last executing test programs: 29.30869591s ago: executing program 1 (id=29): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x11b) syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x804, &(0x7f0000001d40)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_winnt}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_mixed}, {@rodir}, {@rodir}, {@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@rodir}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@uni_xlate}, {@fat=@debug}]}, 0x1, 0x28e, &(0x7f0000000a00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0x8000, 0x90) getdents64(r0, &(0x7f0000000d00)=""/4096, 0x1000) 29.204714971s ago: executing program 1 (id=32): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x4040, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0xf00, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="be38", 0xffdf}], 0x1, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x204a) 29.11377259s ago: executing program 1 (id=35): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000f40)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0}], 0x1, 0xc0800) recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)=""/83, 0x53}], 0x1}, 0x0) 29.039673378s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x8) 28.967982105s ago: executing program 1 (id=41): r0 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appx\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac*\b}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\xdd\x8aM.\x9e\xe0\f\xdf\x8b\xba\xa8\x12d\x90\xecG\xe8&\xda\xfc0x0) io_submit(r1, 0x3, &(0x7f000001f980)=[&(0x7f000001f9c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f000001fa00)='p', 0x8200, 0x600}]) 837.045685ms ago: executing program 2 (id=628): ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f00000007c0)={'bond0\x00', @ifru_names='bond0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840ad0b4aafa969eef856fae5003e75e6535db9f77489a47e8adc1e35"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$tipc(0x1e, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 728.854995ms ago: executing program 6 (id=629): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000006c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='dmask=00000000000000000021143,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp864,umask=00000000000000000000004,namecase=1,utf8,discard,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x1533, &(0x7f0000001740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) 728.645375ms ago: executing program 2 (id=630): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x20, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 728.506776ms ago: executing program 2 (id=631): syz_usb_connect(0x0, 0x4b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='27', 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x290, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x40, 0xd9, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x9b, {0x9, 0x21, 0xfff9, 0x1, 0x1, {0x22, 0x5c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x5}}}}}]}}]}}, 0x0) 712.052657ms ago: executing program 4 (id=632): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x8488, &(0x7f0000000280)={[{@noquota}, {@hash_tea}, {@data_writeback}, {@nolargeio}, {@data_ordered}]}, 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 'syz1\x00', 0x0}) readv(r0, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1) 546.220644ms ago: executing program 6 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) syz_mount_image$fuse(0x0, &(0x7f00000017c0)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0), 0x1000) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/144, 0x90}], 0x1, 0x7, 0x7fff) 484.992931ms ago: executing program 5 (id=634): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000003c0)=0x6, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000400)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="020427000300000010000000000000f706e105000000000000001104ee1606d4b8bf4a828bda305775c438241efef948d0a3119fb8e74620180100000000000000c83a18ec683b5b583d8d74ba16a75b1b08c2cc43f2e4788494b20000e65d969dcdf5b3226638ea81c90008a66cae1448bfa4eb57", 0x75}], 0x1}, 0x0) 416.864558ms ago: executing program 3 (id=635): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000440)="800037bbfa9ba1ce", 0x8, 0x4000810, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000100)=0x400, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x60, 0x0) 362.639523ms ago: executing program 5 (id=636): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 362.169203ms ago: executing program 3 (id=646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e"], 0x36) 283.113191ms ago: executing program 4 (id=637): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0) 282.669581ms ago: executing program 5 (id=638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x49, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x20000010) 251.436554ms ago: executing program 5 (id=639): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x3200842, &(0x7f0000000bc0)=ANY=[], 0x1, 0xadc, &(0x7f0000000c00)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x10142, 0x0) write$binfmt_register(r0, &(0x7f0000001740)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'nodatacow', 0x3a, '$\x83', 0x3a, './file1'}, 0x32) read$FUSE(r0, &(0x7f0000001800)={0x2020}, 0x2020) 232.378437ms ago: executing program 4 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, &(0x7f0000000440)="2d25c873c6d0ff57318d8185a94d488b38f0fcd919d01038dc3dc25401000000febae03d46fdca85", 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/16384, 0x4000) 201.46306ms ago: executing program 4 (id=641): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200001, &(0x7f0000000180), 0x1, 0xb80, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0xffffffd8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 158.743454ms ago: executing program 2 (id=642): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 158.325394ms ago: executing program 3 (id=643): r0 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x1) 113.543018ms ago: executing program 5 (id=644): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4004) 68.893893ms ago: executing program 3 (id=645): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x101002) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x5) connect$inet6(r1, &(0x7f0000000200)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 68.642693ms ago: executing program 6 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0), 0x0, 0x10, &(0x7f0000000f00), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000f40)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000f80)=0x3, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x28, 0x67, 0x0, 0x39, 0x6, 0x0, @remote, @multicast1}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xa0, 0x0, 0x2}}}}}}, 0x0) 41.656796ms ago: executing program 34 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0), 0x0, 0x10, &(0x7f0000000f00), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000f40)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000f80)=0x3, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x28, 0x67, 0x0, 0x39, 0x6, 0x0, @remote, @multicast1}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xa0, 0x0, 0x2}}}}}}, 0x0) 21.718588ms ago: executing program 4 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000900)=""/4089, 0xff9) writev(r0, &(0x7f0000000040), 0x2) 0s ago: executing program 2 (id=650): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) kernel console output (not intermixed with test programs): : Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.561341][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.567815][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.569670][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.571568][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.573327][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.589274][ T4331] device veth0_vlan entered promiscuous mode [ 33.590744][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.592571][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.594468][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.600555][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.602493][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.606613][ T4331] device veth1_vlan entered promiscuous mode [ 33.610271][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.612092][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.613970][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.628806][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.630347][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.632102][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.642402][ T4331] device veth0_macvtap entered promiscuous mode [ 33.645278][ T4331] device veth1_macvtap entered promiscuous mode [ 33.647532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 33.649273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 33.651034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.652828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.654714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.656498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.662187][ T4332] device veth0_vlan entered promiscuous mode [ 33.671237][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.674641][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.676202][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.683490][ T4332] device veth1_vlan entered promiscuous mode [ 33.689461][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.704779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 33.706584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.709254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.710943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.713043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.720048][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.724507][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.726360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.728232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.729720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.731644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.733656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.735611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.756503][ T4332] device veth0_macvtap entered promiscuous mode [ 33.762790][ T4331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.764600][ T4331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.766177][ T4331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.768770][ T4331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.772827][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 33.774644][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.776445][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.781942][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.783855][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.785636][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.787796][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.789430][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.790987][ T4337] device veth0_vlan entered promiscuous mode [ 33.796195][ T4332] device veth1_macvtap entered promiscuous mode [ 33.803326][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.805168][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.806749][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.819140][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.821253][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.823929][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.841091][ T4337] device veth1_vlan entered promiscuous