last executing test programs: 1m30.809608782s ago: executing program 3 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4a000200) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x4, 0x0, 0x98, &(0x7f0000000480)={0x0, 0x800, 0x14}}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) 1m30.544907225s ago: executing program 2 (id=1003): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x262700, 0x192) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r2}, 0x0) 1m30.512098914s ago: executing program 2 (id=1004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) io_uring_enter(r1, 0x2219, 0xc4d5, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) 1m30.449687631s ago: executing program 2 (id=1006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xb8, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, r3}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 1m30.207772098s ago: executing program 2 (id=1007): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./dev\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) 1m29.589025069s ago: executing program 3 (id=1011): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0488c000000000000109022c00010000000109040008020300020009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800000035e550955e17d5b1"], 0x0}, 0x0) 1m29.47619409s ago: executing program 2 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x262700, 0x192) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r2}, 0x0) 1m28.957595803s ago: executing program 2 (id=1021): syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) syz_emit_ethernet(0xa6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x77}]}}]}, 0x3c}}, 0x4000010) 1m28.948883245s ago: executing program 32 (id=1021): syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) syz_emit_ethernet(0xa6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x77}]}}]}, 0x3c}}, 0x4000010) 1m28.946184026s ago: executing program 3 (id=1023): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x100403, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 1m28.928742091s ago: executing program 3 (id=1024): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./dev\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) 1m28.738648554s ago: executing program 3 (id=1025): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x400, @empty}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) 1m28.220249547s ago: executing program 3 (id=1027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/69, 0x45}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000001880)=""/77, 0x4d}], 0x3}, 0x7}], 0x1, 0x10022, 0x0) 1m28.100283139s ago: executing program 33 (id=1027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/69, 0x45}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000001880)=""/77, 0x4d}], 0x3}, 0x7}], 0x1, 0x10022, 0x0) 1m25.652810606s ago: executing program 0 (id=1052): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x262700, 0x192) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) 1m25.594788342s ago: executing program 0 (id=1061): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000980)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) 1m24.707200687s ago: executing program 0 (id=1055): syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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") mount$nfs(&(0x7f00000000c0)='\xe9\xe7;\xa6\xc8...', &(0x7f0000000000)='./file0\x00', 0x0, 0x2000, 0x0) 1m24.618496001s ago: executing program 0 (id=1057): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m24.540905833s ago: executing program 0 (id=1059): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m20.307606611s ago: executing program 0 (id=1065): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000380)={0x10, 0x37, 0x100, 0x70bd28, 0x25dfdbfc}, 0x10}, {&(0x7f0000000240)={0x10, 0x3b, 0x4, 0x70bd28, 0x25dfdbfe}, 0x10}, {&(0x7f0000000ac0)={0x64, 0x41, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x7, 0x44, 0x0, 0x0, @str='W-\x00'}, @generic="2f887f14f4f1a03602332e513b1fc4ebb1eee4aef576d5fcd82455cce143158fa4e5d950084232cc30b322c2eb45dd7b2ffb1d332c50ea5c165e4724fc4a71032f21a797987e536632"]}, 0x64}, {0x0}], 0x4, 0x0, 0x0, 0x20000000}, 0x44080) 1m20.303290613s ago: executing program 34 (id=1065): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000380)={0x10, 0x37, 0x100, 0x70bd28, 0x25dfdbfc}, 0x10}, {&(0x7f0000000240)={0x10, 0x3b, 0x4, 0x70bd28, 0x25dfdbfe}, 0x10}, {&(0x7f0000000ac0)={0x64, 0x41, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x7, 0x44, 0x0, 0x0, @str='W-\x00'}, @generic="2f887f14f4f1a03602332e513b1fc4ebb1eee4aef576d5fcd82455cce143158fa4e5d950084232cc30b322c2eb45dd7b2ffb1d332c50ea5c165e4724fc4a71032f21a797987e536632"]}, 0x64}, {0x0}], 0x4, 0x0, 0x0, 0x20000000}, 0x44080) 1.946593189s ago: executing program 6 (id=2048): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1.554444828s ago: executing program 4 (id=2063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251200000008000700020000000c00018008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x44) 1.519728607s ago: executing program 4 (id=2065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000002600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 1.469637651s ago: executing program 4 (id=2067): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680), 0x58}], 0x1}, 0x4008014) recvmsg(r0, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x2) recvmsg(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x20) 1.056999745s ago: executing program 7 (id=2079): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x20, 0x0, 0x10}}) 1.056636155s ago: executing program 6 (id=2080): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040c41090ea8000000000010902240001000000000904000001030000000921000000012207000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) 1.020250545s ago: executing program 7 (id=2082): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x780f, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r0, 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x1) 955.276343ms ago: executing program 7 (id=2084): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf43, 0x4cc, 0xffff, 0x6, 0x1b, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 756.511538ms ago: executing program 1 (id=2095): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 653.709317ms ago: executing program 1 (id=2096): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 653.515647ms ago: executing program 1 (id=2098): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180062) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127b, 0x800) 648.293878ms ago: executing program 1 (id=2100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000002600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 635.835371ms ago: executing program 4 (id=2101): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xd, @local, 0x200}, 0x1b) 581.716617ms ago: executing program 1 (id=2102): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x2000000000000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000100)) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) 581.573187ms ago: executing program 4 (id=2103): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00223e00000005"], 0x0}, 0x0) 489.628373ms ago: executing program 6 (id=2107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 489.525993ms ago: executing program 6 (id=2108): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) 489.447703ms ago: executing program 6 (id=2109): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x751}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) 474.504077ms ago: executing program 6 (id=2111): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680), 0x58}], 0x1}, 0x4008014) recvmsg(r0, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x2) recvmsg(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x20) 413.436704ms ago: executing program 5 (id=2114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000180)=[@acquire_done={0x40086315, 0x3}], 0x0, 0x0, 0x0}) 408.439926ms ago: executing program 5 (id=2115): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r1}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 389.88526ms ago: executing program 5 (id=2116): r0 = syz_open_dev$loop(&(0x7f0000000400), 0x10, 0x1010c0) ioctl$BLKCLOSEZONE(r0, 0x40101287, 0x0) 329.627177ms ago: executing program 5 (id=2117): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x8, "afd2b7", 0x1, 0x8}) 329.480028ms ago: executing program 5 (id=2118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 329.431988ms ago: executing program 5 (id=2119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='3', 0x1) write$uinput_user_dev(r0, 0x0, 0x0) 129.445184ms ago: executing program 7 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc", 0x1, 0x1000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) close(0x3) 105.77276ms ago: executing program 1 (id=2121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf", 0x7a, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004200050060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 33.663021ms ago: executing program 7 (id=2122): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/fdt', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 33.371211ms ago: executing program 4 (id=2123): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, r3, 0x0) 0s ago: executing program 7 (id=2124): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r2, 0x0) io_setup(0xd, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.980770][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.982800][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.984271][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.985812][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.044689][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 109.075850][ T6628] device hsr_slave_0 entered promiscuous mode [ 109.108532][ T6628] device hsr_slave_1 entered promiscuous mode [ 109.144604][ T6628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.147226][ T6628] Cannot create hsr debugfs directory [ 109.211289][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.233523][ T6772] loop4: detected capacity change from 0 to 2048 [ 109.253544][ T6772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.289084][ T4849] EXT4-fs (loop4): unmounting filesystem. [ 109.312425][ T6779] loop4: detected capacity change from 0 to 512 [ 109.347937][ T6781] loop4: detected capacity change from 0 to 1024 [ 109.350535][ T6781] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.352613][ T6781] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.353814][ T6781] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.835: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 109.357297][ T4335] Bluetooth: hci2: command 0x041b tx timeout [ 109.363358][ T6781] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.835: Bad quota inode: 3, type: 0 [ 109.371107][ T6781] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 109.373948][ T6781] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 109.380227][ T6781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.392447][ T4849] EXT4-fs (loop4): unmounting filesystem. [ 109.421421][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.536941][ T4466] device hsr_slave_0 left promiscuous mode [ 109.574845][ T4466] device hsr_slave_1 left promiscuous mode [ 109.688746][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.690428][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.693023][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.694247][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.702479][ T4466] device bridge_slave_1 left promiscuous mode [ 109.706977][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.727268][ T4466] device bridge_slave_0 left promiscuous mode [ 109.728569][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.745647][ T6824] fuse: Bad value for 'fd' [ 109.854811][ T4466] device veth1_macvtap left promiscuous mode [ 109.856036][ T4466] device veth1_vlan left promiscuous mode [ 109.857241][ T4466] device veth0_vlan left promiscuous mode [ 110.234582][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 111.114666][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 111.434588][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 111.926584][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 112.096694][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 112.255421][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.314611][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 112.465039][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.194554][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 113.514593][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 113.926015][ T4466] bond0 (unregistering): Released all slaves [ 114.234756][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.237234][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.238998][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.240634][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.242253][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.243822][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.245924][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.292157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.294226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.315942][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.394695][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 