last executing test programs: 55.366653639s ago: executing program 2 (id=1211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x5e, 0x0, 0xee01}, {0x1, 0x0, 0x8}, {0x4, 0x0, 0x200000000000, 0x1}, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 55.330382645s ago: executing program 2 (id=1212): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='3']) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 55.230407006s ago: executing program 2 (id=1214): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) 54.87552145s ago: executing program 2 (id=1218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mlock(&(0x7f0000003000/0x1000)=nil, 0x1000) brk(0x2000000db002) brk(0x200000ffc000) 54.870592201s ago: executing program 4 (id=1220): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000100004800400c98008003500", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="400001", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 54.783142048s ago: executing program 3 (id=1222): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) 54.691068937s ago: executing program 4 (id=1223): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x4, 0x0, 0x27) syz_open_procfs(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)=':\x00') r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="1c800000000000002400128009000100766c616e000000001400028006000100021004000600050088"], 0x44}}, 0x24008850) lseek(r1, 0xc, 0x1) 54.690607038s ago: executing program 3 (id=1224): r0 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20000010) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'veth1\x00', @ifru_names='bond0\x00'}) 54.56179648s ago: executing program 3 (id=1227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x8971, &(0x7f00000000c0)={'netdevsim0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff, @local}}) 54.437803566s ago: executing program 4 (id=1230): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 54.393877922s ago: executing program 1 (id=1231): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 54.373982347s ago: executing program 0 (id=1232): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x80) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9683}], 0x1, 0x12142, 0x0) 54.263765949s ago: executing program 4 (id=1233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)='\'', 0x14}], 0x1}, 0x20000005) 54.260543576s ago: executing program 0 (id=1234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x5e, 0x0, 0xee01}, {0x1, 0x0, 0x8}, {0x4, 0x0, 0x200000000000, 0x1}, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) 54.203343614s ago: executing program 1 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x6, 0x4, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x2, 0x7ff, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51e, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913}, {0x1f0, 0xffff, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x7, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x89a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x2, 0x1}, {0x7, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0xc, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x401, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x5473, 0x8, 0xf31d, 0x95}, {0x2, 0xffff7ffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x20000000, 0x61b9f92}, {0x1, 0x349, 0x7e, 0x6, 0x1, 0x7fff}, {0x188, 0x3, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x7, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x8, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x8, 0x8, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0xfffffffc, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0x7fffffff, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x805, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x7c}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0xa, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0x3, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x2, 0x8, 0x6, 0x9, 0xfffffff8, 0x48}, {0x6, 0xa5cb, 0x100, 0x9, 0x403, 0x7}, {0xfffffff6, 0x4, 0x6, 0x8, 0x2b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0x101, 0x8, 0x8644, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x8, 0x7, 0x40}, {0x1ff, 0x1, 0x7, 0x2, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x6}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0x7e32, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x0, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xffffffdb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x201a, 0x11a, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x0, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x17fff, 0x3}, {0x3, 0x6, 0xb, 0xfffffffc, 0xfffffffe, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x80000001}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0x101, 0x9, 0x102, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10003, 0x6, 0x54f7, 0x6}, {0x1, 0x7, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x5, 0x3}, {0x7, 0x0, 0x9, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0xfff, 0x4, 0x28000000}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x8}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x85}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x5, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0xbd, 0x7}, {0x1000000a, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5, 0x2de}, {0x1, 0xfffffff7, 0x6, 0x4f, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x8, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x400004, 0x9d2}, {0x4, 0x0, 0x17c, 0x5, 0xfffffffc, 0xeae8}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x3, 0xffd9}, {0x9, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x800, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffdf, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0xbe2ca77bd4e61168}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 54.192724682s ago: executing program 3 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}}, 0x0) 54.1654281s ago: executing program 4 (id=1237): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) close(r4) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) r8 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x8, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$kcm(0x10, 0x2, 0x4) 54.158627078s ago: executing program 0 (id=1238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x20000040) 54.010574216s ago: executing program 3 (id=1239): socket(0x10, 0x0, 0xfffffffd) socket$inet6(0xa, 0x80003, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x5, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0xfd8d}], 0x2}, 0x4) 53.942775208s ago: executing program 2 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 53.938897537s ago: executing program 1 (id=1241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d821}, 0x24000000) 53.933487752s ago: executing program 0 (id=1242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x7, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 53.867652378s ago: executing program 0 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chroot(&(0x7f0000000140)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x2, 0x3000}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x40008000) bind$inet(r4, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sched_getattr(r0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff004) 53.830282405s ago: executing program 1 (id=1244): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x424080) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000140)) 53.761363092s ago: executing program 1 (id=1245): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 52.269932686s ago: executing program 1 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 52.260228027s ago: executing program 2 (id=1247): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)='\'', 0x14}], 0x1}, 0x20000005) 52.257109572s ago: executing program 3 (id=1248): fsmount(0xffffffffffffffff, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0) 49.542095409s ago: executing program 4 (id=1249): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 41.419740899s ago: executing program 0 (id=1250): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f00000000c0)='\x18^$%$*&[\x00', 0x121802, &(0x7f0000000200)={@_ha_fsid={[0x2, 0x665]}, {0x1, 0x1000, 0x0, 0x8}}, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0xb1}, 0x1, &(0x7f0000000440)=[{0x3, 0x401, &(0x7f00000001c0)='@[^\x00', &(0x7f00000003c0), 0x0, 0x20}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x1, 0x10000004, 0x75}, 0x2c) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 0s ago: executing program 32 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): EOD, truncated [ 37.199283][ T5038] loop0: p41 start 4294975487 is beyond EOD, truncated [ 37.199297][ T5038] loop0: p42 start 4294975487 is beyond EOD, truncated [ 37.199311][ T5038] loop0: p43 start 4294975487 is beyond EOD, truncated [ 37.199325][ T5038] loop0: p44 start 4294975487 is beyond EOD, truncated [ 37.199339][ T5038] loop0: p45 start 4294975487 is beyond EOD, truncated [ 37.199353][ T5038] loop0: p46 start 4294975487 is beyond EOD, truncated [ 37.199367][ T5038] loop0: p47 start 4294975487 is beyond EOD, truncated [ 37.199381][ T5038] loop0: p48 start 4294975487 is beyond EOD, truncated [ 37.199395][ T5038] loop0: p49 start 4294975487 is beyond EOD, truncated [ 37.199409][ T5038] loop0: p50 start 4294975487 is beyond EOD, truncated [ 37.199422][ T5038] loop0: p51 start 4294975487 is beyond EOD, truncated [ 37.199436][ T5038] loop0: p52 start 4294975487 is beyond EOD, truncated [ 37.202975][ T5038] loop0: p53 start 4294975487 is beyond EOD, truncated [ 37.203004][ T5038] loop0: p54 start 4294975487 is beyond EOD, truncated [ 37.203014][ T5038] loop0: p55 start 4294975487 is beyond EOD, truncated [ 37.203023][ T5038] loop0: p56 start 4294975487 is beyond EOD, truncated [ 37.203032][ T5038] loop0: p57 start 4294975487 is beyond EOD, truncated [ 37.203040][ T5038] loop0: p58 start 4294975487 is beyond EOD, truncated [ 37.203048][ T5038] loop0: p59 start 4294975487 is beyond EOD, truncated [ 37.203056][ T5038] loop0: p60 start 4294975487 is beyond EOD, truncated [ 37.203063][ T5038] loop0: p61 start 4294975487 is beyond EOD, truncated [ 37.203070][ T5038] loop0: p62 start 4294975487 is beyond EOD, truncated [ 37.203077][ T5038] loop0: p63 start 4294975487 is beyond EOD, truncated [ 37.203085][ T5038] loop0: p64 start 4294975487 is beyond EOD, truncated [ 37.203092][ T5038] loop0: p65 start 4294975487 is beyond EOD, truncated [ 37.203099][ T5038] loop0: p66 start 4294975487 is beyond EOD, truncated [ 37.203106][ T5038] loop0: p67 start 4294975487 is beyond EOD, truncated [ 37.203113][ T5038] loop0: p68 start 4294975487 is beyond EOD, truncated [ 37.203121][ T5038] loop0: p69 start 4294975487 is beyond EOD, truncated [ 37.203128][ T5038] loop0: p70 start 4294975487 is beyond EOD, truncated [ 37.203135][ T5038] loop0: p71 start 4294975487 is beyond EOD, truncated [ 37.203142][ T5038] loop0: p72 start 4294975487 is beyond EOD, truncated [ 37.203149][ T5038] loop0: p73 start 4294975487 is beyond EOD, truncated [ 37.203157][ T5038] loop0: p74 start 4294975487 is beyond EOD, truncated [ 37.203164][ T5038] loop0: p75 start 4294975487 is beyond EOD, truncated [ 37.203171][ T5038] loop0: p76 start 4294975487 is beyond EOD, truncated [ 37.203178][ T5038] loop0: p77 start 4294975487 is beyond EOD, truncated [ 37.203185][ T5038] loop0: p78 start 4294975487 is beyond EOD, truncated [ 37.203192][ T5038] loop0: p79 start 4294975487 is beyond EOD, truncated [ 37.203200][ T5038] loop0: p80 start 4294975487 is beyond EOD, truncated [ 37.203228][ T5038] loop0: p81 start 4294975487 is beyond EOD, truncated [ 37.203238][ T5038] loop0: p82 start 4294975487 is beyond EOD, truncated [ 37.203248][ T5038] loop0: p83 start 4294975487 is beyond EOD, truncated [ 37.203255][ T5038] loop0: p84 start 4294975487 is beyond EOD, truncated [ 37.203262][ T5038] loop0: p85 start 4294975487 is beyond EOD, truncated [ 37.203269][ T5038] loop0: p86 start 4294975487 is beyond EOD, truncated [ 37.203276][ T5038] loop0: p87 start 4294975487 is beyond EOD, truncated [ 37.203283][ T5038] loop0: p88 start 4294975487 is beyond EOD, truncated [ 37.203291][ T5038] loop0: p89 start 4294975487 is beyond EOD, truncated [ 37.203298][ T5038] loop0: p90 start 4294975487 is beyond EOD, truncated [ 37.203305][ T5038] loop0: p91 start 4294975487 is beyond EOD, truncated [ 37.203312][ T5038] loop0: p92 start 4294975487 is beyond EOD, truncated [ 37.203320][ T5038] loop0: p93 start 4294975487 is beyond EOD, truncated [ 37.203327][ T5038] loop0: p94 start 4294975487 is beyond EOD, truncated [ 37.203334][ T5038] loop0: p95 start 4294975487 is beyond EOD, truncated [ 37.203341][ T5038] loop0: p96 start 4294975487 is beyond EOD, truncated [ 37.203348][ T5038] loop0: p97 start 4294975487 is beyond EOD, truncated [ 37.203356][ T5038] loop0: p98 start 4294975487 is beyond EOD, truncated [ 37.203363][ T5038] loop0: p99 start 4294975487 is beyond EOD, truncated [ 37.203370][ T5038] loop0: p100 start 4294975487 is beyond EOD, truncated [ 37.203377][ T5038] loop0: p101 start 4294975487 is beyond EOD, truncated [ 37.203385][ T5038] loop0: p102 start 4294975487 is beyond EOD, truncated [ 37.203392][ T5038] loop0: p103 start 4294975487 is beyond EOD, truncated [ 37.203399][ T5038] loop0: p104 start 4294975487 is beyond EOD, truncated [ 37.203406][ T5038] loop0: p105 start 4294975487 is beyond EOD, truncated [ 37.203413][ T5038] loop0: p106 start 4294975487 is beyond EOD, truncated [ 37.203421][ T5038] loop0: p107 start 4294975487 is beyond EOD, truncated [ 37.203428][ T5038] loop0: p108 start 4294975487 is beyond EOD, truncated [ 37.203435][ T5038] loop0: p109 start 4294975487 is beyond EOD, truncated [ 37.203442][ T5038] loop0: p110 start 4294975487 is beyond EOD, truncated [ 37.203449][ T5038] loop0: p111 start 4294975487 is beyond EOD, truncated [ 37.203456][ T5038] loop0: p112 start 4294975487 is beyond EOD, truncated [ 37.203464][ T5038] loop0: p113 start 4294975487 is beyond EOD, truncated [ 37.203471][ T5038] loop0: p114 start 4294975487 is beyond EOD, truncated [ 37.203478][ T5038] loop0: p115 start 4294975487 is beyond EOD, truncated [ 37.203485][ T5038] loop0: p116 start 4294975487 is beyond EOD, truncated [ 37.203492][ T5038] loop0: p117 start 4294975487 is beyond EOD, truncated [ 37.203499][ T5038] loop0: p118 start 4294975487 is beyond EOD, truncated [ 37.203506][ T5038] loop0: p119 start 4294975487 is beyond EOD, truncated [ 37.203514][ T5038] loop0: p120 start 4294975487 is beyond EOD, truncated [ 37.203521][ T5038] loop0: p121 start 4294975487 is beyond EOD, truncated [ 37.203528][ T5038] loop0: p122 start 4294975487 is beyond EOD, truncated [ 37.203535][ T5038] loop0: p123 start 4294975487 is beyond EOD, truncated [ 37.203542][ T5038] loop0: p124 start 4294975487 is beyond EOD, truncated [ 37.203550][ T5038] loop0: p125 start 4294975487 is beyond EOD, truncated [ 37.203557][ T5038] loop0: p126 start 4294975487 is beyond EOD, truncated [ 37.203564][ T5038] loop0: p127 start 4294975487 is beyond EOD, truncated [ 37.203571][ T5038] loop0: p128 start 4294975487 is beyond EOD, truncated [ 37.203578][ T5038] loop0: p129 start 4294975487 is beyond EOD, truncated [ 37.203586][ T5038] loop0: p130 start 4294975487 is beyond EOD, truncated [ 37.203593][ T5038] loop0: p131 start 4294975487 is beyond EOD, truncated [ 37.203600][ T5038] loop0: p132 start 4294975487 is beyond EOD, truncated [ 37.203607][ T5038] loop0: p133 start 4294975487 is beyond EOD, truncated [ 37.203614][ T5038] loop0: p134 start 4294975487 is beyond EOD, truncated [ 37.203627][ T5038] loop0: p135 start 4294975487 is beyond EOD, truncated [ 37.203634][ T5038] loop0: p136 start 4294975487 is beyond EOD, truncated [ 37.203642][ T5038] loop0: p137 start 4294975487 is beyond EOD, truncated [ 37.203649][ T5038] loop0: p138 start 4294975487 is beyond EOD, truncated [ 37.203657][ T5038] loop0: p139 start 