mode [ 33.842565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 33.844265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.845813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.848366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.860315][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.862129][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.864462][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.867632][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.869281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.871203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.874704][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.876371][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.890268][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 33.891996][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 33.893702][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.895529][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.898962][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.900951][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.911179][ T4332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.912814][ T4332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.914506][ T4332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.916231][ T4332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.921881][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.923805][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.925745][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.927920][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.929648][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.931342][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.935175][ T4338] device veth0_vlan entered promiscuous mode [ 33.940540][ T4337] device veth0_macvtap entered promiscuous mode [ 33.942654][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.944248][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.949973][ T4337] device veth1_macvtap entered promiscuous mode [ 33.954699][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.956603][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.959285][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.960949][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.962862][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.966862][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.970200][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.972210][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.974339][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.976709][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.984242][ T4338] device veth1_vlan entered promiscuous mode [ 33.986415][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.989529][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.991538][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.007773][ T4330] device veth0_vlan entered promiscuous mode [ 34.010608][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.012465][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.016070][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.020362][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.028008][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.029972][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.031853][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.033839][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.036327][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.042795][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.044741][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.070296][ T4439] loop1: detected capacity change from 0 to 256 [ 34.076321][ T4439] ======================================================= [ 34.076321][ T4439] WARNING: The mand mount option has been deprecated and [ 34.076321][ T4439] and is ignored by this kernel. Remove the mand [ 34.076321][ T4439] option from the mount to silence this warning. [ 34.076321][ T4439] ======================================================= [ 34.077753][ T4330] device veth1_vlan entered promiscuous mode [ 34.094288][ T4439] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.097694][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.099197][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.101037][ T4439] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 34.107243][ T4426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.109000][ T4426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.112071][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.113814][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.115520][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.117764][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.121268][ T4439] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc62de5db, utbl_chksum : 0xe619d30d) [ 34.124188][ T4439] exFAT-fs (loop1): failed to load alloc-bitmap [ 34.125363][ T4439] exFAT-fs (loop1): failed to recognize exfat type [ 34.129863][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.131638][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.133489][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.135315][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.138437][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.140151][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.142075][ T4338] device veth0_macvtap entered promiscuous mode [ 34.144744][ T4338] device veth1_macvtap entered promiscuous mode [ 34.191529][ T4330] device veth0_macvtap entered promiscuous mode [ 34.195781][ T4330] device veth1_macvtap entered promiscuous mode [ 34.201136][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 34.202892][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 34.204540][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.206260][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.209157][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.211073][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.212797][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.214351][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.218463][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.220622][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.222371][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.224464][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.226228][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.231300][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.234688][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.242928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.244978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.252906][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.254895][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.256757][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.259498][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.263639][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.265766][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.273858][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.279569][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.281077][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.281448][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.296885][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.299717][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.301873][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.303869][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.306015][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.311523][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.313622][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.316592][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.321514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.323512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.325564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.327731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.329806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.345151][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.347654][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.349724][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.351753][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.353657][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.355828][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.361073][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.363262][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.366116][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.370682][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.371583][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.372111][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.373966][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.376849][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.379159][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.382395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.384244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.386052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.390524][ T4338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.392698][ T4338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.394657][ T4338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.396438][ T4338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.429985][ T4442] loop3: detected capacity change from 0 to 32768 [ 34.444548][ T4442] XFS (loop3): Mounting V5 Filesystem [ 34.468162][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.469692][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.473360][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 34.476505][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.506376][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.508224][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.510563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.524681][ T4442] XFS (loop3): Ending clean mount [ 34.555561][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.557292][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.559870][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.591955][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.593499][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.595381][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.621555][ T4460] loop0: detected capacity change from 0 to 32896 [ 34.665884][ T4460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.673148][ T4332] XFS (loop3): Unmounting Filesystem [ 34.753058][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 34.802695][ T4475] gadgetfs: bound to dummy_udc driver [ 34.882550][ T4346] Bluetooth: hci4: command 0x041b tx timeout [ 34.883781][ T4346] Bluetooth: hci3: command 0x041b tx timeout [ 34.885023][ T4346] Bluetooth: hci2: command 0x041b tx timeout [ 34.886347][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 34.887327][ T4339] Bluetooth: hci1: command 0x041b tx timeout [ 35.079175][ T4487] loop0: detected capacity change from 0 to 32768 [ 35.090657][ T4493] loop4: detected capacity change from 0 to 34816 [ 35.102347][ T4493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.105821][ T4493] EXT4-fs (loop4): can't mount with both data=journal and dax [ 35.114426][ T4487] XFS (loop0): Mounting V5 Filesystem [ 35.147009][ T4487] XFS (loop0): Ending clean mount [ 35.191991][ T4330] XFS (loop0): Unmounting Filesystem [ 35.283930][ T4507] loop1: detected capacity change from 0 to 4096 [ 35.334896][ T4507] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 35.508930][ T4524] FAULT_INJECTION: forcing a failure. [ 35.508930][ T4524] name failslab, interval 1, probability 0, space 0, times 1 [ 35.514263][ T4524] CPU: 1 PID: 4524 Comm: syz.0.20 Not tainted syzkaller #0 [ 35.515736][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 35.517913][ T4524] Call trace: [ 35.518675][ T4524] dump_backtrace+0x1c4/0x1f0 [ 35.519808][ T4524] show_stack+0x2c/0x3c [ 35.520734][ T4524] __dump_stack+0x30/0x40 [ 35.521717][ T4524] dump_stack_lvl+0xf4/0x15c [ 35.522760][ T4524] dump_stack+0x1c/0x5c [ 35.523575][ T4524] should_fail_ex+0x3cc/0x524 [ 35.524499][ T4524] __should_failslab+0xc0/0x11c [ 35.525514][ T4524] should_failslab+0x10/0x28 [ 35.526461][ T4524] __kmem_cache_alloc_node+0x7c/0x318 [ 35.527598][ T4524] __kmalloc+0xc4/0x180 [ 35.528462][ T4524] ipv6_flowlabel_opt+0xd64/0x2070 [ 35.529522][ T4524] do_ipv6_setsockopt+0x8f4/0x3174 [ 35.530573][ T4524] ipv6_setsockopt+0x6c/0x1a0 [ 35.531533][ T4524] rawv6_setsockopt+0x204/0x4a8 [ 35.532531][ T4524] sock_common_setsockopt+0xb0/0xcc [ 35.533484][ T4524] __sys_setsockopt+0x2fc/0x50c [ 35.534524][ T4524] __arm64_sys_setsockopt+0xc0/0xdc [ 35.535632][ T4524] invoke_syscall+0x98/0x290 [ 35.536633][ T4524] el0_svc_common+0x13c/0x258 [ 35.537649][ T4524] do_el0_svc+0x5c/0x134 [ 35.538579][ T4524] el0_svc+0x58/0x12c [ 35.539449][ T4524] el0t_64_sync_handler+0x84/0xf0 [ 35.540550][ T4524] el0t_64_sync+0x18c/0x190 [ 35.587327][ T4528] loop1: detected capacity change from 0 to 256 [ 35.619984][ T4530] loop0: detected capacity change from 0 to 2048 [ 35.648799][ T4351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.711367][ T4520] loop4: detected capacity change from 0 to 40427 [ 35.728564][ T4520] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 35.734498][ T4520] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 35.744971][ T4520] F2FS-fs (loop4): invalid crc value [ 35.781200][ T4520] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.814067][ T4520] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 35.815597][ T4520] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.901898][ T4556] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 35.935422][ T4520] syz.4.26: attempt to access beyond end of device [ 35.935422][ T4520] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 35.990855][ T4553] loop2: detected capacity change from 0 to 32768 [ 36.021599][ T4553] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.39 (4553) [ 36.054498][ T4553] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 36.056707][ T4553] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 36.066870][ T4553] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 36.069231][ T4553] BTRFS info (device loop2): use zstd compression, level 3 [ 36.070744][ T4553] BTRFS info (device loop2): using free space tree [ 36.127484][ T4573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.217175][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 36.278387][ T4553] BTRFS info (device loop2): enabling ssd optimizations [ 36.281324][ T4597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 36.282939][ T4597] System zones: 1-12 [ 36.284515][ T4597] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #15: comm syz.4.52: corrupted inode contents [ 36.301199][ T4597] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 36.312259][ T4597] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #15: comm syz.4.52: corrupted inode contents [ 36.334592][ T4553] overlayfs: failed to resolve 'lower': -2 [ 36.337348][ T4597] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.52: mark_inode_dirty error [ 36.341270][ T4597] EXT4-fs (loop4): 1 orphan inode deleted [ 36.342965][ T4597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.364201][ T4553] overlayfs: failed to resolve 'lower': -2 [ 36.371417][ T4597] overlayfs: failed to resolve './bus': -117 [ 36.410211][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 36.431524][ T4337] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 36.451601][ T4607] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.496497][ T4610] block device autoloading is deprecated and will be removed. [ 36.571764][ T4603] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 36.573427][ T4603] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.576344][ T4603] F2FS-fs (loop0): invalid crc value [ 36.579364][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 36.593848][ T4603] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.616663][ T4603] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 36.618487][ T4603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.642425][ T4625] FAULT_INJECTION: forcing a failure. [ 36.642425][ T4625] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 36.646587][ T4625] CPU: 0 PID: 4625 Comm: syz.4.59 Not tainted syzkaller #0 [ 36.648045][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 36.650304][ T4625] Call trace: [ 36.651054][ T4625] dump_backtrace+0x1c4/0x1f0 [ 36.652059][ T4625] show_stack+0x2c/0x3c [ 36.652994][ T4625] __dump_stack+0x30/0x40 [ 36.653973][ T4625] dump_stack_lvl+0xf4/0x15c [ 36.655011][ T4625] dump_stack+0x1c/0x5c [ 36.655972][ T4625] should_fail_ex+0x3cc/0x524 [ 36.657047][ T4625] should_fail_alloc_page+0x74/0xb8 [ 36.658251][ T4625] prepare_alloc_pages+0x1b8/0x4f0 [ 36.659329][ T4625] __alloc_pages+0x134/0x544 [ 36.660330][ T4625] alloc_pages+0x434/0x6fc [ 36.661309][ T4625] pipe_write+0x3bc/0x18b4 [ 36.662290][ T4625] vfs_write+0x3c8/0x7c8 [ 36.663227][ T4625] ksys_write+0x12c/0x228 [ 36.664168][ T4625] __arm64_sys_write+0x7c/0x90 [ 36.665201][ T4625] invoke_syscall+0x98/0x290 [ 36.666200][ T4625] el0_svc_common+0x13c/0x258 [ 36.667215][ T4625] do_el0_svc+0x5c/0x134 [ 36.668143][ T4625] el0_svc+0x58/0x12c [ 36.669019][ T4625] el0t_64_sync_handler+0x84/0xf0 [ 36.670058][ T4625] el0t_64_sync+0x18c/0x190 [ 36.685342][ T4627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.746878][ T4627] EXT4-fs (loop2): shut down requested (2) [ 36.789816][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 36.932808][ T4647] EXT4-fs: Ignoring removed bh option [ 36.934468][ T4647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.939711][ T4647] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 36.944360][ T4647] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 36.957402][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 36.967307][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 36.968620][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 36.969763][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 37.014619][ T4647] EXT4-fs (loop3): failed to open journal device unknown-block(0,5) -6 [ 37.085001][ T4655] EXT4-fs: Ignoring removed bh option [ 37.100825][ T4655] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.123837][ T4655] EXT4-fs (loop3): shut down requested (1) [ 37.140386][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 37.821856][ T4675] XFS (loop0): Mounting V5 Filesystem [ 37.839786][ T4675] XFS (loop0): Ending clean mount [ 37.846844][ T4675] XFS (loop0): Quotacheck needed: Please wait. [ 37.873863][ T4675] XFS (loop0): Quotacheck: Done. [ 38.175017][ T4330] XFS (loop0): Unmounting Filesystem [ 38.466735][ T4705] gadgetfs: bound to dummy_udc driver [ 38.596702][ T4713] FAULT_INJECTION: forcing a failure. [ 38.596702][ T4713] name failslab, interval 1, probability 0, space 0, times 0 [ 38.600854][ T4713] CPU: 1 PID: 4713 Comm: syz.4.93 Not tainted syzkaller #0 [ 38.602335][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.604245][ T4713] Call trace: [ 38.604919][ T4713] dump_backtrace+0x1c4/0x1f0 [ 38.605909][ T4713] show_stack+0x2c/0x3c [ 38.606775][ T4713] __dump_stack+0x30/0x40 [ 38.607693][ T4713] dump_stack_lvl+0xf4/0x15c [ 38.608663][ T4713] dump_stack+0x1c/0x5c [ 38.609540][ T4713] should_fail_ex+0x3cc/0x524 [ 38.610501][ T4713] __should_failslab+0xc0/0x11c [ 38.611530][ T4713] should_failslab+0x10/0x28 [ 38.612512][ T4713] __kmem_cache_alloc_node+0x7c/0x318 [ 38.613542][ T4713] __kmalloc+0xc4/0x180 [ 38.614292][ T4713] inotify_handle_inode_event+0x294/0x7d8 [ 38.615349][ T4713] fsnotify+0x1658/0x19ec [ 38.616139][ T4713] __fsnotify_parent+0x420/0x6c0 [ 38.617163][ T4713] vfs_write+0x668/0x7c8 [ 38.618071][ T4713] ksys_write+0x12c/0x228 [ 38.618976][ T4713] __arm64_sys_write+0x7c/0x90 [ 38.619880][ T4713] invoke_syscall+0x98/0x290 [ 38.620834][ T4713] el0_svc_common+0x13c/0x258 [ 38.621830][ T4713] do_el0_svc+0x5c/0x134 [ 38.622774][ T4713] el0_svc+0x58/0x12c [ 38.623662][ T4713] el0t_64_sync_handler+0x84/0xf0 [ 38.624593][ T4713] el0t_64_sync+0x18c/0x190 [ 38.666475][ T4720] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 38.676860][ T4697] XFS (loop3): Mounting V5 Filesystem [ 38.701923][ T4720] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 38.704043][ T4720] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 38.706819][ T4720] Remounting filesystem read-only [ 38.719925][ T4697] XFS (loop3): Ending clean mount [ 38.731768][ T4330] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 38.762815][ T4726] infiniband syz0: set active [ 38.766780][ T4726] infiniband syz0: added ipvlan0 [ 38.778676][ T4332] XFS (loop3): Unmounting Filesystem [ 38.825171][ T4726] RDS/IB: syz0: added [ 38.826083][ T4726] smc: adding ib device syz0 with port count 1 [ 38.832223][ T4726] smc: ib device syz0 port 1 has pnetid [ 38.891642][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.893862][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.895890][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.904043][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.905744][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.908335][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.986542][ T4740] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.991278][ T4729] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 38.992732][ T4729] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 38.996836][ T4740] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.101: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.001588][ T4740] EXT4-fs (loop0): Remounting filesystem read-only [ 39.003204][ T4729] F2FS-fs (loop4): invalid crc value [ 39.005693][ T4740] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.101: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.011315][ T4740] EXT4-fs (loop0): Remounting filesystem read-only [ 39.012534][ T4740] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.101: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.015628][ T4740] EXT4-fs (loop0): Remounting filesystem read-only [ 39.020614][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.026278][ T4740] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.101: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.032458][ T4729] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.038470][ T4344] Bluetooth: hci4: command 0x0419 tx timeout [ 39.039689][ T4344] Bluetooth: hci1: command 0x0419 tx timeout [ 39.040962][ T4344] Bluetooth: hci3: command 0x0419 tx timeout [ 39.042209][ T4344] Bluetooth: hci2: command 0x0419 tx timeout [ 39.046576][ T4740] EXT4-fs (loop0): Remounting filesystem read-only [ 39.058389][ T4740] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.101: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.092505][ T4740] EXT4-fs (loop0): Remounting filesystem read-only [ 39.118090][ T4729] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.119569][ T4729] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.136767][ T4729] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 39.140793][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.155584][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.158575][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 39.220519][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.235620][ T4756] netlink: 'syz.2.103': attribute type 19 has an invalid length. [ 