114.507266][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.508715][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.522405][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.529419][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.531224][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.546148][ T6866] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 114.579368][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.581399][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.583221][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.585145][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.592518][ T6557] device veth0_vlan entered promiscuous mode [ 114.620878][ T6557] device veth1_vlan entered promiscuous mode [ 114.643750][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.645956][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.647422][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.649106][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.660347][ T6878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.661724][ T6597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.689144][ T6597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.725096][ T6597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.758316][ T6557] device veth0_macvtap entered promiscuous mode [ 114.793297][ T6597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.837945][ T6557] device veth1_macvtap entered promiscuous mode [ 114.877930][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.879890][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.881569][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.883256][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.888164][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.889931][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.891636][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.893973][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.896389][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.972726][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.975593][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.977600][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.979549][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.982216][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.984216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.986200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.994040][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.999531][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.001279][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.017957][ T6557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.019813][ T6557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.021524][ T6557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.023286][ T6557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.036209][ T6597] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.097895][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.099850][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.101494][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.102879][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.108071][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.109855][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.114192][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.115611][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.122094][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.126993][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.131079][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.134122][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.140094][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.142995][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.152646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.154765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.156745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.158513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.169501][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.171561][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.183358][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.275065][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.276367][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.286671][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 115.304728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.315521][ T6943] netlink: 'syz.4.868': attribute type 1 has an invalid length. [ 115.388568][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.390043][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.396274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.421676][ T6628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.464024][ T6597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.484266][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.485915][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.487252][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.500803][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.509043][ T6956] loop4: detected capacity change from 0 to 256 [ 115.523681][ T6628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.542843][ T6956] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 115.556413][ T6628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.595201][ T6628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.660727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.663278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.664050][ T6976] loop4: detected capacity change from 0 to 128 [ 115.667944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.669811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.675352][ T6597] device veth0_vlan entered promiscuous mode [ 116.568808][ T6597] device veth1_vlan entered promiscuous mode [ 116.575668][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.609468][ T6997] netlink: 'syz.4.880': attribute type 1 has an invalid length. [ 116.707059][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.709124][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.888668][ T6597] device veth0_macvtap entered promiscuous mode [ 116.891758][ T6597] device veth1_macvtap entered promiscuous mode [ 116.945508][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.947740][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.949551][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.951361][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.953101][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.955623][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.958289][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.960841][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.962869][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.965903][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.967904][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.969636][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.971571][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.974155][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.978120][ T6628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.979476][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.981145][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.982602][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.984333][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.991888][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.993719][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.013908][ T7008] loop0: detected capacity change from 0 to 256 [ 117.027518][ T7008] exfat: Deprecated parameter 'utf8' [ 117.028496][ T7008] exfat: Deprecated parameter 'utf8' [ 117.032196][ T7008] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 117.053065][ T6597] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.055358][ T6597] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.056965][ T6597] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.058656][ T6597] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.065340][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.066985][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.096789][ T7010] loop0: detected capacity change from 0 to 512 [ 117.100082][ T7010] EXT4-fs: Ignoring removed bh option [ 117.121551][ T7010] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.885: corrupted in-inode xattr [ 117.127312][ T7010] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.885: couldn't read orphan inode 15 (err -117) [ 117.140785][ T7010] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.158823][ T6628] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.167910][ T6557] EXT4-fs (loop0): unmounting filesystem. [ 117.177237][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.179003][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.180534][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.181741][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.184176][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.191926][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.193514][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.194878][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.197704][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.199578][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.201332][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.203153][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.210369][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.212115][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.232733][ T27] audit: type=1326 audit(373.216:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 117.238657][ T27] audit: type=1326 audit(373.226:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 117.248039][ T27] audit: type=1326 audit(373.236:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 117.255950][ T6628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.257819][ T6628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.261628][ T27] audit: type=1326 audit(373.236:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 117.266638][ T27] audit: type=1326 audit(373.236:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 117.270006][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.270994][ T27] audit: type=1326 audit(373.236:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 117.272831][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.278225][ T27] audit: type=1326 audit(373.246:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 117.280416][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.282830][ T27] audit: type=1326 audit(373.246:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 117.286933][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.290913][ T27] audit: type=1326 audit(373.246:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff91b5c22c code=0x7ffc0000 [ 117.291140][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.296367][ T27] audit: type=1326 audit(373.246:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.887" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 117.300235][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.305296][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.341867][ T7020] loop2: detected capacity change from 0 to 7 [ 117.344065][ T7020] Dev loop2: unable to read RDB block 7 [ 117.347489][ T7020] loop2: unable to read partition table [ 117.348445][ T7020] loop2: partition table beyond EOD, truncated [ 117.362268][ T7020] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 117.373496][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.375142][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.377764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.406418][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.407925][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.417362][ T7027] loop0: detected capacity change from 0 to 2048 [ 117.434329][ T7027] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 117.443511][ T7027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.494777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.506165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.507658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.517905][ T6628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.533389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.538709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.899328][ T7035] netlink: 'syz.0.893': attribute type 1 has an invalid length. [ 117.918008][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.893'. [ 117.933945][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.937267][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.939191][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.942998][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.015433][ T6628] device veth0_vlan entered promiscuous mode [ 118.059674][ T6628] device veth1_vlan entered promiscuous mode [ 118.062332][ T7049] loop2: detected capacity change from 0 to 256 [ 118.063988][ T7049] exfat: Deprecated parameter 'namecase' [ 118.069029][ T7049] exfat: Deprecated parameter 'utf8' [ 118.074314][ T7049] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 118.096334][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.098367][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.100179][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.104275][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.111245][ T6628] device veth0_macvtap entered promiscuous mode [ 118.119473][ T6628] device veth1_macvtap entered promiscuous mode [ 118.258521][ T7058] loop2: detected capacity change from 0 to 7 [ 118.260290][ T7058] Dev loop2: unable to read RDB block 7 [ 118.261378][ T7058] loop2: unable to read partition table [ 118.262690][ T7058] loop2: partition table beyond EOD, truncated [ 118.264074][ T7058] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.346222][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.348258][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.351178][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.354284][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.358704][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.361781][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.368325][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.372490][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.378348][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.416396][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.418128][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.423028][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.425256][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.427088][ T7065] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 118.429747][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.431658][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.433341][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.435760][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.437733][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.439714][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.441716][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.443569][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.447056][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.451869][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.485056][ T7072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.488654][ T7065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.906'. [ 118.490481][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.492539][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.494216][ T7077] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 118.506863][ T6628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.508513][ T6628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.510335][ T6628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.511806][ T6628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.633356][ T7087] loop2: detected capacity change from 0 to 7 [ 118.647423][ T7087] Dev loop2: unable to read RDB block 7 [ 118.649555][ T7087] loop2: unable to read partition table [ 118.650969][ T7087] loop2: partition table beyond EOD, truncated [ 118.652255][ T7087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.214006][ T1598] device hsr_slave_0 left promiscuous mode [ 119.235665][ T1598] device hsr_slave_1 left promiscuous mode [ 119.305005][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.306999][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.308690][ T1598] device bridge_slave_1 left promiscuous mode [ 119.309893][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.345391][ T1598] device bridge_slave_0 left promiscuous mode [ 119.346726][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.556669][ T1598] bond1 (unregistering): Released all slaves [ 120.353676][ T7141] loop2: detected capacity change from 0 to 7 [ 120.359789][ T7141] Dev loop2: unable to read RDB block 7 [ 120.360931][ T7141] loop2: unable to read partition table [ 120.361980][ T7141] loop2: partition table beyond EOD, truncated [ 120.368879][ T7141] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.372882][ T3940] Dev loop2: unable to read RDB block 7 [ 120.374101][ T3940] loop2: unable to read partition table [ 120.376312][ T3940] loop2: partition table beyond EOD, truncated [ 121.906712][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 122.066490][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 122.225544][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.425785][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.895682][ T1598] bond0 (unregistering): Released all slaves [ 124.198438][ T7110] netlink: 'syz.2.926': attribute type 1 has an invalid length. [ 124.200548][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.926'. [ 124.204262][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.205938][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.263899][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.382653][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.384038][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.390417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.756351][ T7176] loop3: detected capacity change from 0 to 16 [ 124.762287][ T7176] erofs: (device loop3): mounted with root inode @ nid 36. [ 124.798330][ T7176] Injecting memory failure for pfn 0x141d1e at process virtual address 0x20000000 [ 124.800292][ T7176] Memory failure: 0x141d1e: recovery action for dirty LRU page: Recovered [ 124.802142][ T7176] Injecting memory failure for pfn 0x210db1 at process virtual address 0x20001000 [ 124.803441][ T7181] 9pnet_fd: Insufficient options for proto=fd [ 124.803860][ T7176] Memory failure: 0x210db1: already hardware poisoned [ 124.868419][ T7185] FAULT_INJECTION: forcing a failure. [ 124.868419][ T7185] name failslab, interval 1, probability 0, space 0, times 0 [ 124.870721][ T7185] CPU: 0 PID: 7185 Comm: syz.3.954 Not tainted syzkaller #0 [ 124.871915][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 124.873534][ T7185] Call trace: [ 124.874084][ T7185] dump_backtrace+0x1c4/0x1f0 [ 124.874910][ T7185] show_stack+0x2c/0x3c [ 124.875706][ T7185] __dump_stack+0x30/0x40 [ 124.876542][ T7185] dump_stack_lvl+0xf4/0x15c [ 124.877405][ T7185] dump_stack+0x1c/0x5c [ 124.878201][ T7185] should_fail_ex+0x3cc/0x524 [ 124.879049][ T7185] __should_failslab+0xc0/0x11c [ 124.879961][ T7185] should_failslab+0x10/0x28 [ 124.880791][ T7185] kmem_cache_alloc_node+0x8c/0x344 [ 124.881786][ T7185] blk_alloc_queue+0x70/0x4e8 [ 124.882629][ T7185] __blk_mq_alloc_disk+0x84/0x1e0 [ 124.883603][ T7185] loop_add+0x2c4/0x810 [ 124.884403][ T7185] loop_control_ioctl+0x130/0x514 [ 124.885367][ T7185] __arm64_sys_ioctl+0x14c/0x1c8 [ 124.886215][ T7185] invoke_syscall+0x98/0x290 [ 124.887033][ T7185] el0_svc_common+0x13c/0x258 [ 124.887892][ T7185] do_el0_svc+0x5c/0x134 [ 124.888664][ T7185] el0_svc+0x58/0x128 [ 124.889397][ T7185] el0t_64_sync_handler+0x84/0xf0 [ 124.890299][ T7185] el0t_64_sync+0x18c/0x190 [ 124.908541][ T7189] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 124.910454][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.956'. [ 125.042932][ T7205] loop2: detected capacity change from 0 to 128 [ 125.053476][ T7207] 9pnet_fd: Insufficient options for proto=fd [ 125.066587][ T7205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.392353][ T7212] Injecting memory failure for pfn 0x142c21 at process virtual address 0x20000000 [ 125.393839][ T6597] EXT4-fs (loop2): unmounting filesystem. [ 125.395465][ T7212] Memory failure: 0x142c21: recovery action for dirty LRU page: Recovered [ 125.397220][ T7212] Injecting memory failure for pfn 0x210db1 at process virtual address 0x20001000 [ 125.399043][ T7212] Memory failure: 0x210db1: already hardware poisoned [ 125.448117][ T7214] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 125.459577][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.968'. [ 125.490102][ T7223] loop2: detected capacity change from 0 to 512 [ 125.582772][ T7222] loop4: detected capacity change from 0 to 16 [ 125.588463][ T7222] erofs: (device loop4): mounted with root inode @ nid 36. [ 125.593069][ T7223] EXT4-fs (loop2): Test dummy encryption mode enabled [ 125.601918][ T7223] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #11: comm syz.2.969: casefold flag without casefold feature [ 125.610216][ T7223] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.969: couldn't read orphan inode 11 (err -117) [ 125.617028][ T7223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.628883][ T7223] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 125.638397][ T7223] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.969: bg 0: block 7: invalid block bitmap [ 125.693221][ T6597] EXT4-fs (loop2): unmounting filesystem. [ 125.703452][ T7241] 9pnet_fd: Insufficient options for proto=fd [ 125.733472][ T7245] Injecting memory failure for pfn 0x142d15 at process virtual address 0x20000000 [ 125.736835][ T7245] Memory failure: 0x142d15: recovery action for dirty LRU page: Recovered [ 125.738500][ T7245] Injecting memory failure for pfn 0x210db1 at process virtual address 0x20001000 [ 125.742681][ T7245] Memory failure: 0x210db1: already hardware poisoned [ 125.780944][ T7249] loop2: detected capacity change from 0 to 8192 [ 125.836500][ T7249] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.935661][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.936933][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.939345][ T7254] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 126.234824][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.981'. [ 126.309071][ T7270] loop3: detected capacity change from 0 to 512 [ 126.358944][ T7270] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.386439][ T6628] EXT4-fs (loop3): unmounting filesystem. [ 127.212652][ T7291] loop0: detected capacity change from 0 to 1024 [ 127.216664][ T7288] loop3: detected capacity change from 0 to 4096 [ 127.231645][ T7291] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.248373][ T7288] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.286967][ T7291] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.996: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.300700][ T7291] __quota_error: 52 callbacks suppressed [ 127.300717][ T7291] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 127.303303][ T7291] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.996: Invalid inode table block 1 in block_group 0 [ 127.318099][ T7291] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 127.321578][ T7291] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.996: mark_inode_dirty error [ 127.346636][ T7291] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 127.348467][ T7291] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.996: Failed to acquire dquot type 0 [ 127.375958][ T7291] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 127.392175][ T7291] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.996: mark_inode_dirty error [ 127.395108][ T7301] loop2: detected capacity change from 0 to 2048 [ 127.398023][ T7291] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 127.399961][ T7291] EXT4-fs (loop0): 1 orphan inode deleted [ 127.400933][ T7291] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.422050][ T7301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.437352][ T4629] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.440791][ T4629] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 127.442488][ T4629] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 0 [ 127.447729][ T7291] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.996: Invalid inode table block 1 in block_group 0 [ 127.450241][ T7291] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 127.471300][ T6628] EXT4-fs (loop3): unmounting filesystem. [ 127.559561][ T6597] EXT4-fs (loop2): unmounting filesystem. [ 127.563241][ T6557] EXT4-fs (loop0): unmounting filesystem. [ 127.575979][ T6557] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 127.601124][ T6557] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 127.605093][ T6557] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 127.637127][ T7311] loop0: detected capacity change from 0 to 256 [ 127.641361][ T7311] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.648910][ T7311] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 127.669786][ T7311] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 127.683703][ T7311] exFAT-fs (loop0): failed to load alloc-bitmap [ 127.692270][ T7311] exFAT-fs (loop0): failed to recognize exfat type [ 127.782920][ T7320] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.796314][ T7320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 128.094673][ T6557] EXT4-fs (loop0): unmounting filesystem. [ 128.690679][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.699608][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.765809][ T6597] hfsplus: bad catalog entry type [ 129.403426][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.406614][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.408835][ T4331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.410880][ T4331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.413231][ T4331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.417853][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.510532][ T6628] hfsplus: bad catalog entry type [ 129.728379][ T1598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.818140][ T1598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.863058][ T7367] chnl_net:caif_netlink_parms(): no params data found [ 129.883488][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.887014][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.888832][ T7367] device bridge_slave_0 entered promiscuous mode [ 129.915841][ T4331] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 129.917371][ T4331] Bluetooth: hci2: Injecting HCI hardware error event [ 129.919608][ T4335] Bluetooth: hci2: hardware error 0x00 [ 129.938780][ T1598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.941918][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.943193][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.946894][ T7367] device bridge_slave_1 entered promiscuous mode [ 129.958020][ T7367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.960853][ T7367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.969650][ T7367] team0: Port device team_slave_0 added [ 129.972484][ T7367] team0: Port device team_slave_1 added [ 130.037449][ T1598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.044571][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.045777][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.050907][ T7367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.062463][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.063839][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.069156][ T7367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.126763][ T7367] device hsr_slave_0 entered promiscuous mode [ 130.164835][ T7367] device hsr_slave_1 entered promiscuous mode [ 130.167917][ T27] audit: type=1326 audit(386.156:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.0.1031" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 130.172881][ T27] audit: type=1326 audit(386.156:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.0.1031" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 130.188037][ T27] audit: type=1326 audit(386.156:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.0.1031" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 130.208056][ T27] audit: type=1326 audit(386.156:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.0.1031" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 130.229524][ T27] audit: type=1326 audit(386.166:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.0.1031" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 130.233764][ T27] audit: type=1326 audit(386.166:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.0.1031" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 130.247988][ T27] audit: type=1326 audit(386.166:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.0.1031" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b79368 code=0x7ffc0000 [ 130.338798][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.359207][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.380003][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.383843][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.386857][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.388421][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.491668][ T7367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.520054][ T7367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.546131][ T7367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.741210][ T7367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.832891][ T7436] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 130.842841][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 130.844396][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'. [ 131.041350][ T7367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.064313][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.066666][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.101728][ T7367] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.104894][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.106682][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.108347][ T4629] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.109642][ T4629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.111362][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.122568][ T7398] chnl_net:caif_netlink_parms(): no params data found [ 131.244454][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.246610][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.248251][ T4629] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.249473][ T4629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.250898][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.252681][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.254349][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.262984][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.271461][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.273195][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.278855][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.280529][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.285288][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.291088][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.330230][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.332120][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.434634][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 131.448670][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.450016][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.451818][ T7398] device bridge_slave_0 entered promiscuous mode [ 131.456141][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.457446][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.475103][ T7398] device bridge_slave_1 entered promiscuous mode [ 131.487195][ T7398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.521769][ T7398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.539822][ T7398] team0: Port device team_slave_0 added [ 131.541750][ T7398] team0: Port device team_slave_1 added [ 131.653697][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.655522][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.690647][ T7367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.693033][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.694285][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.719614][ T7398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.723432][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.724982][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.729499][ T7398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.099194][ T7398] device hsr_slave_0 entered promiscuous mode [ 132.125415][ T7398] device hsr_slave_1 entered promiscuous mode [ 132.154869][ T4335] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 132.164719][ T7398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.166078][ T7398] Cannot create hsr debugfs directory [ 132.474810][ T4335] Bluetooth: hci0: command 0x0409 tx timeout [ 132.529909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.531811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.619239][ T1598] device hsr_slave_0 left promiscuous mode [ 132.656272][ T1598] device hsr_slave_1 left promiscuous mode [ 132.775932][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.777400][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.779051][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.780257][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.784366][ T1598] device bridge_slave_1 left promiscuous mode [ 132.788868][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.835975][ T1598] device bridge_slave_0 left promiscuous mode [ 132.837259][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.974759][ T1598] device veth1_macvtap left promiscuous mode [ 132.976046][ T1598] device veth0_macvtap left promiscuous mode [ 132.977244][ T1598] device veth1_vlan left promiscuous mode [ 132.978280][ T1598] device veth0_vlan left promiscuous mode [ 133.514660][ T4335] Bluetooth: hci4: command 0x041b tx timeout [ 133.564853][ T7541] set_capacity_and_notify: 3 callbacks suppressed [ 133.564862][ T7541] loop0: detected capacity change from 0 to 256 [ 133.585266][ T7541] exfat: Deprecated parameter 'namecase' [ 133.586401][ T7541] exfat: Deprecated parameter 'namecase' [ 133.597320][ T7541] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 133.648525][ T7546] loop0: detected capacity change from 0 to 512 [ 133.656073][ T7546] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.658244][ T7546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.675974][ T7546] EXT4-fs (loop0): 1 truncate cleaned up [ 133.677069][ T7546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.554535][ T4335] Bluetooth: hci0: command 0x041b tx timeout [ 135.166484][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 135.337143][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 135.494990][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.595278][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 135.705054][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.634525][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 137.225585][ T1598] bond0 (unregistering): Released all slaves [ 137.530991][ T7367] device veth0_vlan entered promiscuous mode [ 137.534327][ T7367] device veth1_vlan entered promiscuous mode [ 137.560250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.561985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.563602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.633080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.634956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.649830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.651767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.653599][ T7367] device veth0_macvtap entered promiscuous mode [ 137.670044][ T7398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.674585][ T4335] Bluetooth: hci4: command 0x0419 tx timeout [ 137.707613][ T7367] device veth1_macvtap entered promiscuous mode [ 137.710804][ T7565] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 137.721286][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 137.722987][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 137.739883][ T7398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.788691][ T7398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.826148][ T7398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.872493][ T6557] EXT4-fs (loop0): unmounting filesystem. [ 137.914083][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.920240][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.922016][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.923805][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.927061][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.931495][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.933533][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.940837][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.943722][ T7367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.947420][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.949173][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.950783][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.952490][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.981275][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.991131][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.000957][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.002743][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.004375][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.008859][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.011396][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.013203][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.015396][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.015852][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.017049][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.019342][ T4335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.020590][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.022322][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.026424][ T7367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.029173][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.030811][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.066284][ T7367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.068665][ T7367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.070269][ T7367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.071868][ T7367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.160910][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.175875][ T1576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.177355][ T1576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.182656][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.188771][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.191288][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.194002][ T7398] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.227959][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.229865][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.231427][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.232708][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.240406][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.244480][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.248138][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.249801][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.251049][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.262982][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.264659][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.286753][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.288862][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.305645][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.307528][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.310418][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.314864][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.319716][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.321526][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.339842][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.341670][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.429799][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.431550][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.498017][ T7623] loop5: detected capacity change from 0 to 16 [ 138.505286][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.513090][ T7623] erofs: (device loop5): mounted with root inode @ nid 36. [ 138.516696][ T7623] Injecting memory failure for pfn 0x138ab7 at process virtual address 0x20000000 [ 138.518663][ T7623] Memory failure: 0x138ab7: recovery action for dirty LRU page: Recovered [ 138.520231][ T7623] Injecting memory failure for pfn 0x210db1 at process virtual address 0x20001000 [ 138.521825][ T7623] Memory failure: 0x210db1: already hardware poisoned [ 138.541385][ T7587] chnl_net:caif_netlink_parms(): no params data found [ 138.685061][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.686296][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.687945][ T7587] device bridge_slave_0 entered promiscuous mode [ 138.690280][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.695047][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.696807][ T7587] device bridge_slave_1 entered promiscuous mode [ 138.719448][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 138.730282][ T7587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.732979][ T7587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.826406][ T7587] team0: Port device team_slave_0 added [ 139.577251][ T7587] team0: Port device team_slave_1 added [ 139.589430][ T7398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.619690][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.624486][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.652325][ T7587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.727958][ T1598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.747320][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.752527][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.796311][ T7677] syz.5.1076 uses obsolete (PF_INET,SOCK_PACKET) [ 139.807313][ T1598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.810512][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.811793][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.820643][ T7587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.859090][ T7587] device hsr_slave_0 entered promiscuous mode [ 139.945647][ T7587] device hsr_slave_1 entered promiscuous mode [ 139.979026][ T7587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.980450][ T7587] Cannot create hsr debugfs directory [ 140.025754][ T1598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.074765][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 140.147437][ T1598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.166708][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.168619][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.201780][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.203630][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.207665][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.209179][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.215320][ T7398] device veth0_vlan entered promiscuous mode [ 140.240643][ T7398] device veth1_vlan entered promiscuous mode [ 140.269237][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.271040][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.272717][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.277122][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.287065][ T7587] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 140.326947][ T7587] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 140.379256][ T7701] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1080'. [ 140.381672][ T7398] device veth0_macvtap entered promiscuous mode [ 140.402464][ T7587] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 140.426731][ T7587] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 140.446872][ T7398] device veth1_macvtap entered promiscuous mode [ 140.541871][ T1598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.558043][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.559902][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.561611][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.563448][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.570524][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.572470][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.574304][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.576547][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.578427][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.581338][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.584329][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.594685][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.596438][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.598041][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.599856][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.635795][ T1598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.643193][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.647750][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.649520][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.651306][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.653122][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.655422][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.656973][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.658883][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.660805][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.662742][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.665587][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.684739][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.686644][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.697233][ T7398] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.698516][ T7398] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.700112][ T7398] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.701607][ T7398] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.815695][ T1598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.829002][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.938132][ T1598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.941706][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.943527][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.950972][ T7587] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.956518][ T4466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.964460][ T4466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.968002][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.969607][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.971418][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.973093][ T4629] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.974538][ T4629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.005512][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.007415][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.009078][ T4629] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.010467][ T4629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.013302][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.603635][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.605339][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.607933][ T7740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'. [ 141.633818][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.636378][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.644250][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.650447][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.653522][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.662405][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.670686][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.678514][ T7587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.680767][ T7587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.700772][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.702625][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.712056][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.714046][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.718365][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.722353][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.165249][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 142.250186][ T7587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.255540][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.257602][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.261450][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.270387][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.493619][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.496060][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.511761][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.513547][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.520117][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.522049][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.526688][ T7587] device veth0_vlan entered promiscuous mode [ 142.530705][ T7587] device veth1_vlan entered promiscuous mode [ 142.882400][ T7587] device veth0_macvtap entered promiscuous mode [ 142.884428][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1096'. [ 142.890321][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.892207][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.893754][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.896611][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.900196][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.903923][ T7587] device veth1_macvtap entered promiscuous mode [ 143.013633][ T7814] FAULT_INJECTION: forcing a failure. [ 143.013633][ T7814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.016492][ T7814] CPU: 1 PID: 7814 Comm: syz.6.1100 Not tainted syzkaller #0 [ 143.017926][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 143.019871][ T7814] Call trace: [ 143.020427][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.022427][ T7814] dump_backtrace+0x1c4/0x1f0 [ 143.022450][ T7814] show_stack+0x2c/0x3c [ 143.023483][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.024057][ T7814] __dump_stack+0x30/0x40 [ 143.026903][ T7814] dump_stack_lvl+0xf4/0x15c [ 143.027739][ T7814] dump_stack+0x1c/0x5c [ 143.028482][ T7814] should_fail_ex+0x3cc/0x524 [ 143.028556][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.029321][ T7814] should_fail+0x14/0x24 [ 143.029342][ T7814] should_fail_usercopy+0x20/0x30 [ 143.029351][ T7814] load_msg+0x1d4/0x55c [ 143.029358][ T7814] do_msgrcv+0x1f0/0xfbc [ 143.034395][ T7814] __arm64_sys_msgrcv+0xc8/0xe0 [ 143.034784][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.035261][ T7814] invoke_syscall+0x98/0x290 [ 143.037746][ T7814] el0_svc_common+0x13c/0x258 [ 143.038617][ T7814] do_el0_svc+0x5c/0x134 [ 143.039402][ T7814] el0_svc+0x58/0x128 [ 143.039969][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.040115][ T7814] el0t_64_sync_handler+0x84/0xf0 [ 143.042814][ T7814] el0t_64_sync+0x18c/0x190 [ 143.048753][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.053044][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.056368][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.060164][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.066328][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.068495][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.070663][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.078541][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.083831][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.089559][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.093686][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.099227][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.101066][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.103031][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.105327][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.107346][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.109304][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.111307][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.113187][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.115834][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.119175][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.120828][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.122584][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.127235][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.132823][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.135394][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.294795][ T7587] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.296392][ T7587] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.297810][ T7587] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.299392][ T7587] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.988804][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1106'. [ 144.177343][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1108'. [ 144.237700][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 144.239769][ T1576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.241075][ T1576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.242928][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.422168][ T7876] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 