4294975487 is beyond EOD, truncated [ 37.203664][ T5038] loop0: p140 start 4294975487 is beyond EOD, truncated [ 37.203671][ T5038] loop0: p141 start 4294975487 is beyond EOD, truncated [ 37.203678][ T5038] loop0: p142 start 4294975487 is beyond EOD, truncated [ 37.203685][ T5038] loop0: p143 start 4294975487 is beyond EOD, truncated [ 37.203692][ T5038] loop0: p144 start 4294975487 is beyond EOD, truncated [ 37.203700][ T5038] loop0: p145 start 4294975487 is beyond EOD, truncated [ 37.203707][ T5038] loop0: p146 start 4294975487 is beyond EOD, truncated [ 37.203714][ T5038] loop0: p147 start 4294975487 is beyond EOD, truncated [ 37.203721][ T5038] loop0: p148 start 4294975487 is beyond EOD, truncated [ 37.203728][ T5038] loop0: p149 start 4294975487 is beyond EOD, truncated [ 37.203736][ T5038] loop0: p150 start 4294975487 is beyond EOD, truncated [ 37.203743][ T5038] loop0: p151 start 4294975487 is beyond EOD, truncated [ 37.203750][ T5038] loop0: p152 start 4294975487 is beyond EOD, truncated [ 37.203757][ T5038] loop0: p153 start 4294975487 is beyond EOD, truncated [ 37.203765][ T5038] loop0: p154 start 4294975487 is beyond EOD, truncated [ 37.203772][ T5038] loop0: p155 start 4294975487 is beyond EOD, truncated [ 37.203779][ T5038] loop0: p156 start 4294975487 is beyond EOD, truncated [ 37.203786][ T5038] loop0: p157 start 4294975487 is beyond EOD, truncated [ 37.203793][ T5038] loop0: p158 start 4294975487 is beyond EOD, truncated [ 37.203800][ T5038] loop0: p159 start 4294975487 is beyond EOD, truncated [ 37.203808][ T5038] loop0: p160 start 4294975487 is beyond EOD, truncated [ 37.203815][ T5038] loop0: p161 start 4294975487 is beyond EOD, truncated [ 37.203822][ T5038] loop0: p162 start 4294975487 is beyond EOD, truncated [ 37.203829][ T5038] loop0: p163 start 4294975487 is beyond EOD, truncated [ 37.203836][ T5038] loop0: p164 start 4294975487 is beyond EOD, truncated [ 37.203843][ T5038] loop0: p165 start 4294975487 is beyond EOD, truncated [ 37.203851][ T5038] loop0: p166 start 4294975487 is beyond EOD, truncated [ 37.203858][ T5038] loop0: p167 start 4294975487 is beyond EOD, truncated [ 37.203865][ T5038] loop0: p168 start 4294975487 is beyond EOD, truncated [ 37.203872][ T5038] loop0: p169 start 4294975487 is beyond EOD, truncated [ 37.203879][ T5038] loop0: p170 start 4294975487 is beyond EOD, truncated [ 37.203887][ T5038] loop0: p171 start 4294975487 is beyond EOD, truncated [ 37.203894][ T5038] loop0: p172 start 4294975487 is beyond EOD, truncated [ 37.203901][ T5038] loop0: p173 start 4294975487 is beyond EOD, truncated [ 37.203908][ T5038] loop0: p174 start 4294975487 is beyond EOD, truncated [ 37.203916][ T5038] loop0: p175 start 4294975487 is beyond EOD, truncated [ 37.203923][ T5038] loop0: p176 start 4294975487 is beyond EOD, truncated [ 37.203930][ T5038] loop0: p177 start 4294975487 is beyond EOD, truncated [ 37.203937][ T5038] loop0: p178 start 4294975487 is beyond EOD, truncated [ 37.203944][ T5038] loop0: p179 start 4294975487 is beyond EOD, truncated [ 37.203952][ T5038] loop0: p180 start 4294975487 is beyond EOD, truncated [ 37.203959][ T5038] loop0: p181 start 4294975487 is beyond EOD, truncated [ 37.203966][ T5038] loop0: p182 start 4294975487 is beyond EOD, truncated [ 37.203973][ T5038] loop0: p183 start 4294975487 is beyond EOD, truncated [ 37.203980][ T5038] loop0: p184 start 4294975487 is beyond EOD, truncated [ 37.203988][ T5038] loop0: p185 start 4294975487 is beyond EOD, truncated [ 37.203995][ T5038] loop0: p186 start 4294975487 is beyond EOD, truncated [ 37.204002][ T5038] loop0: p187 start 4294975487 is beyond EOD, truncated [ 37.204009][ T5038] loop0: p188 start 4294975487 is beyond EOD, truncated [ 37.204016][ T5038] loop0: p189 start 4294975487 is beyond EOD, truncated [ 37.204024][ T5038] loop0: p190 start 4294975487 is beyond EOD, truncated [ 37.204031][ T5038] loop0: p191 start 4294975487 is beyond EOD, truncated [ 37.204038][ T5038] loop0: p192 start 4294975487 is beyond EOD, truncated [ 37.204045][ T5038] loop0: p193 start 4294975487 is beyond EOD, truncated [ 37.204052][ T5038] loop0: p194 start 4294975487 is beyond EOD, truncated [ 37.204060][ T5038] loop0: p195 start 4294975487 is beyond EOD, truncated [ 37.204067][ T5038] loop0: p196 start 4294975487 is beyond EOD, truncated [ 37.204074][ T5038] loop0: p197 start 4294975487 is beyond EOD, truncated [ 37.204081][ T5038] loop0: p198 start 4294975487 is beyond EOD, truncated [ 37.204088][ T5038] loop0: p199 start 4294975487 is beyond EOD, truncated [ 37.204096][ T5038] loop0: p200 start 4294975487 is beyond EOD, truncated [ 37.204103][ T5038] loop0: p201 start 4294975487 is beyond EOD, truncated [ 37.204110][ T5038] loop0: p202 start 4294975487 is beyond EOD, truncated [ 37.204117][ T5038] loop0: p203 start 4294975487 is beyond EOD, truncated [ 37.204125][ T5038] loop0: p204 start 4294975487 is beyond EOD, truncated [ 37.204132][ T5038] loop0: p205 start 4294975487 is beyond EOD, truncated [ 37.204139][ T5038] loop0: p206 start 4294975487 is beyond EOD, truncated [ 37.204146][ T5038] loop0: p207 start 4294975487 is beyond EOD, truncated [ 37.204153][ T5038] loop0: p208 start 4294975487 is beyond EOD, truncated [ 37.204161][ T5038] loop0: p209 start 4294975487 is beyond EOD, truncated [ 37.204168][ T5038] loop0: p210 start 4294975487 is beyond EOD, truncated [ 37.204175][ T5038] loop0: p211 start 4294975487 is beyond EOD, truncated [ 37.204182][ T5038] loop0: p212 start 4294975487 is beyond EOD, truncated [ 37.204189][ T5038] loop0: p213 start 4294975487 is beyond EOD, truncated [ 37.204196][ T5038] loop0: p214 start 4294975487 is beyond EOD, truncated [ 37.204204][ T5038] loop0: p215 start 4294975487 is beyond EOD, truncated [ 37.204211][ T5038] loop0: p216 start 4294975487 is beyond EOD, truncated [ 37.204218][ T5038] loop0: p217 start 4294975487 is beyond EOD, truncated [ 37.204225][ T5038] loop0: p218 start 4294975487 is beyond EOD, truncated [ 37.204232][ T5038] loop0: p219 start 4294975487 is beyond EOD, truncated [ 37.204240][ T5038] loop0: p220 start 4294975487 is beyond EOD, truncated [ 37.204247][ T5038] loop0: p221 start 4294975487 is beyond EOD, truncated [ 37.204254][ T5038] loop0: p222 start 4294975487 is beyond EOD, truncated [ 37.204261][ T5038] loop0: p223 start 4294975487 is beyond EOD, truncated [ 37.204269][ T5038] loop0: p224 start 4294975487 is beyond EOD, truncated [ 37.204276][ T5038] loop0: p225 start 4294975487 is beyond EOD, truncated [ 37.204283][ T5038] loop0: p226 start 4294975487 is beyond EOD, truncated [ 37.204290][ T5038] loop0: p227 start 4294975487 is beyond EOD, truncated [ 37.204297][ T5038] loop0: p228 start 4294975487 is beyond EOD, truncated [ 37.204305][ T5038] loop0: p229 start 4294975487 is beyond EOD, truncated [ 37.204312][ T5038] loop0: p230 start 4294975487 is beyond EOD, truncated [ 37.204319][ T5038] loop0: p231 start 4294975487 is beyond EOD, truncated [ 37.204326][ T5038] loop0: p232 start 4294975487 is beyond EOD, truncated [ 37.204334][ T5038] loop0: p233 start 4294975487 is beyond EOD, truncated [ 37.204341][ T5038] loop0: p234 start 4294975487 is beyond EOD, truncated [ 37.204348][ T5038] loop0: p235 start 4294975487 is beyond EOD, truncated [ 37.204355][ T5038] loop0: p236 start 4294975487 is beyond EOD, truncated [ 37.204362][ T5038] loop0: p237 start 4294975487 is beyond EOD, truncated [ 37.204370][ T5038] loop0: p238 start 4294975487 is beyond EOD, truncated [ 37.204377][ T5038] loop0: p239 start 4294975487 is beyond EOD, truncated [ 37.204384][ T5038] loop0: p240 start 4294975487 is beyond EOD, truncated [ 37.204391][ T5038] loop0: p241 start 4294975487 is beyond EOD, truncated [ 37.204398][ T5038] loop0: p242 start 4294975487 is beyond EOD, truncated [ 37.204406][ T5038] loop0: p243 start 4294975487 is beyond EOD, truncated [ 37.204413][ T5038] loop0: p244 start 4294975487 is beyond EOD, truncated [ 37.204420][ T5038] loop0: p245 start 4294975487 is beyond EOD, truncated [ 37.204427][ T5038] loop0: p246 start 4294975487 is beyond EOD, truncated [ 37.204434][ T5038] loop0: p247 start 4294975487 is beyond EOD, truncated [ 37.204441][ T5038] loop0: p248 start 4294975487 is beyond EOD, truncated [ 37.204449][ T5038] loop0: p249 start 4294975487 is beyond EOD, truncated [ 37.204456][ T5038] loop0: p250 start 4294975487 is beyond EOD, truncated [ 37.204463][ T5038] loop0: p251 start 4294975487 is beyond EOD, truncated [ 37.204470][ T5038] loop0: p252 start 4294975487 is beyond EOD, truncated [ 37.204477][ T5038] loop0: p253 start 4294975487 is beyond EOD, truncated [ 37.204485][ T5038] loop0: p254 start 4294975487 is beyond EOD, truncated [ 37.204492][ T5038] loop0: p255 start 4294975487 is beyond EOD, truncated [ 37.259000][ T5053] loop3: detected capacity change from 0 to 512 [ 37.269669][ T5053] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.280475][ T5053] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 2: comm syz.3.50: invalid block [ 37.280544][ T5053] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.282897][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 37.282910][ C0] EXT4-fs (loop3): initial error at time 37: __ext4_iget:5481: inode 11: block 2 [ 37.282931][ C0] EXT4-fs (loop3): last error at time 37: __ext4_iget:5481: inode 11: block 2 [ 37.283273][ T5053] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.50: couldn't read orphan inode 11 (err -117) [ 37.283291][ T5053] loop3: lost filesystem error report for type 5 error -117 [ 37.287367][ T5053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.325340][ T4901] udevd[4901]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 37.330682][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 37.345707][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 37.354932][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 37.538467][ T4712] Bluetooth: hci0: command 0x041b tx timeout [ 37.612513][ T5067] siw: device registration error -23 [ 37.680839][ T5068] loop2: detected capacity change from 0 to 2048 [ 37.737625][ T5068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.232968][ T4712] Bluetooth: hci1: command 0x040f tx timeout [ 38.233011][ T4712] Bluetooth: hci4: command 0x040f tx timeout [ 38.233044][ T4712] Bluetooth: hci3: command 0x040f tx timeout [ 38.233067][ T4712] Bluetooth: hci2: command 0x040f tx timeout [ 38.413930][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.472226][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.485673][ T5065] mmap: syz.0.54 (5065) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.492407][ T5065] Bluetooth: MGMT ver 1.23 [ 38.774541][ T5087] loop3: detected capacity change from 0 to 128 [ 38.788911][ T5089] loop2: detected capacity change from 0 to 1024 [ 38.790559][ T5089] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.792012][ T5089] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 38.792064][ T5089] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 38.792075][ T5089] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.60: Failed to acquire dquot type 0 [ 38.792088][ T5089] loop2: lost filesystem error report for type 5 error -117 [ 38.802874][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 38.802907][ C1] EXT4-fs (loop2): initial error at time 38: ext4_acquire_dquot:7034 [ 38.802942][ C1] EXT4-fs (loop2): last error at time 38: ext4_acquire_dquot:7034 [ 38.804034][ T5089] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 38.817404][ T5089] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.60: corrupted inode contents [ 38.817462][ T5089] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.821297][ T5089] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #13: comm syz.2.60: mark_inode_dirty error [ 38.821346][ T5089] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.826282][ T5089] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.60: corrupted inode contents [ 38.826316][ T5089] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.831695][ T5089] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.60: mark_inode_dirty error [ 38.831755][ T5089] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.836678][ T5089] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.60: corrupted inode contents [ 38.836726][ T5089] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.838780][ T5089] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 38.838810][ T5089] loop2: lost filesystem error report for type 5 error -117 [ 38.841362][ T5089] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.60: corrupted inode contents [ 38.841399][ T5089] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.849377][ T5089] EXT4-fs error (device loop2): ext4_truncate:4690: inode #13: comm syz.2.60: mark_inode_dirty error [ 38.849444][ T5089] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.853900][ T5089] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 38.853939][ T5089] loop2: lost filesystem error report for type 5 error -117 [ 38.859149][ T5089] EXT4-fs (loop2): 1 truncate cleaned up [ 38.862756][ T5089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.887415][ T5096] loop0: detected capacity change from 0 to 8192 [ 38.895561][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.933897][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:0) [ 38.948089][ T5096] xt_hashlimit: size too large, truncated to 1048576 [ 38.961988][ T5104] loop3: detected capacity change from 0 to 512 [ 38.967829][ T5104] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.967874][ T5104] EXT4-fs (loop3): Invalid default hash set in the superblock [ 39.020444][ T5107] warning: `syz.0.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 39.367594][ T5110] syz_tun: entered allmulticast mode [ 39.445724][ T5117] loop0: detected capacity change from 0 to 2048 [ 39.448983][ T5115] futex_wake_op: syz.3.67 tries to shift op by 32; fix this program [ 39.519060][ T5119] FAT-fs (loop0): Directory bread(block 64) failed [ 39.519100][ T5119] FAT-fs (loop0): Directory bread(block 65) failed [ 39.519126][ T5119] FAT-fs (loop0): Directory bread(block 66) failed [ 39.519138][ T5119] FAT-fs (loop0): Directory bread(block 67) failed [ 39.519160][ T5119] FAT-fs (loop0): Directory bread(block 68) failed [ 39.519171][ T5119] FAT-fs (loop0): Directory bread(block 69) failed [ 39.519192][ T5119] FAT-fs (loop0): Directory bread(block 70) failed [ 39.519202][ T5119] FAT-fs (loop0): Directory bread(block 71) failed [ 39.519223][ T5119] FAT-fs (loop0): Directory bread(block 72) failed [ 39.519233][ T5119] FAT-fs (loop0): Directory bread(block 73) failed [ 39.612930][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 39.686505][ T5124] Alternate GPT is invalid, using primary GPT. [ 39.686565][ T5124] loop1: p1 p2 p3 [ 39.696883][ T5128] fuse: Unknown parameter 'ô00x0000000000000003' [ 39.757626][ T4901] udevd[4901]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 39.770237][ T5100] syz_tun: left allmulticast mode [ 39.789954][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 39.791187][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 40.088709][ T5153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.089777][ T5153] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.79: inode #0: comm syz.1.79: iget: illegal inode # [ 40.089796][ T5153] loop1: lost filesystem error report for type 5 error -117 [ 40.089917][ T5153] EXT4-fs (loop1): Remounting filesystem read-only [ 40.089924][ T5153] EXT4-fs (loop1): get orphan inode failed [ 40.090110][ T5153] EXT4-fs (loop1): mount failed [ 40.112618][ T5157] syz.2.80 uses obsolete (PF_INET,SOCK_PACKET) [ 40.267396][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 40.268891][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 40.270157][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 40.271440][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 40.295262][ T5168] Injecting memory failure for pfn 0x121b5f at process virtual address 0x204d4000 [ 40.438917][ T5168] Memory failure: 0x121b5f: recovery action for clean LRU page: Recovered [ 40.509663][ T5171] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.511127][ T5171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 40.511181][ T5171] System zones: 1-12 [ 40.529886][ T5171] EXT4-fs (loop4): 1 truncate cleaned up [ 40.533204][ T5171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.839062][ T5171] vivid-000: disconnect [ 40.841324][ T5170] vivid-000: reconnect [ 40.856770][ T5184] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.864184][ T5184] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.88: corrupted in-inode xattr: overlapping e_value [ 40.864322][ T5184] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.867658][ T5184] EXT4-fs (loop0): get orphan inode failed [ 40.871496][ T5184] EXT4-fs (loop0): mount failed [ 40.872879][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 40.872894][ C0] EXT4-fs (loop0): initial error at time 296: ext4_iget_extra_inode:5128: inode 15 [ 40.872910][ C0] EXT4-fs (loop0): last error at time 296: ext4_iget_extra_inode:5128: inode 15 [ 40.883457][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.912790][ T5188] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.938583][ T5188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.962822][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.234610][ T5203] EXT4-fs: Ignoring removed oldalloc option [ 41.235263][ T5203] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.235278][ T5203] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.241520][ T5203] EXT4-fs (loop0): 1 truncate cleaned up [ 41.242019][ T5203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.352662][ T5211] EXT4-fs: old and new quota format mixing [ 41.571724][ T5217] FAULT_INJECTION: forcing a failure. [ 41.571724][ T5217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.571765][ T5217] CPU: 0 UID: 0 PID: 5217 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT [ 41.571778][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.571785][ T5217] Call trace: [ 41.571788][ T5217] show_stack+0x2c/0x3c (C) [ 41.571809][ T5217] __dump_stack+0x30/0x40 [ 41.571820][ T5217] dump_stack_lvl+0xd8/0x12c [ 41.571830][ T5217] dump_stack+0x1c/0x28 [ 41.571839][ T5217] should_fail_ex+0x414/0x588 [ 41.571848][ T5217] should_fail+0x14/0x24 [ 41.571856][ T5217] should_fail_usercopy+0x20/0x30 [ 41.571864][ T5217] _inline_copy_from_user+0x40/0x180 [ 41.571873][ T5217] copy_msghdr_from_user+0xb8/0x194 [ 41.571881][ T5217] ___sys_sendmsg+0x14c/0x224 [ 41.571888][ T5217] __sys_sendmmsg+0x210/0x588 [ 41.571895][ T5217] __arm64_sys_sendmmsg+0xa0/0xbc [ 41.571901][ T5217] invoke_syscall+0x98/0x244 [ 41.571911][ T5217] el0_svc_common+0xe8/0x23c [ 41.571921][ T5217] do_el0_svc+0x48/0x58 [ 41.571930][ T5217] el0_svc+0x64/0x260 [ 41.571937][ T5217] el0t_64_sync_handler+0x48/0x148 [ 41.571944][ T5217] el0t_64_sync+0x198/0x19c [ 41.580592][ T5217] geneve2: entered promiscuous mode [ 41.598588][ T5220] set_capacity_and_notify: 9 callbacks suppressed [ 41.598602][ T5220] loop3: detected capacity change from 0 to 1024 [ 41.611066][ T5220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.619047][ T5220] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.99: lblock 3 mapped to illegal pblock 3 (length 3) [ 41.626700][ T5220] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 41.630544][ T5220] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.630544][ T5220] [ 41.693067][ T4712] Bluetooth: hci0: command 0x041b tx timeout [ 41.695872][ T96] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 41.698658][ T5226] loop2: detected capacity change from 0 to 512 [ 41.701516][ T96] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 41.701559][ T96] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.701559][ T96] [ 41.703753][ T5226] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 41.704996][ T4707] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 41.709287][ T5226] EXT4-fs (loop2): failed to initialize system zone (-117) [ 41.709351][ T5226] EXT4-fs (loop2): mount failed [ 41.709847][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.895645][ T5230] geneve2: entered promiscuous mode [ 41.965352][ T5232] overlay: Unknown parameter 'uid' [ 42.023423][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.413271][ T4712] Bluetooth: hci1: command 0x040f tx timeout [ 42.413402][ T4712] Bluetooth: hci4: command 0x040f tx timeout [ 42.413511][ T4712] Bluetooth: hci3: command 0x040f tx timeout [ 42.413603][ T4712] Bluetooth: hci2: command 0x040f tx timeout [ 42.545367][ T5254] netlink: 44 bytes leftover after parsing attributes in process `syz.0.107'. [ 42.612571][ T5253] FAULT_INJECTION: forcing a failure. [ 42.612571][ T5253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.612632][ T5253] CPU: 0 UID: 0 PID: 5253 Comm: syz.1.108 Not tainted syzkaller #0 PREEMPT [ 42.612644][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.612650][ T5253] Call trace: [ 42.612654][ T5253] show_stack+0x2c/0x3c (C) [ 42.612671][ T5253] __dump_stack+0x30/0x40 [ 42.612681][ T5253] dump_stack_lvl+0xd8/0x12c [ 42.612691][ T5253] dump_stack+0x1c/0x28 [ 42.612700][ T5253] should_fail_ex+0x414/0x588 [ 42.612709][ T5253] should_fail+0x14/0x24 [ 42.612717][ T5253] should_fail_usercopy+0x20/0x30 [ 42.612725][ T5253] _copy_to_iter+0x1a0/0x10f8 [ 42.612735][ T5253] simple_copy_to_iter+0x50/0x8c [ 42.612745][ T5253] __skb_datagram_iter+0xdc/0x7ac [ 42.612754][ T5253] skb_copy_datagram_iter+0xf4/0x3e8 [ 42.612763][ T5253] netlink_recvmsg+0x230/0x860 [ 42.612774][ T5253] sock_recvmsg+0xd8/0x134 [ 42.612783][ T5253] sock_read_iter+0x1ec/0x2a8 [ 42.612790][ T5253] do_iter_readv_writev+0x48c/0x6f8 [ 42.612801][ T5253] vfs_readv+0x234/0x588 [ 42.612808][ T5253] do_readv+0x134/0x2a4 [ 42.612814][ T5253] __arm64_sys_readv+0x80/0x94 [ 42.612824][ T5253] invoke_syscall+0x98/0x244 [ 42.612833][ T5253] el0_svc_common+0xe8/0x23c [ 42.612842][ T5253] do_el0_svc+0x48/0x58 [ 42.612855][ T5253] el0_svc+0x64/0x260 [ 42.612863][ T5253] el0t_64_sync_handler+0x48/0x148 [ 42.612870][ T5253] el0t_64_sync+0x198/0x19c [ 42.619423][ T5255] netlink: 44 bytes leftover after parsing attributes in process `syz.0.107'. [ 42.861321][ T5266] binder: 5265:5266 ioctl 4018620d 0 returned -22 [ 42.861702][ T5266] binder: 5265:5266 Acquire 1 refcount change on invalid ref 0 ret -22 [ 42.861741][ T5266] binder: 5265:5266 ioctl c0306201 20000080 returned -14 [ 42.867850][ T5266] binder: 5265:5266 ioctl c0306201 200003c0 returned -14 [ 42.867984][ T5266] binder: 5265:5266 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 42.906356][ T5275] loop1: detected capacity change from 0 to 1024 [ 42.923646][ T5275] overlayfs: failed lookup in lower (newroot/24, name='file0', err=-40): overlapping layers [ 42.923763][ T5275] overlayfs: failed to resolve './file0/file0': -40 [ 43.429077][ T5292] FAULT_INJECTION: forcing a failure. [ 43.429077][ T5292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.429110][ T5292] CPU: 0 UID: 0 PID: 5292 Comm: syz.4.120 Not tainted syzkaller #0 PREEMPT [ 43.429121][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.429126][ T5292] Call trace: [ 43.429129][ T5292] show_stack+0x2c/0x3c (C) [ 43.429144][ T5292] __dump_stack+0x30/0x40 [ 43.429154][ T5292] dump_stack_lvl+0xd8/0x12c [ 43.429163][ T5292] dump_stack+0x1c/0x28 [ 43.429172][ T5292] should_fail_ex+0x414/0x588 [ 43.429181][ T5292] should_fail+0x14/0x24 [ 43.429188][ T5292] should_fail_usercopy+0x20/0x30 [ 43.429197][ T5292] _inline_copy_from_user+0x40/0x180 [ 43.429205][ T5292] copy_msghdr_from_user+0xb8/0x194 [ 43.429212][ T5292] ___sys_sendmsg+0x14c/0x224 [ 43.429219][ T5292] __sys_sendmmsg+0x210/0x588 [ 43.429226][ T5292] __arm64_sys_sendmmsg+0xa0/0xbc [ 43.429233][ T5292] invoke_syscall+0x98/0x244 [ 43.429242][ T5292] el0_svc_common+0xe8/0x23c [ 43.429251][ T5292] do_el0_svc+0x48/0x58 [ 43.429261][ T5292] el0_svc+0x64/0x260 [ 43.429269][ T5292] el0t_64_sync_handler+0x48/0x148 [ 43.429277][ T5292] el0t_64_sync+0x198/0x19c [ 43.570766][ T5308] loop1: detected capacity change from 0 to 512 [ 43.572593][ T5308] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.597391][ T5308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.627561][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.705190][ T5330] loop2: detected capacity change from 0 to 1024 [ 43.707069][ T5328] sock: sock_timestamping_bind_phc: sock not bind to device [ 43.721247][ T5330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.732450][ T5330] overlayfs: failed to resolve './cgroup': -2 [ 43.736930][ T5334] loop1: detected capacity change from 0 to 2048 [ 43.748732][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.760683][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.773564][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 43.792073][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.878991][ T5345] bridge0: port 3(erspan0) entered blocking state [ 43.880588][ T5345] bridge0: port 3(erspan0) entered disabled state [ 43.882524][ T5345] erspan0: entered allmulticast mode [ 43.898793][ T5345] erspan0: entered promiscuous mode [ 43.900319][ T5345] bridge0: port 3(erspan0) entered blocking state [ 43.900374][ T5345] bridge0: port 3(erspan0) entered forwarding state [ 44.021010][ T5354] FAULT_INJECTION: forcing a failure. [ 44.021010][ T5354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.021044][ T5354] CPU: 1 UID: 0 PID: 5354 Comm: syz.1.137 Not tainted syzkaller #0 PREEMPT [ 44.021055][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 44.021060][ T5354] Call trace: [ 44.021063][ T5354] show_stack+0x2c/0x3c (C) [ 44.021080][ T5354] __dump_stack+0x30/0x40 [ 44.021090][ T5354] dump_stack_lvl+0xd8/0x12c [ 44.021100][ T5354] dump_stack+0x1c/0x28 [ 44.021109][ T5354] should_fail_ex+0x414/0x588 [ 44.021118][ T5354] should_fail+0x14/0x24 [ 44.021126][ T5354] should_fail_usercopy+0x20/0x30 [ 44.021135][ T5354] simple_read_from_buffer+0xc4/0x240 [ 44.021144][ T5354] proc_fail_nth_read+0x1a8/0x248 [ 44.021152][ T5354] vfs_read+0x230/0x8e4 [ 44.021162][ T5354] ksys_read+0x12c/0x224 [ 44.021171][ T5354] __arm64_sys_read+0x7c/0x90 [ 44.021180][ T5354] invoke_syscall+0x98/0x244 [ 44.021190][ T5354] el0_svc_common+0xe8/0x23c [ 44.021199][ T5354] do_el0_svc+0x48/0x58 [ 44.021208][ T5354] el0_svc+0x64/0x260 [ 44.021216][ T5354] el0t_64_sync_handler+0x48/0x148 [ 44.021224][ T5354] el0t_64_sync+0x198/0x19c [ 44.074394][ T5357] loop2: detected capacity change from 0 to 512 [ 44.075262][ T5357] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.097728][ T5356] overlay: ./file0 is not a directory [ 44.105815][ T5357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.164713][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.216128][ T5372] pimreg: entered allmulticast mode [ 44.519805][ T5380] FAULT_INJECTION: forcing a failure. [ 44.519805][ T5380] name failslab, interval 1, probability 0, space 0, times 0 [ 44.519860][ T5380] CPU: 1 UID: 0 PID: 5380 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT [ 44.519871][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 44.519877][ T5380] Call trace: [ 44.519880][ T5380] show_stack+0x2c/0x3c (C) [ 44.519898][ T5380] __dump_stack+0x30/0x40 [ 44.519910][ T5380] dump_stack_lvl+0xd8/0x12c [ 44.519919][ T5380] dump_stack+0x1c/0x28 [ 44.519929][ T5380] should_fail_ex+0x414/0x588 [ 44.519939][ T5380] should_failslab+0xc4/0x124 [ 44.519947][ T5380] __kmalloc_cache_noprof+0x8c/0x624 [ 44.519956][ T5380] refill_pi_state_cache+0xa0/0x16c [ 44.519965][ T5380] futex_lock_pi+0x164/0x720 [ 44.519972][ T5380] do_futex+0x1dc/0x354 [ 44.519980][ T5380] __arm64_sys_futex+0x2d4/0x3f8 [ 44.519987][ T5380] invoke_syscall+0x98/0x244 [ 44.519997][ T5380] el0_svc_common+0xe8/0x23c [ 44.520007][ T5380] do_el0_svc+0x48/0x58 [ 44.520016][ T5380] el0_svc+0x64/0x260 [ 44.520024][ T5380] el0t_64_sync_handler+0x48/0x148 [ 44.520031][ T5380] el0t_64_sync+0x198/0x19c [ 44.814725][ T5370] pimreg: left allmulticast mode [ 45.411701][ T5394] loop4: detected capacity change from 0 to 128 [ 45.446320][ T5394] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.532371][ T4714] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.603134][ T5401] FAULT_INJECTION: forcing a failure. [ 45.603134][ T5401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.603168][ T5401] CPU: 0 UID: 0 PID: 5401 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT [ 45.603180][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.603186][ T5401] Call trace: [ 45.603189][ T5401] show_stack+0x2c/0x3c (C) [ 45.603206][ T5401] __dump_stack+0x30/0x40 [ 45.603216][ T5401] dump_stack_lvl+0xd8/0x12c [ 45.603226][ T5401] dump_stack+0x1c/0x28 [ 45.603235][ T5401] should_fail_ex+0x414/0x588 [ 45.603244][ T5401] should_fail+0x14/0x24 [ 45.603252][ T5401] should_fail_usercopy+0x20/0x30 [ 45.603260][ T5401] _inline_copy_from_user+0x40/0x180 [ 45.603269][ T5401] copy_msghdr_from_user+0xb8/0x194 [ 45.603276][ T5401] ___sys_sendmsg+0x14c/0x224 [ 45.603283][ T5401] __sys_sendmmsg+0x210/0x588 [ 45.603290][ T5401] __arm64_sys_sendmmsg+0xa0/0xbc [ 45.603297][ T5401] invoke_syscall+0x98/0x244 [ 45.603306][ T5401] el0_svc_common+0xe8/0x23c [ 45.603316][ T5401] do_el0_svc+0x48/0x58 [ 45.603325][ T5401] el0_svc+0x64/0x260 [ 45.603332][ T5401] el0t_64_sync_handler+0x48/0x148 [ 45.603340][ T5401] el0t_64_sync+0x198/0x19c [ 45.644043][ T5406] loop2: detected capacity change from 0 to 512 [ 45.644581][ T5406] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 45.650979][ T5406] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.153: bg 0: block 104: invalid block bitmap [ 45.651014][ T5406] loop2: lost filesystem error report for type 5 error -117 [ 45.651641][ T5406] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.651674][ T5406] loop2: lost filesystem error report for type 5 error -117 [ 45.652047][ T5406] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.153: invalid indirect mapped block 1 (level 1) [ 45.652073][ T5406] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.652998][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 45.653026][ C0] EXT4-fs (loop2): initial error at time 301: ext4_validate_block_bitmap:432 [ 45.653062][ C0] EXT4-fs (loop2): last error at time 301: ext4_free_branches:1023: inode 11 [ 45.658124][ T5406] EXT4-fs (loop2): 1 truncate cleaned up [ 45.658998][ T5406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.672400][ T5406] 9pnet_fd: Insufficient options for proto=fd [ 45.695296][ T5410] loop0: detected capacity change from 0 to 512 [ 45.700987][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.796230][ T5412] Cannot find add_set index 0 as target [ 45.975983][ T5413] ext4: Unknown parameter 'pcr' [ 45.978484][ T5413] overlay: Bad value for 'upperdir' [ 46.011204][ T5415] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.036952][ T5415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.047289][ T4688] kernel read not supported for file /vga_arbiter (pid: 4688 comm: kworker/0:3) [ 46.117377][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.147311][ T5430] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.160' sets config #0 [ 46.250354][ T5436] syz_tun: entered allmulticast mode [ 46.289244][ T5433] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.163: corrupted in-inode xattr: invalid ea_ino [ 46.292226][ T5433] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.292635][ T5433] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.163: couldn't read orphan inode 15 (err -117) [ 46.294495][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 46.294507][ C0] EXT4-fs (loop1): initial error at time 302: ext4_iget_extra_inode:5128: inode 15 [ 46.294523][ C0] EXT4-fs (loop1): last error at time 302: ext4_iget_extra_inode:5128: inode 15 [ 46.324494][ T5433] loop1: lost filesystem error report for type 5 error -117 [ 46.334267][ T5433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.364202][ T5433] capability: warning: `syz.1.163' uses 32-bit capabilities (legacy support in use) [ 46.367692][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 