout [ 26.748482][ T50] Bluetooth: hci1: command tx timeout [ 26.751809][ T4712] Bluetooth: hci0: command tx timeout [ 26.815335][ T5131] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 26.826900][ T4712] Bluetooth: hci4: command tx timeout [ 26.915637][ T5144] loop1: detected capacity change from 0 to 128 [ 26.924871][ T5144] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 26.943832][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 27.115480][ T5077] wiimote 0005:057E:0306.0001: Device removed [ 27.318862][ T4797] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 27.327695][ T4797] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input3 [ 27.338216][ T4797] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input4 [ 27.357678][ T4797] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input2 [ 27.363068][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 27.363099][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 27.399318][ T5175] process 'syz.2.136' launched './file2' with NULL argv: empty string added [ 27.443257][ T5179] netlink: 60 bytes leftover after parsing attributes in process `syz.4.137'. [ 27.664022][ T5213] ip_tables: iptables: counters copy to user failed while replacing table [ 27.711912][ T5216] loop1: detected capacity change from 0 to 1024 [ 27.714736][ T5216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 27.733911][ T5216] EXT4-fs (loop1): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 27.760730][ T5224] loop3: detected capacity change from 0 to 256 [ 27.784823][ T5216] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.151: bg 0: block 112: padding at end of block bitmap is not set [ 27.789078][ T5216] EXT4-fs (loop1): Remounting filesystem read-only [ 27.840218][ T5230] sctp: [Deprecated]: syz.4.156 (pid 5230) Use of int in max_burst socket option deprecated. [ 27.840218][ T5230] Use struct sctp_assoc_value instead [ 27.845137][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 28.265955][ T5286] syz.1.175 uses obsolete (PF_INET,SOCK_PACKET) [ 28.349828][ T5294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 28.370999][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 28.374072][ T5297] EXT4-fs (loop4): orphan cleanup on readonly fs [ 28.378435][ T5297] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.181: EA inode 11 has unexpected i_nlink=2 ref_count=0 [ 28.378495][ T5297] loop4: lost filesystem error report for type 5 error -117 [ 28.386559][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 28.386586][ C1] EXT4-fs (loop4): initial error at time 284: ext4_xattr_inode_iget:473 [ 28.386600][ C1] EXT4-fs (loop4): last error at time 284: ext4_xattr_inode_iget:473 [ 28.401787][ T5297] EXT4-fs (loop4): 1 orphan inode deleted [ 28.402309][ T5297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 28.424387][ T5305] EXT4-fs: Ignoring removed nobh option [ 28.452795][ T5305] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.184: invalid block [ 28.452881][ T5305] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 28.454225][ T5305] EXT4-fs error (device loop3) in ext4_process_orphan:346: IO failure [ 28.454243][ T5305] loop3: lost filesystem error report for type 5 error -5 [ 28.457462][ T5305] EXT4-fs (loop3): 2 truncates cleaned up [ 28.457912][ T5305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.482813][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.490178][ T5305] EXT4-fs warning (device loop3): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 28.524221][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.580660][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 28.698350][ T4846] IPVS: starting estimator thread 0... [ 28.783943][ T5334] EXT4-fs: Ignoring removed bh option [ 28.785424][ T5334] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 28.789312][ T5328] IPVS: using max 59 ests per chain, 141600 per kthread [ 28.806983][ T5334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.827877][ T4712] Bluetooth: hci1: command tx timeout [ 28.827918][ T4712] Bluetooth: hci2: command tx timeout [ 28.827946][ T4712] Bluetooth: hci0: command tx timeout [ 28.827967][ T4712] Bluetooth: hci3: command tx timeout [ 28.837836][ T5334] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 28.893115][ T4719] EXT4-fs error (device loop4): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /49/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 28.898593][ T4719] EXT4-fs (loop4): Remounting filesystem read-only [ 28.903250][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.917496][ T50] Bluetooth: hci4: command tx timeout [ 28.952550][ T5346] warning: `syz.3.200' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 29.107998][ T5355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.141424][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.186053][ T5364] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.189514][ T5363] netlink: 'syz.2.207': attribute type 14 has an invalid length. [ 29.267184][ T5369] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 29.267221][ T5369] FAT-fs (loop3): Filesystem has been set read-only [ 29.267465][ T5369] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 29.268040][ T5369] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 29.328680][ T5373] pimreg3: entered allmulticast mode [ 29.339910][ T5372] pimreg3: left allmulticast mode [ 29.614280][ T5389] bridge_slave_1: invalid flags given to default FDB implementation [ 29.730157][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 29.777155][ T5404] Injecting memory failure for pfn 0x135591 at process virtual address 0x20001000 [ 29.780366][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 29.781957][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 29.788308][ T5404] Memory failure: 0x135591: keeping poisoned page in swap cache [ 29.789986][ T5404] Memory failure: 0x135591: Sending SIGBUS to syz.1.194:5404 due to hardware memory corruption [ 29.792144][ T5404] Memory failure: 0x135591: recovery action for dirty swapcache page: Delayed [ 29.793972][ T5404] Injecting memory failure for pfn 0x135590 at process virtual address 0x20002000 [ 29.795981][ T5404] Memory failure: 0x135590: keeping poisoned page in swap cache [ 29.796015][ T5404] Memory failure: 0x135590: Sending SIGBUS to syz.1.194:5404 due to hardware memory corruption [ 29.796043][ T5404] Memory failure: 0x135590: recovery action for dirty swapcache page: Delayed [ 29.796073][ T5404] Injecting memory failure for pfn 0x13558f at process virtual address 0x20003000 [ 29.796105][ T5404] Memory failure: 0x13558f: keeping poisoned page in swap cache [ 29.796122][ T5404] Memory failure: 0x13558f: Sending SIGBUS to syz.1.194:5404 due to hardware memory corruption [ 29.796144][ T5404] Memory failure: 0x13558f: recovery action for dirty swapcache page: Delayed [ 30.257736][ T5443] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.243'. [ 30.334909][ T5449] set_capacity_and_notify: 7 callbacks suppressed [ 30.335073][ T5449] loop1: detected capacity change from 0 to 2048 [ 30.341910][ T5449] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 30.371052][ T4465] kernel write not supported for file bpf-prog (pid: 4465 comm: kworker/0:3) [ 30.394874][ T5460] loop3: detected capacity change from 0 to 512 [ 30.396714][ T5460] EXT4-fs: Ignoring removed orlov option [ 30.399015][ T5460] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.401403][ T5460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.414033][ T5460] EXT4-fs (loop3): 1 truncate cleaned up [ 30.414514][ T5460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.431572][ T5460] EXT4-fs (loop3): shut down requested (2) [ 30.448137][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.516763][ T5474] loop1: detected capacity change from 0 to 512 [ 30.550773][ T5476] netlink: 'syz.1.259': attribute type 2 has an invalid length. [ 30.609344][ T5455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.609556][ T5455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.829643][ T5508] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.897684][ T5524] netlink: 'syz.1.282': attribute type 39 has an invalid length. [ 30.906791][ T50] Bluetooth: hci3: command tx timeout [ 30.906839][ T4705] Bluetooth: hci2: command tx timeout [ 30.907873][ T50] Bluetooth: hci1: command tx timeout [ 30.908251][ T4712] Bluetooth: hci0: command tx timeout [ 30.922859][ T5526] loop2: detected capacity change from 0 to 128 [ 30.940079][ T5526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 30.940133][ T5526] System zones: 1-3, 19-19, 35-36 [ 30.943149][ T5526] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 30.971973][ T4716] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.986610][ T4712] Bluetooth: hci4: command tx timeout [ 31.032205][ T5537] loop3: detected capacity change from 0 to 1024 [ 31.064130][ T5537] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 31.064184][ T5537] System zones: 0-1, 3-12 [ 31.064754][ T5537] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.095168][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 31.229410][ T5560] ima: policy update failed [ 31.230512][ T30] audit: type=1807 audit(287.196:4): func=FILE_CHECK res=0 [ 31.231941][ T30] audit: type=1802 audit(287.196:5): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.1.300" res=0 errno=0 [ 31.235116][ T30] audit: type=1802 audit(287.196:6): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.300" res=0 errno=0 [ 31.263398][ T5567] loop2: detected capacity change from 0 to 1024 [ 31.273576][ T5567] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.297649][ T5567] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.301: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.297688][ T5567] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 31.298180][ T5567] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 31.298205][ T5567] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.301: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.298220][ T5567] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 31.298326][ T5567] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 31.298335][ T5567] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.301: Failed to acquire dquot type 0 [ 31.298346][ T5567] loop2: lost filesystem error report for type 5 error -117 [ 31.298501][ T5567] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 31.298511][ T5567] loop2: lost filesystem error report for type 5 error -117 [ 31.298594][ T5567] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.301: mark_inode_dirty error [ 31.298605][ T5567] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 31.298676][ T5567] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 31.298712][ T5567] EXT4-fs (loop2): 1 orphan inode deleted [ 31.299152][ T5567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.327064][ T4846] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.327819][ T4846] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 31.327838][ T4846] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 0 [ 31.376442][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.382779][ T40] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.382820][ T40] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 31.383420][ T40] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 31.383438][ T40] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 31.383449][ T40] loop2: lost filesystem error report for type 5 error -117 [ 31.384494][ T4716] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 31.384510][ T4716] loop2: lost filesystem error report for type 5 error -117 [ 31.385271][ T4716] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 31.385295][ T4716] loop2: lost filesystem error report for type 5 error -117 [ 31.385418][ T4716] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 31.385429][ T4716] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 31.385549][ T4716] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 31.385560][ T4716] loop2: lost filesystem error report for type 5 error -117 [ 31.581580][ T5598] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 31.586378][ T5598] bond1 (unregistering): Released all slaves [ 31.617060][ T5604] __nla_validate_parse: 3 callbacks suppressed [ 31.617092][ T5604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.319'. [ 31.768519][ T5619] Injecting memory failure for pfn 0x218eff at process virtual address 0x20289000 [ 31.774178][ T5619] Memory failure: 0x218eff: unhandlable page. [ 31.776131][ T5619] Memory failure: 0x218eff: recovery action for reserved kernel page: Ignored [ 32.091141][ T5646] loop1: detected capacity change from 0 to 512 [ 32.102319][ T5646] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.340: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 32.105617][ T5646] loop1: lost filesystem error report for type 5 error -117 [ 32.106576][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 32.106598][ C0] EXT4-fs (loop1): initial error at time 288: ext4_xattr_inode_iget:473 [ 32.106622][ C0] EXT4-fs (loop1): last error at time 288: ext4_xattr_inode_iget:473 [ 32.111576][ T5646] EXT4-fs (loop1): 1 orphan inode deleted [ 32.112594][ T5646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.137939][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.188450][ T5652] loop4: detected capacity change from 0 to 512 [ 32.190015][ T5652] EXT4-fs: Ignoring removed bh option [ 32.210611][ T5652] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 32.219882][ T5652] EXT4-fs (loop4): 1 truncate cleaned up [ 32.220439][ T5652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.253249][ T5659] input: syz0 as /devices/virtual/input/input5 [ 32.254069][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.311497][ T5667] loop3: detected capacity change from 0 to 256 [ 32.450432][ T5682] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 32.495466][ T5691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'. [ 32.495501][ T5691] bond0: option miimon: invalid value (18446744073709551615) [ 32.495530][ T5691] bond0: option miimon: allowed values 0 - 2147483647 [ 32.559480][ T5665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.559680][ T5665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.916005][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 32.945348][ T5759] loop1: detected capacity change from 0 to 512 [ 32.954862][ T5759] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.955112][ T5759] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.393: Directory hole found for htree index block 0 [ 32.955128][ T5759] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 32.957590][ T5759] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 32.958066][ T5759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.971460][ T5759] EXT4-fs (loop1): shut down requested (2) [ 32.984362][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.248465][ T5786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.264955][ T5796] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 33.274068][ T5796] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.411: bg 0: block 104: invalid block bitmap [ 33.274129][ T5796] loop3: lost filesystem error report for type 5 error -117 [ 33.279203][ T5796] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 33.284755][ T5786] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.406: bg 0: block 345: padding at end of block bitmap is not set [ 33.286546][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 33.286572][ C0] EXT4-fs (loop3): initial error at time 289: ext4_validate_block_bitmap:436 [ 33.286598][ C0] EXT4-fs (loop3): last error at time 289: ext4_mb_clear_bb:6680 [ 33.294818][ T5786] fs-verity (loop2, inode 13): Error -28 writing Merkle tree block 0 [ 33.294870][ T5786] fs-verity (loop2, inode 13): Error -28 building Merkle tree [ 33.294900][ T5796] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.411: invalid indirect mapped block 1 (level 1) [ 33.294928][ T5796] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.301196][ T5796] EXT4-fs (loop3): 1 truncate cleaned up [ 33.301874][ T5796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.319233][ T5796] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.326435][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.369984][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.564882][ T5834] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 33.564952][ T5834] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 33.568553][ T5838] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.430: corrupted in-inode xattr: invalid ea_ino [ 33.568570][ T5838] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.568947][ T5838] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.430: couldn't read orphan inode 15 (err -117) [ 33.568961][ T5838] fserror_report: 1 callbacks suppressed [ 33.568966][ T5838] loop2: lost filesystem error report for type 5 error -117 [ 33.569487][ T5838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.634976][ T5838] overlayfs: workdir and upperdir must reside under the same mount [ 33.645956][ T5843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.433'. [ 33.678503][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.711466][ T5847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.730232][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.734835][ T5851] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.858024][ T5865] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.003704][ T4703] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.141102][ T5901] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 34.182923][ T5909] netlink: 'syz.2.463': attribute type 8 has an invalid length. [ 34.487972][ T5942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.529940][ T5951] ieee802154 phy0 wpan0: encryption failed: -22 [ 34.567599][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.730423][ T5969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.749821][ T5969] EXT4-fs (loop3): shut down requested (0) [ 34.788975][ T5976] bond0: option arp_interval: invalid value ( ) [ 34.789015][ T5976] bond0: option arp_interval: allowed values 0 - 2147483647 [ 34.868015][ T5977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.922842][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.995490][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.275279][ T6023] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 35.275376][ T6023] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 35.288040][ T6023] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.288175][ T6023] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.291079][ T6023] EXT4-fs error (device loop0): ext4_quota_enable:7256: comm syz.0.515: Bad quota inum: 9, type: 2 [ 35.291111][ T6023] loop0: lost filesystem error report for type 5 error -117 [ 35.293864][ T6023] EXT4-fs (loop0): Remounting filesystem read-only [ 35.293942][ T6023] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 35.294184][ T6023] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 35.294657][ T6023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.301083][ T6019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.332540][ T6023] netlink: 100 bytes leftover after parsing attributes in process `syz.0.515'. [ 35.343453][ T4703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.365585][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.450179][ T6043] set_capacity_and_notify: 12 callbacks suppressed [ 35.452585][ T6043] loop1: detected capacity change from 0 to 2048 [ 35.458724][ T6048] netlink: 11 bytes leftover after parsing attributes in process `syz.4.526'. [ 35.458755][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.526'. [ 35.458768][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.526'. [ 35.480617][ T6043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.532752][ T6043] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.546114][ T6057] netlink: 'syz.2.529': attribute type 5 has an invalid length. [ 35.838808][ T6094] loop1: detected capacity change from 0 to 256 [ 35.840877][ T6094] FAT-fs (loop1): data area starts beyond volume (274 > 64) [ 35.840908][ T6094] FAT-fs (loop1): Can't find a valid FAT filesystem [ 35.991698][ T6115] loop1: detected capacity change from 0 to 512 [ 35.995733][ T6115] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.123170][ T6130] loop4: detected capacity change from 0 to 4096 [ 36.126234][ T6130] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.127855][ T6130] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 36.129803][ T6130] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237) [ 36.132105][ T6130] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 36.134415][ T6130] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.563: Invalid inode table block 0 in block_group 0 [ 36.139026][ T6130] loop4: lost filesystem error report for type 5 error -117 [ 36.139747][ T6130] EXT4-fs (loop4): Remounting filesystem read-only [ 36.142693][ T6130] EXT4-fs (loop4): get root inode failed [ 36.142722][ T6130] EXT4-fs (loop4): mount failed [ 36.183930][ T6134] vlan2: entered allmulticast mode [ 36.185222][ T6134] macsec0: entered allmulticast mode [ 36.185264][ T6134] veth1_macvtap: entered allmulticast mode [ 36.287554][ T6145] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.568'. [ 36.361993][ T6154] loop3: detected capacity change from 0 to 2048 [ 36.363426][ T6154] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 36.513964][ T6169] loop0: detected capacity change from 0 to 4096 [ 36.523399][ T6169] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.524912][ T6169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.541635][ T6169] EXT4-fs error (device loop0): __ext4_new_inode:1083: comm syz.0.579: reserved inode found cleared - inode=18 [ 36.566401][ T4703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.648522][ T6183] loop0: detected capacity change from 0 to 4096 [ 36.657971][ T6183] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.663505][ T6183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.701213][ T6189] loop3: detected capacity change from 0 to 1024 [ 36.721990][ T6189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 36.746396][ T4703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.748679][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 36.818910][ T6199] loop3: detected capacity change from 0 to 256 [ 36.963017][ T6205] netlink: 42 bytes leftover after parsing attributes in process `syz.4.595'. [ 37.146387][ T6213] loop1: detected capacity change from 0 to 512 [ 37.156283][ T6213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.169608][ T6213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.187386][ T6213] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.599: bg 0: block 217: padding at end of block bitmap is not set [ 37.191510][ T6213] EXT4-fs (loop1): Remounting filesystem read-only [ 37.204234][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.238440][ T6220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.242179][ T6220] EXT4-fs (loop2): 1 truncate cleaned up [ 37.243902][ T6220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.293151][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.569144][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 37.679043][ T6266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.717675][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.763489][ T6277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.627'. [ 37.912517][ T6293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.971945][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.042469][ T6302] netlink: 64 bytes leftover after parsing attributes in process `syz.1.637'. [ 38.175041][ T6323] bond0: option slaves: interface +d does not exist! [ 38.639964][ T6382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.723206][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.791580][ T6396] EXT4-fs: Ignoring removed orlov option [ 38.791631][ T6396] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.794886][ T6396] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 38.799416][ T6396] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.667: attempt to clear invalid blocks 2 len 1 [ 38.799452][ T6396] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.800486][ T6396] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 38.801337][ T6396] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.667: invalid indirect mapped block 1819239214 (level 