144.454947][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.456446][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.459906][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.709590][ T7894] netlink: 'syz.7.1073': attribute type 1 has an invalid length. [ 144.711027][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1073'. [ 144.793479][ T7905] loop7: detected capacity change from 0 to 764 [ 144.849475][ T7905] rock: directory entry would overflow storage [ 144.853005][ T7905] rock: sig=0x4654, size=5, remaining=4 [ 144.960532][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.963796][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.318077][ T7924] loop6: detected capacity change from 0 to 1024 [ 145.587480][ T7947] netlink: 'syz.5.1128': attribute type 1 has an invalid length. [ 145.589461][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'. [ 145.662099][ T7956] loop6: detected capacity change from 0 to 1024 [ 145.709080][ T7956] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.876950][ T7956] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 145.983196][ T7398] EXT4-fs (loop6): unmounting filesystem. [ 146.313995][ T4335] Bluetooth: hci2: command 0x0419 tx timeout [ 146.507968][ T1598] device hsr_slave_0 left promiscuous mode [ 146.549999][ T1598] device hsr_slave_1 left promiscuous mode [ 146.623995][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.625576][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.627554][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.629329][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.644705][ T1598] device bridge_slave_1 left promiscuous mode [ 146.681478][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.740184][ T1598] device bridge_slave_0 left promiscuous mode [ 146.741503][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.801239][ T1598] device hsr_slave_0 left promiscuous mode [ 146.833882][ T1598] device hsr_slave_1 left promiscuous mode [ 146.913767][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.915310][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.917116][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.918569][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.921232][ T1598] device bridge_slave_1 left promiscuous mode [ 146.923595][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.976897][ T1598] device bridge_slave_0 left promiscuous mode [ 146.978336][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.113795][ T1598] device veth1_macvtap left promiscuous mode [ 147.115064][ T1598] device veth0_macvtap left promiscuous mode [ 147.116241][ T1598] device veth1_vlan left promiscuous mode [ 147.117392][ T1598] device veth0_vlan left promiscuous mode [ 147.194405][ T1598] device veth1_macvtap left promiscuous mode [ 147.195644][ T1598] device veth0_macvtap left promiscuous mode [ 147.196817][ T1598] device veth1_vlan left promiscuous mode [ 147.197909][ T1598] device veth0_vlan left promiscuous mode [ 149.346128][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 149.508688][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 149.683921][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.893987][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.445184][ T1598] bond0 (unregistering): Released all slaves [ 153.592923][ T4331] Bluetooth: hci1: command 0x0406 tx timeout [ 153.865152][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 154.035190][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 154.208502][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.423218][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.934633][ T1598] bond0 (unregistering): Released all slaves [ 156.246128][ T8012] netlink: 'syz.5.1143': attribute type 1 has an invalid length. [ 156.247563][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'. [ 156.249722][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1146'. [ 156.263741][ T4571] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 156.310841][ T8029] loop6: detected capacity change from 0 to 1024 [ 156.387170][ T8041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1153'. [ 156.411287][ T8029] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.440323][ T8029] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 157.260333][ T8101] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 157.384779][ T8109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1162'. [ 157.408167][ T5241] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 157.903024][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 157.903039][ T27] audit: type=1326 audit(413.868:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 157.908785][ T27] audit: type=1326 audit(413.868:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 157.937254][ T7398] EXT4-fs (loop6): unmounting filesystem. [ 157.940352][ T27] audit: type=1326 audit(413.868:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 157.956764][ T27] audit: type=1326 audit(413.868:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8c35c22c code=0x7ffc0000 [ 157.969765][ T27] audit: type=1326 audit(413.868:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 157.975617][ T27] audit: type=1326 audit(413.868:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 157.980144][ T27] audit: type=1326 audit(413.868:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 157.984614][ T27] audit: type=1326 audit(413.868:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 157.986844][ T8139] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1173'. [ 157.989031][ T27] audit: type=1326 audit(413.868:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 157.994639][ T8142] netlink: 'syz.6.1172': attribute type 1 has an invalid length. [ 158.021210][ T27] audit: type=1326 audit(413.868:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.7.1170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 158.028180][ T8146] loop6: detected capacity change from 0 to 512 [ 158.075793][ T8146] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 158.083156][ T8146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e11c, mo2=0102] [ 158.085133][ T8146] EXT4-fs (loop6): orphan cleanup on readonly fs [ 158.096043][ T8146] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.1174: attempt to clear invalid blocks 1024 len 1 [ 158.108873][ T8146] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1174: bg 0: block 361: padding at end of block bitmap is not set [ 158.111573][ T8146] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 158.124463][ T8146] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1174: invalid indirect mapped block 1811939328 (level 0) [ 158.137417][ T8146] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1174: invalid indirect mapped block 2185560079 (level 1) [ 158.156918][ T8146] EXT4-fs (loop6): 1 truncate cleaned up [ 158.158060][ T8146] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 158.189825][ T7398] EXT4-fs (loop6): unmounting filesystem. [ 158.414453][ T8180] loop7: detected capacity change from 0 to 1024 [ 158.429928][ T8180] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.470839][ T8180] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 158.545552][ T8191] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 158.578339][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1186'. [ 159.266112][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 159.440659][ T8230] loop7: detected capacity change from 0 to 512 [ 159.478779][ T8230] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1193: invalid indirect mapped block 2 (level 1) [ 159.501188][ T8230] EXT4-fs (loop7): 1 truncate cleaned up [ 159.507191][ T8230] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 159.620773][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 159.672310][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1198'. [ 159.675368][ T8245] netlink: 'syz.7.1197': attribute type 1 has an invalid length. [ 159.810706][ T8259] loop6: detected capacity change from 0 to 1024 [ 159.825653][ T8259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.849480][ T8259] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 160.392167][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 161.080551][ T7398] EXT4-fs (loop6): unmounting filesystem. [ 161.432014][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 161.537901][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1212'. [ 161.540009][ T8303] netlink: 'syz.7.1211': attribute type 1 has an invalid length. [ 161.902460][ T8344] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 162.388962][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1227'. [ 162.609290][ T8385] netlink: 'syz.6.1229': attribute type 1 has an invalid length. [ 162.995328][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.001518][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.361517][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1239'. [ 163.809944][ T8458] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 163.848336][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 164.125701][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1250'. [ 164.633367][ T8500] netlink: 'syz.6.1258': attribute type 1 has an invalid length. [ 164.730007][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1258'. [ 165.736597][ T4335] Bluetooth: Wrong link type (-22) [ 165.797509][ T8513] loop6: detected capacity change from 0 to 512 [ 165.830880][ T8513] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 165.900306][ T8030] udevd[8030]: incorrect ext4 checksum on /dev/loop6 [ 165.910037][ T8513] EXT4-fs error (device loop6): ext4_dx_csum_verify:502: inode #2: comm syz.6.1260: dir seems corrupt? Run e2fsck -D. [ 165.915298][ T8513] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.1260: Directory index failed checksum [ 165.970087][ T8536] loop7: detected capacity change from 0 to 128 [ 165.975938][ T7398] EXT4-fs (loop6): unmounting filesystem. [ 166.118065][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 166.118075][ T27] audit: type=1326 audit(422.109:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 166.127972][ T27] audit: type=1326 audit(422.119:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 166.135025][ T27] audit: type=1326 audit(422.119:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 166.394706][ T27] audit: type=1326 audit(422.119:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8c35c22c code=0x7ffc0000 [ 166.420149][ T27] audit: type=1326 audit(422.119:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 166.441916][ T27] audit: type=1326 audit(422.129:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 166.446863][ T27] audit: type=1326 audit(422.129:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 166.454170][ T27] audit: type=1326 audit(422.129:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 166.458971][ T27] audit: type=1326 audit(422.129:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 166.486363][ T27] audit: type=1326 audit(422.129:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.7.1267" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 166.532374][ T8559] loop7: detected capacity change from 0 to 2048 [ 166.928605][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.933266][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.233612][ T8697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1312'. [ 168.338462][ T8712] netlink: 'syz.6.1316': attribute type 4 has an invalid length. [ 168.559548][ T8730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.561086][ T8730] IPv6: NLM_F_CREATE should be set when creating new route [ 168.791236][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 169.431250][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 169.433442][ T4335] Bluetooth: hci3: command 0x0406 tx timeout [ 169.586555][ T4331] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 169.594844][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1341'. [ 170.883402][ T8846] netlink: 'syz.6.1355': attribute type 1 has an invalid length. [ 170.895540][ T8845] loop7: detected capacity change from 0 to 2048 [ 170.938973][ T8845] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.134376][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 171.134386][ T27] audit: type=1326 audit(683.125:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.160748][ T27] audit: type=1326 audit(683.145:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.169461][ T27] audit: type=1326 audit(683.155:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.193265][ T27] audit: type=1326 audit(683.155:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.210519][ T27] audit: type=1326 audit(683.155:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.237090][ T27] audit: type=1326 audit(683.155:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.257321][ T27] audit: type=1326 audit(683.155:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.267125][ T8865] loop7: detected capacity change from 0 to 128 [ 171.284037][ T27] audit: type=1326 audit(683.155:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.317091][ T27] audit: type=1326 audit(683.155:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.327204][ T27] audit: type=1326 audit(683.155:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.7.1358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c379368 code=0x7ffc0000 [ 171.495857][ T8876] netlink: 'syz.7.1367': attribute type 1 has an invalid length. [ 172.045801][ T8902] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 172.130653][ T8908] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 172.150945][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1379'. [ 