46.426812][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.567152][ T5454] geneve2: entered allmulticast mode [ 46.602491][ T5457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.603958][ T5457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 46.603996][ T5457] System zones: 1-12 [ 46.607157][ T5457] EXT4-fs (loop3): 1 truncate cleaned up [ 46.609913][ T5457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.612307][ T5459] set_capacity_and_notify: 4 callbacks suppressed [ 46.612342][ T5459] loop4: detected capacity change from 0 to 512 [ 46.615930][ T5459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.687271][ T5459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 46.687340][ T5459] System zones: 1-12 [ 46.690906][ T5459] EXT4-fs (loop4): 1 truncate cleaned up [ 46.692581][ T5459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.815377][ T5468] dlm: non-version read from control device 240 [ 46.866426][ T5417] syz_tun: left allmulticast mode [ 47.415468][ T5473] vivid-000: disconnect [ 47.716788][ T5478] loop2: detected capacity change from 0 to 256 [ 48.663285][ T5458] vivid-000: reconnect [ 48.703897][ T5479] team0: Port device team_slave_1 removed [ 48.779941][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.829377][ T5494] loop1: detected capacity change from 0 to 512 [ 48.840669][ T5494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.860065][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 48.873406][ T5499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.928408][ T4839] kernel read not supported for file /vga_arbiter (pid: 4839 comm: kworker/0:6) [ 48.928907][ T4839] kernel read not supported for file /vga_arbiter (pid: 4839 comm: kworker/0:6) [ 48.933137][ T5499] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 48.985622][ T5504] loop0: detected capacity change from 0 to 8 [ 48.987214][ T5504] squashfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 48.989058][ T5499] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.040217][ T5501] nbd: socks must be embedded in a SOCK_ITEM attr [ 49.053711][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.057339][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.158438][ T4696] udevd[4696]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 49.186946][ T5527] loop1: detected capacity change from 0 to 1024 [ 49.188613][ T5527] EXT4-fs: Ignoring removed bh option [ 49.196346][ T4698] udevd[4698]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 49.209682][ T5527] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 49.228148][ T5527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.257705][ T5527] overlayfs: conflicting lowerdir path [ 49.316242][ T5536] dlm: non-version read from control device 240 [ 49.516371][ T5535] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.537958][ T5541] loop0: detected capacity change from 0 to 256 [ 49.540085][ T5541] vfat: Unknown parameter '' [ 49.543793][ T5539] team0: Port device team_slave_1 removed [ 49.561738][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.766798][ T5551] loop0: detected capacity change from 0 to 2048 [ 49.897627][ T50] Bluetooth: hci2: unexpected event 0x0f length: 85 > 4 [ 49.897672][ T50] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 49.901926][ T5550] loop2: detected capacity change from 0 to 128 [ 49.903334][ T5550] FAT-fs (loop2): bogus number of reserved sectors [ 49.903360][ T5550] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 49.903369][ T5550] FAT-fs (loop2): Can't find a valid FAT filesystem [ 49.914321][ T5550] ±ÿe=0,utf8=: renamed from lo (while UP) [ 50.427787][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 50.559163][ T5554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.639409][ T5554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.081665][ T5584] loop0: detected capacity change from 0 to 512 [ 51.089770][ T5584] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 51.089897][ T5584] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.090501][ T5584] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 51.092311][ T5584] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 51.092506][ T5584] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.206: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 51.092537][ T5584] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 51.092911][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 51.092934][ C0] EXT4-fs (loop0): last error at time 307: ext4_ext_check_inode:521: inode 13 [ 51.093419][ T5584] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.206: couldn't read orphan inode 13 (err -117) [ 51.093452][ T5584] loop0: lost filesystem error report for type 5 error -117 [ 51.099988][ T5584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.184920][ T5554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.212445][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.250407][ T5554] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.414445][ T4996] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.416534][ T96] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.416568][ T96] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.416593][ T96] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.614701][ T5598] loop1: detected capacity change from 0 to 8192 [ 51.625500][ T5602] loop3: detected capacity change from 0 to 512 [ 51.639413][ T5598] loop1: p1 p2 p3 p4[EZD] [ 51.639440][ T5598] loop1: partition table partially beyond EOD, truncated [ 51.639542][ T5598] loop1: p1 start 16384 is beyond EOD, truncated [ 51.639565][ T5598] loop1: p2 size 150994944 extends beyond EOD, truncated [ 51.649279][ T5598] loop1: p3 start 67108864 is beyond EOD, [ 51.649751][ T5602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.654929][ T5598] truncated [ 51.656087][ T5598] loop1: p4 size 33555584 extends beyond EOD, truncated [ 51.701667][ T5612] loop0: detected capacity change from 0 to 512 [ 51.716804][ T5612] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.213: inode has both inline data and extents flags [ 51.716833][ T5612] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.719798][ T5612] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.213: couldn't read orphan inode 15 (err -117) [ 51.719825][ T5612] loop0: lost filesystem error report for type 5 error -117 [ 51.724062][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 51.724077][ C1] EXT4-fs (loop0): initial error at time 307: ext4_orphan_get:1397: inode 15 [ 51.724092][ C1] EXT4-fs (loop0): last error at time 307: ext4_orphan_get:1402 [ 51.732356][ T5612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.750562][ T50] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 51.823968][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 51.838259][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.846997][ T5619] loop4: detected capacity change from 0 to 512 [ 51.854312][ T5619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.867208][ T5619] EXT4-fs (loop4): 1 truncate cleaned up [ 51.867727][ T5619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.882766][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 51.896207][ T4901] udevd[4901]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 51.979681][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.035364][ T5638] binder: 5634:5638 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 52.035396][ T5638] binder: 5634:5638 ioctl c0306201 20000640 returned -22 [ 52.103254][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.219'. [ 52.417417][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 52.450200][ T5651] netlink: 'syz.4.224': attribute type 5 has an invalid length. [ 52.450233][ T5651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.224'. [ 52.459062][ T5655] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 52.500905][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.511467][ T5660] tipc: Enabling of bearer rejected, failed to enable media [ 52.512977][ T5658] tipc: Enabling of bearer rejected, failed to enable media [ 52.522109][ T5662] overlayfs: failed to resolve './file0/file1': -2 [ 52.547586][ T5665] loop0: detected capacity change from 0 to 128 [ 52.573039][ T5665] Injecting memory failure for pfn 0x11d9c0 at process virtual address 0x20000000 [ 52.595474][ T5665] Memory failure: 0x11d9c0: Sending SIGBUS to syz.0.228:5665 due to hardware memory corruption [ 52.595575][ T5665] Memory failure: 0x11d9c0: recovery action for unsplit thp: Failed [ 52.660418][ T5675] loop3: detected capacity change from 0 to 512 [ 52.661365][ T5675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.663728][ T5675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 52.663762][ T5675] System zones: 1-12 [ 52.664918][ T5675] EXT4-fs (loop3): 1 truncate cleaned up [ 52.665369][ T5675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.771351][ T5682] syzkaller0: entered promiscuous mode [ 52.771389][ T5682] syzkaller0: entered allmulticast mode [ 52.855148][ T5688] vivid-000: disconnect [ 53.014914][ T5687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.236'. [ 53.512052][ T5674] vivid-000: reconnect [ 53.719862][ T5701] lo speed is unknown, defaulting to 1000 [ 53.719905][ T5701] lo speed is unknown, defaulting to 1000 [ 53.720894][ T5701] lo speed is unknown, defaulting to 1000 [ 53.723039][ T5701] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.779122][ T5702] loop4: detected capacity change from 0 to 2048 [ 53.889034][ T5701] lo speed is unknown, defaulting to 1000 [ 53.889496][ T5701] lo speed is unknown, defaulting to 1000 [ 53.889838][ T5701] lo speed is unknown, defaulting to 1000 [ 53.890171][ T5701] lo speed is unknown, defaulting to 1000 [ 53.890613][ T5701] lo speed is unknown, defaulting to 1000 [ 53.902528][ T5702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.377871][ T5708] sctp: [Deprecated]: syz.2.242 (pid 5708) Use of int in max_burst socket option. [ 54.377871][ T5708] Use struct sctp_assoc_value instead [ 54.517013][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.561878][ T5724] loop1: detected capacity change from 0 to 256 [ 54.577796][ T5724] FAT-fs (loop1): Directory bread(block 64) failed [ 54.579565][ T5724] FAT-fs (loop1): Directory bread(block 65) failed [ 54.581026][ T5724] FAT-fs (loop1): Directory bread(block 66) failed [ 54.582269][ T5724] FAT-fs (loop1): Directory bread(block 67) failed [ 54.583903][ T5724] FAT-fs (loop1): Directory bread(block 68) failed [ 54.583931][ T5724] FAT-fs (loop1): Directory bread(block 69) failed [ 54.584014][ T5724] FAT-fs (loop1): Directory bread(block 70) failed [ 54.584036][ T5724] FAT-fs (loop1): Directory bread(block 71) failed [ 54.584070][ T5724] FAT-fs (loop1): Directory bread(block 72) failed [ 54.584088][ T5724] FAT-fs (loop1): Directory bread(block 73) failed [ 54.610512][ T5724] netlink: 'syz.1.245': attribute type 11 has an invalid length. [ 54.610549][ T5724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 54.635700][ T5728] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 54.664516][ T5728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.716107][ T5749] ip6gretap1: entered allmulticast mode [ 55.955353][ T5755] loop0: detected capacity change from 0 to 1024 [ 55.955725][ T5755] EXT4-fs: Ignoring removed bh option [ 55.966006][ T5755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.980753][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.284464][ T5775] siw: device registration error -23 [ 56.329165][ T5775] loop3: detected capacity change from 0 to 2048 [ 56.409056][ T5775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.010157][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.045052][ T5783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.048227][ T5783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.148903][ T5785] loop2: detected capacity change from 0 to 256 [ 57.197982][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.291060][ T5788] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.291097][ T5788] FAT-fs (loop2): Filesystem has been set read-only [ 57.291157][ T5788] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.291175][ T5788] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.299847][ T5788] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.299888][ T5788] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.300076][ T5788] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.300095][ T5788] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.541250][ T5807] binder: 5804:5807 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 57.541286][ T5807] binder: 5807 RLIMIT_NICE not set [ 57.602903][ T5807] binder: 5804:5807 ioctl c0306201 20000180 returned -14 [ 58.373731][ T5819] loop1: detected capacity change from 0 to 512 [ 58.374296][ T5819] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.409901][ T5819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.474054][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.659918][ T5836] loop4: detected capacity change from 0 to 4096 [ 58.662134][ T5836] EXT4-fs (loop4): Test dummy encryption mode enabled [ 58.713181][ T5845] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 58.713204][ T5845] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.713790][ T5845] vhci_hcd vhci_hcd.0: Device attached [ 58.725872][ T5845] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 58.755082][ T5845] loop0: detected capacity change from 0 to 8192 [ 58.764147][ T5845] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.804817][ T5844] team0: Port device team_slave_1 removed [ 58.826918][ T5853] netlink: 108 bytes leftover after parsing attributes in process `syz.2.281'. [ 58.999821][ T4688] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 59.461179][ T5847] vhci_hcd: connection reset by peer [ 59.464715][ T39] vhci_hcd vhci_hcd.0: stop threads [ 59.466207][ T39] vhci_hcd vhci_hcd.0: release socket [ 59.467757][ T39] vhci_hcd vhci_hcd.0: disconnect device [ 59.491144][ T5883] binder: 5882:5883 ioctl c0306201 200003c0 returned -14 [ 59.491326][ T5883] binder: 5882:5883 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 59.511688][ T5885] process 'syz.1.291' launched '/dev/fd/5' with NULL argv: empty string added [ 59.599409][ T5835] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 59.599519][ T5835] EXT4-fs error (device loop4): __ext4_new_inode:1079: comm syz.4.276: reserved inode found cleared - inode=18 [ 59.686126][ T5888] geneve2: entered promiscuous mode [ 59.786720][ T5894] 9p: Bad value for 'rfdno' [ 59.938503][ T5913] loop4: detected capacity change from 0 to 256 [ 59.942265][ T5913] vfat: Unknown parameter 'Ý*¾'v&sŸshortname' [ 60.014661][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.073214][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 60.472601][ T5938] loop2: detected capacity change from 0 to 512 [ 60.478367][ T5931] syzkaller0: entered promiscuous mode [ 60.479604][ T5931] syzkaller0: entered allmulticast mode [ 60.482266][ T5916] netlink: 88 bytes leftover after parsing attributes in process `syz.1.302'. [ 60.489894][ T5931] binder: 5930:5931 tried to acquire reference to desc 0, got 1 instead [ 60.494573][ T4839] binder: release 5930:5931 transaction 16 out, still active [ 60.494605][ T4839] binder: undelivered TRANSACTION_COMPLETE [ 60.611071][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.611258][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.040937][ T5950] lo speed is unknown, defaulting to 1000 [ 61.109755][ T4889] binder: send failed reply for transaction 16, target dead [ 61.131032][ T5959] loop0: detected capacity change from 0 to 512 [ 61.150750][ T5963] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 61.265167][ T5970] loop4: detected capacity change from 0 to 256 [ 61.393463][ T5970] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.037126][ T5973] loop3: detected capacity change from 0 to 256 [ 62.045083][ T5968] ªªªªªª: renamed from vlan0 (while UP) [ 62.068913][ T5973] FAT-fs (loop3): Directory bread(block 64) failed [ 62.068951][ T5973] FAT-fs (loop3): Directory bread(block 65) failed [ 62.069002][ T5973] FAT-fs (loop3): Directory bread(block 66) failed [ 62.069019][ T5973] FAT-fs (loop3): Directory bread(block 67) failed [ 62.069047][ T5973] FAT-fs (loop3): Directory bread(block 68) failed [ 62.069062][ T5973] FAT-fs (loop3): Directory bread(block 69) failed [ 62.069088][ T5973] FAT-fs (loop3): Directory bread(block 70) failed [ 62.069102][ T5973] FAT-fs (loop3): Directory bread(block 71) failed [ 62.069128][ T5973] FAT-fs (loop3): Directory bread(block 72) failed [ 62.069142][ T5973] FAT-fs (loop3): Directory bread(block 73) failed [ 62.211438][ T5973] syzkaller0: entered promiscuous mode [ 62.211481][ T5973] syzkaller0: entered allmulticast mode [ 62.256873][ T5983] loop4: detected capacity change from 0 to 2048 [ 62.516483][ T5983] EXT4-fs error (device loop4): empty_inline_dir:1778: inode #12: block 9: comm syz.4.324: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 62.522439][ T5983] EXT4-fs warning (device loop4): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 62.602332][ T5995] 9p: Bad value for 'rfdno' [ 62.716537][ T6007] loop4: detected capacity change from 0 to 512 [ 62.719242][ T6007] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.719267][ T6007] EXT4-fs (loop4): Invalid default hash set in the superblock [ 62.727151][ T6008] loop1: detected capacity change from 0 to 512 [ 62.728909][ T6008] EXT4-fs: Ignoring removed i_version option [ 62.728945][ T6008] EXT4-fs: Ignoring removed bh option [ 62.805922][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 62.945675][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 63.054186][ T6029] netlink: 'syz.4.339': attribute type 10 has an invalid length. [ 63.127402][ T6040] netlink: 'syz.4.339': attribute type 4 has an invalid length. [ 63.127437][ T6040] netlink: 156 bytes leftover after parsing attributes in process `syz.4.339'. [ 63.130732][ T6029] macvlan1: entered promiscuous mode [ 63.130746][ T6029] macvlan1: entered allmulticast mode [ 63.136337][ T6029] veth1_vlan: entered allmulticast mode [ 63.139210][ T6029] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 63.373958][ T6045] random: crng reseeded on system resumption [ 63.474525][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 63.947607][ T6047] netlink: 'syz.0.344': attribute type 10 has an invalid length. [ 63.975060][ T6048] netlink: 'syz.0.344': attribute type 10 has an invalid length. [ 63.975226][ T6047] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.995817][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 64.083074][ T4688] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 64.151722][ T6060] loop3: detected capacity change from 0 to 512 [ 64.164371][ T6060] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1796)! [ 64.164408][ T6060] EXT4-fs (loop3): group descriptors corrupted! [ 64.339066][ T6068] loop0: detected capacity change from 0 to 2048 [ 64.641949][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.642014][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.702369][ T6068] EXT4-fs mount: 8 callbacks suppressed [ 64.702424][ T6068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.765573][ T10] cfg80211: failed to load regulatory.db [ 65.019747][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 65.135776][ T6078] loop4: detected capacity change from 0 to 256 [ 65.238433][ T6082] lo speed is unknown, defaulting to 1000 [ 65.309239][ T6083] dlm: non-version read from control device 240 [ 65.595088][ T6078] FAT-fs (loop4): Directory bread(block 64) failed [ 65.596575][ T6078] FAT-fs (loop4): Directory bread(block 65) failed [ 65.598240][ T6078] FAT-fs (loop4): Directory bread(block 66) failed [ 65.599654][ T6078] FAT-fs (loop4): Directory bread(block 67) failed [ 65.601180][ T6078] FAT-fs (loop4): Directory bread(block 68) failed [ 65.602791][ T6078] FAT-fs (loop4): Directory bread(block 69) failed [ 65.602922][ T6078] FAT-fs (loop4): Directory bread(block 70) failed [ 65.602947][ T6078] FAT-fs (loop4): Directory bread(block 71) failed [ 65.602988][ T6078] FAT-fs (loop4): Directory bread(block 72) failed [ 65.603011][ T6078] FAT-fs (loop4): Directory bread(block 73) failed [ 65.679113][ T6078] syzkaller0: entered promiscuous mode [ 65.682550][ T6078] syzkaller0: entered allmulticast mode [ 65.691809][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.321845][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 66.324237][ T6098] loop3: detected capacity change from 0 to 512 [ 66.324587][ T6098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.324613][ T6098] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.324646][ T6098] ext4: Unknown parameter 'dont_measure' [ 66.329134][ T6098] overlay: Unknown parameter 'euid>00000000000000000000' [ 66.386504][ T6107] netlink: 112 bytes leftover after parsing attributes in process `syz.3.362'. [ 66.640168][ T6142] dlm: non-version read from control device 240 [ 66.748122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.010823][ T6159] loop1: detected capacity change from 0 to 256 [ 67.028670][ T6159] FAT-fs (loop1): Directory bread(block 64) failed [ 67.028709][ T6159] FAT-fs (loop1): Directory bread(block 65) failed [ 67.028741][ T6159] FAT-fs (loop1): Directory bread(block 66) failed [ 67.028754][ T6159] FAT-fs (loop1): Directory bread(block 67) failed [ 67.028778][ T6159] FAT-fs (loop1): Directory bread(block 68) failed [ 67.028789][ T6159] FAT-fs (loop1): Directory bread(block 69) failed [ 67.028839][ T6159] FAT-fs (loop1): Directory bread(block 70) failed [ 67.028850][ T6159] FAT-fs (loop1): Directory bread(block 71) failed [ 67.028872][ T6159] FAT-fs (loop1): Directory bread(block 72) failed [ 67.028883][ T6159] FAT-fs (loop1): Directory bread(block 73) failed [ 67.057691][ T6159] syzkaller0: entered promiscuous mode [ 67.057735][ T6159] syzkaller0: entered allmulticast mode [ 67.074637][ T6163] loop3: detected capacity change from 0 to 128 [ 67.075560][ T6163] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 67.110090][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 67.484407][ T6181] loop0: detected capacity change from 0 to 1024 [ 67.487552][ T6181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.510501][ T6181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.780232][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.889378][ T6206] loop2: detected capacity change from 0 to 2048 [ 67.920668][ T6206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.078052][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.142695][ T6219] loop3: detected capacity change from 0 to 1024 [ 69.147125][ T6219] EXT4-fs: Ignoring removed orlov option [ 69.152149][ T6219] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.167866][ T6219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.253063][ T6229] loop0: detected capacity change from 0 to 256 [ 69.263107][ T6229] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.166611][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'. [ 70.166653][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 70.294461][ T6219] overlay: ./file0/file0 is not a directory [ 70.315759][ T6253] loop2: detected capacity change from 0 to 512 [ 70.328812][ T6253] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.331690][ T6219] fuse: Unknown parameter 'illinois' [ 70.414754][ T6257] xt_connbytes: Forcing CT accounting to be enabled [ 70.589522][ T6253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 70.589601][ T6253] System zones: 1-12 [ 70.594872][ T6253] EXT4-fs (loop2): 1 truncate cleaned up [ 70.596666][ T6253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.624368][ T6261] loop4: detected capacity change from 0 to 128 [ 70.641471][ T6253] vivid-000: disconnect [ 70.641786][ T6252] vivid-000: reconnect [ 70.660343][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.661812][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.734610][ T6268] fuse: Bad value for 'fd' [ 70.937309][ T6276] loop3: detected capacity change from 0 to 256 [ 70.969933][ T6276] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.696458][ T6287] FAULT_INJECTION: forcing a failure. [ 71.696458][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 71.696501][ T6287] CPU: 1 UID: 0 PID: 6287 Comm: syz.0.400 Tainted: G L syzkaller #0 PREEMPT [ 71.696518][ T6287] Tainted: [L]=SOFTLOCKUP [ 71.696523][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 71.696529][ T6287] Call trace: [ 71.696532][ T6287] show_stack+0x2c/0x3c (C) [ 71.696550][ T6287] __dump_stack+0x30/0x40 [ 71.696561][ T6287] dump_stack_lvl+0xd8/0x12c [ 71.696571][ T6287] dump_stack+0x1c/0x28 [ 71.696580][ T6287] should_fail_ex+0x414/0x588 [ 71.696590][ T6287] should_failslab+0xc4/0x124 [ 71.696598][ T6287] kmem_cache_alloc_noprof+0x8c/0x610 [ 71.696607][ T6287] skb_clone+0x1a8/0x31c [ 71.696615][ T6287] __netlink_deliver_tap+0x36c/0x6f8 [ 71.696626][ T6287] netlink_deliver_tap+0x1d8/0x1dc [ 71.696641][ T6287] netlink_unicast+0x5e8/0x800 [ 71.696651][ T6287] netlink_sendmsg+0x63c/0x920 [ 71.696661][ T6287] __sock_sendmsg+0xc8/0x138 [ 71.696670][ T6287] ____sys_sendmsg+0x418/0x70c [ 71.696677][ T6287] ___sys_sendmsg+0x198/0x224 [ 71.696684][ T6287] __sys_sendmsg+0x160/0x214 [ 71.696690][ T6287] __arm64_sys_sendmsg+0x80/0x94 [ 71.696697][ T6287] invoke_syscall+0x98/0x244 [ 71.696707][ T6287] el0_svc_common+0xe8/0x23c [ 71.696716][ T6287] do_el0_svc+0x48/0x58 [ 71.696725][ T6287] el0_svc+0x64/0x260 [ 71.696733][ T6287] el0t_64_sync_handler+0x48/0x148 [ 71.696740][ T6287] el0t_64_sync+0x198/0x19c [ 71.696766][ T6287] netlink: 'syz.0.400': attribute type 39 has an invalid length. [ 71.750947][ T6288] loop1: detected capacity change from 0 to 128 [ 71.807010][ T6292] netlink: 'syz.4.397': attribute type 39 has an invalid length. [ 71.826845][ T6288] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.884882][ T4715] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.959183][ T6302] loop0: detected capacity change from 0 to 512 [ 71.961332][ T6302] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.000554][ T6302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 72.000655][ T6302] System zones: 1-12 [ 72.001402][ T6302] EXT4-fs (loop0): 1 truncate cleaned up [ 72.001862][ T6302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.027777][ T6302] vivid-000: disconnect [ 72.028915][ T6301] vivid-000: reconnect [ 72.040858][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.125585][ T6307] overlay: Bad value for 'redirect_dir' [ 72.901047][ T6337] loop1: detected capacity change from 0 to 2048 [ 72.927586][ T6337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.965677][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.069052][ T6349] lo speed is unknown, defaulting to 1000 [ 73.975810][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 74.125602][ T6359] syzkaller0: entered promiscuous mode [ 74.125652][ T6359] syzkaller0: entered allmulticast mode [ 74.249540][ T6365] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 74.249597][ T6365] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 74.249682][ T6365] veth1_virt_wifi: entered allmulticast mode [ 74.250494][ T6365] veth1_virt_wifi: left allmulticast mode [ 74.529237][ T6374] pimreg3: entered allmulticast mode [ 74.553281][ T6373] pimreg3: left allmulticast mode [ 74.601819][ T6381] loop0: detected capacity change from 0 to 512 [ 74.611329][ T6381] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.615027][ T6381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 74.616925][ T6381] System zones: 1-12 [ 74.620803][ T6381] EXT4-fs (loop0): 1 truncate cleaned up [ 74.628890][ T6381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.699182][ T6381] vivid-000: disconnect [ 74.700369][ T6380] vivid-000: reconnect [ 74.809665][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.847421][ T6403] loop3: detected capacity change from 0 to 128 [ 75.070565][ T6425] ucma_write: process 276 (syz.0.441) changed security contexts after opening file descriptor, this is not allowed. [ 75.126013][ T6435] loop0: detected capacity change from 0 to 512 [ 75.126663][ T6435] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.200431][ T6435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 75.200524][ T6435] System zones: 1-12 [ 75.207583][ T6435] EXT4-fs (loop0): 1 truncate cleaned up [ 75.208126][ T6435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.496648][ T6435] vivid-000: disconnect [ 75.499259][ T6434] vivid-000: reconnect [ 75.530128][ T6453] loop4: detected capacity change from 0 to 8192 [ 75.555762][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.558429][ T6453] loop4: AHDI p1 p2 p3 p4 [ 75.558529][ T6453] loop4: p1 size 67109119 extends beyond EOD, truncated [ 75.562682][ T6453] loop4: p3 start 1671679 is beyond EOD, truncated [ 75.564422][ T6453] loop4: p4 size 2147155716 extends beyond EOD, truncated [ 75.688528][ T6469] loop2: detected capacity change from 0 to 256 [ 75.704335][ T6469] FAT-fs (loop2): Directory bread(block 64) failed [ 75.704379][ T6469] FAT-fs (loop2): Directory bread(block 65) failed [ 75.704409][ T6469] FAT-fs (loop2): Directory bread(block 66) failed [ 75.704423][ T6469] FAT-fs (loop2): Directory bread(block 67) failed [ 75.704447][ T6469] FAT-fs (loop2): Directory bread(block 68) failed [ 75.704459][ T6469] FAT-fs (loop2): Directory bread(block 69) failed [ 75.704481][ T6469] FAT-fs (loop2): Directory bread(block 70) failed [ 75.704492][ T6469] FAT-fs (loop2): Directory bread(block 71) failed [ 75.704515][ T6469] FAT-fs (loop2): Directory bread(block 72) failed [ 75.704525][ T6469] FAT-fs (loop2): Directory bread(block 73) failed [ 75.722296][ T6469] syzkaller0: entered promiscuous mode [ 75.722330][ T6469] syzkaller0: entered allmulticast mode [ 75.790989][ T50] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 75.971554][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 75.976540][ T4696] udevd[4696]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 75.994368][ T50] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 76.019318][ T4901] udevd[4901]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.949266][ T6494] loop4: detected capacity change from 0 to 512 [ 76.960706][ T6494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.980958][ T6494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 76.981036][ T6494] System zones: 1-12 [ 76.984711][ T6494] EXT4-fs (loop4): 1 truncate cleaned up [ 76.985203][ T6494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.071799][ T6494] vivid-000: disconnect [ 77.073496][ T6493] vivid-000: reconnect [ 77.162033][ T6497] loop3: detected capacity change from 0 to 1024 [ 77.168116][ T50] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 77.176810][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.202329][ T6497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.210133][ T6504] loop4: detected capacity change from 0 to 512 [ 77.228063][ T6504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.241260][ T6504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 77.242803][ T6504] System zones: 1-12 [ 77.244324][ T6504] EXT4-fs (loop4): 1 truncate cleaned up [ 77.244802][ T6504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.306595][ T6509] binder: 6508:6509 ioctl c0306201 20000080 returned -14 [ 77.308738][ T6509] binder: 6508:6509 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 77.355303][ T6514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.464'. [ 77.430862][ T6522] vivid-000: disconnect [ 78.041973][ T6503] vivid-000: reconnect [ 78.228138][ T6532] loop1: detected capacity change from 0 to 256 [ 78.248135][ T6532] FAT-fs (loop1): Directory bread(block 64) failed [ 78.249676][ T6532] FAT-fs (loop1): Directory bread(block 65) failed [ 78.251830][ T6532] FAT-fs (loop1): Directory bread(block 66) failed [ 78.253690][ T6532] FAT-fs (loop1): Directory bread(block 67) failed [ 78.255534][ T6532] FAT-fs (loop1): Directory bread(block 68) failed [ 78.257818][ T6532] FAT-fs (loop1): Directory