last executing test programs: 4m2.311429309s ago: executing program 3 (id=2869): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m1.840511427s ago: executing program 3 (id=2872): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001) write$FUSE_DIRENT(r0, &(0x7f0000004780)={0x38, 0xffffffffffffffda, 0x0, [{0x0, 0x8, 0xe, 0x0, 'max_batch_time'}]}, 0x38) 4m0.886532466s ago: executing program 3 (id=2879): openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 4m0.297371256s ago: executing program 3 (id=2883): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$eJzs3E9sVMcdAODfe15jA6a4lNLi0mJKq1qtaoOhhUOliqqVemilKOSQHC3bIOIFR7YjxRaCRYrIMULKNYpyzDWHXJMol4RTpFzJMRckFHEBctro7b5d767Xi/+tHezvk9aemZ19M7Pz5u28Ga8D2LOGsx9JxEBEPIiIwxGRtmYYrv56+vjm5LPHNyejVC5f/j7JXhZPsnguqfxM42AeGUkj0reT2hNN5heXZnqjOD2Xx8cWrr8xNr+49Ndr1yeuTl+dvjF+8eL5c2cv/H38b+tvVJvysnY9Gbo1e+L4f1+79//JQi29P//d2I6tMhzD7apS8cetLmyHHWoIJ4VOOf/Z/cqwZtn5n3VXb2X8H46e6Nh5wC5SLpfLfas/XSq3urMiBXhhJdHp2XT7KgJss9oHfXb/W3u0mwjs6870Y8c9ulS9Acra/TR/RJysJKYRMZLfwB/qUvnDUYhXSz98kD2yeKEL6xAAAI0+u1SbCbbM/wYjjjXk+1m+hzIYET+PiCMR8YuIOBoRv4xq3l9FxK9bjt8TEeUO5Q+3xFfOP9OHm2thZ9n87x/53tby/C8ad8EGe/LYoYjahHn6TP6ejERv35VrxemzHcr4/N/fvLsyNSlF3v7a/C97ZOXX5oJ5PR4WWhbopiYWJjbX6mWP7kQMFVrbnxQikvpOQDYFPh4RQ1+8v+bjDjaEr/35oxP1SG9zvue3v+Krk+0K2YKtivKHEX+q9n8pmvp/eecu6bw/OdYfxekzY9lZcKZtGfe/vvtSS1L94M9t/yfftR7uPxc+vZyPrM3L+v9Aw/mfpR1sruJgEpHMLy7NTBSL03Pzqxzo9upl3P32nVXvaTZ6/u9LXqmEa/elb00sLMydjdiX/G9l+vjya2vx7HeUqu0fOd1+/B/JX5O9E7+JiOwk/m1E/C6qd4jDUb59KiJ+HxGnV29+fPmvP7y+8fZ3V9b+qbbXv6b+j+X+X1yayVLnmlImitXLWcRySj3QM3PqwbOh9uWvrf/PV0IjeUr761/StNW+shbtA5t8+wAAAOCFkEbEQMNa0kCk6ehodQ3oaBxIi7PzC39JZt+8MVX9jsBgQ97qenBvUlv/HGyIj7fEz+Xrxu/17K/ERydni1M71Gag6mBlzCfpaP1akKajtS/FbM0SM/BT5is/sHc9b/wfu7dNFQG2nc9/2KvmbjVESqtkKvlLGdid1vL5by0Qdqd247/D33O7YYBdomw4w562nvFfaPr3jvcPd6M+wPYpxMv1cLqjNQG2m/k/7Elr+pL8hgPlvvZP9cfKzNHf+YA9sbFq7G9T1o4EspnVjpS+fyOvqv03hVXzRLq+A/ZFPVA/8kb69Mqm35a0Cyd/Od8fW0PmvvUc+eNtGaftAp2vG+MD3bgaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbL0fAwAA//+1kNRC") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2000444, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m59.582044343s ago: executing program 3 (id=2889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@snprintf]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 3m58.534038773s ago: executing program 3 (id=2898): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0x14}, {0x1, 0xf40, [0x7, 0x10, 0x8, 0x262c, 0xfffe, 0x4451, 0x4, 0x3]}}}}, 0x21) 3m57.610839328s ago: executing program 32 (id=2898): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0x14}, {0x1, 0xf40, [0x7, 0x10, 0x8, 0x262c, 0xfffe, 0x4451, 0x4, 0x3]}}}}, 0x21) 1m39.967230087s ago: executing program 1 (id=3533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) bind$inet6(r0, 0x0, 0x0) 1m39.563515049s ago: executing program 1 (id=3536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@dev={0xfe, 0x80, '\x00', 0xa8}, 0x0, 0xfffd, 0x0, 0x86, 0x2, 0x0, 0x0, 0x3b}, {0x6, 0x7, 0x0, 0x10001, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1m39.093262312s ago: executing program 1 (id=3541): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x316, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 1m38.688844578s ago: executing program 1 (id=3545): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2b05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m38.234650241s ago: executing program 1 (id=3549): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1m37.174005524s ago: executing program 1 (id=3556): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) inotify_init1(0x80000) 1m36.113471505s ago: executing program 33 (id=3556): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) inotify_init1(0x80000) 1m14.291515152s ago: executing program 6 (id=3558): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) r1 = fanotify_init(0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m13.135652175s ago: executing program 6 (id=3631): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c7, &(0x7f0000002d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000200)={0x17c04, r1, 0x7, 0x9741, 0x8000000011, 0x1001000}) 1m12.283034575s ago: executing program 6 (id=3636): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES16=0x0, @ANYRES16, @ANYRES16, @ANYRES8], 0x1, 0x2a1, &(0x7f0000000540)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40022, &(0x7f0000000200)='%}\x00') 1m11.440141403s ago: executing program 6 (id=3642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) close(r0) 1m10.447646152s ago: executing program 6 (id=3648): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x149a82, 0x0) r0 = syz_io_uring_setup(0x795e, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x8, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m9.696367727s ago: executing program 34 (id=3648): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x149a82, 0x0) r0 = syz_io_uring_setup(0x795e, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x8, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 3.834728101s ago: executing program 0 (id=4019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000040)={0x1, 0xfff, 0x61, 0x0, 0xf, 0x9}) ioctl(r0, 0xc0504e47, &(0x7f0000000a00)) 3.611912883s ago: executing program 0 (id=4021): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x24000840) 3.243776278s ago: executing program 0 (id=4027): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x8800, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xd6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001080)={0x5, 0xfffeffff, 0xff7ffff0, 0x6, 0x26, "5865677990831a243d4f25b9b8489e9a1cebb1"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xffe, 0x80000009, 0x5, 0x2f, 0x40, "9614f403854fe9798da11806ce94cb15ea6264", 0x3, 0x1}) 3.134532975s ago: executing program 4 (id=4030): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x10, 0x4) 2.943265453s ago: executing program 0 (id=4033): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x81025, 0x0) 2.941890546s ago: executing program 5 (id=4034): setresgid(0xee00, 0xee01, 0x0) setreuid(0xffffffffffffffff, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20, 0x40044}}], 0x1, 0x4) 2.786212595s ago: executing program 0 (id=4036): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) 2.763732971s ago: executing program 5 (id=4037): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x100) 2.386027705s ago: executing program 0 (id=4041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0xf}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 2.366028775s ago: executing program 5 (id=4042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2.039978305s ago: executing program 4 (id=4044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x1, 0x1, 0x0, {0x0, 0x3, 0x0, 0x3fe, 0x0, 0x0, 0x1}, 0x8, 0x2, 0xd}}]}, 0x48}}, 0x0) 1.876486945s ago: executing program 4 (id=4046): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004840)='./file1\x00', 0x42040, 0x4) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x64000522) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.866603354s ago: executing program 2 (id=4047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffffbff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xffe0}, {0xfff1, 0xfff1}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0x3, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x6004840}, 0x8040) 1.859281849s ago: executing program 5 (id=4048): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0xfffffffffffff0e9}) ioctl(r0, 0xc0504e47, &(0x7f0000000a00)) 1.651182411s ago: executing program 2 (id=4049): unshare(0x22020400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) 1.443860277s ago: executing program 7 (id=4051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc) 1.372362431s ago: executing program 4 (id=4052): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70) 1.259684911s ago: executing program 7 (id=4053): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1.076988902s ago: executing program 7 (id=4054): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x1c, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @empty}}}}}, 0x0) 1.023422143s ago: executing program 4 (id=4055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2, 0x4) recvfrom(r0, 0x0, 0x0, 0x734, 0x0, 0x0) 920.638911ms ago: executing program 2 (id=4056): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000000)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473d3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 821.382437ms ago: executing program 7 (id=4057): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 713.172528ms ago: executing program 2 (id=4058): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0x3000000000000000}]) 658.892596ms ago: executing program 7 (id=4059): syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 527.926465ms ago: executing program 2 (id=4060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 412.606469ms ago: executing program 2 (id=4061): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210008, &(0x7f0000000000)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nodiscard}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2e508d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x101000, 0x4c) read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0x2020) 341.875413ms ago: executing program 7 (id=4062): bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x100, 0x6, {0x80e7, 0x10001000, 0x4, 0x870}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xab2c1e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x502, &(0x7f0000000ac0)="$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") ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000140)) 179.91384ms ago: executing program 5 (id=4063): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @broadcast}, 0x10) 100.499586ms ago: executing program 5 (id=4064): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000380)={&(0x7f00000003c0)={0x3, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "abe5d3b81c7c1416"}}, 0x48}}, 0x0) 0s ago: executing program 4 (id=4065): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x64) kernel console output (not intermixed with test programs): 6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10284 comm="syz.2.2451" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa3b792a8 code=0x7ffc0000 [ 133.817964][ T30] audit: type=1326 audit(136.777:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10284 comm="syz.2.2451" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b792a8 code=0x7ffc0000 [ 133.817994][ T30] audit: type=1326 audit(136.777:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10284 comm="syz.2.2451" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b792a8 code=0x7ffc0000 [ 133.818015][ T30] audit: type=1326 audit(136.777:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10284 comm="syz.2.2451" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b792a8 code=0x7ffc0000 [ 133.818034][ T30] audit: type=1326 audit(136.777:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10284 comm="syz.2.2451" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b792a8 code=0x7ffc0000 [ 133.900606][ T10] tipc: Node number set to 2886997007 [ 133.918457][T10293] loop3: detected capacity change from 0 to 512 [ 133.923597][T10293] EXT4-fs: Ignoring removed bh option [ 133.938884][T10293] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 133.947219][T10293] EXT4-fs (loop3): 1 truncate cleaned up [ 133.948973][T10293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.956521][T10292] loop0: detected capacity change from 0 to 4096 [ 133.972329][T10292] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 133.985471][T10292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.995087][T10299] loop1: detected capacity change from 0 to 512 [ 133.996725][T10299] EXT4-fs: Ignoring removed oldalloc option [ 134.000204][T10299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.005815][T10299] EXT4-fs (loop1): 1 truncate cleaned up [ 134.006291][T10299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.034668][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.087768][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.087994][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.104339][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.108125][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.304558][T10319] loop2: detected capacity change from 0 to 512 [ 134.322103][T10319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.395524][T10328] Injecting memory failure for pfn 0x120f92 at process virtual address 0x20000000 [ 134.409015][T10328] Memory failure: 0x120f92: Sending SIGBUS to syz.0.2468:10328 due to hardware memory corruption [ 134.409087][T10328] Memory failure: 0x120f92: recovery action for dirty LRU page: Recovered [ 134.409134][T10328] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 134.409166][T10328] Memory failure: 0x219070: Sending SIGBUS to syz.0.2468:10328 due to hardware memory corruption [ 134.409186][T10328] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 134.820826][T10334] loop0: detected capacity change from 0 to 128 [ 134.824267][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.853227][T10334] FAT-fs (loop0): bogus number of reserved sectors [ 134.853287][T10334] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 134.853314][T10334] FAT-fs (loop0): Can't find a valid FAT filesystem [ 136.028847][T10351] loop1: detected capacity change from 0 to 8192 [ 136.600194][T10367] Injecting memory failure for pfn 0x13d346 at process virtual address 0x20945000 [ 136.615174][T10367] Memory failure: 0x13d346: recovery action for clean LRU page: Recovered [ 136.615228][T10367] Injecting memory failure for pfn 0x13d347 at process virtual address 0x20946000 [ 136.619829][T10367] Memory failure: 0x13d347: recovery action for clean LRU page: Recovered [ 136.622296][T10367] Injecting memory failure for pfn 0x13d384 at process virtual address 0x20947000 [ 136.629762][T10367] Memory failure: 0x13d384: recovery action for clean LRU page: Recovered [ 136.629824][T10367] Injecting memory failure for pfn 0x13d385 at process virtual address 0x20948000 [ 136.637016][T10367] Memory failure: 0x13d385: recovery action for clean LRU page: Recovered [ 142.854174][T10386] loop3: detected capacity change from 0 to 1024 [ 142.854952][T10386] EXT4-fs: inline encryption not supported [ 142.866611][T10386] EXT4-fs: Ignoring removed bh option [ 142.874387][T10386] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 142.898030][T10386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.340572][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.794372][T10411] device-mapper: ioctl: name not supplied when creating device [ 144.361915][T10420] loop3: detected capacity change from 0 to 512 [ 144.422831][T10420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.566129][T10420] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 144.820582][T10429] loop2: detected capacity change from 0 to 256 [ 144.827487][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.967739][T10433] loop1: detected capacity change from 0 to 2048 [ 145.015017][T10433] EXT4-fs: Ignoring removed i_version option [ 145.055562][T10433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.146797][T10437] MPI: mpi too large (32776 bits) [ 145.280761][T10439] sch_fq: defrate 2 ignored. [ 145.348409][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.596733][T10441] ima: policy update failed [ 145.597945][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 145.601790][ T30] audit: type=1807 audit(148.557:92): action=measure func=F res=0 [ 145.601845][ T30] audit: type=1802 audit(148.557:93): pid=10443 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.2.2518" res=0 errno=0 [ 145.606690][ T30] audit: type=1802 audit(148.557:94): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.2518" res=0 errno=0 [ 146.217101][T10458] loop0: detected capacity change from 0 to 2048 [ 146.322677][T10458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.456039][ T1031] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 146.457823][ T1031] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 146.457880][ T1031] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 146.457904][ T1031] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 146.457923][ T1031] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 146.502409][ T1031] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 146.812620][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.183626][T10477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2534'. [ 148.400184][T10506] ima: policy update failed [ 148.411139][ T30] audit: type=1807 audit(151.367:95): action=measure func=FLE_CHECK res=0 [ 148.411207][ T30] audit: type=1802 audit(151.367:96): pid=10507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.4.2549" res=0 errno=0 [ 148.411267][ T30] audit: type=1802 audit(151.367:97): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.2549" res=0 errno=0 [ 149.812068][T10530] loop3: detected capacity change from 0 to 512 [ 149.844819][T10530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.040754][T10530] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 150.309942][T10545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2565'. [ 150.320204][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.409904][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 150.893267][T10556] macvlan3: entered promiscuous mode [ 150.907118][T10556] bridge0: entered promiscuous mode [ 153.505896][T10600] vxcan1: tx address claim with dest, not broadcast [ 155.943771][T10650] loop8: detected capacity change from 0 to 524288000 [ 157.678100][T10684] loop2: detected capacity change from 0 to 4096 [ 157.698441][T10684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.732404][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.423957][T10711] loop4: detected capacity change from 0 to 512 [ 163.472027][T10711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 163.472127][T10711] System zones: 1-12 [ 163.476118][T10711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2641: missing EA_INODE flag [ 163.478459][T10711] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 163.479553][ C0] EXT4-fs (loop4): initial error at time 166: ext4_xattr_inode_iget:441: inode 12 [ 163.479622][ C0] EXT4-fs (loop4): last error at time 166: ext4_xattr_inode_iget:441: inode 12 [ 163.495767][T10711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2641: error while reading EA inode 12 err=-117 [ 163.495821][T10711] loop4: lost filesystem error report for type 5 error -117 [ 163.498520][T10711] EXT4-fs (loop4): 1 orphan inode deleted [ 163.513765][T10711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.875419][ T4711] Bluetooth: hci1: command 0x0406 tx timeout [ 163.875503][ T4711] Bluetooth: hci3: command 0x0406 tx timeout [ 163.875561][ T4711] Bluetooth: hci0: command 0x0406 tx timeout [ 163.875597][ T4711] Bluetooth: hci2: command 0x0406 tx timeout [ 163.934011][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.448213][T10754] 9p: Unknown uid 00000000004294967295 [ 165.994375][T10767] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2665'. [ 166.812754][T10784] loop2: detected capacity change from 0 to 128 [ 166.872342][T10784] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 167.155264][T10792] A link change request failed with some changes committed already. Interface enp0s0 may have been left with an inconsistent configuration, please check. [ 167.358113][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.941797][T10814] loop2: detected capacity change from 0 to 128 [ 172.971772][T10814] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.305688][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.331769][T10822] loop0: detected capacity change from 0 to 256 [ 174.273821][T10840] netlink: 'syz.0.2700': attribute type 12 has an invalid length. [ 175.180395][T10852] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2705'. [ 175.184185][T10852] sch_fq: defrate 0 ignored. [ 175.621313][T10859] loop0: detected capacity change from 0 to 1024 [ 175.681891][T10859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.035669][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.769747][T10874] Injecting memory failure for pfn 0x219070 at process virtual address 0x20289000 [ 176.773226][T10874] Memory failure: 0x219070: Sending SIGBUS to syz.3.2714:10874 due to hardware memory corruption [ 176.773491][T10874] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 177.338058][T10885] loop0: detected capacity change from 0 to 4096 [ 177.410178][T10885] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 177.424591][T10885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.717024][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.985673][T10899] loop3: detected capacity change from 0 to 2048 [ 183.108540][T10899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.165644][T10905] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4713] was attempted by ""[10905] [ 183.544600][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.861197][T10919] loop7: detected capacity change from 0 to 7 [ 183.875113][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.875231][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.878710][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.878773][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.882552][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.882645][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.887155][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.887230][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.890674][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.890721][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.894022][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.894078][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.897465][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.897534][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.897595][T10919] ldm_validate_partition_table(): Disk read failed. [ 183.899661][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.899706][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.905444][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.905497][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.907448][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.907497][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.911112][T10919] Dev loop7: unable to read RDB block 0 [ 183.929536][T10919] loop7: unable to read partition table [ 183.929791][T10919] loop7: partition table beyond EOD, truncated [ 183.929841][T10919] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 183.959587][T10921] ldm_validate_partition_table(): Disk read failed. [ 183.971884][T10921] Dev loop7: unable to read RDB block 0 [ 183.973733][T10921] loop7: unable to read partition table [ 183.973928][T10921] loop7: partition table beyond EOD, truncated [ 185.499645][T10954] bonding: no command found in bonding_masters - use +ifname or -ifname [ 185.758609][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'. [ 185.760742][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'. [ 185.845486][T10960] loop1: detected capacity change from 0 to 128 [ 185.872814][T10960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 185.872909][T10960] System zones: 1-3, 19-19, 35-36 [ 185.952246][T10960] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.288149][ T4715] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.301103][T10970] loop2: detected capacity change from 0 to 1024 [ 186.303351][T10970] EXT4-fs: Ignoring removed bh option [ 186.334984][T10970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.605531][T10978] loop1: detected capacity change from 0 to 512 [ 186.661884][T10978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.792487][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.025502][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.333319][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2765'. [ 187.397562][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.399013][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.953182][T11013] synth uevent: /bus/acpi: unknown uevent action string [ 193.838549][T11030] loop2: detected capacity change from 0 to 512 [ 193.886496][T11030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.288655][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.315814][T11041] loop0: detected capacity change from 0 to 512 [ 194.358292][T11041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.537922][T11041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.634109][T11041] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.2785: path /568/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 194.810443][T11053] tun0: tun_chr_ioctl cmd 1074025681 [ 195.000837][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.726959][T11090] loop3: detected capacity change from 0 to 4096 [ 196.763406][T11090] EXT4-fs: inline encryption not supported [ 196.772712][T11090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.774335][T11090] EXT4-fs (loop3): Test dummy encryption mode enabled [ 196.787379][T11090] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 196.790045][T11090] System zones: 0-5 [ 196.797474][T11090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.163226][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.132803][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2813'. [ 198.553058][T11129] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 198.828589][T11132] loop1: detected capacity change from 0 to 1024 [ 198.919401][T11132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.238344][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.404641][T11152] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 199.404667][T11152] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 199.413088][T11152] vhci_hcd vhci_hcd.0: Device attached [ 199.431045][ T4717] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 199.433191][T11153] vhci_hcd: connection closed [ 199.435396][ T40] vhci_hcd vhci_hcd.3: stop threads [ 199.435651][ T40] vhci_hcd vhci_hcd.3: release socket [ 199.435697][ T40] vhci_hcd vhci_hcd.3: disconnect device [ 199.558692][T11156] sctp: [Deprecated]: syz.1.2829 (pid 11156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.558692][T11156] Use struct sctp_sack_info instead [ 202.011038][T11202] pim6reg: entered allmulticast mode [ 202.129090][T11201] pim6reg: left allmulticast mode [ 202.233035][ T9] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 202.491349][T11217] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2854'. [ 207.859808][T11226] loop3: detected capacity change from 0 to 128 [ 207.892557][T11226] EXT4-fs (loop3): Test dummy encryption mode enabled [ 207.926003][T11226] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.252201][T11226] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.601059][T11247] loop0: detected capacity change from 0 to 8 [ 208.748934][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771341][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771443][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771504][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771568][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771630][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771693][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771749][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771816][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771875][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771938][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.771997][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772060][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772116][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772179][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772234][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772294][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772348][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772408][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772463][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772524][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772580][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772661][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772716][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772792][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772855][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772931][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.772987][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.773063][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.773117][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.773193][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.773247][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.773323][T11247] SQUASHFS error: Failed to read block 0x4de: -5 [ 209.308630][T11257] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2870'. [ 209.458556][T11261] loop3: detected capacity change from 0 to 512 [ 209.517863][T11261] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 209.562345][T11261] EXT4-fs (loop3): 1 truncate cleaned up [ 209.567004][T11261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.773877][T11261] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2872: invalid indirect mapped block 2185560079 (level 0) [ 209.785984][T11261] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2872: invalid indirect mapped block 65535 (level 2) [ 209.793412][T11261] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.2872: Invalid inode table block 0 in block_group 0 [ 209.814388][T11261] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 209.819516][T11261] EXT4-fs error (device loop3): ext4_splice_branch:479: inode #13: comm syz.3.2872: mark_inode_dirty error [ 209.822545][T11261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2872: bg 0: block 46: invalid block bitmap [ 209.825460][T11261] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 209.827863][T11261] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.2872: Invalid inode table block 0 in block_group 0 [ 209.841924][T11261] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 209.844214][T11261] EXT4-fs error (device loop3): ext4_truncate:4691: inode #13: comm syz.3.2872: mark_inode_dirty error [ 210.156966][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2876'. [ 210.248691][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.981666][T11288] loop3: detected capacity change from 0 to 512 [ 211.013774][T11288] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2883: bg 0: block 5: invalid block bitmap [ 211.016749][T11288] loop3: lost filesystem error report for type 5 error -117 [ 211.019274][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 211.019312][ C0] EXT4-fs (loop3): initial error at time 213: ext4_validate_block_bitmap:432 [ 211.019351][ C0] EXT4-fs (loop3): last error at time 213: ext4_validate_block_bitmap:432 [ 211.034058][T11288] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 211.035761][T11288] loop3: lost filesystem error report for type 5 error -117 [ 211.036494][T11288] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2883: invalid indirect mapped block 3 (level 2) [ 211.041542][T11288] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.049929][T11288] EXT4-fs (loop3): 1 orphan inode deleted [ 211.049969][T11288] EXT4-fs (loop3): 1 truncate cleaned up [ 211.052358][T11288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.252182][T11288] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 211.374552][T11296] loop4: detected capacity change from 0 to 128 [ 211.480529][ T4719] EXT4-fs error (device loop3): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 211.496658][ T4719] EXT4-fs error (device loop3): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 212.009399][ T4719] bridge0: port 3(syz_tun) entered disabled state [ 212.086461][ T4719] syz_tun (unregistering): left allmulticast mode [ 212.104801][ T4719] syz_tun (unregistering): left promiscuous mode [ 212.104923][ T4719] bridge0: port 3(syz_tun) entered disabled state [ 212.425609][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.823536][T10189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.412841][T10189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.860411][T10189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.315130][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.317961][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.321011][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.323256][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.335823][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.371295][T10189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.735117][T11347] sctp: [Deprecated]: syz.1.2911 (pid 11347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.735117][T11347] Use struct sctp_sack_info instead [ 215.169499][T10189] bridge_slave_1: left allmulticast mode [ 215.169569][T10189] bridge_slave_1: left promiscuous mode [ 215.170685][T10189] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.186128][T10189] bridge_slave_0: left allmulticast mode [ 215.194817][T10189] bridge_slave_0: left promiscuous mode [ 215.196507][T10189] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.442697][T11359] loop4: detected capacity change from 0 to 4096 [ 215.492855][T11359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.808374][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.350176][ T4717] Bluetooth: hci3: command tx timeout [ 216.432630][T10189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.470381][T10189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.495280][T10189] bond0 (unregistering): Released all slaves [ 217.781764][T10189] hsr_slave_0: left promiscuous mode [ 217.783508][T10189] hsr_slave_1: left promiscuous mode [ 217.786861][T10189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.788787][T10189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.797055][T10189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.798790][T10189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.816988][T10189] veth1_macvtap: left promiscuous mode [ 217.818272][T10189] veth0_macvtap: left promiscuous mode [ 217.820750][T10189] veth1_vlan: left promiscuous mode [ 217.821878][T10189] veth0_vlan: left promiscuous mode [ 218.171024][T10189] team0 (unregistering): Port device team_slave_1 removed [ 218.195533][T10189] team0 (unregistering): Port device team_slave_0 removed [ 218.430222][ T4717] Bluetooth: hci3: command tx timeout [ 220.509485][ T4717] Bluetooth: hci3: command tx timeout [ 222.593666][ T4717] Bluetooth: hci3: command tx timeout [ 222.761576][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2928'. [ 223.577817][T11425] loop2: detected capacity change from 0 to 2048 [ 223.630394][T11340] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.654205][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.654469][T11340] bridge_slave_0: entered allmulticast mode [ 223.656395][T11340] bridge_slave_0: entered promiscuous mode [ 223.670551][T11425] loop2: p1 < > p4 [ 223.670551][T11425] p4: [ 223.675782][T11425] loop2: p4 size 722688 extends beyond EOD, truncated [ 223.686643][T11340] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.688234][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.690486][T11340] bridge_slave_1: entered allmulticast mode [ 223.725675][T11340] bridge_slave_1: entered promiscuous mode [ 223.955228][T11340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.004655][T11340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.170630][T11437] loop4: detected capacity change from 0 to 1024 [ 224.195428][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 224.284978][T11437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.297164][T11340] team0: Port device team_slave_0 added [ 224.327619][T11340] team0: Port device team_slave_1 added [ 224.468702][T11340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.520989][T11340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.525703][T11340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.569774][T11340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.569823][T11340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.569861][T11340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.842010][T11451] loop0: detected capacity change from 0 to 512 [ 224.901963][T11451] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.929635][T11451] EXT4-fs (loop0): 1 truncate cleaned up [ 224.932012][T11451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.998113][T11340] hsr_slave_0: entered promiscuous mode [ 224.998888][T11340] hsr_slave_1: entered promiscuous mode [ 225.012540][T11340] debugfs: 'hsr0' already exists in 'hsr' [ 225.016126][T11340] Cannot create hsr debugfs directory [ 225.039167][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.316951][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.942966][T11475] block2mtd: illegal erase size [ 226.552535][T11340] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.681543][T11340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.684237][T11340] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.757958][T11340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.771134][T11340] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.855984][T11340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.858338][T11340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.906482][T11340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.326349][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 227.394703][T11340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.466838][T11340] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.545641][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.545715][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.553197][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.553264][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.086103][T11530] netlink: 'syz.1.2967': attribute type 6 has an invalid length. [ 234.340389][T11567] overlayfs: upper fs does not support tmpfile. [ 234.383352][T11340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.124707][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 235.471051][T11593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2981'. [ 235.764374][T11340] veth0_vlan: entered promiscuous mode [ 235.768228][T11340] veth1_vlan: entered promiscuous mode [ 235.868157][T11340] veth0_macvtap: entered promiscuous mode [ 235.988786][T11340] veth1_macvtap: entered promiscuous mode [ 236.078348][T11340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.104498][T11340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.172218][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.195450][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.195538][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.195583][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.621153][T10189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.621196][T10189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.744899][T10189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.744946][T10189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.426516][T11636] loop5: detected capacity change from 0 to 8 [ 237.556114][T11636] SQUASHFS error: Failed to read block 0x260685: -5 [ 237.564674][T11636] SQUASHFS error: Unable to read metadata cache entry [260685] [ 237.566508][T11636] SQUASHFS error: Unable to read directory block [260685:0] [ 238.001458][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 238.150101][T11652] loop5: detected capacity change from 0 to 256 [ 238.353449][T11647] loop2: detected capacity change from 0 to 4096 [ 238.358231][T11647] EXT4-fs (loop2): Test dummy encryption mode enabled [ 238.432940][T11647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.856672][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.190809][T11672] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 239.653564][T11674] loop1: detected capacity change from 0 to 8192 [ 239.761684][T11674] syz.1.3009: attempt to access beyond end of device [ 239.761684][T11674] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 239.765259][T11674] buffer_io_error: 20 callbacks suppressed [ 239.766886][T11674] Buffer I/O error on dev loop1, logical block 57847, async page read [ 239.776724][T11674] syz.1.3009: attempt to access beyond end of device [ 239.776724][T11674] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 239.779708][T11674] Buffer I/O error on dev loop1, logical block 57847, async page read [ 239.824729][T11687] loop2: detected capacity change from 0 to 1024 [ 239.846007][T11687] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 240.972604][T11704] loop2: detected capacity change from 0 to 2048 [ 241.026099][T11704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.163972][ T3357] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 242.165572][ T3357] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 938 with error 28 [ 242.165603][ T3357] EXT4-fs (loop2): This should not happen!! Data will be lost [ 242.165603][ T3357] [ 242.165626][ T3357] EXT4-fs (loop2): Total free blocks count 0 [ 242.165644][ T3357] EXT4-fs (loop2): Free/Dirty block details [ 242.165662][ T3357] EXT4-fs (loop2): free_blocks=2415919104 [ 242.165681][ T3357] EXT4-fs (loop2): dirty_blocks=944 [ 242.165697][ T3357] EXT4-fs (loop2): Block reservation details [ 242.165712][ T3357] EXT4-fs (loop2): i_reserved_data_blocks=59 [ 242.334669][ T4718] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 242.348828][T11732] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 242.402153][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.795000][T11745] trusted_key: encrypted_key: keyword 'updadefault' not recognized [ 247.984674][T11751] loop2: detected capacity change from 0 to 512 [ 247.992348][T11754] loop5: detected capacity change from 0 to 256 [ 248.844266][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.844342][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.239537][ T30] audit: type=1400 audit(253.187:98): lsm=SMACK fn=smack_inode_rmdir action=denied subject="_" object="lowerdir" requested=w pid=11781 comm="syz.1.3050" name="file0" dev="tmpfs" ino=3510 [ 249.744429][T11788] loop2: detected capacity change from 0 to 512 [ 249.746492][T11788] EXT4-fs: Ignoring removed bh option [ 249.807393][T11788] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 249.818004][T11788] EXT4-fs (loop2): 1 truncate cleaned up [ 249.842757][T11788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.146644][T11788] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3052: bg 0: block 465: padding at end of block bitmap is not set [ 250.197788][T11788] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 250.197851][T11788] EXT4-fs (loop2): This should not happen!! Data will be lost [ 250.197851][T11788] [ 250.197887][T11788] EXT4-fs (loop2): Total free blocks count 0 [ 250.197907][T11788] EXT4-fs (loop2): Free/Dirty block details [ 250.197927][T11788] EXT4-fs (loop2): free_blocks=0 [ 250.197962][T11788] EXT4-fs (loop2): dirty_blocks=34 [ 250.197979][T11788] EXT4-fs (loop2): Block reservation details [ 250.197995][T11788] EXT4-fs (loop2): i_reserved_data_blocks=34 [ 250.593116][ T4718] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 250.620478][T11762] Injecting memory failure for pfn 0x13fffc at process virtual address 0x20001000 [ 250.662230][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.695877][T11762] Memory failure: 0x13fffc: recovery action for clean LRU page: Recovered [ 250.695934][T11762] Injecting memory failure for pfn 0x13fb91 at process virtual address 0x20002000 [ 250.696442][T11762] Memory failure: 0x13fb91: recovery action for clean LRU page: Recovered [ 250.696470][T11762] Injecting memory failure for pfn 0x13970b at process virtual address 0x20003000 [ 250.696571][T11762] Memory failure: 0x13970b: recovery action for clean LRU page: Recovered [ 250.793292][T11808] loop1: detected capacity change from 0 to 128 [ 251.536955][T11818] netlink: 'syz.2.3064': attribute type 2 has an invalid length. [ 254.483987][T11877] loop1: detected capacity change from 0 to 256 [ 254.820767][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 254.820818][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3091'. [ 254.820866][T11886] netlink: 'syz.2.3091': attribute type 14 has an invalid length. [ 255.378168][T11892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3092'. [ 256.368345][T11910] loop0: detected capacity change from 0 to 1024 [ 256.436570][T11910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 256.792174][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.123703][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3103'. [ 263.018785][T11949] loop2: detected capacity change from 0 to 256 [ 263.043166][T11949] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 263.043210][T11949] FAT-fs (loop2): Can't find a valid FAT filesystem [ 264.378127][T11978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3120'. [ 264.446001][T11978] veth0: entered promiscuous mode [ 264.498514][T11978] veth0: left promiscuous mode [ 264.735569][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3122'. [ 265.395152][T12002] loop5: detected capacity change from 0 to 512 [ 265.446343][T12002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.636232][T12002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.836432][T12002] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3127: bg 0: block 217: padding at end of block bitmap is not set [ 265.845190][T12002] EXT4-fs (loop5): Remounting filesystem read-only [ 266.131975][T11340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.139678][ T12] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 266.139726][ T12] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 272.910570][T12052] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 273.370924][T12063] bridge_slave_0: default FDB implementation only supports local addresses [ 273.586967][T12066] loop1: detected capacity change from 0 to 512 [ 273.857522][T12071] loop4: detected capacity change from 0 to 2048 [ 273.924329][T12071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.988553][T12075] loop0: detected capacity change from 0 to 2048 [ 274.046798][T12075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.103141][T12071] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3154: bg 0: block 345: padding at end of block bitmap is not set [ 274.115874][T12071] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 0 [ 274.117941][T12071] fs-verity (loop4, inode 13): Error -28 building Merkle tree [ 274.358347][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.445544][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.648086][T12087] loop1: detected capacity change from 0 to 512 [ 274.719162][T12087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.856965][T12087] EXT4-fs (loop1): shut down requested (1) [ 275.124751][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.263275][T12100] loop4: detected capacity change from 0 to 512 [ 275.316875][T12100] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3164: iget: bad i_size value: 38620345925642 [ 275.316933][T12100] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 275.320228][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 275.320246][ C0] EXT4-fs (loop4): initial error at time 279: ext4_orphan_get:1399: inode 15 [ 275.320270][ C0] EXT4-fs (loop4): last error at time 279: ext4_orphan_get:1399: inode 15 [ 275.322525][T12100] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3164: couldn't read orphan inode 15 (err -117) [ 275.322546][T12100] loop4: lost filesystem error report for type 5 error -117 [ 275.334201][T12100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.666468][T12113] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3164: bg 0: block 5: invalid block bitmap [ 275.671845][T12113] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 484 with error 28 [ 275.680037][T12113] EXT4-fs (loop4): This should not happen!! Data will be lost [ 275.680037][T12113] [ 275.682202][T12113] EXT4-fs (loop4): Total free blocks count 0 [ 275.683687][T12113] EXT4-fs (loop4): Free/Dirty block details [ 275.685127][T12113] EXT4-fs (loop4): free_blocks=0 [ 275.686329][T12113] EXT4-fs (loop4): dirty_blocks=484 [ 275.687591][T12113] EXT4-fs (loop4): Block reservation details [ 275.688888][T12113] EXT4-fs (loop4): i_reserved_data_blocks=484 [ 276.182417][ T4713] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 276.187257][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.468649][T12134] netlink: 'syz.5.3177': attribute type 1 has an invalid length. [ 276.468701][T12134] netlink: 'syz.5.3177': attribute type 2 has an invalid