172.672869][ T8925] FAULT_INJECTION: forcing a failure. [ 172.672869][ T8925] name failslab, interval 1, probability 0, space 0, times 0 [ 172.676209][ T8925] CPU: 1 PID: 8925 Comm: syz.5.1386 Not tainted syzkaller #0 [ 172.677507][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 172.679300][ T8925] Call trace: [ 172.679968][ T8925] dump_backtrace+0x1c4/0x1f0 [ 172.680911][ T8925] show_stack+0x2c/0x3c [ 172.681711][ T8925] __dump_stack+0x30/0x40 [ 172.682537][ T8925] dump_stack_lvl+0xf4/0x15c [ 172.683345][ T8925] dump_stack+0x1c/0x5c [ 172.684092][ T8925] should_fail_ex+0x3cc/0x524 [ 172.684979][ T8925] __should_failslab+0xc0/0x11c [ 172.685874][ T8925] should_failslab+0x10/0x28 [ 172.686721][ T8925] kmem_cache_alloc+0x88/0x310 [ 172.687644][ T8925] security_inode_alloc+0x38/0x11c [ 172.688570][ T8925] inode_init_always+0x6c8/0xb28 [ 172.689477][ T8925] new_inode_pseudo+0x7c/0x1cc [ 172.690349][ T8925] __sock_create+0x138/0x8a8 [ 172.691257][ T8925] __sys_socket+0xc0/0x1b0 [ 172.692107][ T8925] __arm64_sys_socket+0x7c/0x94 [ 172.693006][ T8925] invoke_syscall+0x98/0x290 [ 172.693822][ T8925] el0_svc_common+0x13c/0x258 [ 172.694680][ T8925] do_el0_svc+0x5c/0x134 [ 172.695447][ T8925] el0_svc+0x58/0x128 [ 172.696206][ T8925] el0t_64_sync_handler+0x84/0xf0 [ 172.697108][ T8925] el0t_64_sync+0x18c/0x190 [ 172.770700][ T8925] socket: no more sockets [ 172.912343][ T4331] Bluetooth: hci0: unexpected event 0x1d length: 14 > 5 [ 172.915378][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1397'. [ 173.668397][ T8980] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1406'. [ 173.973451][ T9015] loop7: detected capacity change from 0 to 256 [ 173.975068][ T9015] exfat: Deprecated parameter 'namecase' [ 173.979892][ T9015] exfat: Deprecated parameter 'namecase' [ 174.089574][ T9015] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 174.699004][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1435'. [ 174.703922][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1435'. [ 174.871067][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1438'. [ 174.937080][ T9069] loop7: detected capacity change from 0 to 4096 [ 174.982378][ T9069] EXT4-fs (loop7): Test dummy encryption mode enabled [ 174.997747][ T9069] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 175.012067][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 175.991323][ T4331] Bluetooth: hci4: command 0x2020 tx timeout [ 176.358833][ T9137] loop7: detected capacity change from 0 to 512 [ 176.382306][ T9137] EXT4-fs (loop7): orphan cleanup on readonly fs [ 176.383998][ T9137] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1462: corrupted inode contents [ 176.401321][ T9137] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 176.405172][ T9137] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1462: corrupted inode contents [ 176.408094][ T9137] EXT4-fs error (device loop7): ext4_evict_inode:329: inode #15: comm syz.7.1462: mark_inode_dirty error [ 176.412967][ T9137] EXT4-fs (loop7): 1 orphan inode deleted [ 176.416261][ T9137] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 176.436152][ T9151] FAULT_INJECTION: forcing a failure. [ 176.436152][ T9151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.439595][ T9151] CPU: 1 PID: 9151 Comm: syz.5.1470 Not tainted syzkaller #0 [ 176.440986][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 176.442886][ T9151] Call trace: [ 176.443503][ T9151] dump_backtrace+0x1c4/0x1f0 [ 176.444403][ T9151] show_stack+0x2c/0x3c [ 176.445155][ T9151] __dump_stack+0x30/0x40 [ 176.445938][ T9151] dump_stack_lvl+0xf4/0x15c [ 176.446747][ T9151] dump_stack+0x1c/0x5c [ 176.447486][ T9151] should_fail_ex+0x3cc/0x524 [ 176.448356][ T9151] should_fail+0x14/0x24 [ 176.449210][ T9151] should_fail_usercopy+0x20/0x30 [ 176.450119][ T9151] memdup_user+0xa0/0x204 [ 176.450974][ T9151] strndup_user+0x78/0xe8 [ 176.451770][ T9151] __arm64_sys_fsopen+0x84/0x2d4 [ 176.452639][ T9151] invoke_syscall+0x98/0x290 [ 176.453456][ T9151] el0_svc_common+0x13c/0x258 [ 176.454301][ T9151] do_el0_svc+0x5c/0x134 [ 176.455048][ T9151] el0_svc+0x58/0x128 [ 176.455751][ T9151] el0t_64_sync_handler+0x84/0xf0 [ 176.456640][ T9151] el0t_64_sync+0x18c/0x190 [ 176.459687][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 176.541272][ T9161] loop7: detected capacity change from 0 to 8 [ 176.549983][ T9162] fuse: Bad value for 'fd' [ 176.658017][ T9168] loop7: detected capacity change from 0 to 164 [ 176.714030][ T8848] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.757719][ T4335] Bluetooth: hci2: ISO packet for unknown connection handle 6 [ 177.576328][ T9210] loop7: detected capacity change from 0 to 1024 [ 177.841053][ T9230] loop7: detected capacity change from 0 to 1024 [ 177.870761][ T9230] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.899665][ T9230] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 178.794098][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 178.858630][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.865597][ T9273] netlink: 'syz.6.1522': attribute type 1 has an invalid length. [ 178.865994][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.893474][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1522'. [ 179.430093][ T9313] loop7: detected capacity change from 0 to 128 [ 179.510020][ T9313] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 179.520061][ T9313] EXT4-fs warning (device loop7): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 179.612294][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 180.001629][ T9336] loop7: detected capacity change from 0 to 32768 [ 180.346688][ T9381] netlink: 'syz.6.1552': attribute type 1 has an invalid length. [ 180.386594][ T9388] overlayfs: failed to clone lowerpath [ 180.391906][ T9369] loop7: detected capacity change from 0 to 32768 [ 180.427734][ T9381] 8021q: adding VLAN 0 to HW filter on device bond7 [ 180.452237][ T9381] bond6: (slave bond7): making interface the new active one [ 180.458519][ T9381] bond6: (slave bond7): Enslaving as an active interface with an up link [ 180.562583][ T9393] 8021q: adding VLAN 0 to HW filter on device bond8 [ 180.571982][ T9393] bond6: (slave bond8): Enslaving as a backup interface with an up link [ 180.598429][ T9409] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1561'. [ 181.037445][ T9425] loop7: detected capacity change from 0 to 2048 [ 181.116962][ T9434] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.530271][ T9466] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1577'. [ 181.560144][ T9439] loop7: detected capacity change from 0 to 32768 [ 181.627566][ T9439] XFS (loop7): Mounting V5 Filesystem [ 181.674884][ T9439] XFS (loop7): Ending clean mount [ 181.679627][ T9439] XFS (loop7): User initiated shutdown received. [ 181.695049][ T9439] XFS (loop7): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x80/0x15c (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 181.697676][ T9439] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 181.745848][ T7587] XFS (loop7): Unmounting Filesystem [ 182.620155][ T9522] loop7: detected capacity change from 0 to 40427 [ 182.627520][ T9522] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288) [ 182.638202][ T9522] F2FS-fs (loop7): invalid crc value [ 182.644841][ T9522] F2FS-fs (loop7): Found nat_bits in checkpoint [ 182.664576][ T9522] F2FS-fs (loop7): recover fsync data on readonly fs [ 182.668236][ T9522] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 182.669471][ T9522] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 182.695253][ T9522] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 183.195540][ T9563] loop7: detected capacity change from 0 to 32768 [ 183.231099][ T9563] ERROR: (device loop7): diAllocAG: numfree > numinos [ 183.231099][ T9563] [ 183.246571][ T9563] ialloc: diAlloc returned -5! [ 183.273283][ T9563] ERROR: (device loop7): diAllocAG: numfree > numinos [ 183.273283][ T9563] [ 183.274974][ T9563] ialloc: diAlloc returned -5! [ 183.301895][ T9563] overlayfs: unrecognized mount option "smackfsfloor=cpuset.effective_cpus" or missing value [ 183.536377][ T9606] loop7: detected capacity change from 0 to 256 [ 183.566071][ T9606] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 183.649103][ T9620] fuseblk: Bad value for 'user_id' [ 183.716994][ T9629] loop7: detected capacity change from 0 to 512 [ 183.718571][ T9629] EXT4-fs: Ignoring removed oldalloc option [ 183.789801][ T9629] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 183.793802][ T9629] EXT4-fs warning (device loop7): __ext4_ioctl:1253: Setting inode version is not supported with metadata_csum enabled. [ 183.828286][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 184.287565][ T9680] loop7: detected capacity change from 0 to 512 [ 184.342018][ T9680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 184.343588][ T9680] System zones: 0-2, 18-18, 34-34 [ 184.366400][ T9685] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1634'. [ 184.384745][ T9680] EXT4-fs (loop7): 1 orphan inode deleted [ 184.385867][ T9680] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 184.527283][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 184.636101][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1646'. [ 184.777760][ T9704] loop7: detected capacity change from 0 to 32768 [ 184.791269][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 184.809390][ T9704] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1640 (9704) [ 184.899303][ T9704] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 184.921573][ T9704] BTRFS info (device loop7): using sha256 (sha256-ce) checksum algorithm [ 184.923096][ T9704] BTRFS info (device loop7): using free space tree [ 185.372076][ T9777] netlink: 'syz.5.1659': attribute type 1 has an invalid length. [ 185.424726][ T9704] BTRFS info (device loop7): enabling ssd optimizations [ 185.431525][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 185.453319][ T7587] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 185.453856][ T9777] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.462730][ T9777] bond2: (slave bond3): making interface the new active one [ 185.464378][ T9777] bond2: (slave bond3): Enslaving as an active interface with an up link [ 185.562453][ T9800] FAULT_INJECTION: forcing a failure. [ 185.562453][ T9800] name fail_futex, interval 1, probability 0, space 0, times 0 [ 185.564771][ T9800] CPU: 1 PID: 9800 Comm: syz.7.1663 Not tainted syzkaller #0 [ 185.566022][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 185.567763][ T9800] Call trace: [ 185.568377][ T9800] dump_backtrace+0x1c4/0x1f0 [ 185.569196][ T9800] show_stack+0x2c/0x3c [ 185.570024][ T9800] __dump_stack+0x30/0x40 [ 185.570820][ T9800] dump_stack_lvl+0xf4/0x15c [ 185.571623][ T9800] dump_stack+0x1c/0x5c [ 185.572450][ T9800] should_fail_ex+0x3cc/0x524 [ 185.573360][ T9800] should_fail+0x14/0x24 [ 185.574147][ T9800] get_futex_key+0x904/0xfb0 [ 185.574956][ T9800] futex_wake+0x10c/0x458 [ 185.575863][ T9800] do_futex+0x2c4/0x340 [ 185.576740][ T9800] __arm64_sys_futex+0x390/0x414 [ 185.577695][ T9800] invoke_syscall+0x98/0x290 [ 185.578625][ T9800] el0_svc_common+0x13c/0x258 [ 185.579514][ T9800] do_el0_svc+0x5c/0x134 [ 185.580322][ T9800] el0_svc+0x58/0x128 [ 185.581052][ T9800] el0t_64_sync_handler+0x84/0xf0 [ 185.582040][ T9800] el0t_64_sync+0x18c/0x190 [ 185.679030][ T9812] fuseblk: Bad value for 'fd' [ 185.716453][ T9818] loop7: detected capacity change from 0 to 256 [ 185.783763][ T9824] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1674'. [ 185.864423][ T9831] netlink: 'syz.5.1675': attribute type 1 has an invalid length. [ 185.888829][ T9831] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.900672][ T9831] bond4: (slave bond5): making interface the new active one [ 185.904455][ T9831] bond4: (slave bond5): Enslaving as an active interface with an up link [ 185.916502][ T9829] loop7: detected capacity change from 0 to 4096 [ 186.302142][ T9873] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 186.410446][ T9873] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.424955][ T9873] bond6: (slave bond7): making interface the new active one [ 186.426440][ T9873] bond6: (slave bond7): Enslaving as an active interface with an up link [ 186.629566][ T9926] netlink: 'syz.4.1707': attribute type 1 has an invalid length. [ 186.656431][ T9926] 8021q: adding VLAN 0 to HW filter on device bond14 [ 186.658581][ T9926] bond13: (slave bond14): making interface the new active one [ 186.660563][ T9926] bond13: (slave bond14): Enslaving as an active interface with an up link [ 186.723857][ T9933] loop7: detected capacity change from 0 to 1024 [ 186.760350][ T9949] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1718'. [ 186.777448][ T9933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.818374][ T9933] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 186.849453][ T9963] netlink: 'syz.4.1724': attribute type 1 has an invalid length. [ 186.907866][ T9963] 8021q: adding VLAN 0 to HW filter on device bond16 [ 186.909840][ T9963] bond15: (slave bond16): making interface the new active one [ 186.911431][ T9963] bond15: (slave bond16): Enslaving as an active interface with an up link [ 186.922634][ T9968] device sit0 entered promiscuous mode [ 187.352722][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.353935][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.812394][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 188.089373][T10039] loop7: detected capacity change from 0 to 1024 [ 188.451713][T10039] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.492893][T10039] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 