bread(block 69) failed [ 78.259799][ T6532] FAT-fs (loop1): Directory bread(block 70) failed [ 78.261364][ T6532] FAT-fs (loop1): Directory bread(block 71) failed [ 78.264005][ T6532] FAT-fs (loop1): Directory bread(block 72) failed [ 78.265459][ T6532] FAT-fs (loop1): Directory bread(block 73) failed [ 78.319977][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.417301][ T6535] macvlan1: entered promiscuous mode [ 78.433757][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.439146][ T6541] 9pnet_fd: p9_fd_create_unix (6541): problem connecting socket: ./file0/file0: -2 [ 78.440680][ T6539] loop3: detected capacity change from 0 to 512 [ 78.446246][ T6535] macvlan1: left promiscuous mode [ 78.448507][ T6539] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.463447][ T6538] loop1: detected capacity change from 0 to 2048 [ 78.463799][ T6538] EXT4-fs: Ignoring removed orlov option [ 78.463819][ T6538] EXT4-fs: Ignoring removed orlov option [ 78.465943][ T6539] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 78.465986][ T6539] System zones: 0-2, 18-18, 34-34 [ 78.467159][ T6539] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.473: bad orphan inode 15 [ 78.467180][ T6539] loop3: lost filesystem error report for type 5 error -117 [ 78.467404][ T6539] ext4_test_bit(bit=14, block=18) = 1 [ 78.467413][ T6539] is_bad_inode(inode)=0 [ 78.467419][ T6539] NEXT_ORPHAN(inode)=2264924160 [ 78.467424][ T6539] max_ino=32 [ 78.467428][ T6539] i_nlink=0 [ 78.472570][ T6539] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.473: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 78.472606][ T6539] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.473556][ T6539] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 78.474364][ T6539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.479651][ T6538] EXT4-fs: Mount option(s) incompatible with ext3 [ 78.500400][ T6544] loop4: detected capacity change from 0 to 128 [ 78.504069][ T50] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 78.528081][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.528265][ T6538] loop1: detected capacity change from 0 to 512 [ 78.577613][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.936867][ T6565] netlink: 'syz.0.484': attribute type 32 has an invalid length. [ 78.938666][ T6565] netlink: 'syz.0.484': attribute type 11 has an invalid length. [ 79.038388][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.038594][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.169998][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 79.490951][ T6586] loop2: detected capacity change from 0 to 512 [ 79.492496][ T6586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.495590][ T6586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 79.497407][ T6586] System zones: 1-12 [ 79.521395][ T6586] EXT4-fs (loop2): 1 truncate cleaned up [ 79.521911][ T6586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.616705][ T6590] loop4: detected capacity change from 0 to 512 [ 79.717988][ T6593] loop3: detected capacity change from 0 to 1024 [ 79.724699][ T6593] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.733798][ T6593] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 79.734292][ T6593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.735335][ T6593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.795275][ T6598] vivid-000: disconnect [ 79.900610][ T6602] loop4: detected capacity change from 0 to 512 [ 79.909991][ T6602] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.936446][ T6602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 79.938314][ T6602] System zones: 1-12 [ 79.941098][ T6602] EXT4-fs (loop4): 1 truncate cleaned up [ 79.973130][ T6602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.183808][ T6609] loop3: detected capacity change from 0 to 128 [ 80.240670][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.247269][ T6611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.337736][ T6585] vivid-000: reconnect [ 80.696289][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.734186][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.954870][ T6631] Injecting memory failure for pfn 0x124dff at process virtual address 0x20162000 [ 81.010268][ T6624] ext4: Unknown parameter 'audit' [ 81.144470][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.518498][ T6631] Memory failure: 0x124dff: recovery action for clean LRU page: Recovered [ 81.518536][ T6631] Injecting memory failure for pfn 0x1458d8 at process virtual address 0x20163000 [ 81.526231][ T6631] Memory failure: 0x1458d8: recovery action for clean LRU page: Recovered [ 81.526275][ T6631] Injecting memory failure for pfn 0x1458d9 at process virtual address 0x20164000 [ 81.526356][ T6631] Memory failure: 0x1458d9: recovery action for clean LRU page: Recovered [ 81.650882][ T6651] binder: 6650:6651 ioctl c0306201 20000080 returned -14 [ 81.651543][ T6651] binder: 6650:6651 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 81.692759][ T6657] xt_hashlimit: size too large, truncated to 1048576 [ 81.697553][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.697772][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.709020][ T868] bridge0: entered promiscuous mode [ 81.975362][ T6644] vfat: Unknown parameter 'uni^xlate' [ 82.394534][ T6683] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 82.394673][ T6684] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 82.608768][ T6698] binder: 6697:6698 ioctl c0306201 20000080 returned -14 [ 82.611867][ T6698] binder: BINDER_SET_CONTEXT_MGR already set [ 82.611890][ T6698] binder: 6697:6698 ioctl 4018620d 20000040 returned -16 [ 82.611986][ T6698] binder: 6697:6698 ioctl c0306201 200003c0 returned -14 [ 82.612105][ T6698] binder: 6697:6698 ioctl c0306201 0 returned -14 [ 82.689997][ T6699] Injecting memory failure for pfn 0x124285 at process virtual address 0x204d4000 [ 82.849520][ T6699] Memory failure: 0x124285: recovery action for clean LRU page: Recovered [ 82.974844][ T6709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.007189][ T6714] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.148070][ T1222] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 83.151878][ T1222] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 83.155123][ T1222] EXT4-fs (loop1): This should not happen!! Data will be lost [ 83.155123][ T1222] [ 83.157244][ T1222] EXT4-fs (loop1): Total free blocks count 0 [ 83.158633][ T1222] EXT4-fs (loop1): Free/Dirty block details [ 83.160057][ T1222] EXT4-fs (loop1): free_blocks=66060288 [ 83.161368][ T1222] EXT4-fs (loop1): dirty_blocks=7456 [ 83.162585][ T1222] EXT4-fs (loop1): Block reservation details [ 83.164102][ T1222] EXT4-fs (loop1): i_reserved_data_blocks=466 [ 83.180023][ T39] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 83.245777][ T4715] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 83.441744][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 83.533855][ T6731] set_capacity_and_notify: 4 callbacks suppressed [ 83.536072][ T6731] loop1: detected capacity change from 0 to 512 [ 83.548101][ T6731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.565475][ T6731] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.524: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 83.569792][ T6731] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 83.838778][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.965680][ T6741] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 83.980339][ T6741] loop1: detected capacity change from 0 to 512 [ 84.010863][ T6747] loop4: detected capacity change from 0 to 4096 [ 84.011262][ T6747] EXT4-fs: Ignoring removed orlov option [ 84.035399][ T6747] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.053422][ T6747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.091808][ T6747] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 84.525406][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.547886][ T6765] loop0: detected capacity change from 0 to 1024 [ 84.550738][ T6765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.594531][ T6765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.038209][ T6762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.038344][ T6762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.038409][ T6762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.038462][ T6762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.038521][ T6762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 85.040416][ T6772] loop1: detected capacity change from 0 to 8 [ 85.082326][ T6772] SQUASHFS error: Failed to read block 0x657: -5 [ 85.082355][ T6772] SQUASHFS error: Unable to read metadata cache entry [655] [ 85.082377][ T6772] SQUASHFS error: Unable to read directory block [260685:0] [ 85.089268][ T6772] netlink: 'syz.1.539': attribute type 4 has an invalid length. [ 85.439345][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.354422][ T6812] loop4: detected capacity change from 0 to 256 [ 86.442705][ T4712] Bluetooth: hci0: command 0x041b tx timeout [ 86.567951][ T6825] loop1: detected capacity change from 0 to 512 [ 86.581498][ T6825] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 86.589508][ T6825] EXT4-fs (loop1): invalid journal inode [ 86.590738][ T6825] EXT4-fs (loop1): can't get journal size [ 86.595015][ T6829] block nbd0: not configured, cannot reconfigure [ 86.597151][ T6825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 86.599408][ T6825] System zones: 1-12, 13-13 [ 86.604372][ T6825] EXT4-fs (loop1): 1 truncate cleaned up [ 86.608811][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.619537][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 86.708146][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.133071][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 87.134108][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 87.134207][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 87.134274][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 87.829907][ T6872] input: syz0 as /devices/virtual/input/input4 [ 87.876715][ T6872] rdma_op 00000000ef0ab03e conn xmit_rdma 0000000000000000 [ 87.880384][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'. [ 88.164294][ T4839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.545895][ T4839] usb 1-1: device descriptor read/64, error -71 [ 89.078053][ T4839] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.229193][ T4712] Bluetooth: hci4: command 0x040f tx timeout [ 89.912938][ T4839] usb 1-1: device descriptor read/64, error -71 [ 90.024248][ T4839] usb usb1-port1: attempt power cycle [ 90.432917][ T4839] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.522552][ T4712] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 90.712093][ T4839] usb 1-1: device descriptor read/8, error -71 [ 90.740036][ T6933] veth0_to_bond: entered allmulticast mode [ 90.943637][ T4839] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.153913][ T4839] usb 1-1: device not accepting address 5, error -71 [ 91.231339][ T6950] ubi0: attaching mtd0 [ 91.241168][ T6950] ubi0: scanning is finished [ 91.241260][ T6950] ubi0: empty MTD device detected [ 91.447839][ T4839] usb usb1-port1: unable to enumerate USB device [ 91.567195][ T6950] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 91.567238][ T6950] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 91.567252][ T6950] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 91.567259][ T6950] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 91.567267][ T6950] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 91.567274][ T6950] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 91.567281][ T6950] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 866872909 [ 91.567289][ T6950] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 91.567663][ T6957] ubi0: background thread "ubi_bgt0d" started, PID 6957 [ 91.598933][ T6953] futex_wake_op: syz.2.591 tries to shift op by 32; fix this program [ 91.638987][ T6959] loop1: detected capacity change from 0 to 512 [ 91.658322][ T6962] loop2: detected capacity change from 0 to 128 [ 91.661946][ T6959] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.734348][ T6959] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 91.734406][ T6959] EXT4-fs: failed to create workqueue [ 91.734427][ T6959] EXT4-fs (loop1): mount failed [ 91.778836][ T6969] lo speed is unknown, defaulting to 1000 [ 92.013822][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 94.139123][ T6982] loop2: detected capacity change from 0 to 2048 [ 94.234262][ T6989] loop1: detected capacity change from 0 to 512 [ 94.239145][ T6990] loop0: detected capacity change from 0 to 512 [ 94.241196][ T6982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.248211][ T6990] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.263682][ T6989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.269407][ T6990] EXT4-fs (loop0): 1 truncate cleaned up [ 94.272471][ T6990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.304527][ T6989] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 94.314195][ T6989] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 94.316817][ T6989] EXT4-fs (loop1): This should not happen!! Data will be lost [ 94.316817][ T6989] [ 94.319037][ T6989] EXT4-fs (loop1): Total free blocks count 0 [ 94.320428][ T6989] EXT4-fs (loop1): Free/Dirty block details [ 94.321814][ T6989] EXT4-fs (loop1): free_blocks=65280 [ 94.323202][ T6989] EXT4-fs (loop1): dirty_blocks=33 [ 94.324409][ T6989] EXT4-fs (loop1): Block reservation details [ 94.325814][ T6989] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 94.331981][ T6998] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 94.399303][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.420169][ T4715] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 94.461721][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.467038][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.468846][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.577153][ T7011] lo speed is unknown, defaulting to 1000 [ 94.717491][ T7018] loop4: detected capacity change from 0 to 256 [ 94.765672][ T7018] FAT-fs (loop4): Directory bread(block 64) failed [ 94.765703][ T7018] FAT-fs (loop4): Directory bread(block 65) failed [ 94.765739][ T7018] FAT-fs (loop4): Directory bread(block 66) failed [ 94.765754][ T7018] FAT-fs (loop4): Directory bread(block 67) failed [ 94.765780][ T7018] FAT-fs (loop4): Directory bread(block 68) failed [ 94.765795][ T7018] FAT-fs (loop4): Directory bread(block 69) failed [ 94.765820][ T7018] FAT-fs (loop4): Directory bread(block 70) failed [ 94.765834][ T7018] FAT-fs (loop4): Directory bread(block 71) failed [ 94.765859][ T7018] FAT-fs (loop4): Directory bread(block 72) failed [ 94.765872][ T7018] FAT-fs (loop4): Directory bread(block 73) failed [ 94.837925][ T96] kworker/u8:4: attempt to access beyond end of device [ 94.837925][ T96] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 94.883917][ T7023] loop3: detected capacity change from 0 to 512 [ 94.884288][ T7023] EXT4-fs: Ignoring removed bh option [ 94.884301][ T7023] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.890272][ T7025] loop4: detected capacity change from 0 to 128 [ 94.915173][ T7023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.066271][ T7032] loop2: detected capacity change from 0 to 1024 [ 95.071345][ T7032] EXT4-fs: Ignoring removed bh option [ 95.107072][ T7032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.184326][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.202102][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.318479][ T7041] loop3: detected capacity change from 0 to 2048 [ 95.366984][ T7041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.483639][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.866243][ T7072] input: syz0 as /devices/virtual/input/input6 [ 97.203198][ T7083] dlm: non-version read from control device 240 [ 97.232479][ T868] kernel read not supported for file /vga_arbiter (pid: 868 comm: kworker/1:2) [ 97.371032][ T7093] Injecting memory failure for pfn 0x1201c4 at process virtual address 0x204d4000 [ 97.545643][ T7093] Memory failure: 0x1201c4: recovery action for clean LRU page: Recovered [ 97.681868][ T7102] syz_tun: entered allmulticast mode [ 97.964878][ T7107] syzkaller1: entered promiscuous mode [ 97.966297][ T7107] syzkaller1: entered allmulticast mode [ 97.968666][ T7107] netlink: 48 bytes leftover after parsing attributes in process `syz.4.630'. [ 98.095637][ T7112] loop2: detected capacity change from 0 to 256 [ 98.123631][ T7112] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.952082][ T7084] syz_tun: left allmulticast mode [ 99.035420][ T7116] macsec0: entered promiscuous mode [ 99.035562][ T7116] macsec0: entered allmulticast mode [ 99.035569][ T7116] veth1_macvtap: entered allmulticast mode [ 99.256086][ T7121] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 99.256126][ T7121] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 99.371135][ T7139] loop4: detected capacity change from 0 to 512 [ 99.374685][ T7139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.379437][ T7139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 99.379494][ T7139] System zones: 1-12 [ 99.384356][ T7139] EXT4-fs (loop4): 1 truncate cleaned up [ 99.388562][ T7139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.440007][ T7129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.624842][ T7149] vivid-000: disconnect [ 100.285679][ T7137] vivid-000: reconnect [ 100.627147][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.729381][ T7169] loop2: detected capacity change from 0 to 512 [ 101.737888][ T7169] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.741406][ T7169] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.749118][ T7169] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.647: Allocating blocks 41-42 which overlap fs metadata [ 101.752561][ T7169] loop2: lost filesystem error report for type 5 error -117 [ 101.757052][ T7169] Quota error (device loop2): write_blk: dquota write failed [ 101.760420][ T7169] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 101.760462][ T7169] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.647: Failed to acquire dquot type 0 [ 101.760485][ T7169] loop2: lost filesystem error report for type 5 error -117 [ 101.764779][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 101.764793][ C1] EXT4-fs (loop2): initial error at time 357: ext4_mb_mark_diskspace_used:4222 [ 101.764805][ C1] EXT4-fs (loop2): last error at time 357: ext4_acquire_dquot:7034 [ 101.772037][ T7169] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.866316][ T7169] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.647: corrupted inode contents [ 101.866357][ T7169] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 101.870498][ T7169] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.647: mark_inode_dirty error [ 101.870537][ T7169] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 101.871304][ T7169] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.647: corrupted inode contents [ 101.871330][ T7169] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 101.876823][ T7169] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.647: mark_inode_dirty error [ 101.876864][ T7169] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 101.879995][ T7169] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.647: corrupted inode contents [ 101.880049][ T7169] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 101.880981][ T7169] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 101.881011][ T7169] loop2: lost filesystem error report for type 5 error -117 [ 101.881116][ T7169] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.647: corrupted inode contents [ 101.881137][ T7169] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 101.881224][ T7169] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.647: mark_inode_dirty error [ 101.881243][ T7169] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 101.881323][ T7169] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 101.881336][ T7169] loop2: lost filesystem error report for type 5 error -117 [ 101.881507][ T7169] EXT4-fs (loop2): 1 truncate cleaned up [ 101.881585][ T7169] EXT4-fs (loop2): pa 000000001c00b848: logic 1, phys. 41, len 23 [ 101.881600][ T7169] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 101.882553][ T7169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.899164][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.912354][ T7186] tipc: Started in network mode [ 101.912383][ T7186] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 101.912728][ T7186] tipc: Enabled bearer , priority 0 [ 102.256000][ T4712] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 102.321744][ T7191] loop0: detected capacity change from 0 to 256 [ 102.330946][ T7191] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.765632][ T7197] loop3: detected capacity change from 0 to 4096 [ 102.799300][ T7197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.827280][ T7207] loop1: detected capacity change from 0 to 512 [ 102.839574][ T7207] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.918767][ T7207] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 102.918841][ T7207] System zones: 1-12 [ 102.920358][ T7207] EXT4-fs (loop1): 1 truncate cleaned up [ 102.920837][ T7207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.116350][ T4712] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 103.118915][ T4839] tipc: Node number set to 9611946 [ 103.368283][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.386503][ T7214] input: syz0 as /devices/virtual/input/input7 [ 103.404544][ T7219] xt_hashlimit: max too large, truncated to 1048576 [ 103.420926][ T7219] xt_bpf: check failed: parse error [ 103.425187][ T7212] vivid-000: disconnect [ 103.543539][ T4712] Bluetooth: hci3: Malformed Event: 0x02 [ 103.654835][ T7206] vivid-000: reconnect [ 103.690086][ T7231] dlm: non-version read from control device 240 [ 103.791380][ T7243] loop3: detected capacity change from 0 to 1024 [ 103.807361][ T7243] EXT4-fs: Ignoring removed bh option [ 103.870602][ T7245] Injecting memory failure for pfn 0x140e84 at process virtual address 0x204d4000 [ 103.955040][ T7243] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 104.059679][ T7245] Memory failure: 0x140e84: recovery action for clean LRU page: Recovered [ 104.084362][ T7243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.103061][ T4839] kernel read not supported for file / (pid: 4839 comm: kworker/0:6) [ 104.126133][ T7243] overlay: filesystem on ./bus not supported as upperdir [ 104.132764][ T7243] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.666: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 104.143346][ T7243] EXT4-fs (loop3): Remounting filesystem read-only [ 104.169072][ T7243] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 104.209542][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.106576][ T7259] Injecting memory failure for pfn 0x1241a2 at process virtual address 0x20000000 [ 105.107542][ T7259] Memory failure: 0x1241a2: Sending SIGBUS to syz.4.670:7259 due to hardware memory corruption [ 105.107603][ T7259] Memory failure: 0x1241a2: recovery action for dirty LRU page: Recovered [ 105.107622][ T7259] Injecting memory failure for pfn 0x13813d at process virtual address 0x20001000 [ 105.179120][ T7259] Memory failure: 0x13813d: Unknown page state [ 105.179165][ T7259] Memory failure: 0x13813d: recovery action for unknown page: Ignored [ 106.183752][ T7294] netlink: 'syz.3.680': attribute type 29 has an invalid length. [ 106.184190][ T7294] netlink: 'syz.3.680': attribute type 29 has an invalid length. [ 106.185176][ T7294] netlink: 'syz.3.680': attribute type 29 has an invalid length. [ 106.268503][ T7298] netlink: 'syz.3.684': attribute type 29 has an invalid length. [ 106.272571][ T7298] netlink: 'syz.3.684': attribute type 29 has an invalid length. [ 106.339593][ T7300] netlink: 'syz.3.685': attribute type 29 has an invalid length. [ 106.340056][ T7300] netlink: 'syz.3.685': attribute type 29 has an invalid length. [ 106.403218][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.587595][ T7326] netlink: 'syz.1.698': attribute type 29 has an invalid length. [ 106.602643][ T7326] netlink: 'syz.1.698': attribute type 29 has an invalid length. [ 106.642008][ T7330] wlan1 speed is unknown, defaulting to 1000 [ 106.642061][ T7330] wlan1 speed is unknown, defaulting to 1000 [ 106.642284][ T7330] wlan1 speed is unknown, defaulting to 1000 [ 106.655790][ T7330] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 106.677040][ T7330] wlan1 speed is unknown, defaulting to 1000 [ 106.683301][ T7330] wlan1 speed is unknown, defaulting to 1000 [ 106.683680][ T7330] wlan1 speed is unknown, defaulting to 1000 [ 106.684007][ T7330] wlan1 speed is unknown, defaulting to 1000 [ 106.685937][ T7330] wlan1 speed is unknown, defaulting to 1000 [ 106.884342][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 106.884409][ T7352] netlink: 'syz.2.711': attribute type 2 has an invalid length. [ 106.884419][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 106.988842][ T7362] Illegal XDP return value 4294967274 on prog (id 75) dev N/A, expect packet loss! [ 107.058202][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.723'. [ 107.058244][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 107.061741][ T7376] ip6tnl1: entered allmulticast mode [ 108.295295][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 110.188910][ T7400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.246905][ T7470] bridge0: port 3(vlan2) entered blocking state [ 110.248786][ T7470] bridge0: port 3(vlan2) entered disabled state [ 110.252363][ T7470] vlan2: entered allmulticast mode [ 110.252395][ T7470] geneve0: entered allmulticast mode [ 110.257036][ T7470] vlan2: entered promiscuous mode [ 110.257064][ T7470] geneve0: entered promiscuous mode [ 110.491280][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 110.496263][ T7514] netlink: set zone limit has 8 unknown bytes [ 110.784499][ T7568] netlink: 324 bytes leftover after parsing attributes in process `syz.0.801'. [ 110.786199][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 110.834110][ T7570] syzkaller0: entered promiscuous mode [ 110.835275][ T7570] syzkaller0: entered allmulticast mode [ 110.929697][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 110.929735][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 110.963198][ T7578] team0 (unregistering): Port device team_slave_0 removed [ 111.196078][ T7602] xt_CT: No such helper "snmp" [ 111.210973][ T4814] IPVS: starting estimator thread 0... [ 111.293900][ T7606] IPVS: using max 59 ests per chain, 141600 per kthread [ 112.755120][ T7683] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 112.761570][ T7683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.768646][ T7683] bond1: (slave dummy0): making interface the new active one [ 112.770159][ T7683] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 114.292473][ T7615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.365435][ T7705] __nla_validate_parse: 1 callbacks suppressed [ 114.366880][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.850'. [ 114.439918][ T7717] syzkaller0: entered promiscuous mode [ 114.439954][ T7717] syzkaller0: entered allmulticast mode [ 114.557134][ T7736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.866'. [ 114.647173][ T7750] netlink: 76 bytes leftover after parsing attributes in process `syz.0.871'. [ 114.649801][ T7752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.873'. [ 114.729465][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'. [ 114.757011][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 114.783660][ T7771] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 114.875829][ T7783] syzkaller0: entered promiscuous mode [ 114.877755][ T7783] syzkaller0: entered allmulticast mode [ 114.890726][ T7790] syzkaller0: entered promiscuous mode [ 114.891972][ T7790] syzkaller0: entered allmulticast mode [ 114.915569][ T7790] tipc: Enabled bearer , priority 0 [ 114.919896][ T7790] tipc: Resetting bearer [ 114.922347][ T7789] tipc: Resetting bearer [ 114.928723][ T7789] tipc: Disabling bearer [ 115.086730][ T7824] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 115.145688][ T7831] vlan2: entered promiscuous mode [ 115.145719][ T7831] bridge0: entered promiscuous mode [ 115.300150][ T7862] lo speed is unknown, defaulting to 1000 [ 115.300528][ T7862] wlan1 speed is unknown, defaulting to 1000 [ 115.303962][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.901'. [ 115.388834][ T7882] syzkaller1: entered promiscuous mode [ 115.388872][ T7882] syzkaller1: entered allmulticast mode [ 115.436861][ T7887] xt_hashlimit: size too large, truncated to 1048576 [ 115.617856][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 115.617903][ T7919] netlink: zone id is out of range [ 115.621592][ T4814] IPVS: starting estimator thread 0... [ 115.688937][ T7929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.915'. [ 115.717443][ T7922] IPVS: using max 59 ests per chain, 141600 per kthread [ 115.880197][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 116.099975][ T4394] veth0_vlan: left promiscuous mode [ 116.116755][ T4394] veth0_vlan: entered promiscuous mode [ 116.208022][ T8002] syzkaller0: entered promiscuous mode [ 116.208079][ T8002] syzkaller0: entered allmulticast mode [ 116.209727][ T8002] Bluetooth: MGMT ver 1.23 [ 116.276769][ T8006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.310813][ T8017] syzkaller1: entered promiscuous mode [ 116.312132][ T8017] syzkaller1: entered allmulticast mode [ 116.367766][ T8022] syzkaller0: entered promiscuous mode [ 116.367812][ T8022] syzkaller0: entered allmulticast mode [ 116.406118][ T8006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.481382][ T8006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.567168][ T8006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.680874][ T96] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.680936][ T96] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.686325][ T96] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.691665][ T96] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.758524][ T8060] syzkaller0: entered promiscuous mode [ 116.765446][ T8060] syzkaller0: entered allmulticast mode [ 117.630920][ T8142] syzkaller0: entered promiscuous mode [ 117.630955][ T8142] syzkaller0: entered allmulticast mode [ 117.919139][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.920009][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.147754][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.153820][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.178150][ T8170] veth0_vlan: left promiscuous mode [ 118.214598][ T8170] veth1_vlan: left allmulticast mode [ 118.422130][ T4814] lo speed is unknown, defaulting to 1000 [ 118.424268][ T4814] syz2: Port: 1 Link DOWN [ 118.430476][ T8183] syzkaller0: entered promiscuous mode [ 118.430516][ T8183] syzkaller0: entered allmulticast mode [ 118.436663][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.436728][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.436751][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.436771][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.506887][ T8206] syzkaller1: entered promiscuous mode [ 118.506926][ T8206] syzkaller1: entered allmulticast mode [ 118.587395][ T8223] netlink: zone id is out of range [ 118.591483][ T8221] syzkaller0: entered promiscuous mode [ 118.592168][ T8221] syzkaller0: entered allmulticast mode [ 118.824445][ T8267] netlink: zone id is out of range [ 118.826790][ T4816] IPVS: starting estimator thread 0... [ 118.887764][ T8277] syzkaller1: entered promiscuous mode [ 118.888964][ T8277] syzkaller1: entered allmulticast mode [ 118.892803][ T8279] netlink: 'syz.1.1040': attribute type 29 has an invalid length. [ 