39.300203][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.341186][ T4765] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 39.348165][ T4765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'. [ 39.362804][ T4765] Zero length message leads to an empty skb [ 39.402553][ T4773] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 39.402553][ T4773] Q&|xù6 [ 39.442750][ T4736] chnl_net:caif_netlink_parms(): no params data found [ 39.492457][ T4779] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.586287][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.588399][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.596570][ T4736] device bridge_slave_0 entered promiscuous mode [ 39.610582][ T4784] syz.2.116 uses obsolete (PF_INET,SOCK_PACKET) [ 39.612144][ T4792] set_capacity_and_notify: 12 callbacks suppressed [ 39.612151][ T4792] loop0: detected capacity change from 0 to 36864 [ 39.614115][ T4784] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 39.616545][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.620977][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.624490][ T4736] device bridge_slave_1 entered promiscuous mode [ 39.676185][ T4792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.716653][ T4792] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 39.785076][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 39.846116][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.930498][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.948339][ T4736] team0: Port device team_slave_0 added [ 39.950373][ T4736] team0: Port device team_slave_1 added [ 40.050259][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.051562][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.067657][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.075629][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.079751][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.089797][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.115925][ T4838] netlink: 'syz.2.131': attribute type 3 has an invalid length. [ 40.178893][ T4736] device hsr_slave_0 entered promiscuous mode [ 40.185938][ T4841] loop2: detected capacity change from 0 to 2048 [ 40.204944][ T4843] loop3: detected capacity change from 0 to 128 [ 40.216104][ T4845] loop0: detected capacity change from 0 to 34816 [ 40.217348][ T4736] device hsr_slave_1 entered promiscuous mode [ 40.223185][ T4841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 40.245769][ T4845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.258630][ T4736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.260138][ T4736] Cannot create hsr debugfs directory [ 40.438564][ T4844] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 40.456890][ T4844] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 40.461386][ T4859] loop3: detected capacity change from 0 to 32896 [ 40.462643][ T4844] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.462643][ T4844] [ 40.462674][ T4844] EXT4-fs (loop0): Total free blocks count 0 [ 40.470535][ T4844] EXT4-fs (loop0): Free/Dirty block details [ 40.471835][ T4844] EXT4-fs (loop0): free_blocks=4096 [ 40.472814][ T4844] EXT4-fs (loop0): dirty_blocks=512 [ 40.476212][ T4844] EXT4-fs (loop0): Block reservation details [ 40.479291][ T4844] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 40.522749][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 40.536896][ T4736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.584696][ T4859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.636675][ T4871] loop2: detected capacity change from 0 to 8192 [ 40.665834][ T4871] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 40.668696][ T4871] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 40.670566][ T4871] REISERFS (device loop2): using ordered data mode [ 40.671891][ T4871] reiserfs: using flush barriers [ 40.692231][ T4871] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.695457][ T4871] REISERFS (device loop2): checking transaction log (loop2) [ 40.730482][ T4736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.733634][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 40.848748][ T4736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.856198][ T4871] REISERFS (device loop2): Using tea hash to sort names [ 40.868120][ T4871] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 40.889619][ T4736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.957508][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 41.008110][ T4881] can0: slcan on pts0. [ 41.054856][ T4885] loop4: detected capacity change from 0 to 32768 [ 41.065692][ T4885] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.143 (4885) [ 41.083541][ T4885] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 41.092775][ T4885] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 41.097906][ T4885] BTRFS info (device loop4): setting nodatasum [ 41.100263][ T4885] BTRFS info (device loop4): force zlib compression, level 3 [ 41.103147][ T4885] BTRFS info (device loop4): turning on flush-on-commit [ 41.105824][ T4885] BTRFS info (device loop4): max_inline at 4096 [ 41.107572][ T4880] can0 (unregistered): slcan off pts0. [ 41.114592][ T4885] BTRFS info (device loop4): using free space tree [ 41.349756][ T4885] BTRFS info (device loop4): enabling ssd optimizations [ 41.479566][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.484305][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.494688][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.496530][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.550688][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.552594][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.554367][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.555667][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.565998][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.619029][ T4935] loop0: detected capacity change from 0 to 34816 [ 41.669189][ T4935] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.728482][ T4943] netlink: 104 bytes leftover after parsing attributes in process `syz.2.152'. [ 41.730181][ T4934] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 41.734885][ T4934] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.737880][ T4934] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.737880][ T4934] [ 41.740046][ T4934] EXT4-fs (loop0): Total free blocks count 0 [ 41.747589][ T4934] EXT4-fs (loop0): Free/Dirty block details [ 41.748956][ T4934] EXT4-fs (loop0): free_blocks=4096 [ 41.750021][ T4934] EXT4-fs (loop0): dirty_blocks=64 [ 41.750992][ T4934] EXT4-fs (loop0): Block reservation details [ 41.752031][ T4934] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 41.754090][ T4935] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 41.782571][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.784261][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.785918][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.787573][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.792491][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.805363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.814266][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.816579][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.845573][ T4338] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 41.854009][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.876638][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.878636][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.880252][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.885537][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.889408][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.901744][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.908959][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.134256][ T11] device hsr_slave_0 left promiscuous mode [ 42.172500][ T11] device hsr_slave_1 left promiscuous mode [ 42.240961][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.242520][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.247464][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.249127][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.253443][ T11] device bridge_slave_1 left promiscuous mode [ 42.262179][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.309349][ T11] device bridge_slave_0 left promiscuous mode [ 42.310891][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.350941][ T5006] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2 [ 42.421497][ T11] device veth1_macvtap left promiscuous mode [ 42.422895][ T11] device veth0_macvtap left promiscuous mode [ 42.424228][ T11] device veth1_vlan left promiscuous mode [ 42.425685][ T11] device veth0_vlan left promiscuous mode [ 42.489151][ T5016] loop0: detected capacity change from 0 to 2048 [ 42.516828][ T5014] svc: failed to register lockdv1 RPC service (errno 111). [ 42.522120][ T5014] lockd_up: makesock failed, error=-111 [ 42.542062][ T5016] loop0: p1 < > p2 p3 < > p4 < p5 > [ 42.543318][ T5016] loop0: partition table partially beyond EOD, truncated [ 42.545433][ T5016] loop0: p1 start 3405774849 is beyond EOD, truncated [ 42.548865][ T5016] loop0: p3 start 4225 is beyond EOD, truncated [ 42.618511][ T4351] udevd[4351]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 42.618902][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 42.624032][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.766239][ T5025] loop3: detected capacity change from 0 to 4096 [ 42.804336][ T5025] ntfs3: loop3: Failed to load $Extend. [ 42.897984][ T4332] ntfs3: loop3: ino=5, mi_enum_attr [ 42.901737][ T4332] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 42.906341][ T4332] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 43.040205][ T4344] Bluetooth: hci0: command 0x041b tx timeout [ 43.086937][ T5035] binder: 5034:5035 ioctl c0306201 20000080 returned -14 [ 43.157856][ T5021] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 43.159465][ T5021] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 43.166234][ T5021] F2FS-fs (loop0): invalid crc value [ 43.197722][ T5021] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.227213][ T5021] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.228701][ T5021] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 43.923267][ T5067] XFS: noikeep mount option is deprecated. [ 43.925372][ T5067] XFS: ikeep mount option is deprecated. [ 43.934660][ T5063] EXT4-fs (loop2): Test dummy encryption mode enabled [ 43.946895][ T5067] XFS (loop3): Mounting V5 Filesystem [ 43.955899][ T5063] EXT4-fs (loop2): mounted filesystem with ordered data mode. Quota mode: none. [ 43.968324][ T5057] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 44.005953][ T5063] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 44.032148][ T5067] XFS (loop3): Ending clean mount [ 44.044041][ T5063] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 44.080540][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 44.123640][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 44.152704][ T4332] XFS (loop3): Unmounting Filesystem [ 44.222150][ T5088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 44.444216][ T5100] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.450486][ T5100] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 44.452562][ T5100] REISERFS (device loop3): using ordered data mode [ 44.453964][ T5100] reiserfs: using flush barriers [ 44.455483][ T5100] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.459563][ T5100] REISERFS (device loop3): checking transaction log (loop3) [ 44.462486][ T5100] REISERFS (device loop3): Using r5 hash to sort names [ 44.463790][ T5100] REISERFS (device loop3): using 3.5.x disk format [ 44.465268][ T5100] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 