189.014382][ T7587] EXT4-fs (loop7): unmounting filesystem. [ 189.359560][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.361917][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.365676][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.368156][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.375409][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.377334][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.382395][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.384794][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.387317][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.389190][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.593339][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.595137][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.369221][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.370934][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.374514][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.376106][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.378130][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.379739][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.382058][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.384368][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.389754][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.393926][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.397253][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.400905][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.244155][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.246638][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.295893][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.297610][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.501338][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.502913][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.204520][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.206306][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.417410][T10182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.419932][T10182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.345981][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.347627][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.750399][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.752270][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.754422][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.756004][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.758932][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.760583][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.962947][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.964606][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.625579][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.627475][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.630764][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.635497][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.838571][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.840289][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.376903][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.378481][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.382324][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.383914][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.586389][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.587859][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.848001][T10236] netlink: 'syz.5.1838': attribute type 29 has an invalid length. [ 198.849688][T10236] netlink: 'syz.5.1838': attribute type 29 has an invalid length. [ 198.852429][T10236] netlink: 'syz.5.1838': attribute type 29 has an invalid length. [ 198.854213][T10236] netlink: 'syz.5.1838': attribute type 29 has an invalid length. [ 198.856018][T10236] netlink: 'syz.5.1838': attribute type 29 has an invalid length. [ 198.857826][T10236] netlink: 'syz.5.1838': attribute type 29 has an invalid length. [ 199.047097][T10255] device veth0_macvtap left promiscuous mode [ 199.174419][T10271] netlink: 'syz.7.1854': attribute type 1 has an invalid length. [ 199.189205][T10271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.192703][T10271] bond5: (slave bond6): making interface the new active one [ 199.194321][T10271] bond5: (slave bond6): Enslaving as an active interface with an up link [ 199.333028][T10285] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1855'. [ 199.335040][T10285] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1855'. [ 199.336890][T10277] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1855'. [ 199.338772][T10283] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1855'. [ 199.477587][T10302] netlink: 'syz.6.1867': attribute type 1 has an invalid length. [ 199.498485][T10302] 8021q: adding VLAN 0 to HW filter on device bond10 [ 199.504032][T10302] bond9: (slave bond10): making interface the new active one [ 199.509111][T10302] bond9: (slave bond10): Enslaving as an active interface with an up link [ 199.557366][T10314] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1872'. [ 199.559251][T10314] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1872'. [ 199.562021][T10314] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1872'. [ 199.567043][T10314] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1872'. [ 200.070153][T10338] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 200.094249][T10338] 8021q: adding VLAN 0 to HW filter on device bond18 [ 200.097259][T10338] bond17: (slave bond18): making interface the new active one [ 200.098961][T10338] bond17: (slave bond18): Enslaving as an active interface with an up link [ 200.110539][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 200.110549][ T27] audit: type=1326 audit(2760.090:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.126386][ T27] audit: type=1326 audit(2760.100:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.130387][ T27] audit: type=1326 audit(2760.100:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.140228][ T27] audit: type=1326 audit(2760.100:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.146308][ T27] audit: type=1326 audit(2760.100:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.150400][ T27] audit: type=1326 audit(2760.100:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.156473][ T27] audit: type=1326 audit(2760.100:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.160691][ T27] audit: type=1326 audit(2760.100:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.171987][ T27] audit: type=1326 audit(2760.110:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.175967][ T27] audit: type=1326 audit(2760.110:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.6.1876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff96179368 code=0x7ffc0000 [ 200.198366][T10353] device bond19 entered promiscuous mode [ 200.205178][T10353] 8021q: adding VLAN 0 to HW filter on device bond19 [ 200.368143][T10371] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 200.381480][T10371] 8021q: adding VLAN 0 to HW filter on device bond21 [ 200.383455][T10371] bond20: (slave bond21): making interface the new active one [ 200.385100][T10371] bond20: (slave bond21): Enslaving as an active interface with an up link [ 200.530174][T10391] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1903'. [ 200.530570][T10393] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1905'. [ 200.646879][T10395] 8021q: adding VLAN 0 to HW filter on device bond12 [ 200.650090][T10395] bond11: (slave bond12): making interface the new active one [ 200.658139][T10395] bond11: (slave bond12): Enslaving as an active interface with an up link [ 201.073707][T10416] device dummy0 entered promiscuous mode [ 201.131785][T10415] device dummy0 left promiscuous mode [ 201.538491][T10441] overlayfs: upper fs does not support file handles, falling back to index=off. [ 202.419423][T10485] Driver unsupported XDP return value 0 on prog (id 66) dev N/A, expect packet loss! [ 202.427116][T10487] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.433266][T10487] bond7 (unregistering): Released all slaves [ 203.592879][T10552] 9pnet_fd: Insufficient options for proto=fd [ 203.738153][T10579] netlink: 'syz.5.1975': attribute type 11 has an invalid length. [ 203.740918][T10579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.899530][T10604] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.940459][ T4410] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 203.944098][T10614] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 204.476559][T10633] __nla_validate_parse: 7 callbacks suppressed [ 204.476573][T10633] netlink: 65185 bytes leftover after parsing attributes in process `syz.7.2001'. [ 204.633353][T10639] device syzkaller0 entered promiscuous mode [ 204.845243][T10656] futex_wake_op: syz.5.2012 tries to shift op by 144; fix this program [ 204.900413][T10660] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2013'. [ 207.841412][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 215.627326][T10654] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2011'. [ 215.630807][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2016'. [ 215.632783][T10668] tipc: Invalid UDP bearer configuration [ 215.632805][T10668] tipc: Enabling of bearer rejected, failed to enable media [ 216.151213][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 216.151308][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 216.225441][T10728] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2042'. [ 216.295492][T10736] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 216.428974][T10750] overlayfs: failed to clone upperpath [ 216.460932][T10753] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2053'. [ 216.624337][T10766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.630667][T10766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.791320][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 216.915989][T10795] fuse: Bad value for 'fd' [ 217.382465][T10836] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 217.384311][T10836] overlayfs: missing 'lowerdir' [ 218.284674][T10911] page:00000000da72336b refcount:4 mapcount:1 mapping:00000000836476e9 index:0x0 pfn:0x20de29 [ 218.287126][T10911] memcg:ffff0000edc08000 [ 218.287869][T10911] aops:shmem_aops ino:5c1 [ 218.288672][T10911] flags: 0x5ffd80000080015(locked|uptodate|lru|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 218.290409][T10911] raw: 05ffd80000080015 ffff0000f7342258 fffffc0007378a08 ffff0000dc66cf28 [ 218.291997][T10911] raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000edc08000 [ 218.293638][T10911] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 218.295039][T10911] ------------[ cut here ]------------ [ 218.296008][T10911] kernel BUG at mm/filemap.c:153! [ 218.297145][T10911] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 218.298520][T10911] Modules linked in: [ 218.299166][T10911] CPU: 1 PID: 10911 Comm: syz.7.2124 Not tainted syzkaller #0 [ 218.300579][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 218.302420][T10911] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 218.303849][T10911] pc : filemap_unaccount_folio+0x44c/0x4f0 [ 218.304857][T10911] lr : filemap_unaccount_folio+0x44c/0x4f0 [ 218.305882][T10911] sp : ffff8000242271f0 [ 218.306609][T10911] x29: ffff8000242271f0 x28: ffff800024227520 x27: 0000000000000000 [ 218.308067][T10911] x26: dfff800000000000 x25: ffff700004844e4c x24: 1fffff8000e6f149 [ 218.309515][T10911] x23: ffff800024227280 x22: ffff0000dc66cf28 x21: fffffc0007378a58 [ 218.310914][T10911] x20: ffff0000dc66cf28 x19: fffffc0007378a40 x18: 0000000000000000 [ 218.312321][T10911] x17: 0000000000000000 x16: ffff800011bb65f8 x15: 0000000000000000 [ 218.313670][T10911] x14: 0000000000000001 x13: 1fffe00033e6dba3 x12: 0000000000000000 [ 218.315103][T10911] x11: ff008000087cac50 x10: 0000000000000000 x9 : ffff8000087cac50 [ 218.316628][T10911] x8 : ffff0000ce76b800 x7 : 0000000000000001 x6 : 0000000000000001 [ 218.318116][T10911] x5 : ffff800024226c38 x4 : ffff8000154a4e80 x3 : ffff800008541118 [ 218.319614][T10911] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000039 [ 218.321113][T10911] Call trace: [ 218.321758][T10911] filemap_unaccount_folio+0x44c/0x4f0 [ 218.322783][T10911] __filemap_remove_folio+0xc4/0x4fc [ 218.323749][T10911] filemap_remove_folio+0xd0/0x1c0 [ 218.324734][T10911] truncate_inode_folio+0x6c/0x84 [ 218.325675][T10911] shmem_undo_range+0x3c8/0x14a8 [ 218.326547][T10911] shmem_evict_inode+0x200/0x8b0 [ 218.327435][T10911] evict+0x3d8/0x824 [ 218.328150][T10911] iput+0x728/0x7e8 [ 218.328839][T10911] dentry_unlink_inode+0x360/0x438 [ 218.329825][T10911] __dentry_kill+0x318/0x590 [ 218.330656][T10911] dentry_kill+0xcc/0x24c [ 218.331451][T10911] dput+0x228/0x444 [ 218.332166][T10911] __fput+0x480/0x7b0 [ 218.332913][T10911] ____fput+0x20/0x30 [ 218.333624][T10911] task_work_run+0x1f4/0x280 [ 218.334442][T10911] do_notify_resume+0x20f8/0x2c84 [ 218.335383][T10911] el0_svc+0x98/0x128 [ 218.336100][T10911] el0t_64_sync_handler+0x84/0xf0 [ 218.337025][T10911] el0t_64_sync+0x18c/0x190 [ 218.337840][T10911] Code: b004b561 91080021 aa1303e0 94038293 (d4210000) [ 218.339063][T10911] ---[ end trace 0000000000000000 ]--- [ 218.652788][T10911] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 218.654094][T10911] SMP: stopping secondary CPUs [ 218.654905][T10911] Kernel Offset: disabled [ 218.655630][T10911] CPU features: 0x0a0000,000f0097,a65bfea7 [ 218.656629][T10911] Memory Limit: none [ 218.942534][T10911] Rebooting in 86400 seconds..