length. [ 276.964677][T12142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3180'. [ 278.952004][T12175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.952615][T12175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.003161][ T50] Bluetooth: hci4: Dropping invalid advertising data [ 279.005549][ T50] Bluetooth: hci4: Malformed LE Event: 0x02 [ 279.415203][T12182] alloc_netdev: Unable to allocate device with zero queues [ 281.032844][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 281.052494][T12211] Injecting memory failure for pfn 0x13b95b at process virtual address 0x20001000 [ 281.085760][T12211] Memory failure: 0x13b95b: recovery action for clean LRU page: Recovered [ 281.085823][T12211] Injecting memory failure for pfn 0x13f5f3 at process virtual address 0x20002000 [ 281.090257][T12211] Memory failure: 0x13f5f3: recovery action for clean LRU page: Recovered [ 281.091834][T12211] Injecting memory failure for pfn 0x13f637 at process virtual address 0x20003000 [ 281.093451][T12211] Memory failure: 0x13f637: recovery action for clean LRU page: Recovered [ 281.491578][T12219] loop5: detected capacity change from 0 to 512 [ 281.553650][T12219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.661549][T12219] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3214: corrupted xattr block 33: invalid header [ 281.670247][T12219] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3214: corrupted xattr block 33: invalid header [ 281.673421][T12219] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3214: corrupted xattr block 33: invalid header [ 281.816300][T12224] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 281.853209][T12224] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 281.856556][T12224] EXT4-fs (loop5): This should not happen!! Data will be lost [ 281.856556][T12224] [ 281.858784][T12224] EXT4-fs (loop5): Total free blocks count 0 [ 281.861359][T12224] EXT4-fs (loop5): Free/Dirty block details [ 281.864279][T12224] EXT4-fs (loop5): free_blocks=65280 [ 281.866913][T12224] EXT4-fs (loop5): dirty_blocks=31 [ 281.871242][T12224] EXT4-fs (loop5): Block reservation details [ 281.872744][T12224] EXT4-fs (loop5): i_reserved_data_blocks=31 [ 282.228472][ T559] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 282.239969][T11340] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 282.958598][T12182] netdevsim netdevsim10: probe with driver netdevsim failed with error -12 [ 287.964196][T12245] loop5: detected capacity change from 0 to 512 [ 288.008514][T12245] EXT4-fs (loop5): 1 truncate cleaned up [ 288.011260][T12245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.440865][T11340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.746798][T12263] loop2: detected capacity change from 0 to 512 [ 288.816760][T12263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.816813][T12263] EXT4-fs: Ignoring removed nobh option [ 288.816870][T12263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.816890][T12263] EXT4-fs: Ignoring removed bh option [ 288.826638][T12263] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 288.831520][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 288.831536][ C0] EXT4-fs (loop2): initial error at time 292: ext4_mb_generate_buddy:1317 [ 288.831554][ C0] EXT4-fs (loop2): last error at time 292: ext4_mb_generate_buddy:1317 [ 288.854203][T12263] EXT4-fs (loop2): 1 orphan inode deleted [ 288.897336][T12263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.290233][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.673506][T12304] Injecting memory failure for pfn 0x11aaa3 at process virtual address 0x20036000 [ 290.710643][T12304] Memory failure: 0x11aaa3: recovery action for clean LRU page: Recovered [ 290.710699][T12304] Injecting memory failure for pfn 0x13dc55 at process virtual address 0x20037000 [ 290.715776][T12304] Memory failure: 0x13dc55: recovery action for clean LRU page: Recovered [ 290.715826][T12304] Injecting memory failure for pfn 0x13ad93 at process virtual address 0x20038000 [ 290.716427][T12304] Memory failure: 0x13ad93: recovery action for clean LRU page: Recovered [ 290.716456][T12304] Injecting memory failure for pfn 0x13a7c6 at process virtual address 0x20039000 [ 290.716551][T12304] Memory failure: 0x13a7c6: recovery action for clean LRU page: Recovered [ 291.385728][T12315] loop4: detected capacity change from 0 to 1024 [ 291.423058][T12315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.576393][T12315] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 291.583227][T12315] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 291.621252][T12315] EXT4-fs (loop4): This should not happen!! Data will be lost [ 291.621252][T12315] [ 291.621328][T12315] EXT4-fs (loop4): Total free blocks count 0 [ 291.621349][T12315] EXT4-fs (loop4): Free/Dirty block details [ 291.621372][T12315] EXT4-fs (loop4): free_blocks=68451041280 [ 291.621461][T12315] EXT4-fs (loop4): dirty_blocks=64 [ 291.621480][T12315] EXT4-fs (loop4): Block reservation details [ 291.621497][T12315] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 291.864418][ T4713] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 291.886417][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.869050][T12347] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 292.883964][T12347] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 292.897113][T12347] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 293.276812][T12354] loop0: detected capacity change from 0 to 512 [ 293.324203][T12356] loop4: detected capacity change from 0 to 256 [ 293.371771][T12354] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3270: bad orphan inode 15 [ 293.371834][T12354] loop0: lost filesystem error report for type 5 error -117 [ 293.376089][T12354] ext4_test_bit(bit=14, block=5) = 0 [ 293.442329][T12354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.639840][T12363] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 293.641350][T12363] syzkaller0: linktype set to 0 [ 293.848223][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.246480][T12374] loop2: detected capacity change from 0 to 512 [ 294.283897][T12374] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3280: iget: bad extended attribute block 134217728 [ 294.286587][T12374] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.287349][T12374] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3280: couldn't read orphan inode 15 (err -117) [ 294.289351][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 294.289365][ C0] EXT4-fs (loop2): initial error at time 298: ext4_orphan_get:1399: inode 15 [ 294.289393][ C0] EXT4-fs (loop2): last error at time 298: ext4_orphan_get:1399: inode 15 [ 294.296081][T12374] loop2: lost filesystem error report for type 5 error -117 [ 294.305452][T12374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.358540][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3282'. [ 294.477411][T12374] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3280: invalid indirect mapped block 234881024 (level 0) [ 294.498897][T12374] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3280: invalid indirect mapped block 768 (level 1) [ 294.780973][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.282391][T12397] netlink: 'syz.1.3289': attribute type 11 has an invalid length. [ 295.284007][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 295.642742][T12405] loop4: detected capacity change from 0 to 128 [ 295.675577][T12405] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.738595][T12411] netlink: 'syz.1.3294': attribute type 2 has an invalid length. [ 296.207312][ T4713] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.283338][T12418] loop0: detected capacity change from 0 to 256 [ 296.381149][ T4826] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 296.392511][ T4826] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.503859][T12442] FAULT_INJECTION: forcing a failure. [ 297.503859][T12442] name failslab, interval 1, probability 0, space 0, times 1 [ 297.506287][T12442] CPU: 0 UID: 0 PID: 12442 Comm: syz.1.3307 Tainted: G L syzkaller #0 PREEMPT [ 297.506310][T12442] Tainted: [L]=SOFTLOCKUP [ 297.506316][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 297.506325][T12442] Call trace: [ 297.506330][T12442] show_stack+0x2c/0x3c (C) [ 297.506357][T12442] __dump_stack+0x30/0x40 [ 297.506374][T12442] dump_stack_lvl+0xd8/0x12c [ 297.506390][T12442] dump_stack+0x1c/0x28 [ 297.506406][T12442] should_fail_ex+0x41c/0x590 [ 297.506419][T12442] should_failslab+0xc4/0x120 [ 297.506432][T12442] kmem_cache_alloc_noprof+0x94/0x5d8 [ 297.506446][T12442] alloc_empty_file+0x6c/0x1cc [ 297.506460][T12442] dentry_open+0x54/0xc0 [ 297.506475][T12442] open_detached_copy+0x37c/0x478 [ 297.506492][T12442] vfs_open_tree+0x328/0x348 [ 297.506509][T12442] __arm64_sys_open_tree+0xa4/0x120 [ 297.506524][T12442] invoke_syscall+0x98/0x244 [ 297.506540][T12442] el0_svc_common+0xec/0x23c [ 297.506555][T12442] do_el0_svc+0x4c/0x5c [ 297.506571][T12442] el0_svc+0x64/0x260 [ 297.506586][T12442] el0t_64_sync_handler+0x44/0x104 [ 297.506600][T12442] el0t_64_sync+0x198/0x19c [ 302.899029][T12449] loop1: detected capacity change from 0 to 1024 [ 302.926873][T12451] loop2: detected capacity change from 0 to 256 [ 302.972201][T12449] EXT4-fs: Ignoring removed bh option [ 303.011921][T12449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 303.212879][T12455] No fuse device found [ 303.379565][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'. [ 303.478217][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 304.189709][T12471] batadv_slave_0: entered promiscuous mode [ 304.193308][T12470] batadv_slave_0: left promiscuous mode [ 304.645633][T12487] loop4: detected capacity change from 0 to 512 [ 304.727747][T12487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.087441][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.215813][T12494] sctp: [Deprecated]: syz.1.3330 (pid 12494) Use of int in max_burst socket option deprecated. [ 305.215813][T12494] Use struct sctp_assoc_value instead [ 305.552513][T12499] can0: slcan on ptm0. [ 305.875125][T12511] netlink: 'syz.5.3338': attribute type 1 has an invalid length. [ 305.876764][T12511] netlink: 'syz.5.3338': attribute type 2 has an invalid length. [ 305.891560][T12497] can0 (unregistered): slcan off ptm0. [ 306.017167][T12508] loop2: detected capacity change from 0 to 2048 [ 306.069613][T12508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.300128][T12522] binder: 12522 RLIMIT_NICE not set [ 306.459025][T12521] syzkaller1: entered promiscuous mode [ 306.459078][T12521] syzkaller1: entered allmulticast mode [ 306.474744][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.809461][T12522] binder: 12518:12522 ioctl c0306201 20001a80 returned -14 [ 307.207814][T12536] input: syz0 as /devices/virtual/input/input20 [ 307.320385][T12544] loop2: detected capacity change from 0 to 256 [ 310.274215][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.275532][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.739940][T12552] FAULT_INJECTION: forcing a failure. [ 312.739940][T12552] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 312.739999][T12552] CPU: 0 UID: 0 PID: 12552 Comm: syz.5.3355 Tainted: G L syzkaller #0 PREEMPT [ 312.740019][T12552] Tainted: [L]=SOFTLOCKUP [ 312.740024][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 312.740031][T12552] Call trace: [ 312.740035][T12552] show_stack+0x2c/0x3c (C) [ 312.740062][T12552] __dump_stack+0x30/0x40 [ 312.740079][T12552] dump_stack_lvl+0xd8/0x12c [ 312.740095][T12552] dump_stack+0x1c/0x28 [ 312.740111][T12552] should_fail_ex+0x41c/0x590 [ 312.740124][T12552] should_fail+0x14/0x24 [ 312.740135][T12552] should_fail_usercopy+0x20/0x30 [ 312.740147][T12552] _inline_copy_from_user+0x3c/0x174 [ 312.740162][T12552] kstrtouint_from_user+0xcc/0x174 [ 312.740175][T12552] proc_fail_nth_write+0x9c/0x234 [ 312.740189][T12552] vfs_write+0x2a4/0xa0c [ 312.740202][T12552] ksys_pwrite64+0x118/0x1ac [ 312.740214][T12552] __arm64_sys_pwrite64+0xa8/0xc0 [ 312.740226][T12552] invoke_syscall+0x98/0x244 [ 312.740243][T12552] el0_svc_common+0xec/0x23c [ 312.740258][T12552] do_el0_svc+0x4c/0x5c [ 312.740274][T12552] el0_svc+0x64/0x260 [ 312.740288][T12552] el0t_64_sync_handler+0x44/0x104 [ 312.740302][T12552] el0t_64_sync+0x198/0x19c [ 313.523880][T12568] loop0: detected capacity change from 0 to 2048 [ 313.604760][T12568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.060713][ T4710] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 314.172826][T12584] evm: overlay not supported [ 314.214351][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.298592][T11223] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 314.308405][T11223] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 316.717630][T12633] FAULT_INJECTION: forcing a failure. [ 316.717630][T12633] name failslab, interval 1, probability 0, space 0, times 0 [ 316.721400][T12633] CPU: 0 UID: 0 PID: 12633 Comm: syz.5.3387 Tainted: G L syzkaller #0 PREEMPT [ 316.721422][T12633] Tainted: [L]=SOFTLOCKUP [ 316.721428][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 316.721437][T12633] Call trace: [ 316.721442][T12633] show_stack+0x2c/0x3c (C) [ 316.721472][T12633] __dump_stack+0x30/0x40 [ 316.721490][T12633] dump_stack_lvl+0xd8/0x12c [ 316.721506][T12633] dump_stack+0x1c/0x28 [ 316.721521][T12633] should_fail_ex+0x41c/0x590 [ 316.721534][T12633] should_failslab+0xc4/0x120 [ 316.721548][T12633] __kmalloc_noprof+0x108/0x6b8 [ 316.721562][T12633] tomoyo_realpath_from_path+0xbc/0x4dc [ 316.721577][T12633] tomoyo_check_open_permission+0x1c4/0x394 [ 316.721591][T12633] tomoyo_file_open+0x78/0xcc [ 316.721604][T12633] security_file_open+0xbc/0x258 [ 316.721617][T12633] do_dentry_open+0x2a8/0xfc0 [ 316.721634][T12633] vfs_open+0x44/0x2dc [ 316.721649][T12633] path_openat+0x21fc/0x2a60 [ 316.721663][T12633] do_file_open+0x1c8/0x2e8 [ 316.721676][T12633] do_sys_openat2+0x114/0x1e8 [ 316.721693][T12633] do_sys_open+0xb0/0xe0 [ 316.721709][T12633] __arm64_sys_openat+0xa8/0xc4 [ 316.721725][T12633] invoke_syscall+0x98/0x244 [ 316.721741][T12633] el0_svc_common+0xec/0x23c [ 316.721756][T12633] do_el0_svc+0x4c/0x5c [ 316.721772][T12633] el0_svc+0x64/0x260 [ 316.721787][T12633] el0t_64_sync_handler+0x44/0x104 [ 316.721805][T12633] el0t_64_sync+0x198/0x19c [ 316.757662][T12633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.171480][T12639] loop4: detected capacity change from 0 to 128 [ 317.205018][T12639] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.277624][T12642] loop5: detected capacity change from 0 to 512 [ 317.315002][T12642] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.3391: iget: bad extended attribute block 134217728 [ 317.317562][T12642] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 317.319273][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 317.319320][ C0] EXT4-fs (loop5): initial error at time 321: ext4_orphan_get:1399: inode 15 [ 317.319366][ C0] EXT4-fs (loop5): last error at time 321: ext4_orphan_get:1399: inode 15 [ 317.330405][T12642] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3391: couldn't read orphan inode 15 (err -117) [ 317.330453][T12642] loop5: lost filesystem error report for type 5 error -117 [ 317.345961][T12642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.588960][ T4713] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.989841][T12573] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 322.711995][T11340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.976917][T12659] loop5: detected capacity change from 0 to 256 [ 323.125621][T12662] FAULT_INJECTION: forcing a failure. [ 323.125621][T12662] name failslab, interval 1, probability 0, space 0, times 0 [ 323.129060][T12662] CPU: 0 UID: 0 PID: 12662 Comm: syz.4.3400 Tainted: G L syzkaller #0 PREEMPT [ 323.129086][T12662] Tainted: [L]=SOFTLOCKUP [ 323.129093][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 323.129104][T12662] Call trace: [ 323.129109][T12662] show_stack+0x2c/0x3c (C) [ 323.129137][T12662] __dump_stack+0x30/0x40 [ 323.129154][T12662] dump_stack_lvl+0xd8/0x12c [ 323.129170][T12662] dump_stack+0x1c/0x28 [ 323.129185][T12662] should_fail_ex+0x41c/0x590 [ 323.129201][T12662] should_failslab+0xc4/0x120 [ 323.129214][T12662] kmem_cache_alloc_noprof+0x94/0x5d8 [ 323.129228][T12662] __khugepaged_enter+0x70/0x304 [ 323.129242][T12662] khugepaged_enter_vma+0xbc/0xec [ 323.129255][T12662] hugepage_madvise+0xb0/0xd0 [ 323.129267][T12662] madvise_vma_behavior+0x460/0x3380 [ 323.129280][T12662] madvise_walk_vmas+0x4c8/0x9bc [ 323.129291][T12662] madvise_do_behavior+0x5f0/0x7c0 [ 323.129303][T12662] do_madvise+0x28c/0x2f0 [ 323.129315][T12662] __arm64_sys_madvise+0xac/0xc8 [ 323.129326][T12662] invoke_syscall+0x98/0x244 [ 323.129343][T12662] el0_svc_common+0xec/0x23c [ 323.129359][T12662] do_el0_svc+0x4c/0x5c [ 323.129374][T12662] el0_svc+0x64/0x260 [ 323.129389][T12662] el0t_64_sync_handler+0x44/0x104 [ 323.129403][T12662] el0t_64_sync+0x198/0x19c [ 323.839570][T12676] loop0: detected capacity change from 0 to 256 [ 324.239890][T12684] loop2: detected capacity change from 0 to 512 [ 324.353468][T12684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.783508][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.972664][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3415'. [ 325.060933][T12701] loop4: detected capacity change from 0 to 512 [ 325.138973][T12703] loop5: detected capacity change from 0 to 256 [ 325.254971][T12701] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 326.490062][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 326.648891][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.470303][T12762] FAULT_INJECTION: forcing a failure. [ 333.470303][T12762] name fail_futex, interval 1, probability 0, space 0, times 1 [ 333.470357][T12762] CPU: 0 UID: 0 PID: 12762 Comm: syz.4.3438 Tainted: G L syzkaller #0 PREEMPT [ 333.470376][T12762] Tainted: [L]=SOFTLOCKUP [ 333.470382][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 333.470389][T12762] Call trace: [ 333.470393][T12762] show_stack+0x2c/0x3c (C) [ 333.470420][T12762] __dump_stack+0x30/0x40 [ 333.470437][T12762] dump_stack_lvl+0xd8/0x12c [ 333.470453][T12762] dump_stack+0x1c/0x28 [ 333.470468][T12762] should_fail_ex+0x41c/0x590 [ 333.470481][T12762] should_fail+0x14/0x24 [ 333.470492][T12762] get_futex_key+0x1ec/0x12b0 [ 333.470506][T12762] futex_wait_setup+0x58/0x674 [ 333.470521][T12762] __futex_wait+0x108/0x25c [ 333.470535][T12762] futex_wait+0x108/0x2c0 [ 333.470549][T12762] do_futex+0x320/0x378 [ 333.470563][T12762] __arm64_sys_futex+0x2e4/0x418 [ 333.470576][T12762] invoke_syscall+0x98/0x244 [ 333.470594][T12762] el0_svc_common+0xec/0x23c [ 333.470609][T12762] do_el0_svc+0x4c/0x5c [ 333.470625][T12762] el0_svc+0x64/0x260 [ 333.470640][T12762] el0t_64_sync_handler+0x44/0x104 [ 333.470654][T12762] el0t_64_sync+0x198/0x19c [ 333.719563][T12770] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 334.455108][T12785] ip_tables: iptables: counters copy to user failed while replacing table [ 334.474088][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 334.680878][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'. [ 334.684006][T12789] netlink: 'syz.2.3448': attribute type 30 has an invalid length. [ 334.684062][T12789] netlink: 'syz.2.3448': attribute type 29 has an invalid length. [ 334.684082][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3448'. [ 334.731429][T12791] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 335.405513][T12804] loop4: detected capacity change from 0 to 256 [ 335.608292][T12806] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 336.085413][T12820] rdma_rxe: rxe_newlink: failed to add syz_tun [ 337.516898][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3473'. [ 337.857168][T12850] loop5: detected capacity change from 0 to 2048 [ 337.866692][T12851] loop1: detected capacity change from 0 to 2048 [ 337.878110][T12817] infiniband syz1: set active [ 337.880336][T12817] infiniband syz1: added syz_tun [ 337.887124][T12850] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 337.940730][T12851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.950914][ T4717] Bluetooth: hci3: command 0x0406 tx timeout [ 338.045857][T12817] RDS/IB: syz1: added [ 338.054650][T12817] smc: adding ib device syz1 with port count 1 [ 338.056304][T12817] smc: ib device syz1 port 1 has no pnetid [ 338.949433][ T559] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 338.963955][ T559] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 338.964002][ T559] EXT4-fs (loop1): This should not happen!! Data will be lost [ 338.964002][ T559] [ 338.997954][ T559] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 456 with error 28 [ 339.029494][ T559] EXT4-fs (loop1): This should not happen!! Data will be lost [ 339.029494][ T559] [ 339.029600][ T559] EXT4-fs (loop1): Total free blocks count 0 [ 339.029623][ T559] EXT4-fs (loop1): Free/Dirty block details [ 339.029646][ T559] EXT4-fs (loop1): free_blocks=0 [ 339.029668][ T559] EXT4-fs (loop1): dirty_blocks=464 [ 339.029686][ T559] EXT4-fs (loop1): Block reservation details [ 339.062951][ T4715] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 340.200326][T11223] kernel read not supported for file /newroot/762 (pid: 11223 comm: kworker/0:5) [ 340.820727][ T50] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 340.820793][ T50] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 341.191287][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 341.887926][T12908] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3498'. [ 342.380074][T12912] mmap: syz.1.3500 (12912): VmData 37625856 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 347.975561][T12928] FAULT_INJECTION: forcing a failure. [ 347.975561][T12928] name failslab, interval 1, probability 0, space 0, times 0 [ 347.977946][T12928] CPU: 0 UID: 0 PID: 12928 Comm: syz.2.3505 Tainted: G L syzkaller #0 PREEMPT [ 347.977969][T12928] Tainted: [L]=SOFTLOCKUP [ 347.977975][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 347.977985][T12928] Call trace: [ 347.977991][T12928] show_stack+0x2c/0x3c (C) [ 347.978018][T12928] __dump_stack+0x30/0x40 [ 347.978035][T12928] dump_stack_lvl+0xd8/0x12c [ 347.978051][T12928] dump_stack+0x1c/0x28 [ 347.978067][T12928] should_fail_ex+0x41c/0x590 [ 347.978080][T12928] should_failslab+0xc4/0x120 [ 347.978093][T12928] kmem_cache_alloc_noprof+0x94/0x5d8 [ 347.978107][T12928] vm_area_alloc+0x2c/0x144 [ 347.978123][T12928] mmap_region+0xdb0/0x1c38 [ 347.978135][T12928] do_mmap+0xa50/0xf0c [ 347.978150][T12928] vm_mmap_pgoff+0x298/0x46c [ 347.978164][T12928] ksys_mmap_pgoff+0xd0/0x5b4 [ 347.978179][T12928] __arm64_sys_mmap+0x110/0x12c [ 347.978195][T12928] invoke_syscall+0x98/0x244 [ 347.978210][T12928] el0_svc_common+0xec/0x23c [ 347.978226][T12928] do_el0_svc+0x4c/0x5c [ 347.978241][T12928] el0_svc+0x64/0x260 [ 347.978256][T12928] el0t_64_sync_handler+0x44/0x104 [ 347.978270][T12928] el0t_64_sync+0x198/0x19c [ 348.117725][T12931] loop4: detected capacity change from 0 to 128 [ 348.174302][T12931] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.427811][T12936] loop0: detected capacity change from 0 to 128 [ 348.463224][T12936] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 348.595968][ T4713] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.834871][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.399919][T12958] overlayfs: failed to resolve './file0': -2 [ 350.962064][T12991] bonding: no command found in bonding_masters - use +ifname or -ifname [ 351.423614][T12998] loop0: detected capacity change from 0 to 1024 [ 351.433996][T12998] EXT4-fs: Ignoring removed bh option [ 351.444093][T12998] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 351.495983][T12998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.898612][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.206274][T13015] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 352.930328][T13032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3548'. [ 353.318434][ T4717] Bluetooth: hci4: command 0x0406 tx timeout [ 353.480175][ T5735] bridge0: port 3(syz_tun) entered disabled state [ 353.619097][ T5735] syz_tun (unregistering): left allmulticast mode [ 353.622540][ T5735] syz_tun (unregistering): left promiscuous mode [ 353.622629][ T5735] bridge0: port 3(syz_tun) entered disabled state [ 353.940074][T13047] loop0: detected capacity change from 0 to 1024 [ 353.945608][T13047] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 354.037476][T13047] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.3555: lblock 2 mapped to illegal pblock 2 (length 1) [ 354.037536][T13047] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 354.041819][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 354.041835][ C0] EXT4-fs (loop0): initial error at time 357: ext4_map_blocks:791: inode 3: block 2 [ 354.041863][ C0] EXT4-fs (loop0): last error at time 357: ext4_map_blocks:791: inode 3: block 2 [ 354.048055][T13047] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 354.052189][T13047] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.3555: lblock 0 mapped to illegal pblock 48 (length 1) [ 354.055010][T13047] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 354.055369][T13047] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 354.058910][T13047] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.3555: Failed to acquire dquot type 0 [ 354.062999][T13047] loop0: lost filesystem error report for type 5 error -117 [ 354.063555][T13047] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 354.066456][T13047] loop0: lost filesystem error report for type 5 error -117 [ 354.067029][T13047] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.3555: mark_inode_dirty error [ 354.067082][T13047] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 354.077382][T13047] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 354.077500][T13047] EXT4-fs (loop0): 1 orphan inode deleted [ 354.082090][ T40] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.082123][ T40] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 354.091547][ T40] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 354.091699][ T40] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 354.091736][ T40] loop0: lost filesystem error report for type 5 error -117 [ 354.115424][T13047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.271388][T13047] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm syz.0.3555: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.285601][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.308638][T13047] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 354.308707][T13047] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 980643439 [ 354.308750][T13047] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.3555: Failed to acquire dquot type 0 [ 354.402390][T13050] veth0: entered promiscuous mode [ 354.405950][T13049] veth0: left promiscuous mode [ 354.554867][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.568592][ T40] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.568641][ T40] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 354.571972][ T40] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 354.572019][ T40] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 354.572057][ T40] loop0: lost filesystem error report for type 5 error -117 [ 354.590220][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.614896][ T4710] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 354.614949][ T4710] loop0: lost filesystem error report for type 5 error -117 [ 354.636539][ T4710] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 354.636600][ T4710] loop0: lost filesystem error report for type 5 error -117 [ 354.651977][ T4710] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 354.652035][ T4710] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 354.806244][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.956251][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.203238][T13059] netlink: 'syz.0.3559': attribute type 4 has an invalid length. [ 355.620340][ T12] bridge_slave_1: left allmulticast mode [ 355.620388][ T12] bridge_slave_1: left promiscuous mode [ 355.620550][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.731536][ T12] bridge_slave_0: left allmulticast mode [ 355.731630][ T12] bridge_slave_0: left promiscuous mode [ 355.731811][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.915775][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.929881][ T4717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.934994][ T4717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.937814][ T4717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.940919][ T4717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.222502][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.276297][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.306636][ T12] bond0 (unregistering): Released all slaves [ 357.655013][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 358.029556][ T4717] Bluetooth: hci2: command tx timeout [ 358.204957][ T12] hsr_slave_0: left promiscuous mode [ 358.206674][ T12] hsr_slave_1: left promiscuous mode [ 358.209126][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.212151][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.214536][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.216105][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.228648][ T12] veth1_macvtap: left promiscuous mode [ 358.230829][ T12] veth0_macvtap: left promiscuous mode [ 358.231964][ T12] veth1_vlan: left promiscuous mode [ 358.233336][ T12] veth0_vlan: left promiscuous mode [ 358.610711][ T12] team0 (unregistering): Port device team_slave_1 removed [ 358.631956][ T12] team0 (unregistering): Port device team_slave_0 removed [ 359.009446][ T12] IPVS: stop unused estimator thread 0... [ 360.109786][ T4717] Bluetooth: hci2: command tx timeout [ 362.189438][ T4717] Bluetooth: hci2: command tx timeout [ 364.279572][ T4717] Bluetooth: hci2: command tx timeout [ 364.478140][T13157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3582'. [ 364.957412][T13165] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 365.045690][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 366.383572][T13193] batadv_slave_0: entered promiscuous mode [ 366.396142][T13191] batadv_slave_0: left promiscuous mode [ 367.035083][T13074] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.035155][T13074] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.035435][T13074] bridge_slave_0: entered allmulticast mode [ 367.057515][T13074] bridge_slave_0: entered promiscuous mode [ 367.100635][T13074] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.100696][T13074] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.100889][T13074] bridge_slave_1: entered allmulticast mode [ 367.102731][T13074] bridge_slave_1: entered promiscuous mode [ 367.323589][T13074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.352235][T13074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.556109][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 367.570598][T13074] team0: Port device team_slave_0 added [ 367.574091][T13074] team0: Port device team_slave_1 added [ 367.668267][T13074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.671434][T13074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.677166][T13074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.687589][T13074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.691433][T13074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.697063][T13074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.753058][T13074] hsr_slave_0: entered promiscuous mode [ 367.755039][T13074] hsr_slave_1: entered promiscuous mode [ 367.757124][T13074] debugfs: 'hsr0' already exists in 'hsr' [ 367.758584][T13074] Cannot create hsr debugfs directory [ 367.940829][T13074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 367.944673][T13074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.947590][T13074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 367.952205][T13074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.956065][T13074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 367.963957][T13074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 367.966236][T13074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 367.972227][T13074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.047419][T13074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.062887][T13074] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.069273][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.069341][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.083443][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.083511][ T559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.712279][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.713654][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.357847][T13243] loop2: detected capacity change from 0 to 512 [ 373.452709][T13243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.490817][T13245] loop5: detected capacity change from 0 to 1024 [ 373.511080][T13245] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 373.572244][T13245] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3605: Invalid block bitmap block 0 in block_group 0 [ 373.575506][T13245] loop5: lost filesystem error report for type 5 error -117 [ 373.579267][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 373.579315][ C0] EXT4-fs (loop5): initial error at time 377: ext4_read_block_bitmap_nowait:483 [ 373.579348][ C0] EXT4-fs (loop5): last error at time 377: ext4_read_block_bitmap_nowait:483 [ 373.590607][T13245] Quota error (device loop5): write_blk: dquota write failed [ 373.593211][T13245] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 373.595444][T13245] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3605: Failed to acquire dquot type 0 [ 373.597885][T13245] loop5: lost filesystem error report for type 5 error -117 [ 373.602595][T13245] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.3605: Freeing blocks not in datazone - block = 0, count = 4096 [ 373.606101][T13245] loop5: lost filesystem error report for type 5 error -117 [ 373.628223][T13245] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.3605: Invalid inode bitmap blk 0 in block_group 0 [ 373.635994][T13245] loop5: lost filesystem error report for type 5 error -117 [ 373.639791][ T12] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7 [ 373.639853][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 373.639886][ T12] loop5: lost filesystem error report for type 5 error -117 [ 373.669567][T13245] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 373.669617][T13245] loop5: lost filesystem error report for type 5 error -117 [ 373.676148][T13245] EXT4-fs (loop5): 1 orphan inode deleted [ 373.702094][T13245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.889435][ T30] audit: type=1400 audit(377.837:99): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="%" requested=x pid=13244 comm="syz.5.3605" name="/" dev="loop5" ino=2 [ 373.945834][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.135636][T11340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.542935][T13074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.893728][T13285] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 375.068979][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 375.755313][T13074] veth0_vlan: entered promiscuous mode [ 375.806094][T13074] veth1_vlan: entered promiscuous mode [ 375.915532][T13074] veth0_macvtap: entered promiscuous mode [ 375.978875][T13074] veth1_macvtap: entered promiscuous mode [ 376.062036][T13074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.118472][T13074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.270162][ T1203] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.272034][ T1203] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.274146][ T1203] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.276316][ T1203] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.457690][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.460004][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.575300][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.578140][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.997679][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3630'. [ 378.156027][T13338] loop6: detected capacity change from 0 to 512 [ 378.281696][T13336] team0: Port device team_slave_1 removed [ 378.296045][T13338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.426383][T13338] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 378.440491][T13338] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 378.443571][T13338] EXT4-fs (loop6): This should not happen!! Data will be lost [ 378.443571][T13338] [ 378.446001][T13338] EXT4-fs (loop6): Total free blocks count 0 [ 378.447541][T13338] EXT4-fs (loop6): Free/Dirty block details [ 378.449041][T13338] EXT4-fs (loop6): free_blocks=65280 [ 378.451625][T13338] EXT4-fs (loop6): dirty_blocks=33 [ 378.452626][T13338] EXT4-fs (loop6): Block reservation details [ 378.454092][T13338] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 378.847834][T13074] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 378.906140][T13074] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.955969][T13350] loop5: detected capacity change from 0 to 1024 [ 379.000431][T13350] EXT4-fs: inline encryption not supported [ 379.056449][T13350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.228391][T13358] loop2: detected capacity change from 0 to 1024 [ 379.273814][T13358] EXT4-fs: Ignoring removed orlov option [ 379.365698][T13360] loop6: detected capacity change from 0 to 128 [ 379.366776][T13360] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 379.373496][T13358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.378226][T13360] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 379.496122][T13365] loop0: detected capacity change from 0 to 512 [ 379.674118][T13074] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 379.674163][T13074] FAT-fs (loop6): Filesystem has been set read-only [ 379.674823][T13074] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 379.708208][T13356] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 379.737480][T13356] FAT-fs (loop0): Filesystem has been set read-only [ 379.743803][T13356] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 379.744241][T13356] syz.0.3638: attempt to access beyond end of device [ 379.744241][T13356] loop0: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 379.795246][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.882539][T13367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3643'. [ 380.022310][T11340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.926866][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.320842][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.966678][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.196289][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.199157][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.204339][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.206525][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.208782][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.333420][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.392643][ T30] audit: type=1400 audit(386.337:100): lsm=SMACK fn=smack_task_movememory action=denied subject="w" object="_" requested=w pid=13408 comm="syz.0.3659" opid=13408 ocomm="syz.0.3659" [ 382.945381][ T12] bridge_slave_1: left allmulticast mode [ 382.946689][ T12] bridge_slave_1: left promiscuous mode [ 382.948211][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.957523][ T12] bridge_slave_0: left allmulticast mode [ 382.962479][ T12] bridge_slave_0: left promiscuous mode [ 382.964401][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.368067][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.377885][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.381895][ T12] bond0 (unregistering): Released all slaves [ 384.130494][ T12] hsr_slave_0: left promiscuous mode [ 384.133461][ T12] hsr_slave_1: left promiscuous mode [ 384.136121][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.138973][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.143952][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.143997][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.163723][ T12] veth1_macvtap: left promiscuous mode [ 384.163812][ T12] veth0_macvtap: left promiscuous mode [ 384.163941][ T12] veth1_vlan: left promiscuous mode [ 384.164026][ T12] veth0_vlan: left promiscuous mode [ 384.271155][ T4717] Bluetooth: hci2: command tx timeout [ 384.788797][ T12] team0 (unregistering): Port device team_slave_1 removed [ 384.811708][ T12] team0 (unregistering): Port device team_slave_0 removed [ 386.349322][ T4717] Bluetooth: hci2: command tx timeout [ 388.431815][ T4717] Bluetooth: hci2: command tx timeout [ 388.470011][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'. [ 389.804654][ T4402] 8021q: adding VLAN 0 to HW filter on device eth8 [ 390.512621][ T4717] Bluetooth: hci2: command tx timeout [ 390.660362][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3679'. [ 391.703729][T13503] loop2: detected capacity change from 0 to 512 [ 391.705894][T13503] EXT4-fs: Ignoring removed nobh option [ 391.772302][T13503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.790863][T13406] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.790938][T13406] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.791222][T13406] bridge_slave_0: entered allmulticast mode [ 391.822262][T13406] bridge_slave_0: entered promiscuous mode [ 391.825864][T13406] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.838282][T13406] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.838521][T13406] bridge_slave_1: entered allmulticast mode [ 391.840666][T13406] bridge_slave_1: entered promiscuous mode [ 392.075775][T13406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.094428][T13406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.302495][T13406] team0: Port device team_slave_0 added [ 392.374004][T13406] team0: Port device team_slave_1 added [ 392.393317][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.598779][T13406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.679441][T13406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.679518][T13406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.735435][T13406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.736915][T13406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.744036][T13406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.859779][T13528] loop0: detected capacity change from 0 to 256 [ 392.936556][ T4402] 8021q: adding VLAN 0 to HW filter on device eth9 [ 393.210671][T13406] hsr_slave_0: entered promiscuous mode [ 393.212703][T13406] hsr_slave_1: entered promiscuous mode [ 393.213269][T13406] debugfs: 'hsr0' already exists in 'hsr' [ 393.213302][T13406] Cannot create hsr debugfs directory [ 393.523320][T13538] SQUASHFS error: Failed to read block 0x0: -5 [ 394.625681][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3701'. [ 394.802839][T13406] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 394.921398][T13406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.935519][T13406] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 395.000382][T13406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.011147][T13406] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 395.049499][T13406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.051745][T13406] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 395.114200][T13406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.575544][T13406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.654213][T13406] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.692919][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.692994][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.723025][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.723129][ T559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.411795][ T4782] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 396.439779][ T4782] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.894709][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3711'. [ 402.686822][T13406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.851055][T13406] veth0_vlan: entered promiscuous mode [ 403.886513][T13406] veth1_vlan: entered promiscuous mode [ 404.042870][T13406] veth0_macvtap: entered promiscuous mode [ 404.062625][T13406] veth1_macvtap: entered promiscuous mode [ 404.135577][T13406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.166628][T13406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.275992][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.280307][ T1203] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.280436][ T1203] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.280495][ T1203] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.427085][T13663] loop4: detected capacity change from 0 to 8192 [ 404.657225][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.657245][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.823021][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.831559][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.340952][T13707] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 406.341294][T13707] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 406.341660][T13707] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 406.600366][T13717] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 406.896654][T13725] loop7: detected capacity change from 0 to 256 [ 406.929841][T13725] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.262925][T13728] loop2: detected capacity change from 0 to 4096 [ 407.265070][T13728] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.302361][T13728] EXT4-fs (loop2): Test dummy encryption mode enabled [ 407.332711][T13728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.525104][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3742'. [ 407.877199][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.154025][T13775] loop7: detected capacity change from 0 to 512 [ 409.156306][T13775] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.232624][T13775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.670244][T13790] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 409.696854][T13406] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.996045][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3761'. [ 410.168500][T13803] loop4: detected capacity change from 0 to 256 [ 410.926353][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 410.942073][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 411.041863][ T4402] 8021q: adding VLAN 0 to HW filter on device eth10 [ 418.073827][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3783'. [ 418.369673][ T4402] 8021q: adding VLAN 0 to HW filter on device eth11 [ 418.544896][T13870] netlink: 'syz.2.3784': attribute type 3 has an invalid length. [ 418.725734][T13874] loop4: detected capacity change from 0 to 512 [ 418.864857][T13874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.037307][T13882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.037938][T13882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.297314][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.486453][T13891] loop5: detected capacity change from 0 to 512 [ 419.509676][T13891] EXT4-fs: inline encryption not supported [ 419.518123][T13891] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 419.542041][T13891] EXT4-fs (loop5): 1 truncate cleaned up [ 419.545568][T13891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.947666][T11340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.131757][T13904] netlink: 'syz.2.3796': attribute type 1 has an invalid length. [ 420.131809][T13904] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3796'. [ 420.138779][T13903] loop4: detected capacity change from 0 to 1024 [ 420.143688][T13903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.184382][T13903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.228176][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3797'. [ 420.228232][T13909] netlink: 'syz.5.3797': attribute type 30 has an invalid length. [ 420.293562][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.293865][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.293945][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.300283][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.315582][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3797'. [ 420.317611][T13909] netlink: 'syz.5.3797': attribute type 30 has an invalid length. [ 420.647764][T13917] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 420.656040][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.986307][T13922] Bluetooth: MGMT ver 1.23 [ 421.164031][T13927] Injecting memory failure for pfn 0x13b904 at process