0) [ 38.801359][ T6396] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.801555][ T6396] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.667: invalid indirect mapped block 1819239214 (level 1) [ 38.801569][ T6396] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.802653][ T6396] EXT4-fs (loop0): 1 truncate cleaned up [ 38.803131][ T6396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.845190][ T4703] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 38.854030][ T6399] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 38.854138][ T6399] syzkaller1: linktype set to 826 [ 38.864004][ T4703] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 38.869043][ T4703] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 39.061362][ T6415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.064701][ T6419] tap0: tun_chr_ioctl cmd 35108 [ 39.090038][ T6415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 39.090878][ T6415] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 39.090894][ T6415] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.090894][ T6415] [ 39.090903][ T6415] EXT4-fs (loop1): Total free blocks count 0 [ 39.090910][ T6415] EXT4-fs (loop1): Free/Dirty block details [ 39.090919][ T6415] EXT4-fs (loop1): free_blocks=4096 [ 39.090927][ T6415] EXT4-fs (loop1): dirty_blocks=64 [ 39.090934][ T6415] EXT4-fs (loop1): Block reservation details [ 39.090940][ T6415] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 39.108172][ T6414] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.179212][ T5743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.322883][ T4708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.324866][ T4708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.332942][ T4708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.335411][ T4708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.367749][ T4708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.455408][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.463359][ T6460] tipc: Started in network mode [ 39.463400][ T6460] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 39.463508][ T6460] tipc: Enabled bearer , priority 0 [ 39.573153][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.688249][ T6492] EXT4-fs (loop4): Test dummy encryption mode enabled [ 39.698170][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.703644][ T6492] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.742815][ T4719] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.771436][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.809928][ T6507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.715'. [ 39.838724][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.838819][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.838877][ T6446] bridge_slave_0: entered allmulticast mode [ 39.839423][ T6446] bridge_slave_0: entered promiscuous mode [ 39.840653][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.840705][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.840792][ T6446] bridge_slave_1: entered allmulticast mode [ 39.841215][ T6446] bridge_slave_1: entered promiscuous mode [ 39.849632][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.850590][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.886496][ T6446] team0: Port device team_slave_0 added [ 39.889985][ T6446] team0: Port device team_slave_1 added [ 39.969137][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.969168][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.969194][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.969804][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.969811][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.969826][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.021652][ T6446] hsr_slave_0: entered promiscuous mode [ 40.025306][ T6446] hsr_slave_1: entered promiscuous mode [ 40.028784][ T6446] debugfs: 'hsr0' already exists in 'hsr' [ 40.028817][ T6446] Cannot create hsr debugfs directory [ 40.040209][ T51] bridge_slave_1: left allmulticast mode [ 40.040256][ T51] bridge_slave_1: left promiscuous mode [ 40.040817][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.044846][ T51] bridge_slave_0: left allmulticast mode [ 40.044895][ T51] bridge_slave_0: left promiscuous mode [ 40.044966][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.125006][ T6544] bonding: bond0 is being created... [ 40.175863][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.203182][ T6546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.209794][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.212575][ T6546] EXT4-fs (loop2): shut down requested (2) [ 40.228808][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.228948][ T51] bond0 (unregistering): Released all slaves [ 40.234206][ T6533] netlink: 'syz.1.726': attribute type 2 has an invalid length. [ 40.243331][ T6544] bonding: bond0 already exists [ 40.362734][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 40.564278][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.580167][ T9] tipc: Node number set to 43690 [ 40.585408][ T6446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.661998][ T6446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.663852][ T6446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.673597][ T6446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.763074][ T6446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.772819][ T6446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.774650][ T6446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.791780][ T6446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.849928][ T51] hsr_slave_0: left promiscuous mode [ 40.851418][ T51] hsr_slave_1: left promiscuous mode [ 40.852023][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.852041][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.860915][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.860955][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.874862][ T51] veth1_macvtap: left promiscuous mode [ 40.874936][ T51] veth0_macvtap: left promiscuous mode [ 40.875039][ T51] veth1_vlan: left promiscuous mode [ 40.875084][ T51] veth0_vlan: left promiscuous mode [ 41.072020][ T51] team0 (unregistering): Port device team_slave_1 removed [ 41.081449][ T51] team0 (unregistering): Port device team_slave_0 removed [ 41.152681][ T4394] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.164805][ T6607] alloc_netdev: Unable to allocate device with zero queues [ 41.209902][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.216101][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.247999][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.248052][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.248671][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.248691][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.259114][ T6651] set_capacity_and_notify: 10 callbacks suppressed [ 41.259152][ T6651] loop3: detected capacity change from 0 to 1024 [ 41.270152][ T6645] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 41.270212][ T6645] syzkaller1: group set to 0 [ 41.280707][ T6651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.294689][ T6446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.301443][ T6651] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.765: Freeing blocks not in datazone - block = 0, count = 16 [ 41.386675][ T4712] Bluetooth: hci0: command tx timeout [ 41.411214][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.578815][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.664189][ T4394] 8021q: adding VLAN 0 to HW filter on device eth2 [ 41.695348][ T6446] veth0_vlan: entered promiscuous mode [ 41.704534][ T6446] veth1_vlan: entered promiscuous mode [ 41.722713][ T6446] veth0_macvtap: entered promiscuous mode [ 41.728901][ T6446] veth1_macvtap: entered promiscuous mode [ 41.733937][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.739875][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.744020][ T4846] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.744224][ T4846] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.744344][ T4846] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.744445][ T4846] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.812889][ T6718] bond0: invalid ARP target specified [ 41.849464][ T6726] loop4: detected capacity change from 0 to 512 [ 41.851119][ T6726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.852462][ T6726] EXT4-fs: Ignoring removed nobh option [ 41.853519][ T6726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.854748][ T6726] EXT4-fs: Ignoring removed bh option [ 41.889252][ T4846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.891068][ T4846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.893027][ T6726] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 41.901464][ T6726] EXT4-fs (loop4): 1 orphan inode deleted [ 41.903758][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.903784][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.906657][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 41.906667][ C1] EXT4-fs (loop4): initial error at time 297: ext4_mb_generate_buddy:1317 [ 41.906679][ C1] EXT4-fs (loop4): last error at time 297: ext4_mb_generate_buddy:1317 [ 41.919812][ T6726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.970657][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.999315][ T4394] 8021q: adding VLAN 0 to HW filter on device eth3 [ 42.142760][ T6760] netlink: 'syz.4.792': attribute type 2 has an invalid length. [ 42.182805][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.794'. [ 42.311033][ T6782] loop5: detected capacity change from 0 to 1024 [ 42.339669][ T6782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.348382][ T6782] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.801: bg 0: block 112: padding at end of block bitmap is not set [ 42.351698][ T6782] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 35 with max blocks 1 with error 28 [ 42.351736][ T6782] EXT4-fs (loop5): This should not happen!! Data will be lost [ 42.351736][ T6782] [ 42.351751][ T6782] EXT4-fs (loop5): Total free blocks count 0 [ 42.351765][ T6782] EXT4-fs (loop5): Free/Dirty block details [ 42.351779][ T6782] EXT4-fs (loop5): free_blocks=0 [ 42.351793][ T6782] EXT4-fs (loop5): dirty_blocks=16 [ 42.351804][ T6782] EXT4-fs (loop5): Block reservation details [ 42.351814][ T6782] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 42.376994][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.454176][ T6798] Zero length message leads to an empty skb [ 42.646248][ T6817] loop5: detected capacity change from 0 to 512 [ 42.650026][ T6817] EXT4-fs (loop5): Test dummy encryption mode enabled [ 42.655719][ T6817] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.817: inode has both inline data and extents flags [ 42.655752][ T6817] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.656540][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 42.656556][ C0] EXT4-fs (loop5): initial error at time 298: ext4_orphan_get:1403: inode 15 [ 42.656572][ C0] EXT4-fs (loop5): last error at time 298: ext4_orphan_get:1403: inode 15 [ 42.659506][ T6817] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.817: couldn't read orphan inode 15 (err -117) [ 42.659527][ T6817] loop5: lost filesystem error report for type 5 error -117 [ 42.660079][ T6817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.711353][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.735700][ T6822] loop4: detected capacity change from 0 to 512 [ 42.737441][ T6822] EXT4-fs: Ignoring removed i_version option [ 42.740515][ T6824] loop5: detected capacity change from 0 to 128 [ 42.753244][ T6822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.762742][ T6822] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.820: iget: bad i_size value: 2533274857506816 [ 42.767150][ T6822] EXT4-fs (loop4): Remounting filesystem read-only [ 42.798744][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.013539][ T6847] loop5: detected capacity change from 0 to 8 [ 43.088111][ T30] audit: type=1326 audit(299.056:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d792a8 code=0x7ffc0000 [ 43.088229][ T30] audit: type=1326 audit(299.056:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d792a8 