118.906724][ T8281] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 118.923296][ T8279] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 118.933027][ T8269] IPVS: using max 59 ests per chain, 141600 per kthread [ 118.943244][ T8281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.970411][ T8284] syzkaller0: entered promiscuous mode [ 118.977282][ T8284] syzkaller0: entered allmulticast mode [ 118.987794][ T8281] macvlan2: entered promiscuous mode [ 118.987836][ T8281] macvlan2: entered allmulticast mode [ 119.470047][ T8290] __nla_validate_parse: 8 callbacks suppressed [ 119.470084][ T8290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1044'. [ 119.478877][ T8299] netlink: 'syz.4.1047': attribute type 3 has an invalid length. [ 119.484331][ T8299] rdma_op 0000000061f8a6a3 conn xmit_rdma 0000000000000000 [ 119.526927][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 119.526972][ T8304] netlink: zone id is out of range [ 119.593831][ T8313] netlink: 'syz.4.1054': attribute type 4 has an invalid length. [ 119.634669][ T8321] tipc: Started in network mode [ 119.634714][ T8321] tipc: Node identity 8e949d84a101, cluster identity 4711 [ 119.634812][ T8321] tipc: Enabled bearer , priority 0 [ 119.846968][ T8346] TCP: TCP_TX_DELAY enabled [ 119.929839][ T8354] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 119.934718][ T8354] bond2 (unregistering): Released all slaves [ 119.975483][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1073'. [ 120.479868][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1076'. [ 120.615263][ T8378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1084'. [ 120.615936][ T8378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1084'. [ 120.633275][ T10] tipc: Node number set to 798334340 [ 120.767229][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 120.767269][ T8397] netlink: zone id is out of range [ 120.769555][ T4839] IPVS: starting estimator thread 0... [ 120.773249][ T8401] tipc: Enabling of bearer rejected, already enabled [ 120.804079][ T8406] syzkaller1: entered promiscuous mode [ 120.805385][ T8406] syzkaller1: entered allmulticast mode [ 120.852374][ T8410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1093'. [ 120.857202][ T8415] tipc: Started in network mode [ 120.858164][ T8415] tipc: Node identity 029d35e16e2d, cluster identity 4711 [ 120.859674][ T8415] tipc: Enabled bearer , priority 0 [ 120.862983][ T8403] IPVS: using max 59 ests per chain, 141600 per kthread [ 120.867603][ T8415] tipc: Resetting bearer [ 120.936437][ T8424] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1099'. [ 121.026349][ T8433] tipc: Enabling of bearer rejected, already enabled [ 121.050698][ T8442] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1109'. [ 121.111240][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.111460][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.132574][ T8458] vlan3: entered promiscuous mode [ 121.134712][ T8458] bridge0: entered promiscuous mode [ 121.190387][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.190579][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.198843][ T8468] tipc: Enabling of bearer rejected, already enabled [ 121.300707][ T8483] bridge_slave_0: left allmulticast mode [ 121.301992][ T8483] bridge_slave_0: left promiscuous mode [ 121.303448][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.307321][ T8483] bridge_slave_1: left allmulticast mode [ 121.310657][ T8483] bridge_slave_1: left promiscuous mode [ 121.311844][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.313856][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.314023][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.317905][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.318892][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.557593][ T8483] bond0: (slave bond_slave_0): Releasing backup interface [ 121.576721][ T8483] bond0: (slave bond_slave_1): Releasing backup interface [ 121.621058][ T8483] team0: Port device team_slave_0 removed [ 121.621403][ T8483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.621414][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.629097][ T8483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.629125][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.631268][ T8483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.637623][ T8487] team0: Port device xfrm0 added [ 121.643930][ T8488] tipc: Enabled bearer , priority 0 [ 121.818512][ T8502] binder: 8501:8502 tried to acquire reference to desc 0, got 1 instead [ 121.818687][ T8502] binder: 8501:8502 BC_INCREFS_DONE u0000000000000003 no match [ 121.818699][ T8502] binder: 8501:8502 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 121.837058][ T8505] fuse: Unknown parameter '00000000000000000003' [ 121.838981][ T8506] syzkaller0: Caught tx_queue_len zero misconfig [ 121.893264][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.893476][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.175376][ T8532] can0: slcan on ttyS3. [ 122.686703][ T4794] tipc: Node number set to 1823487457 [ 122.823922][ T8520] can0 (unregistered): slcan off ttyS3. [ 123.014257][ T8568] syzkaller1: entered promiscuous mode [ 123.014291][ T8568] syzkaller1: entered allmulticast mode [ 123.142956][ T1465] wlan1: Trigger new scan to find an IBSS to join [ 124.575110][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.578199][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.014899][ T8644] __nla_validate_parse: 6 callbacks suppressed [ 125.014934][ T8644] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1186'. [ 125.015989][ T8644] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1186'. [ 125.349181][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 125.365519][ T8663] vlan0: entered promiscuous mode [ 125.365557][ T8663] hsr0: entered promiscuous mode [ 125.365723][ T8663] vlan0: entered allmulticast mode [ 125.365738][ T8663] hsr0: entered allmulticast mode [ 125.365752][ T8663] hsr_slave_0: entered allmulticast mode [ 125.365766][ T8663] hsr_slave_1: entered allmulticast mode [ 125.372249][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 125.725043][ T8680] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 125.729073][ T8680] bond2 (unregistering): Released all slaves [ 125.936070][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.936122][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.053443][ T39] wlan1: Trigger new scan to find an IBSS to join [ 127.419788][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 127.437199][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 127.444658][ T8778] ip6gretap0: entered promiscuous mode [ 127.445900][ T8778] macvtap1: entered promiscuous mode [ 132.717279][ C0] sched: DL replenish lagged too much [ 156.703812][ T3811] wlan1: Trigger new scan to find an IBSS to join [ 161.777511][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.795261][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.804182][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.913611][ T12] wlan1: Creating new IBSS network, BSSID 62:85:73:35:88:92 [ 241.134798][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 47s! [ 241.134893][ C0] Showing busy workqueues and worker pools: [ 241.134902][ C0] workqueue events: flags=0x100 [ 241.134947][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 241.134965][ C0] in-flight: 1044:drm_fb_helper_damage_work for 0s [ 241.134988][ C0] pending: 3*nsim_dev_hwstats_traffic_work [ 241.135008][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=12 refcnt=13 [ 241.135026][ C0] pending: 2*nsim_dev_hwstats_traffic_work, 2*destroy_super_work, psi_avgs_work, free_obj_work, ovs_dp_masks_rebalance, 3*psi_avgs_work, destroy_super_work, psi_avgs_work [ 241.135097][ C0] workqueue events_long: flags=0x100 [ 241.135105][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 241.135121][ C0] pending: 3*defense_work_handler [ 241.135135][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 241.135150][ C0] pending: 3*defense_work_handler [ 241.135163][ C0] workqueue events_unbound: flags=0x2 [ 241.135171][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=7 refcnt=8 [ 241.135186][ C0] in-flight: 263:linkwatch_event for 8s ,8814:nsim_dev_trap_report_work for 0s ,7908:nsim_dev_trap_report_work for 3s [ 241.135231][ C0] pending: 3*nsim_dev_trap_report_work, toggle_allocation_gate [ 241.135251][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=8 refcnt=9 [ 241.135265][ C0] in-flight: 5809:cfg80211_wiphy_work for 90s cfg80211_wiphy_work ,40:cfg80211_wiphy_work for 108s cfg80211_wiphy_work ,15:cfg80211_wiphy_work for 107s cfg80211_wiphy_work ,1465:cfg80211_wiphy_work for 110s cfg80211_wiphy_work [ 241.135353][ C0] workqueue events_power_efficient: flags=0x182 [ 241.135361][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 241.135375][ C0] in-flight: 3811:gc_worker for 8s ,8812:neigh_periodic_work for 31s [ 241.135403][ C0] pending: fb_flashcursor [ 241.135417][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 241.135430][ C0] in-flight: 4996:reg_check_chans_work for 77s [ 241.135451][ C0] workqueue events_freezable_pwr_efficient: flags=0x186 [ 241.135459][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 241.135472][ C0] in-flight: 12:sync_hw_clock for 3s [ 241.135494][ C0] workqueue mm_percpu_wq: flags=0x108 [ 241.135503][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 241.135519][ C0] pending: vmstat_update [ 241.135579][ C0] workqueue bat_events: flags=0x6000a [ 241.135587][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=42 MAYDAY [ 241.135600][ C0] in-flight: 2855(RESCUER):batadv_tt_purge for 11s [ 241.135621][ C0] inactive: batadv_mcast_mla_update, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_mcast_mla_update, batadv_tt_purge, 3*batadv_iv_send_outstanding_bat_ogm_packet, 5*batadv_purge_orig, batadv_mcast_mla_update, 9*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_bla_periodic_work, batadv_mcast_mla_update, batadv_dat_purge, 3*batadv_tt_purge [ 241.135752][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 241.135761][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 241.135777][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 241.135801][ C0] workqueue wg-kex-wg1: flags=0x6 [ 241.135808][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 241.135822][ C0] pending: wg_packet_handshake_send_worker [ 241.135839][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 241.135848][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 241.135863][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 241.135893][ C0] workqueue wg-kex-wg2: flags=0x124 [ 241.135900][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 241.135916][ C0] in-flight: 8177:wg_packet_handshake_receive_worker for 5s [ 241.135937][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 241.135952][ C0] pending: wg_packet_handshake_receive_worker [ 241.135968][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 241.135976][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 241.135991][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 241.136022][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 241.136030][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 241.136046][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 241.136068][ C0] workqueue wg-kex-wg1: flags=0x124 [ 241.136076][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 241.136092][ C0] pending: wg_packet_handshake_receive_worker [ 241.136107][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 241.136116][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 241.136131][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 241.136160][ C0] workqueue wg-kex-wg2: flags=0x124 [ 241.136168][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 241.136183][ C0] in-flight: 4813:wg_packet_handshake_receive_worker for 50s wg_packet_handshake_receive_worker [ 241.136212][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 241.136227][ C0] pending: wg_packet_handshake_receive_worker [ 241.136242][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 241.136251][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 241.136266][ C0] in-flight: 24:wg_packet_decrypt_worker for 47s [ 241.136283][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 241.136312][ C0] workqueue wg-kex-wg0: flags=0x124 [ 241.136321][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 241.136336][ C0] pending: wg_packet_handshake_receive_worker [ 241.136352][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 241.136359][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 241.136375][ C0] pending: wg_packet_encrypt_worker [ 241.136389][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 241.136404][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 241.136426][ C0] workqueue wg-kex-wg0: flags=0x6 [ 241.136434][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 241.136447][ C0] in-flight: 1222:wg_packet_handshake_send_worker for 3s [ 241.136470][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 241.136479][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 241.136494][ C0] pending: wg_packet_encrypt_worker [ 241.136509][ C0] workqueue wg-kex-wg1: flags=0x6 [ 241.136516][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 241.136530][ C0] in-flight: 8811:wg_packet_handshake_send_worker for 2s [ 241.136554][ C0] workqueue wg-kex-wg2: flags=0x6 [ 241.136561][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 241.136575][ C0] pending: wg_packet_handshake_send_worker [ 241.136592][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 241.136600][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 241.136618][ C0] pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker [ 241.136648][ C0] workqueue wg-kex-wg2: flags=0x124 [ 241.136656][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 241.136672][ C0] pending: wg_packet_handshake_receive_worker [ 241.136687][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 241.136696][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 241.136711][ C0] pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker [ 241.136745][ C0] workqueue bond2: flags=0x2000a [ 241.136753][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 241.136767][ C0] pending: bond_alb_monitor [ 241.136777][ C0] inactive: bond_mii_monitor [ 241.136789][ C0] workqueue bond1: flags=0x2000a [ 241.136796][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 241.136810][ C0] pending: bond_alb_monitor [ 241.136820][ C0] inactive: bond_mii_monitor [ 241.136831][ C0] workqueue bond1: flags=0x2000a [ 241.136839][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 241.136853][ C0] pending: bond_mii_monitor [ 241.136861][ C0] inactive: bond_alb_monitor [ 241.136877][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=0s workers=10 idle: 4839 9 10 4889 4815 4688 8179 [ 241.136931][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=47s workers=10 idle: 4794 26 4814 868 4816 8180 8182 4793 8178 [ 241.136991][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=17 idle: 39 8815 96 8813 [ 241.137027][ C0] Showing backtraces of busy workers in stalled worker pools: [ 241.137036][ C0] pool 6: [ 241.137040][ C0] task:kworker/1:0 state:R running task stack:0 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 241.137055][ C0] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 241.137066][ C0] Call trace: [ 241.137069][ C0] __switch_to+0x2b0/0x6e0 (T) [ 241.137082][ C0] __schedule+0x1bec/0x2dcc [ 241.137092][ C0] preempt_schedule_notrace+0xb4/0x154 [ 241.137102][ C0] lock_is_held_type+0x160/0x190 [ 241.137111][ C0] __might_resched+0x48/0x4ac [ 241.137120][ C0] wg_packet_decrypt_worker+0x5f4/0x9c0 [ 241.137130][ C0] process_scheduled_works+0x79c/0x1098 [ 241.137139][ C0] worker_thread+0x754/0xba0 [ 241.137148][ C0] kthread+0x2f8/0x3c8 [ 241.137156][ C0] ret_from_fork+0x10/0x20 [ 249.109089][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.116922][ T1597] ieee802154 phy1 wpan1: encryption failed: -22