virtual address 0x20000000 [ 421.255572][T13927] Memory failure: 0x13b904: Sending SIGBUS to syz.7.3803:13927 due to hardware memory corruption [ 421.255683][T13927] Memory failure: 0x13b904: recovery action for dirty LRU page: Recovered [ 421.255742][T13927] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 421.255781][T13927] Memory failure: 0x219070: Sending SIGBUS to syz.7.3803:13927 due to hardware memory corruption [ 421.255804][T13927] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 421.380240][T13931] vhci_hcd vhci_hcd.2: default hub control req: 8013 v0000 i0000 l31125 [ 427.812391][T13966] netlink: 'syz.7.3818': attribute type 2 has an invalid length. [ 427.982853][T13972] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 428.027287][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'. [ 428.029100][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'. [ 428.539089][ T0] Detected PIPT I-cache on CPU1 [ 428.539134][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 428.539318][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 429.056969][T14006] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3833'. [ 429.184267][T14009] loop0: detected capacity change from 0 to 128 [ 429.336053][T14014] loop7: detected capacity change from 0 to 512 [ 429.453844][T14009] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 429.496883][T14014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.602093][T13406] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.607984][T14009] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.732297][ T4717] Bluetooth: hci2: link tx timeout [ 429.732519][ T4717] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.777388][T14031] loop0: detected capacity change from 0 to 128 [ 429.814984][T14031] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.011778][T14041] loop7: detected capacity change from 0 to 512 [ 430.014689][T14041] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 430.017824][T14041] EXT4-fs (loop7): 1 truncate cleaned up [ 430.020818][T14041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.039656][T14041] EXT4-fs (loop7): shut down requested (2) [ 430.078833][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 430.087182][T13406] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.316484][T14049] loop4: detected capacity change from 0 to 1024 [ 430.381925][T14049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.547581][T14049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.790850][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 431.968141][ T9] kernel read not supported for file /video9 (pid: 9 comm: kworker/0:0) [ 432.538424][T14125] FAULT_INJECTION: forcing a failure. [ 432.538424][T14125] name failslab, interval 1, probability 0, space 0, times 1 [ 432.538489][T14125] CPU: 0 UID: 0 PID: 14125 Comm: syz.4.3878 Tainted: G L syzkaller #0 PREEMPT [ 432.538508][T14125] Tainted: [L]=SOFTLOCKUP [ 432.538514][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 432.538521][T14125] Call trace: [ 432.538526][T14125] show_stack+0x2c/0x3c (C) [ 432.538553][T14125] __dump_stack+0x30/0x40 [ 432.538570][T14125] dump_stack_lvl+0xd8/0x12c [ 432.538586][T14125] dump_stack+0x1c/0x28 [ 432.538601][T14125] should_fail_ex+0x41c/0x590 [ 432.538614][T14125] should_failslab+0xc4/0x120 [ 432.538627][T14125] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 432.538642][T14125] sock_alloc_inode+0x30/0x180 [ 432.538659][T14125] alloc_inode+0x68/0x198 [ 432.538674][T14125] sock_alloc+0x4c/0x204 [ 432.538688][T14125] __sock_create+0x108/0x670 [ 432.538702][T14125] sock_create_kern+0x4c/0x64 [ 432.538716][T14125] smc_create_clcsk+0x40/0xb8 [ 432.538732][T14125] smc_create+0xe8/0x47c [ 432.538748][T14125] __sock_create+0x31c/0x670 [ 432.538762][T14125] __sys_socket_create+0xc0/0x11c [ 432.538776][T14125] __sys_socket+0x44/0xec [ 432.538790][T14125] __arm64_sys_socket+0x84/0x9c [ 432.538809][T14125] invoke_syscall+0x98/0x244 [ 432.538829][T14125] el0_svc_common+0xec/0x23c [ 432.538844][T14125] do_el0_svc+0x4c/0x5c [ 432.538860][T14125] el0_svc+0x64/0x260 [ 432.538875][T14125] el0t_64_sync_handler+0x44/0x104 [ 432.538889][T14125] el0t_64_sync+0x198/0x19c [ 432.541936][T14125] socket: no more sockets [ 432.775191][T14136] loop4: detected capacity change from 0 to 512 [ 432.778016][T14136] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 432.803082][T14136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 432.803186][T14136] System zones: 1-12 [ 432.823390][T14136] EXT4-fs (loop4): 1 truncate cleaned up [ 432.825780][T14136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.958440][T14136] EXT4-fs (loop4): shut down requested (1) [ 432.963935][T13991] kernel read not supported for file /dummy_udc (pid: 13991 comm: kworker/1:0) [ 433.086820][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.162619][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.162703][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.369747][ T30] audit: type=1400 audit(437.327:101): lsm=SMACK fn=smack_inode_link action=denied subject="_" object="l" requested=w pid=14158 comm="syz.2.3889" name="file1" dev="tmpfs" ino=4002 [ 433.733856][T14177] input: syz1 as /devices/virtual/input/input22 [ 433.733907][T14177] input: failed to attach handler leds to device input22, error: -6 [ 434.152380][T14194] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 434.385337][T14204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3903'. [ 434.952146][T14225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 435.234723][T14238] loop2: detected capacity change from 0 to 2048 [ 435.258747][T14238] EXT4-fs: Ignoring removed i_version option [ 435.344470][T14238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.605903][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.016048][T14268] loop4: detected capacity change from 0 to 512 [ 436.032196][T14268] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 436.051670][T14273] loop7: detected capacity change from 0 to 128 [ 436.079535][T14273] EXT4-fs (loop7): Test dummy encryption mode enabled [ 436.124339][T14273] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.374183][ T867] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 436.383333][ T867] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 436.515166][T13406] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.910573][T14299] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.087409][T14306] netlink: 'syz.7.3945': attribute type 1 has an invalid length. [ 437.119541][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3947'. [ 437.119604][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3947'. [ 437.179738][T14313] loop0: detected capacity change from 0 to 512 [ 437.192473][T14313] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 437.199086][T14313] EXT4-fs (loop0): 1 truncate cleaned up [ 437.226657][T14313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.462899][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.740769][ T867] kernel read not supported for file /video9 (pid: 867 comm: kworker/1:2) [ 443.017626][T14353] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 443.017673][T14353] CPU: 0 UID: 0 PID: 14353 Comm: syz.0.3963 Tainted: G L syzkaller #0 PREEMPT [ 443.017692][T14353] Tainted: [L]=SOFTLOCKUP [ 443.017697][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 443.017705][T14353] Call trace: [ 443.017710][T14353] show_stack+0x2c/0x3c (C) [ 443.017739][T14353] __dump_stack+0x30/0x40 [ 443.017758][T14353] dump_stack_lvl+0xd8/0x12c [ 443.017774][T14353] dump_stack+0x1c/0x28 [ 443.017789][T14353] sysfs_warn_dup+0x9c/0xb8 [ 443.017812][T14353] sysfs_create_dir_ns+0x190/0x1f4 [ 443.017828][T14353] kobject_add_internal+0x290/0x6f0 [ 443.017847][T14353] kobject_add_varg+0x9c/0xe8 [ 443.017862][T14353] kobject_add+0x110/0x1c8 [ 443.017877][T14353] device_add+0x394/0x9e0 [ 443.017891][T14353] device_register+0x28/0x38 [ 443.017907][T14353] tty_register_device_attr+0x31c/0x5e8 [ 443.017924][T14353] tty_register_device+0x3c/0x50 [ 443.017938][T14353] gsm_activate_mux+0xdc/0x284 [ 443.017954][T14353] gsmld_ioctl+0xea8/0x1414 [ 443.017968][T14353] tty_ioctl+0x8a8/0xcb0 [ 443.017981][T14353] __arm64_sys_ioctl+0x154/0x1cc [ 443.018000][T14353] invoke_syscall+0x98/0x244 [ 443.018017][T14353] el0_svc_common+0xec/0x23c [ 443.018033][T14353] do_el0_svc+0x4c/0x5c [ 443.018048][T14353] el0_svc+0x64/0x260 [ 443.018062][T14353] el0t_64_sync_handler+0x44/0x104 [ 443.018076][T14353] el0t_64_sync+0x198/0x19c [ 443.018532][T14353] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 443.559579][T14379] tipc: Started in network mode [ 443.561389][T14379] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 443.727785][T14383] loop7: detected capacity change from 0 to 1024 [ 443.754611][T14383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 443.836620][T14383] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.3972: lblock 0 mapped to illegal pblock 0 (length 6) [ 443.848106][T14383] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 443.848178][T14383] EXT4-fs (loop7): This should not happen!! Data will be lost [ 443.848178][T14383] [ 443.927761][T14390] 9pnet_fd: p9_fd_create_unix (14390): problem connecting socket: ./proc/net/rpc/auth.unix.ip/channel: -111 [ 443.977762][T13406] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 444.016728][T13406] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 444.342724][T14398] loop2: detected capacity change from 0 to 1024 [ 444.345640][T14398] EXT4-fs: Ignoring removed bh option [ 444.345748][T14398] EXT4-fs: Ignoring removed bh option [ 444.352195][T14398] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 444.397779][T14398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.484474][T14398] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 444.545120][ T4718] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /778/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 444.552748][ T4718] EXT4-fs (loop2): Remounting filesystem read-only [ 444.597181][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.905063][T14416] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 444.909497][ T4717] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 444.957500][T14408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.958165][T14408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.266567][T14430] loop0: detected capacity change from 0 to 512 [ 445.392284][T14430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.554438][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.681172][T14444] loop4: detected capacity change from 0 to 512 [ 445.724775][T14444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.928569][T14450] syzkaller1: entered promiscuous mode [ 445.928617][T14450] syzkaller1: entered allmulticast mode [ 445.975263][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.123652][T14463] loop4: detected capacity change from 0 to 512 [ 446.190426][T14463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.212877][T14463] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.4002: corrupted inode contents [ 446.241519][T14463] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #2: comm syz.4.4002: mark_inode_dirty error [ 446.247025][T14463] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.4002: corrupted inode contents [ 446.249758][T14463] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.4002: mark_inode_dirty error [ 446.306312][T14463] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.4002: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 446.306312][T14463] [ 446.315769][T14463] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.4002: corrupted inode contents [ 446.326429][T14463] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.4002: mark_inode_dirty error [ 446.329843][T14463] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 446.360139][T14463] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.4002: corrupted inode contents [ 446.369556][T14463] EXT4-fs error (device loop4): add_dirent_to_buf:2151: inode #2: comm syz.4.4002: mark_inode_dirty error [ 446.490090][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.788902][T14486] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 446.827460][T14486] loop7: detected capacity change from 0 to 512 [ 446.843709][T14486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840c018, mo2=0082] [ 446.843818][T14486] System zones: 2-12, 7-7 [ 446.844865][T14486] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #17: comm syz.7.4011: iget: immutable or append flags not allowed on symlinks [ 446.844889][T14486] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 446.845103][T14486] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4011: couldn't read orphan inode 17 (err -117) [ 446.845119][T14486] loop7: lost filesystem error report for type 5 error -117 [ 446.847589][T14486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.043642][T13406] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.584275][T14511] input: syz1 as /devices/virtual/input/input23 [ 447.799592][T14519] loop5: detected capacity change from 0 to 128 [ 447.939855][T14521] 9pnet: p9_errstr2errno: server reported unknown error [ 448.391285][T14543] loop5: detected capacity change from 0 to 1024 [ 448.435770][T14543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.489003][T14543] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 448.527221][T14543] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 448.562659][T14543] overlayfs: inode number too big (/file0, ino=4611686018427387917, xinobits=3) [ 448.722879][T11340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.780761][T14550] loop7: detected capacity change from 0 to 8192 [ 449.120535][T14561] FAULT_INJECTION: forcing a failure. [ 449.120535][T14561] name failslab, interval 1, probability 0, space 0, times 0 [ 449.120589][T14561] CPU: 0 UID: 0 PID: 14561 Comm: syz.2.4045 Tainted: G L syzkaller #0 PREEMPT [ 449.120605][T14561] Tainted: [L]=SOFTLOCKUP [ 449.120611][T14561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 449.120618][T14561] Call trace: [ 449.120622][T14561] show_stack+0x2c/0x3c (C) [ 449.120649][T14561] __dump_stack+0x30/0x40 [ 449.120666][T14561] dump_stack_lvl+0xd8/0x12c [ 449.120682][T14561] dump_stack+0x1c/0x28 [ 449.120698][T14561] should_fail_ex+0x41c/0x590 [ 449.120710][T14561] should_failslab+0xc4/0x120 [ 449.120724][T14561] __kmalloc_cache_noprof+0x94/0x5ec [ 449.120739][T14561] __arm64_sys_memfd_create+0x258/0x3ec [ 449.120754][T14561] invoke_syscall+0x98/0x244 [ 449.120771][T14561] el0_svc_common+0xec/0x23c [ 449.120787][T14561] do_el0_svc+0x4c/0x5c [ 449.120807][T14561] el0_svc+0x64/0x260 [ 449.120822][T14561] el0t_64_sync_handler+0x44/0x104 [ 449.120837][T14561] el0t_64_sync+0x198/0x19c [ 449.355370][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.356551][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.357088][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.357904][ T4717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.358468][ T4717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.397357][T14564] loop4: detected capacity change from 0 to 4096 [ 449.410600][T14564] EXT4-fs: Ignoring removed mblk_io_submit option [ 449.423213][T14564] EXT4-fs (loop4): Test dummy encryption mode enabled [ 449.433688][T14564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.690685][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.148576][T14597] bridge0: port 3(syz_tun) entered blocking state [ 450.150370][T14597] bridge0: port 3(syz_tun) entered disabled state [ 450.151798][T14597] syz_tun: entered allmulticast mode [ 450.173591][T14597] syz_tun: entered promiscuous mode [ 450.174101][T14597] bridge0: port 3(syz_tun) entered blocking state [ 450.174154][T14597] bridge0: port 3(syz_tun) entered forwarding state [ 450.701522][T14615] loop2: detected capacity change from 0 to 1024 [ 450.704130][T14615] EXT4-fs: Ignoring removed bh option [ 450.707287][T14615] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 450.780109][ T4393] nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10 [ 450.780171][ T4393] nvme nvme0: Does your device have a faulty power saving mode enabled? [ 450.780212][ T4393] nvme nvme0: Try "nvme_core.default_ps_max_latency_us=0 pcie_aspm=off pcie_port_pm=off" and report a bug [ 450.781883][T14615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.865476][ T12] nvme 0000:00:02.0: enabling device (0200 -> 0202) [ 450.938085][T14622] loop7: detected capacity change from 0 to 512 [ 450.982710][ T12] nvme nvme0: Disabling device after reset failure: -19 [ 451.061966][ T4395] ------------[ cut here ]------------ [ 451.061985][ T4395] WARNING: block/blk-mq.c:2107 at blk_mq_dispatch_rq_list+0x960/0x13a8, CPU#0: kworker/0:1H/4395 [ 451.064910][ T4395] Modules linked in: [ 451.065542][ T4395] CPU: 0 UID: 0 PID: 4395 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT [ 451.067289][ T4395] Tainted: [L]=SOFTLOCKUP [ 451.068078][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 451.069830][ T4395] Workqueue: kblockd blk_mq_run_work_fn [ 451.070863][ T4395] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 451.072282][ T4395] pc : blk_mq_dispatch_rq_list+0x960/0x13a8 [ 451.073364][ T4395] lr : blk_mq_dispatch_rq_list+0x960/0x13a8 [ 451.074429][ T4395] sp : ffff8000960877e0 [ 451.075182][ T4395] x29: ffff8000960878c0 x28: 0000000000000000 x27: 0000000000000000 [ 451.076644][ T4395] x26: 1fffe00019095302 x25: ffff0000c84a9848 x24: ffff0000c8467800 [ 451.077978][ T4395] x23: dfff800000000000 x22: ffff0000c84a9810 x21: ffff800096087a48 [ 451.079334][ T4395] x20: ffff800096087a40 x19: ffff0000c8467948 x18: 00000000ffffffff [ 451.080660][ T4395] x17: ffff80008a7d6000 x16: 0000000000000004 x15: ffff80008a35fda0 [ 451.081999][ T4395] x14: ffff80008a5d5e28 x13: 0000000000000002 x12: 0000000000000000 [ 451.083408][ T4395] x11: 0000000000000000 x10: ffff700012c10f12 x9 : 0000000000000000 [ 451.084719][ T4395] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 6c3e2d7874636826 [ 451.086080][ T4395] x5 : ffff0000c0050ba7 x4 : 0000000000000000 x3 : 0000000000000010 [ 451.087466][ T4395] x2 : 0000000000000000 x1 : ffff0000c7deba80 x0 : 0000000000000000 [ 451.088859][ T4395] Call trace: [ 451.089430][ T4395] blk_mq_dispatch_rq_list+0x960/0x13a8 (P) [ 451.090423][ T4395] __blk_mq_sched_dispatch_requests+0x250/0x10e8 [ 451.091467][ T4395] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 451.092432][ T4395] blk_mq_run_work_fn+0x214/0x2e4 [ 451.093285][ T4395] process_scheduled_works+0x788/0x10b8 [ 451.094256][ T4395] worker_thread+0x798/0xbd0 [ 451.095061][ T4395] kthread+0x304/0x3d4 [ 451.095809][ T4395] ret_from_fork+0x10/0x20 [ 451.096572][ T4395] irq event stamp: 34524 [ 451.097297][ T4395] hardirqs last enabled at (34523): [] _raw_spin_unlock_irq+0x30/0x80 [ 451.099002][ T4395] hardirqs last disabled at (34524): [] el1_brk64+0x20/0x54 [ 451.100545][ T4395] softirqs last enabled at (34144): [] handle_softirqs+0xc28/0xd98 [ 451.102215][ T4395] softirqs last disabled at (34139): [] __do_softirq+0x14/0x20 [ 451.103817][ T4395] ---[ end trace 0000000000000000 ]--- [ 451.108824][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1883 starting block 140296) [ 451.108966][ T4393] Buffer I/O error on device nvme0n1p2, logical block 74752 [ 451.109088][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1883 starting block 140297) [ 451.109118][ T ** replaying previous printk message ** [ 451.109118][ T4393] Buffer I/O error on device nvme0n1p2, logical block 74753 [ 451.109142][ T4393] Buffer I/O error on device nvme0n1p2, logical block 74754 [ 451.119669][ T4395] ------------[ cut here ]------------ [ 451.119680][ T4395] WARNING: block/blk.h:703 at blk_mq_free_request+0x190/0x210, CPU#0: kworker/0:1H/4395 [ 451.122737][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1869 starting block 133133) [ 451.123394][ T4393] Buffer I/O error on device nvme0n1p2, logical block 67589 [ 451.123461][ T4393] Buffer I/O error on device nvme0n1p2, logical block 67590 [ 451.123510][ T4393] Buffer I/O error on device nvme0n1p2, logical block 67591 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 451.123556][ T4393] Buffer I/O error on device nvme0n1p2, logical block 67592 [ 451.123646][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1869 starting block 133148) [ 451.123689][ T4393] Buffer I/O error on device nvme0n1p2, logical block 67604 [ 451.123731][ T4393] Buffer I/O error on device nvme0n1p2, logical block 67605 [ 451.123773][ T4393] Buffer I/O error on device nvme0n1p2, logical block 67606 [ 451.124072][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1869 starting block 133176) [ 451.124231][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1869 starting block 133186) [ 451.124472][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1869 starting block 133205) [ 451.124607][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1869 starting block 133212) [ 451.124953][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1869 starting block 133236) [ 451.125090][ T4393] EXT4-fs warning (device nvme0n1p2): ext4_end_bio:372: I/O error 10 writing to inode 1869 starting block 133248) [ 451.148099][ T4395] Modules linked in: [ 451.148775][ T4395] CPU: 0 UID: 0 PID: 4395 Comm: kworker/0:1H Tainted: G W L syzkaller #0 PREEMPT [ 451.150555][ T4395] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 451.151420][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 451.153087][ T4395] Workqueue: kblockd blk_mq_run_work_fn [ 451.154069][ T4395] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 451.155319][ T4395] pc : blk_mq_free_request+0x190/0x210 [ 451.156244][ T4395] lr : blk_mq_free_request+0x190/0x210 [ 451.157169][ T4395] sp : ffff800096087730 [ 451.157881][ T4395] x29: ffff800096087730 x28: ffff700012c10f0c x27: ffff0000c84a9800 [ 451.159310][ T4395] x26: ffff0000c7deba80 x25: 1fffe00019095303 x24: 1fffe00019095320 [ 451.160744][ T4395] x23: dfff800000000000 x22: dfff800000000000 x21: ffff0000c84a989c [ 451.162108][ T4395] x20: 000000000000007f x19: ffff0000c84a9800 x18: 00000000ffffffff [ 451.163479][ T4395] x17: ffff80008a7d6000 x16: 0000000000000004 x15: ffff80008a35fda0 [ 451.164795][ T4395] x14: ffff80008a5d5e28 x13: 0000000000000001 x12: 0000000000000000 [ 451.166161][ T4395] x11: 0000000000000000 x10: ffff600019095314 x9 : 0000000000000000 [ 451.167496][ T4395] x8 : 0000000000000000 x7 : 6b636f6c5f646165 x6 : 646165725f756372 [ 451.168894][ T4395] x5 : ffff0000c00505ed x4 : 0000000000000000 x3 : ffff80008178c00c [ 451.170368][ T4395] x2 : 000000000000007f x1 : ffff0000c7deba80 x0 : 0000000000000000 [ 451.171837][ T4395] Call trace: [ 451.172399][ T4395] blk_mq_free_request+0x190/0x210 (P) [ 451.173339][ T4395] __blk_mq_end_request+0x32c/0x434 [ 451.174239][ T4395] blk_mq_end_request+0x68/0x8c [ 451.175090][ T4395] blk_mq_dispatch_rq_list+0x410/0x13a8 [ 451.176046][ T4395] __blk_mq_sched_dispatch_requests+0x250/0x10e8 [ 451.177013][ T4395] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 451.177956][ T4395] blk_mq_run_work_fn+0x214/0x2e4 [ 451.178768][ T4395] process_scheduled_works+0x788/0x10b8 [ 451.179681][ T4395] worker_thread+0x798/0xbd0 [ 451.180415][ T4395] kthread+0x304/0x3d4 [ 451.181132][ T4395] ret_from_fork+0x10/0x20 [ 451.181899][ T4395] irq event stamp: 35042 [ 451.182621][ T4395] hardirqs last enabled at (35041): [] seqcount_lockdep_reader_access+0x7c/0xf8 [ 451.184385][ T4395] hardirqs last disabled at (35042): [] el1_brk64+0x20/0x54 [ 451.185918][ T4395] softirqs last enabled at (35034): [] handle_softirqs+0xc28/0xd98 [ 451.187529][ T4395] softirqs last disabled at (34527): [] __do_softirq+0x14/0x20 [ 451.189133][ T4395] ---[ end trace 0000000000000000 ]--- [ 451.191311][ T4309] Aborting journal on device nvme0n1p2-8. [ 451.192445][ T4309] Buffer I/O error on dev nvme0n1p2, logical block 131072, lost sync page write [ 451.192482][ T4309] JBD2: I/O error when updating journal superblock for nvme0n1p2-8. [ 451.206527][ T12] EXT4-fs (nvme0n1p2): shut down requested (2) Jan 1 00:07:35 syzkaller kern.alert kernel: [ 451.206527][ T12] EXT4-fs (nvme0n1p2): shut down requested (2) [ 451.389504][ T4717] Bluetooth: hci0: command tx timeout [ 451.661324][T13406] bridge0: port 3(syz_tun) entered disabled state [ 451.679545][T13406] syz_tun (unregistering): left allmulticast mode [ 451.680740][T13406] syz_tun (unregistering): left promiscuous mode [ 451.681983][T13406] bridge0: port 3(syz_tun) entered disabled state [ 451.943474][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.082477][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.136975][T14631] bridge0: port 3(syz_tun) entered disabled state [ 452.155626][T14631] syz_tun (unregistering): left allmulticast mode [ 452.155680][T14631] syz_tun (unregistering): left promiscuous mode [ 452.155719][T14631] bridge0: port 3(syz_tun) entered disabled state [ 452.161857][ T39] smc: removing ib device syz1 [ 452.169020][T11223] syz1: Port: 1 Link DOWN [ 452.178022][ T8372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.228040][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.348609][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.494574][ T8372] bridge0: port 3(syz_tun) entered disabled state [ 452.504005][ T8372] syz_tun (unregistering): left allmulticast mode [ 452.505213][ T8372] syz_tun (unregistering): left promiscuous mode [ 452.506713][ T8372] bridge0: port 3(syz_tun) entered disabled state [ 452.783427][ T12] bridge_slave_1: left allmulticast mode [ 452.784587][ T12] bridge_slave_1: left promiscuous mode [ 452.786192][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.790990][ T12] bridge_slave_0: left allmulticast mode [ 452.792044][ T12] bridge_slave_0: left promiscuous mode [ 452.793534][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.279803][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.302174][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.367055][ T12] bond0 (unregistering): Released all slaves [ 453.444767][ T4402] 8021q: adding VLAN 0 to HW filter on device eth12 [ 453.482416][ T12] tipc: Left network mode [ 453.505956][ T4402] 8021q: adding VLAN 0 to HW filter on device eth14 [ 453.628015][ T4402] 8021q: adding VLAN 0 to HW filter on device eth13 [ 453.668681][ T4402] 8021q: adding VLAN 0 to HW filter on device eth15 [ 454.448209][ T12] hsr_slave_0: left promiscuous mode [ 454.450085][ T12] hsr_slave_1: left promiscuous mode [ 454.451609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.452901][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.454913][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.456280][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.466389][ T12] veth1_macvtap: left promiscuous mode [ 454.466466][ T12] veth0_macvtap: left promiscuous mode [ 454.467073][ T12] veth1_vlan: left promiscuous mode [ 454.467153][ T12] veth0_vlan: left promiscuous mode [ 454.759605][ T12] team0 (unregistering): Port device team_slave_1 removed [ 454.777752][ T12] team0 (unregistering): Port device team_slave_0 removed [ 455.465258][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.591610][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.659928][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.738033][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.924696][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.936602][ T4402] 8021q: adding VLAN 0 to HW filter on device eth16 [ 455.957489][ T4402] 8021q: adding VLAN 0 to HW filter on device eth17 [ 455.983786][ T4402] 8021q: adding VLAN 0 to HW filter on device eth18 [ 456.014726][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.024191][ T4402] 8021q: adding VLAN 0 to HW filter on device eth19 [ 456.099027][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.171766][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.366358][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.366453][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.376639][ T4402] 8021q: adding VLAN 0 to HW filter on device eth20 [ 456.400908][ T4402] 8021q: adding VLAN 0 to HW filter on device eth21 [ 456.437876][ T4402] 8021q: adding VLAN 0 to HW filter on device eth22 [ 456.448677][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.448716][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.474686][ T4402] 8021q: adding VLAN 0 to HW filter on device eth23 [ 456.543275][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.543328][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.648888][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.648939][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.808987][ T12] bridge_slave_1: left promiscuous mode [ 456.810446][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.815143][ T12] bridge_slave_0: left allmulticast mode [ 456.816274][ T12] bridge_slave_0: left promiscuous mode [ 456.817387][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.837044][ T12] bridge_slave_1: left allmulticast mode [ 456.838222][ T12] bridge_slave_1: left promiscuous mode [ 456.839703][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.843730][ T12] bridge_slave_0: left allmulticast mode [ 456.844827][ T12] bridge_slave_0: left promiscuous mode [ 456.846027][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.864076][ T12] bridge_slave_1: left allmulticast mode [ 456.864128][ T12] bridge_slave_1: left promiscuous mode [ 456.864248][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.873017][ T12] bridge_slave_0: left allmulticast mode [ 456.873067][ T12] bridge_slave_0: left promiscuous mode [ 456.873204][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.129672][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.154930][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.158840][ T12] bond0 (unregistering): Released all slaves [ 457.323436][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.352192][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.401970][ T12] bond0 (unregistering): Released all slaves [ 457.481070][ T12] bond0 (unregistering): Released all slaves [ 457.613111][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.644480][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.671166][ T12] bond0 (unregistering): Released all slaves [ 457.680329][ T12] bond1 (unregistering): Released all slaves [ 457.727830][ T4402] 8021q: adding VLAN 0 to HW filter on device eth24 [ 457.807158][ T12] tipc: Disabling bearer [ 457.807380][ T12] tipc: Left network mode [ 457.841904][ T4402] 8021q: adding VLAN 0 to HW filter on device eth25 [ 457.867582][ T4402] 8021q: adding VLAN 0 to HW filter on device eth27 [ 457.898979][ T4402] 8021q: adding VLAN 0 to HW filter on device eth26 [ 458.793826][ T12] hsr_slave_0: left promiscuous mode [ 458.794983][ T12] hsr_slave_1: left promiscuous mode [ 458.795554][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.795571][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.799974][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.800011][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.812342][ T12] hsr_slave_0: left promiscuous mode [ 458.814120][ T12] hsr_slave_1: left promiscuous mode [ 458.815756][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.817151][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.819097][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.823110][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.830667][ T12] hsr_slave_0: left promiscuous mode [ 458.831861][ T12] hsr_slave_1: left promiscuous mode [ 458.832590][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.832606][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.834854][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.834868][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.856691][ T12] veth1_macvtap: left promiscuous mode [ 458.857849][ T12] veth0_macvtap: left promiscuous mode [ 458.858913][ T12] veth1_vlan: left promiscuous mode [ 458.860223][ T12] veth0_vlan: left promiscuous mode [ 458.862577][ T12] veth1_macvtap: left promiscuous mode [ 458.862630][ T12] veth0_macvtap: left promiscuous mode [ 458.862732][ T12] veth1_vlan: left promiscuous mode [ 458.862794][ T12] veth0_vlan: left promiscuous mode [ 458.868638][ T12] veth1_macvtap: left promiscuous mode [ 458.868719][ T12] veth0_macvtap: left promiscuous mode [ 458.868830][ T12] veth1_vlan: left promiscuous mode [ 458.868910][ T12] veth0_vlan: left promiscuous mode [ 459.319177][ T12] team0 (unregistering): Port device team_slave_0 removed [ 459.742534][ T12] team0 (unregistering): Port device team_slave_1 removed [ 459.767512][ T12] team0 (unregistering): Port device team_slave_0 removed [ 460.295460][ T12] team0 (unregistering): Port device team_slave_1 removed [ 460.312997][ T12] team0 (unregistering): Port device team_slave_0 removed