code=0x7ffc0000 [ 43.089440][ T30] audit: type=1326 audit(299.056:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94d792a8 code=0x7ffc0000 [ 43.089457][ T30] audit: type=1326 audit(299.056:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d792a8 code=0x7ffc0000 [ 43.089472][ T30] audit: type=1326 audit(299.056:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d792a8 code=0x7ffc0000 [ 43.089833][ T30] audit: type=1326 audit(299.056:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff94d792a8 code=0x7ffc0000 [ 43.090890][ T30] audit: type=1326 audit(299.056:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff94d78fa0 code=0x7ffc0000 [ 43.090918][ T30] audit: type=1326 audit(299.056:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff94d78fa0 code=0x7ffc0000 [ 43.090937][ T30] audit: type=1326 audit(299.056:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d792a8 code=0x7ffc0000 [ 43.090953][ T30] audit: type=1326 audit(299.056:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.831" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d792a8 code=0x7ffc0000 [ 43.207170][ T6866] loop3: detected capacity change from 0 to 256 [ 43.287097][ T6872] loop1: detected capacity change from 0 to 512 [ 43.289972][ T6872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.297791][ T6872] EXT4-fs (loop1): 1 truncate cleaned up [ 43.299490][ T6872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.313053][ T6872] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6537: inode #15: comm syz.1.838: bad extra_isize 62 (inode size 256) [ 43.316147][ T6872] EXT4-fs (loop1): Remounting filesystem read-only [ 43.320321][ T6872] EXT4-fs (loop1): pa 0000000037289529: logic 296, phys. 39, len 216 [ 43.329848][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.353355][ T6878] loop1: detected capacity change from 0 to 128 [ 43.355381][ T6878] FAT-fs (loop1): bogus logical sector size 0 [ 43.356885][ T6878] FAT-fs (loop1): Can't find a valid FAT filesystem [ 43.466675][ T4712] Bluetooth: hci0: command tx timeout [ 43.654792][ T6913] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.658420][ T6913] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.879845][ T6937] EXT4-fs: Ignoring removed oldalloc option [ 43.880132][ T6937] EXT4-fs (loop5): Test dummy encryption mode enabled [ 43.910521][ T6937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.921414][ T6937] EXT4-fs error (device loop5): ext4_readdir:226: inode #12: comm syz.5.869: path (unknown): directory fails checksum at offset 0 [ 43.940965][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.962520][ T6941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.983060][ T6941] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.870: corrupted xattr block 33: invalid header [ 43.992502][ T6941] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.870: corrupted xattr block 33: invalid header [ 43.995391][ T6941] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.870: corrupted xattr block 33: invalid header [ 44.044469][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.079557][ T6947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 44.079623][ T6947] System zones: 1-12 [ 44.080030][ T6947] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.873: missing EA_INODE flag [ 44.080044][ T6947] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.081388][ T6947] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.873: error while reading EA inode 12 err=-117 [ 44.081403][ T6947] loop5: lost filesystem error report for type 5 error -117 [ 44.081556][ T6947] EXT4-fs (loop5): 1 orphan inode deleted [ 44.082013][ T6947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.112377][ T6947] fscrypt (loop5, inode 15): Unsupported log2_data_unit_size in encryption policy: 133 [ 44.143262][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.198795][ T6958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.220601][ T6958] EXT4-fs error (device loop5): ext4_generic_delete_entry:2675: inode #2: block 16: comm syz.5.877: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 44.229553][ T6958] EXT4-fs error (device loop5) in ext4_delete_entry:2746: Corrupt filesystem [ 44.234631][ T6958] EXT4-fs warning (device loop5): ext4_rename_delete:3741: inode #2: comm syz.5.877: Deleting old file: nlink 1, error=-117 [ 44.270125][ T6446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.412716][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'. [ 44.495757][ T6994] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 44.564344][ T7002] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.897: bad orphan inode 17 [ 44.564391][ T7002] loop4: lost filesystem error report for type 5 error -117 [ 44.565794][ T7002] ext4_test_bit(bit=16, block=4) = 1 [ 44.565819][ T7002] is_bad_inode(inode)=0 [ 44.565831][ T7002] NEXT_ORPHAN(inode)=0 [ 44.565843][ T7002] max_ino=32 [ 44.565855][ T7002] i_nlink=1 [ 44.566356][ T7002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.876960][ T6607] netdevsim netdevsim10: probe with driver netdevsim failed with error -12 [ 44.922995][ T7038] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 45.183514][ T7057] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 45.187816][ T7057] netlink: 'syz.3.923': attribute type 2 has an invalid length. [ 45.547490][ T4712] Bluetooth: hci0: command tx timeout [ 45.602068][ T7095] ================================================================== [ 45.602086][ T7095] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x16b4/0x1aac [ 45.602107][ T7095] Write of size 8 at addr ffff800093e89000 ** replaying previous printk message ** [ 45.602107][ T7095] Write of size 8 at addr ffff800093e89000 by task syz.1.940/7095 [ 45.602115][ T7095] [ 45.602122][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.1.940 Not tainted syzkaller #0 PREEMPT [ 45.602132][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.602138][ T7095] Call trace: [ 45.602141][ T7095] show_stack+0x2c/0x3c (C) [ 45.602158][ T7095] __dump_stack+0x30/0x40 [ 45.602171][ T7095] dump_stack_lvl+0xd8/0x12c [ 45.602182][ T7095] print_address_description+0xb0/0x238 [ 45.602191][ T7095] print_report+0x68/0x84 [ 45.602199][ T7095] kasan_report+0x8c/0xc4 [ 45.602210][ T7095] __asan_report_store8_noabort+0x20/0x2c [ 45.602221][ T7095] sys_fillrect+0x16b4/0x1aac [ 45.602231][ T7095] drm_fbdev_shmem_defio_fillrect+0x38/0x144 [ 45.602243][ T7095] bit_clear+0x134/0x1cc [ 45.602251][ T7095] __fbcon_clear+0x38c/0x648 [ 45.602259][ T7095] fbcon_scroll+0x270/0x464 [ 45.602267][ T7095] con_scroll+0x18c/0x330 [ 45.602282][ T7095] csi_ECMA+0xea8/0x3074 [ 45.602292][ T7095] do_con_write+0x315c/0x4264 [ 45.602303][ T7095] con_put_char+0x8c/0xd0 [ 45.602312][ T7095] tty_put_char+0xcc/0x148 [ 45.602320][ T7095] do_output_char+0x504/0x7a4 [ 45.602330][ T7095] n_tty_write+0xa20/0xd90 [ 45.602339][ T7095] file_tty_write+0x3dc/0x66c [ 45.602346][ T7095] tty_write+0x44/0x54 [ 45.602353][ T7095] vfs_write+0x51c/0xa0c [ 45.602366][ T7095] ksys_write+0x12c/0x228 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 45.602378][ T7095] __arm64_sys_write+0x84/0x98 [ 45.602390][ T7095] invoke_syscall+0x98/0x244 [ 45.602401][ T7095] el0_svc_common+0xec/0x23c [ 45.602413][ T7095] do_el0_svc+0x4c/0x5c [ 45.602424][ T7095] el0_svc+0x64/0x260 [ 45.602436][ T7095] el0t_64_sync_handler+0x44/0x104 [ 45.602446][ T7095] el0t_64_sync+0x198/0x19c [ 45.602456][ T7095] [ 45.602459][ T7095] The buggy address belongs to a 0-page vmalloc region starting at 0xffff800093b89000 allocated at drm_gem_shmem_vmap_locked+0x45c/0x690 [ 45.602479][ T7095] Memory state around the buggy address: [ 45.602485][ T7095] ffff800093e88f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.602490][ T7095] ffff800093e88f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.602496][ T7095] >ffff800093e89000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 45.602499][ T7095] ^ [ 45.602504][ T7095] ffff800093e89080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 45.602509][ T7095] ffff800093e89100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 45.602513][ T7095] ================================================================== [ 45.606617][ T7095] Disabling lock debugging due to kernel taint [ 45.606647][ T7095] Unable to handle kernel paging request at virtual address ffff800093e89000 [ 45.606659][ T7095] KASAN: probably user-memory-access in range [0x000000049f448000-0x000000049f448007] [ 45.606668][ T7095] Mem abort info: [ 45.606671][ T7095] ESR = 0x0000000096000047 [ 45.606676][ T7095] EC = 0x25: DABT (current EL), IL = 32 bits [ 45.606681][ T7095] SET = 0, FnV = 0 [ 45.606685][ T7095] EA = 0, S1PTW = 0 [ 45.606689][ T7095] FSC = 0x07: level 3 translation fault [ 45.606694][ T7095] Data abort info: [ 45.606696][ T7095] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 45.606701][ T7095] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 45.606706][ T7095] GCS = 0, Overlay = 0, DirtyBit = 0 [ 45.606711][ T7095] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021ad03000 [ 45.606718][ T7095] [ffff800093e89000] pgd=0000000000000000, p4d=1000000221011003, pud=1000000221012003, pmd=1000000107554403, pte=0000000000000000 [ 45.606741][ T7095] Internal error: Oops: 0000000096000047 [#1] SMP [ 45.668959][ T7095] Modules linked in: [ 45.669680][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.1.940 Tainted: G B syzkaller #0 PREEMPT [ 45.671582][ T7095] Tainted: [B]=BAD_PAGE [ 45.672334][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.674131][ T7095] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 45.675502][ T7095] pc : sys_fillrect+0x16b8/0x1aac [ 45.676391][ T7095] lr : sys_fillrect+0x16b4/0x1aac [ 45.677323][ T7095] sp : ffff8000957c6fe0 [ 45.678075][ T7095] x29: ffff8000957c7020 x28: ffffffffffffffff x27: ffff800093e89000 [ 45.679470][ T7095] x26: 0000000000000004 x25: 0000000000000180 x24: 0000000000000004 [ 45.680901][ T7095] x23: 0000000000000100 x22: 0000000000000000 x21: 0000000000000000 [ 45.682317][ T7095] x20: ffff800093e89000 x19: dfff800000000000 x18: 1fffe00035b9ec28 [ 45.683779][ T7095] x17: 0000000000000003 x16: ffff800088bf7000 x15: ffff800088ca7ee0 [ 45.685208][ T7095] x14: ffff0001adcf614c x13: 0000000000000001 x12: 0000000000000000 [ 45.686625][ T7095] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000000 [ 45.688033][ T7095] x8 : ffff0000c48dd880 x7 : 0000000000000000 x6 : ffff80008048e314 [ 45.689404][ T7095] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f8c58 [ 45.690777][ T7095] x2 : 0000000000000000 x1 : ffff0000c48dd880 x0 : ffff800093e89000 [ 45.692156][ T7095] Call trace: [ 45.692718][ T7095] sys_fillrect+0x16b8/0x1aac (P) [ 45.693655][ T7095] drm_fbdev_shmem_defio_fillrect+0x38/0x144 [ 45.694704][ T7095] bit_clear+0x134/0x1cc [ 45.695452][ T7095] __fbcon_clear+0x38c/0x648 [ 45.696263][ T7095] fbcon_scroll+0x270/0x464 [ 45.697055][ T7095] con_scroll+0x18c/0x330 [ 45.697797][ T7095] csi_ECMA+0xea8/0x3074 [ 45.698369][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.938'. [ 45.698417][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.938'. [ 45.701567][ T7095] do_con_write+0x315c/0x4264 [ 45.702382][ T7095] con_put_char+0x8c/0xd0 [ 45.703115][ T7095] tty_put_char+0xcc/0x148 [ 45.703888][ T7095] do_output_char+0x504/0x7a4 [ 45.704720][ T7095] n_tty_write+0xa20/0xd90 [ 45.705507][ T7095] file_tty_write+0x3dc/0x66c [ 45.706379][ T7095] tty_write+0x44/0x54 [ 45.707095][ T7095] vfs_write+0x51c/0xa0c [ 45.707852][ T7095] ksys_write+0x12c/0x228 [ 45.708631][ T7095] __arm64_sys_write+0x84/0x98 [ 45.709470][ T7095] invoke_syscall+0x98/0x244 [ 45.710240][ T7095] el0_svc_common+0xec/0x23c [ 45.711042][ T7095] do_el0_svc+0x4c/0x5c [ 45.711771][ T7095] el0_svc+0x64/0x260 [ 45.712474][ T7095] el0t_64_sync_handler+0x44/0x104 [ 45.713351][ T7095] el0t_64_sync+0x198/0x19c [ 45.714122][ T7095] Code: 34000068 aa1b03e0 97b6c32f aa1b03e0 (f8008415) [ 45.715288][ T7095] ---[ end trace 0000000000000000 ]--- [ 45.992426][ T7095] Kernel panic - not syncing: Oops: Fatal exception [ 45.993586][ T7095] SMP: stopping secondary CPUs [ 45.994427][ T7095] Kernel Offset: disabled [ 45.995203][ T7095] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 45.996418][ T7095] Memory Limit: none [ 46.265613][ T7095] Rebooting in 86400 seconds..