44.525611][ T5098] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.203 (5098) [ 44.541647][ T5098] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 44.543388][ T5098] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 44.545090][ T5098] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 44.546922][ T5098] BTRFS info (device loop0): use zstd compression, level 3 [ 44.556606][ T5098] BTRFS info (device loop0): using free space tree [ 44.648911][ T11] team0 (unregistering): Port device team_slave_1 removed [ 44.661214][ T5098] BTRFS info (device loop0): enabling ssd optimizations [ 44.680677][ T5123] set_capacity_and_notify: 10 callbacks suppressed [ 44.680685][ T5123] loop3: detected capacity change from 0 to 33280 [ 44.698991][ T5125] loop2: detected capacity change from 0 to 33280 [ 44.703353][ T5125] EXT4-fs: Ignoring removed nobh option [ 44.706563][ T5123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.724804][ T5125] EXT4-fs (loop2): 1 truncate cleaned up [ 44.726265][ T5125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.755361][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 44.796107][ T4330] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 44.801555][ T11] team0 (unregistering): Port device team_slave_0 removed [ 44.948305][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.117199][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 45.145533][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.191924][ T5155] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 45.332853][ T5162] loop2: detected capacity change from 0 to 1024 [ 45.401138][ T5162] syz.2.221: attempt to access beyond end of device [ 45.401138][ T5162] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 45.406592][ T5162] syz.2.221: attempt to access beyond end of device [ 45.406592][ T5162] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 45.446476][ T5164] loop2: detected capacity change from 0 to 16 [ 45.463099][ T5164] erofs: (device loop2): mounted with root inode @ nid 36. [ 45.511106][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 45.878693][ T5168] loop3: detected capacity change from 0 to 131072 [ 45.884538][ T5168] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 45.886297][ T5168] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.894004][ T5168] F2FS-fs (loop3): invalid crc value [ 45.896399][ T5168] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.906552][ T5168] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.908241][ T5168] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 46.708622][ T11] bond0 (unregistering): Released all slaves [ 46.954289][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.956708][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.958492][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.010668][ T5048] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 47.012200][ T5048] netlink: 'syz.4.188': attribute type 2 has an invalid length. [ 47.059338][ T5173] netlink: 'syz.2.226': attribute type 25 has an invalid length. [ 47.060824][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 47.064233][ T5173] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.065772][ T5173] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.067541][ T5173] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.069311][ T5173] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.072344][ T5179] FAULT_INJECTION: forcing a failure. [ 47.072344][ T5179] name failslab, interval 1, probability 0, space 0, times 0 [ 47.075111][ T5179] CPU: 1 PID: 5179 Comm: syz.3.227 Not tainted syzkaller #0 [ 47.076524][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 47.078692][ T5179] Call trace: [ 47.079416][ T5179] dump_backtrace+0x1c4/0x1f0 [ 47.080351][ T5179] show_stack+0x2c/0x3c [ 47.081235][ T5179] __dump_stack+0x30/0x40 [ 47.082212][ T5179] dump_stack_lvl+0xf4/0x15c [ 47.083116][ T5179] dump_stack+0x1c/0x5c [ 47.083940][ T5179] should_fail_ex+0x3cc/0x524 [ 47.084922][ T5179] __should_failslab+0xc0/0x11c [ 47.085881][ T5179] should_failslab+0x10/0x28 [ 47.086865][ T5179] __kmem_cache_alloc_node+0x7c/0x318 [ 47.088028][ T5179] __kmalloc+0xc4/0x180 [ 47.088903][ T5179] tcf_idr_create+0x74/0x664 [ 47.089976][ T5179] tcf_skbedit_init+0x504/0xc84 [ 47.091127][ T5179] tcf_action_init_1+0x388/0x614 [ 47.092293][ T5179] tcf_action_init+0x268/0x810 [ 47.093416][ T5179] tc_ctl_action+0x34c/0xa18 [ 47.094457][ T5179] rtnetlink_rcv_msg+0x694/0xcc4 [ 47.095461][ T5179] netlink_rcv_skb+0x220/0x3ec [ 47.096497][ T5179] rtnetlink_rcv+0x28/0x38 [ 47.097459][ T5179] netlink_unicast+0x5fc/0x80c [ 47.098496][ T5179] netlink_sendmsg+0x6f0/0x9d8 [ 47.099545][ T5179] ____sys_sendmsg+0x588/0x90c [ 47.100644][ T5179] __sys_sendmsg+0x288/0x374 [ 47.101658][ T5179] __arm64_sys_sendmsg+0x80/0x94 [ 47.102717][ T5179] invoke_syscall+0x98/0x290 [ 47.103704][ T5179] el0_svc_common+0x13c/0x258 [ 47.104694][ T5179] do_el0_svc+0x5c/0x134 [ 47.105611][ T5179] el0_svc+0x58/0x12c [ 47.106424][ T5179] el0t_64_sync_handler+0x84/0xf0 [ 47.107441][ T5179] el0t_64_sync+0x18c/0x190 [ 47.132863][ T5173] netlink: 'syz.2.226': attribute type 25 has an invalid length. [ 47.134480][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 47.155312][ T5189] syz.3.229 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.198441][ T4344] Bluetooth: hci0: command 0x0419 tx timeout [ 47.239504][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.241323][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.251797][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.253905][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.255639][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.266315][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.274077][ T4736] device veth0_vlan entered promiscuous mode [ 47.279536][ T4736] device veth1_vlan entered promiscuous mode [ 47.293955][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 47.295957][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 47.298375][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.300219][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.303677][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.305522][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.325877][ T5209] loop2: detected capacity change from 0 to 16 [ 47.343942][ T4736] device veth0_macvtap entered promiscuous mode [ 47.352487][ T5209] erofs: (device loop2): mounted with root inode @ nid 36. [ 47.356301][ T4736] device veth1_macvtap entered promiscuous mode [ 47.364168][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.366523][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.369820][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.371744][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.377349][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.379211][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.381007][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.382745][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.385031][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.386574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.389975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.392033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.398110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.409263][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.411056][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.413105][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.415247][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.421589][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.423443][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.425358][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.440235][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.450163][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.451827][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.453962][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.456404][ T4962] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.473114][ T4736] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.474735][ T4736] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.476528][ T4736] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.479086][ T4736] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.479308][ T4336] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.497623][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.500233][ T4336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.505080][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.506966][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 47.509243][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.579251][ T5230] FAULT_INJECTION: forcing a failure. [ 47.579251][ T5230] name failslab, interval 1, probability 0, space 0, times 0 [ 47.582673][ T5230] CPU: 1 PID: 5230 Comm: syz.3.237 Not tainted syzkaller #0 [ 47.584016][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 47.586164][ T5230] Call trace: [ 47.586869][ T5230] dump_backtrace+0x1c4/0x1f0 [ 47.587871][ T5230] show_stack+0x2c/0x3c [ 47.588762][ T5230] __dump_stack+0x30/0x40 [ 47.589701][ T5230] dump_stack_lvl+0xf4/0x15c [ 47.590681][ T5230] dump_stack+0x1c/0x5c [ 47.591589][ T5230] should_fail_ex+0x3cc/0x524 [ 47.592647][ T5230] __should_failslab+0xc0/0x11c [ 47.593736][ T5230] should_failslab+0x10/0x28 [ 47.594752][ T5230] __kmem_cache_alloc_node+0x7c/0x318 [ 47.595890][ T5230] kmalloc_trace+0x48/0x94 [ 47.596856][ T5230] snd_seq_port_connect+0x7c/0x3a0 [ 47.597996][ T5230] snd_seq_ioctl_subscribe_port+0x270/0x650 [ 47.599240][ T5230] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 47.600393][ T5230] snd_seq_oss_midi_open+0x33c/0x5fc [ 47.601483][ T5230] snd_seq_oss_midi_open_all+0x84/0xec [ 47.602621][ T5230] snd_seq_oss_open+0x7a0/0xca4 [ 47.603628][ T5230] odev_open+0x84/0xbc [ 47.604492][ T5230] soundcore_open+0x2f8/0x47c [ 47.605469][ T5230] chrdev_open+0x3d0/0x51c [ 47.606399][ T5230] do_dentry_open+0x738/0xf8c [ 47.607319][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.607366][ T5230] vfs_open+0x7c/0x90 [ 47.608928][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.609579][ T5230] path_openat+0x1fc0/0x27a0 [ 47.611604][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 47.611826][ T5230] do_filp_open+0x198/0x38c [ 47.613570][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.614028][ T5230] do_sys_openat2+0x134/0x3fc [ 47.614046][ T5230] __arm64_sys_openat+0x11c/0x150 [ 47.617439][ T5230] invoke_syscall+0x98/0x290 [ 47.618416][ T5230] el0_svc_common+0x13c/0x258 [ 47.619427][ T5230] do_el0_svc+0x5c/0x134 [ 47.620331][ T5230] el0_svc+0x58/0x12c [ 47.621127][ T5230] el0t_64_sync_handler+0x84/0xf0 [ 47.622165][ T5230] el0t_64_sync+0x18c/0x190 [ 47.646611][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.654848][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.656306][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.680374][ T5220] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.860751][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 47.946438][ T5254] loop5: detected capacity change from 0 to 8192 [ 47.968175][ T5254] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.972461][ T5254] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 47.977008][ T5254] REISERFS (device loop5): using ordered data mode [ 47.990949][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.992607][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.994597][ T5220] device bridge_slave_0 entered promiscuous mode [ 48.001542][ T5249] loop3: detected capacity change from 0 to 40427 [ 48.021297][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.024048][ T5254] reiserfs: using flush barriers [ 48.026879][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.033992][ T5254] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.038134][ T5220] device bridge_slave_1 entered promiscuous mode [ 48.040824][ T5249] F2FS-fs (loop3): invalid crc value [ 48.040991][ T5254] REISERFS (device loop5): checking transaction log (loop5) [ 48.085739][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.090832][ T5249] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.111103][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.118111][ T5249] F2FS-fs (loop3): Start checkpoint disabled! [ 48.161763][ T5249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 48.166971][ T5254] REISERFS (device loop5): Using tea hash to sort names [ 48.169722][ T5254] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 48.181513][ T5220] team0: Port device team_slave_0 added [ 48.199265][ T5220] team0: Port device team_slave_1 added [ 48.229875][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.236386][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.250056][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.255178][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.260661][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.282621][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.286555][ T5284] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 48.289660][ T5284] netlink: 15926 bytes leftover after parsing attributes in process `syz.4.246'. [ 48.291894][ T5249] syz.3.241: attempt to access beyond end of device [ 48.291894][ T5249] loop3: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 48.342277][ T5220] device hsr_slave_0 entered promiscuous mode [ 48.348235][ T299] kworker/u4:3: attempt to access beyond end of device [ 48.348235][ T299] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 48.367377][ T5220] device hsr_slave_1 entered promiscuous mode [ 48.433560][ T5294] syz.2.251 sent an empty control message without MSG_MORE. [ 48.510878][ T5220] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.537572][ T5306] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 48.559639][ T5220] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.601809][ T5316] loop2: detected capacity change from 0 to 512 [ 48.606141][ T5316] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.627131][ T5220] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.649487][ T5220] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.795659][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.842274][ T5339] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 48.861069][ T5339] bond1: (slave lo): Enslaving as an active interface with an up link [ 48.872303][ T5339] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 48.877022][ T5341] FAULT_INJECTION: forcing a failure. [ 48.877022][ T5341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.887220][ T5341] CPU: 1 PID: 5341 Comm: syz.2.263 Not tainted syzkaller #0 [ 48.888424][ T5341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 48.890107][ T5341] Call trace: [ 48.890728][ T5341] dump_backtrace+0x1c4/0x1f0 [ 48.891589][ T5341] show_stack+0x2c/0x3c [ 48.892369][ T5341] __dump_stack+0x30/0x40 [ 48.893219][ T5341] dump_stack_lvl+0xf4/0x15c [ 48.894153][ T5341] dump_stack+0x1c/0x5c [ 48.894956][ T5341] should_fail_ex+0x3cc/0x524 [ 48.895848][ T5341] should_fail_alloc_page+0x74/0xb8 [ 48.896886][ T5341] prepare_alloc_pages+0x1b8/0x4f0 [ 48.898022][ T5341] __alloc_pages+0x134/0x544 [ 48.899035][ T5341] alloc_page_interleave+0x3c/0x224 [ 48.900255][ T5341] alloc_pages+0x328/0x6fc [ 48.901292][ T5341] __get_free_pages+0x18/0x84 [ 48.902393][ T5341] __pollwait+0x1d0/0x370 [ 48.903422][ T5341] pipe_poll+0x14c/0x3e4 [ 48.904415][ T5341] do_sys_poll+0x834/0x1078 [ 48.905468][ T5341] __arm64_sys_ppoll+0x22c/0x2c8 [ 48.905892][ T5343] input: syz1 as /devices/virtual/input/input3 [ 48.906415][ T5341] invoke_syscall+0x98/0x290 [ 48.906435][ T5341] el0_svc_common+0x13c/0x258 [ 48.909756][ T5341] do_el0_svc+0x5c/0x134 [ 48.910700][ T5341] el0_svc+0x58/0x12c [ 48.911579][ T5341] el0t_64_sync_handler+0x84/0xf0 [ 48.912673][ T5341] el0t_64_sync+0x18c/0x190 [ 48.931002][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.949828][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.956587][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.962148][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.963774][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.965322][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.970201][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.972276][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.973984][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.975631][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.981195][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.982751][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.996400][ T5220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.007256][ T5220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.016446][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.019708][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.029778][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.042448][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.044890][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.053379][ T5348] loop4: detected capacity change from 0 to 34816 [ 49.063412][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.065069][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.079686][ T5354] gadgetfs: bound to dummy_udc driver [ 49.107701][ T5348] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.122950][ T5348] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 49.144201][ T5348] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 49.146700][ T5348] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.146700][ T5348] [ 49.154230][ T5348] EXT4-fs (loop4): Total free blocks count 0 [ 49.155451][ T5348] EXT4-fs (loop4): Free/Dirty block details [ 49.156695][ T5348] EXT4-fs (loop4): free_blocks=4096 [ 49.164721][ T5348] EXT4-fs (loop4): dirty_blocks=48 [ 49.165835][ T5348] EXT4-fs (loop4): Block reservation details [ 49.171211][ T5348] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 49.251699][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.254430][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.256026][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.271465][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 49.287176][ T4344] Bluetooth: hci0: command 0x0405 tx timeout [ 49.339203][ T5379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.350775][ T5379] EXT4-fs error (device loop3): ext4_lookup:1852: inode #2: comm syz.3.274: bad inode number: 16 [ 49.357625][ T5379] EXT4-fs (loop3): Remounting filesystem read-only [ 49.383719][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 49.493653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.495633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.516261][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.518277][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.520205][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.521926][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.526244][ T5220] device veth0_vlan entered promiscuous mode [ 49.527869][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 49.545959][ T5220] device veth1_vlan entered promiscuous mode [ 49.620807][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 49.622547][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 49.624522][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.626302][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.630445][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.634633][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.642260][ T5220] device veth0_macvtap entered promiscuous mode [ 49.646088][ T5220] device veth1_macvtap entered promiscuous mode [ 49.672275][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.674511][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.689518][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.691358][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.693170][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.695256][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.696932][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.704010][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.709583][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.711420][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.711639][ T5421] file system registered [ 49.716940][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.734968][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.736971][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.742209][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.744011][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.747585][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.749810][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.751769][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.753832][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.775620][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.778509][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.780862][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.783144][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.785382][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.788300][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.791962][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.793457][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.795655][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.809150][ T5220] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.810886][ T5220] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.812719][ T5220] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.814472][ T5220] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.901723][ T1582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.903399][ T1582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.904997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 49.906706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.930178][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.931944][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.933448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.020703][ T5450] set_capacity_and_notify: 2 callbacks suppressed [ 50.020712][ T5450] loop5: detected capacity change from 0 to 32896 [ 50.063258][ T5450] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 50.110359][ T5458] netlink: 104 bytes leftover after parsing attributes in process `syz.4.296'. [ 50.115344][ T4736] EXT4-fs (loop5): unmounting filesystem. [ 50.264266][ T5475] input: syz0 as /devices/virtual/input/input4 [ 50.278073][ T5476] loop2: detected capacity change from 0 to 256 [ 50.281139][ T5476] exfat: Deprecated parameter 'utf8' [ 50.284741][ T5476] exfat: Deprecated parameter 'namecase' [ 50.297974][ T5476] exfat: Deprecated parameter 'namecase' [ 50.307465][ T5476] exfat: Deprecated parameter 'utf8' [ 50.325590][ T5476] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 50.368768][ T5482] overlayfs: failed to set xattr on upper [ 50.373085][ T5482] overlayfs: ...falling back to index=off,metacopy=off. [ 50.422785][ T5465] loop4: detected capacity change from 0 to 32768 [ 50.446308][ T5465] JBD2: Ignoring recovery information on journal [ 50.496928][ T5465] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 50.543188][ T5498] capability: warning: `syz.5.311' uses deprecated v2 capabilities in a way that may be insecure [ 50.829073][ T5509] (syz.4.300,5509,1):ocfs2_xa_cleanup_value_truncate:2018 ERROR: Unable to allocate an external value for xattr ima safely. Leaking 0 clusters and removing the entry [ 50.937635][ T5522] loop2: detected capacity change from 0 to 32768 [ 50.946436][ T5525] batman_adv: batadv0: Adding interface: syz_tun [ 50.947987][ T5525] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.949866][ T5522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.320 (5522) [ 50.969622][ T5525] batman_adv: batadv0: Interface activated: syz_tun [ 50.974922][ T5527] block device autoloading is deprecated and will be removed. [ 50.990080][ T5522] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.001905][ T5522] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 51.010241][ T5522] BTRFS info (device loop2): using free space tree [ 51.038870][ T5527] md/raid:md5: device ram10 operational as raid disk 0 [ 51.071363][ T5527] md/raid:md5: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 51.074749][ T5527] md5: detected capacity change from 0 to 4096 [ 51.098500][ T5537] md: recovery of RAID array md5 [ 51.127931][ T5544] FAULT_INJECTION: forcing a failure. [ 51.127931][ T5544] name fail_futex, interval 1, probability 0, space 0, times 1 [ 51.137824][ T5544] CPU: 0 PID: 5544 Comm: syz.5.325 Not tainted syzkaller #0 [ 51.139113][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 51.140918][ T5544] Call trace: [ 51.141528][ T5544] dump_backtrace+0x1c4/0x1f0 [ 51.142381][ T5544] show_stack+0x2c/0x3c [ 51.143310][ T5544] __dump_stack+0x30/0x40 [ 51.144334][ T5544] dump_stack_lvl+0xf4/0x15c [ 51.145177][ T5544] dump_stack+0x1c/0x5c [ 51.146038][ T5544] should_fail_ex+0x3cc/0x524 [ 51.146866][ T5544] should_fail+0x14/0x24 [ 51.147586][ T5544] get_futex_key+0x96c/0xec0 [ 51.148493][ T5544] futex_wait_requeue_pi+0x248/0x8d4 [ 51.149557][ T5544] do_futex+0x178/0x340 [ 51.150330][ T5544] __arm64_sys_futex+0x390/0x414 [ 51.151321][ T5544] invoke_syscall+0x98/0x290 [ 51.152251][ T5544] el0_svc_common+0x13c/0x258 [ 51.153155][ T5544] do_el0_svc+0x5c/0x134 [ 51.153985][ T5544] el0_svc+0x58/0x12c [ 51.154766][ T5544] el0t_64_sync_handler+0x84/0xf0 [ 51.155693][ T5544] el0t_64_sync+0x18c/0x190 [ 51.173898][ T5537] md: md5: recovery done. [ 51.230874][ T5522] BTRFS info (device loop2): enabling ssd optimizations [ 51.239935][ T5556] loop5: detected capacity change from 0 to 64 [ 51.257971][ T4338] ocfs2: Unmounting device (7,4) on (node local) [ 51.363827][ T4337] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.494442][ T5567] FAULT_INJECTION: forcing a failure. [ 51.494442][ T5567] name failslab, interval 1, probability 0, space 0, times 0 [ 51.497516][ T5567] CPU: 1 PID: 5567 Comm: syz.2.329 Not tainted syzkaller #0 [ 51.499084][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 51.501302][ T5567] Call trace: [ 51.502069][ T5567] dump_backtrace+0x1c4/0x1f0 [ 51.503167][ T5567] show_stack+0x2c/0x3c [ 51.504085][ T5567] __dump_stack+0x30/0x40 [ 51.504976][ T5567] dump_stack_lvl+0xf4/0x15c [ 51.505994][ T5567] dump_stack+0x1c/0x5c [ 51.506910][ T5567] should_fail_ex+0x3cc/0x524 [ 51.506942][ T5560] loop6: detected capacity change from 0 to 32768 [ 51.507905][ T5567] __should_failslab+0xc0/0x11c [ 51.507926][ T5567] should_failslab+0x10/0x28 [ 51.507936][ T5567] __kmem_cache_alloc_node+0x7c/0x318 [ 51.507945][ T5567] __kmalloc+0xc4/0x180 [ 51.507951][ T5567] tcf_idr_create+0x74/0x664 [ 51.507961][ T5567] tcf_skbedit_init+0x504/0xc84 [ 51.507968][ T5567] tcf_action_init_1+0x388/0x614 [ 51.507976][ T5567] tcf_action_init+0x268/0x810 [ 51.507985][ T5567] tc_ctl_action+0x34c/0xa18 [ 51.517579][ T5567] rtnetlink_rcv_msg+0x694/0xcc4 [ 51.518559][ T5567] netlink_rcv_skb+0x220/0x3ec [ 51.519380][ T5567] rtnetlink_rcv+0x28/0x38 [ 51.520268][ T5567] netlink_unicast+0x5fc/0x80c [ 51.521203][ T5567] netlink_sendmsg+0x6f0/0x9d8 [ 51.522123][ T5567] ____sys_sendmsg+0x588/0x90c [ 51.523099][ T5567] __sys_sendmsg+0x288/0x374 [ 51.524110][ T5567] __arm64_sys_sendmsg+0x80/0x94 [ 51.525155][ T5567] invoke_syscall+0x98/0x290 [ 51.526158][ T5567] el0_svc_common+0x13c/0x258 [ 51.527170][ T5567] do_el0_svc+0x5c/0x134 [ 51.528081][ T5567] el0_svc+0x58/0x12c [ 51.528877][ T5567] el0t_64_sync_handler+0x84/0xf0 [ 51.529861][ T5567] el0t_64_sync+0x18c/0x190 [ 51.560463][ T5562] loop4: detected capacity change from 0 to 32768 [ 51.564744][ T5560] JBD2: Ignoring recovery information on journal [ 51.597162][ T4344] Bluetooth: hci3: command 0x041b tx timeout [ 51.621184][ T5562] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 51.622389][ T5560] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 51.632165][ T5562] (syz.4.321,5562,1):ocfs2_journal_init:932 ERROR: Journal file size (0) is too small! [ 51.634189][ T5562] (syz.4.321,5562,1):ocfs2_check_volume:2402 ERROR: Could not initialize journal! [ 51.635833][ T5562] (syz.4.321,5562,1):ocfs2_check_volume:2487 ERROR: status = -22 [ 51.637402][ T5562] (syz.4.321,5562,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 51.646581][ T5562] (syz.4.321,5562,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 51.850208][ T5592] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 51.858889][ T5586] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 51.868696][ T5586] bond1: (slave lo): Enslaving as an active interface with an up link [ 51.886282][ T5586] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 51.973794][ T5220] ocfs2: Unmounting device (7,6) on (node local) [ 52.050013][ T5601] loop2: detected capacity change from 0 to 34816 [ 52.070493][ T5604] FAULT_INJECTION: forcing a failure. [ 52.070493][ T5604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.073012][ T5604] CPU: 1 PID: 5604 Comm: syz.5.340 Not tainted syzkaller #0 [ 52.074515][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 52.076702][ T5604] Call trace: [ 52.077422][ T5604] dump_backtrace+0x1c4/0x1f0 [ 52.078405][ T5604] show_stack+0x2c/0x3c [ 52.079322][ T5604] __dump_stack+0x30/0x40 [ 52.080206][ T5604] dump_stack_lvl+0xf4/0x15c [ 52.081200][ T5604] dump_stack+0x1c/0x5c [ 52.082100][ T5604] should_fail_ex+0x3cc/0x524 [ 52.083084][ T5604] should_fail_alloc_page+0x74/0xb8 [ 52.084237][ T5604] prepare_alloc_pages+0x1b8/0x4f0 [ 52.085336][ T5604] __alloc_pages+0x134/0x544 [ 52.086335][ T5604] alloc_page_interleave+0x3c/0x224 [ 52.087444][ T5604] alloc_pages+0x328/0x6fc [ 52.088402][ T5604] __get_free_pages+0x18/0x84 [ 52.089376][ T5604] __pollwait+0x1d0/0x370 [ 52.090243][ T5604] pipe_poll+0x14c/0x3e4 [ 52.091094][ T5604] do_sys_poll+0x834/0x1078 [ 52.092075][ T5604] __arm64_sys_ppoll+0x22c/0x2c8 [ 52.093128][ T5604] invoke_syscall+0x98/0x290 [ 52.094078][ T5604] el0_svc_common+0x13c/0x258 [ 52.094985][ T5604] do_el0_svc+0x5c/0x134 [ 52.095796][ T5604] el0_svc+0x58/0x12c [ 52.096604][ T5604] el0t_64_sync_handler+0x84/0xf0 [ 52.097623][ T5604] el0t_64_sync+0x18c/0x190 [ 52.160213][ T5601] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.184893][ T5601] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 52.192514][ T5601] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 52.194661][ T5601] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.194661][ T5601] [ 52.196520][ T5601] EXT4-fs (loop2): Total free blocks count 0 [ 52.215912][ T5601] EXT4-fs (loop2): Free/Dirty block details [ 52.220512][ T5601] EXT4-fs (loop2): free_blocks=4096 [ 52.222780][ T5601] EXT4-fs (loop2): dirty_blocks=48 [ 52.226126][ T5601] EXT4-fs (loop2): Block reservation details [ 52.230766][ T5601] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 52.323841][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 52.467863][ T5613] loop5: detected capacity change from 0 to 40427 [ 52.491691][ T5613] F2FS-fs (loop5): invalid crc value [ 52.503361][ T5613] F2FS-fs (loop5): Found nat_bits in checkpoint [ 52.532751][ T5613] F2FS-fs (loop5): Start checkpoint disabled! [ 52.561163][ T5613] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 52.595153][ T5613] syz.5.345: attempt to access beyond end of device [ 52.595153][ T5613] loop5: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 52.629351][ T4416] kworker/u4:6: attempt to access beyond end of device [ 52.629351][ T4416] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.871806][ T5641] block device autoloading is deprecated and will be removed. [ 52.918316][ T5641] md/raid:md6: device ram12 operational as raid disk 0 [ 52.923145][ T5641] md/raid:md6: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 52.929161][ T5629] JBD2: Ignoring recovery information on journal [ 52.959818][ T5646] md: recovery of RAID array md6 [ 52.983420][ T5646] md: md6: recovery done. [ 53.013921][ T5629] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 53.124086][ T5654] svc: failed to register nfsdv3 RPC service (errno 111). [ 53.130286][ T5653] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 53.133403][ T5654] svc: failed to register nfsaclv3 RPC service (errno 111). [ 53.153106][ T5653] (syz.3.361,5653,1):ocfs2_journal_init:932 ERROR: Journal file size (0) is too small! [ 53.154935][ T5653] (syz.3.361,5653,1):ocfs2_check_volume:2402 ERROR: Could not initialize journal! [ 53.156721][ T5653] (syz.3.361,5653,1):ocfs2_check_volume:2487 ERROR: status = -22 [ 53.167740][ T5653] (syz.3.361,5653,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 53.175859][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 53.180563][ T5653] (syz.3.361,5653,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 53.414099][ T5661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.363 (5661) [ 53.419306][ T5676] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 53.430388][ T5661] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.435301][ T5661] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 53.443685][ T5659] F2FS-fs (loop6): invalid crc value [ 53.457414][ T5661] BTRFS info (device loop5): using free space tree [ 53.462056][ T5659] F2FS-fs (loop6): Found nat_bits in checkpoint [ 53.494366][ T5659] F2FS-fs (loop6): Start checkpoint disabled! [ 53.508282][ T5659] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 53.527314][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 53.565586][ T5659] syz.6.362: attempt to access beyond end of device [ 53.565586][ T5659] loop6: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 53.595882][ T5697] block device autoloading is deprecated and will be removed. [ 53.627664][ T5697] md/raid:md4: device ram8 operational as raid disk 0 [ 53.629130][ T299] kworker/u4:3: attempt to access beyond end of device [ 53.629130][ T299] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 53.648835][ T5697] md/raid:md4: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 53.657015][ T5712] md: recovery of RAID array md4 [ 53.666068][ T5661] BTRFS info (device loop5): enabling ssd optimizations [ 53.677130][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 53.730044][ T5712] md: md4: recovery done. [ 53.814691][ T4736] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.985202][ T5735] svc: failed to register lockdv1 RPC service (errno 111). [ 54.322806][ T5747] JBD2: Ignoring recovery information on journal [ 54.371424][ T5749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.386 (5749) [ 54.386898][ T5747] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 54.401788][ T5749] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.406713][ T5749] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 54.411503][ T5749] BTRFS info (device loop4): using free space tree [ 54.480981][ T5749] BTRFS info (device loop4): enabling ssd optimizations [ 54.573773][ T4338] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.691704][ T5781] (syz.2.383,5781,0):ocfs2_xa_cleanup_value_truncate:2018 ERROR: Unable to allocate an external value for xattr ima safely. Leaking 0 clusters and removing the entry [ 54.763443][ T5788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.778153][ T5788] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 54.793416][ T5788] EXT4-fs (loop6): shut down requested (1) [ 54.827026][ T5220] EXT4-fs (loop6): unmounting filesystem. [ 54.925832][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 54.941831][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 55.112614][ T5816] Bluetooth: MGMT ver 1.22 [ 55.123874][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 55.280322][ T5814] set_capacity_and_notify: 12 callbacks suppressed [ 55.280331][ T5814] loop5: detected capacity change from 0 to 40427 [ 55.284233][ T5814] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 55.286098][ T5814] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 55.288870][ T5814] F2FS-fs (loop5): invalid crc value [ 55.291896][ T5814] F2FS-fs (loop5): Found nat_bits in checkpoint [ 55.305863][ T5814] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 55.307576][ T5814] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 55.757145][ T4344] Bluetooth: hci3: command 0x0419 tx timeout [ 55.794225][ T5857] loop5: detected capacity change from 0 to 128 [ 55.809263][ T5853] loop2: detected capacity change from 0 to 4096 [ 55.819308][ T5857] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 55.826550][ T5857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.841883][ T5853] ntfs3: loop2: Failed to load $Extend. [ 55.867741][ T5857] process 'syz.5.420' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 55.971431][ T4337] ntfs3: loop2: ino=5, mi_enum_attr [ 55.972590][ T4337] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 55.974866][ T4337] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 56.046641][ T5871] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.064897][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.066359][ T5869] FAULT_INJECTION: forcing a failure. [ 56.066359][ T5869] name failslab, interval 1, probability 0, space 0, times 0 [ 56.071260][ T5867] svc: failed to register lockdv1 RPC service (errno 111). [ 56.081660][ T5869] CPU: 1 PID: 5869 Comm: syz.6.426 Not tainted syzkaller #0 [ 56.083073][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 56.084976][ T5869] Call trace: [ 56.085723][ T5869] dump_backtrace+0x1c4/0x1f0 [ 56.086626][ T5869] show_stack+0x2c/0x3c [ 56.087495][ T5869] __dump_stack+0x30/0x40 [ 56.088471][ T5869] dump_stack_lvl+0xf4/0x15c [ 56.089523][ T5869] dump_stack+0x1c/0x5c [ 56.090470][ T5869] should_fail_ex+0x3cc/0x524 [ 56.091497][ T5869] __should_failslab+0xc0/0x11c [ 56.092588][ T5869] should_failslab+0x10/0x28 [ 56.093624][ T5869] kmem_cache_alloc+0x88/0x310 [ 56.094625][ T5869] sk_prot_alloc+0x60/0x1e8 [ 56.095507][ T5869] sk_alloc+0x44/0x3a0 [ 56.096403][ T5869] inet_create+0x670/0xd84 [ 56.097323][ T5869] __sock_create+0x448/0x8a8 [ 56.098260][ T5869] sock_create_kern+0x4c/0x64 [ 56.099230][ T5869] mptcp_subflow_create_socket+0xe4/0xb64 [ 56.100416][ T5869] mptcp_init_sock+0x10c/0x6bc [ 56.101386][ T5869] inet_create+0xa24/0xd84 [ 56.102165][ T5869] __sock_create+0x448/0x8a8 [ 56.103070][ T5869] __sys_socket+0xc0/0x1b0 [ 56.104002][ T5869] __arm64_sys_socket+0x7c/0x94 [ 56.105014][ T5869] invoke_syscall+0x98/0x290 [ 56.106001][ T5869] el0_svc_common+0x13c/0x258 [ 56.106991][ T5869] do_el0_svc+0x5c/0x134 [ 56.107764][ T5869] el0_svc+0x58/0x12c [ 56.108513][ T5869] el0t_64_sync_handler+0x84/0xf0 [ 56.109604][ T5869] el0t_64_sync+0x18c/0x190 [ 56.120078][ T5874] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.147547][ T5871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.251893][ T5880] loop6: detected capacity change from 0 to 2048 [ 56.271896][ T5866] loop2: detected capacity change from 0 to 32768 [ 56.278957][ T5866] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.424 (5866) [ 56.292806][ T5880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.313081][ T5866] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.324339][ T5866] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 56.327882][ T5866] BTRFS info (device loop2): setting nodatasum [ 56.329103][ T5866] BTRFS info (device loop2): force zlib compression, level 3 [ 56.338736][ T5866] BTRFS info (device loop2): turning on flush-on-commit [ 56.340196][ T5866] BTRFS info (device loop2): max_inline at 4096 [ 56.346024][ T5866] BTRFS info (device loop2): using free space tree [ 56.383801][ T5890] netlink: 'syz.4.434': attribute type 3 has an invalid length. [ 56.476960][ T5902] loop6: detected capacity change from 0 to 4096 [ 56.504188][ T5902] ntfs3: loop6: Failed to load $Extend. [ 56.592436][ T5866] BTRFS info (device loop2): enabling ssd optimizations [ 56.641192][ T5220] ntfs3: loop6: ino=5, mi_enum_attr [ 56.642233][ T5220] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 56.660044][ T5220] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 56.719391][ T5929] loop6: detected capacity change from 0 to 256 [ 56.736319][ T5929] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.752498][ T5929] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 56.794880][ T5929] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc62de5db, utbl_chksum : 0xe619d30d) [ 56.834503][ T5929] exFAT-fs (loop6): failed to load alloc-bitmap [ 56.853511][ T5929] exFAT-fs (loop6): failed to recognize exfat type [ 56.880620][ T5907] loop3: detected capacity change from 0 to 40427 [ 56.894606][ T5907] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 56.896027][ T5907] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 56.904865][ T5907] F2FS-fs (loop3): invalid crc value [ 56.919759][ T5907] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.944123][ T5907] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 56.945533][ T5907] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.970926][ T4337] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 57.077765][ T5930] syz.4.442 (5930): drop_caches: 1 [ 57.223380][ T5935] syz.4.442 (5935): drop_caches: 1 [ 57.322077][ T5964] loop2: detected capacity change from 0 to 34816 [ 57.336693][ T5964] EXT4-fs (loop2): can't mount with both data=journal and dax [ 57.451205][ T5966] loop4: detected capacity change from 0 to 49152 [ 57.472262][ T5966] EXT4-fs (loop4): Test dummy encryption mode enabled [ 57.515620][ T5966] EXT4-fs (loop4): mounted filesystem with ordered data mode. Quota mode: none. [ 57.572746][ T5969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.457 (5969) [ 57.578005][ T5969] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 57.580024][ T5969] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 57.581746][ T5969] BTRFS info (device loop6): setting nodatasum [ 57.582878][ T5969] BTRFS info (device loop6): force zlib compression, level 3 [ 57.584340][ T5969] BTRFS info (device loop6): turning on flush-on-commit [ 57.585755][ T5969] BTRFS info (device loop6): max_inline at 4096 [ 57.586956][ T5969] BTRFS info (device loop6): using free space tree [ 57.595230][ T5969] BTRFS info (device loop6): enabling ssd optimizations [ 57.676700][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 57.684963][ T5975] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 57.686333][ T5975] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 57.690590][ T5975] F2FS-fs (loop2): invalid crc value [ 57.751679][ T5975] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.779932][ T5975] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 57.781510][ T5975] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.002458][ T6023] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac14:1414 with DS=0x31 [ 58.085245][ T5984] XFS (loop5): Mounting V5 Filesystem [ 58.180852][ T5984] XFS (loop5): Ending clean mount [ 58.293869][ T4736] XFS (loop5): Unmounting Filesystem [ 58.324262][ T6040] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 58.331866][ T6040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.336431][ T5220] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.569598][ T6042] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.475 (6042) [ 58.575308][ T6042] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.577710][ T6042] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 58.579383][ T6042] BTRFS info (device loop4): using free space tree [ 58.618102][ T6051] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.738610][ T6042] BTRFS info (device loop4): enabling ssd optimizations [ 58.798231][ T6053] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 58.799840][ T6053] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 58.802102][ T6053] F2FS-fs (loop2): invalid crc value [ 58.871754][ T6053] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.922024][ T6053] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 58.923571][ T6053] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.969433][ T4338] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 59.000380][ T6100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.053434][ T6053] syz.2.479: attempt to access beyond end of device [ 59.053434][ T6053] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 59.266587][ T6125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 59.404621][ T6126] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.500 (6126) [ 59.409691][ T6126] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 59.412095][ T6126] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 59.422526][ T6126] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 59.433534][ T6126] BTRFS info (device loop3): use zstd compression, level 3 [ 59.436569][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 59.438521][ T6126] BTRFS info (device loop3): using free space tree [ 59.480598][ T6140] binder: 6139:6140 ioctl c0306201 20000080 returned -14 [ 59.495242][ T6143] FAULT_INJECTION: forcing a failure. [ 59.495242][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 59.505318][ T6143] CPU: 1 PID: 6143 Comm: syz.4.507 Not tainted syzkaller #0 [ 59.506808][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 59.508865][ T6143] Call trace: [ 59.509575][ T6143] dump_backtrace+0x1c4/0x1f0 [ 59.510622][ T6143] show_stack+0x2c/0x3c [ 59.511553][ T6143] __dump_stack+0x30/0x40 [ 59.512495][ T6143] dump_stack_lvl+0xf4/0x15c [ 59.513479][ T6143] dump_stack+0x1c/0x5c [ 59.514420][ T6143] should_fail_ex+0x3cc/0x524 [ 59.515466][ T6143] __should_failslab+0xc0/0x11c [ 59.516568][ T6143] should_failslab+0x10/0x28 [ 59.517660][ T6143] __kmem_cache_alloc_node+0x7c/0x318 [ 59.518906][ T6143] kmalloc_trace+0x48/0x94 [ 59.519842][ T6143] snd_seq_port_connect+0x7c/0x3a0 [ 59.521001][ T6143] snd_seq_ioctl_subscribe_port+0x270/0x650 [ 59.522248][ T6143] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 59.523463][ T6143] snd_seq_oss_midi_open+0x33c/0x5fc [ 59.524539][ T6143] snd_seq_oss_midi_open_all+0x84/0xec [ 59.525534][ T6143] snd_seq_oss_open+0x7a0/0xca4 [ 59.526382][ T6143] odev_open+0x84/0xbc [ 59.527179][ T6143] soundcore_open+0x2f8/0x47c [ 59.528118][ T6143] chrdev_open+0x3d0/0x51c [ 59.529054][ T6143] do_dentry_open+0x738/0xf8c [ 59.529891][ T6143] vfs_open+0x7c/0x90 [ 59.530668][ T6143] path_openat+0x1fc0/0x27a0 [ 59.531700][ T6143] do_filp_open+0x198/0x38c [ 59.532729][ T6143] do_sys_openat2+0x134/0x3fc [ 59.533791][ T6143] __arm64_sys_openat+0x11c/0x150 [ 59.534891][ T6143] invoke_syscall+0x98/0x290 [ 59.535850][ T6143] el0_svc_common+0x13c/0x258 [ 59.536875][ T6143] do_el0_svc+0x5c/0x134 [ 59.537785][ T6143] el0_svc+0x58/0x12c [ 59.538649][ T6143] el0t_64_sync_handler+0x84/0xf0 [ 59.539759][ T6143] el0t_64_sync+0x18c/0x190 [ 59.570094][ T6147] netlink: 'syz.5.506': attribute type 1 has an invalid length. [ 59.572806][ T6147] netlink: 'syz.5.506': attribute type 2 has an invalid length. [ 59.615214][ T6126] BTRFS info (device loop3): enabling ssd optimizations [ 59.672039][ T6126] overlayfs: failed to resolve 'lower': -2 [ 59.690895][ T6171] FAULT_INJECTION: forcing a failure. [ 59.690895][ T6171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.693650][ T6171] CPU: 1 PID: 6171 Comm: syz.2.511 Not tainted syzkaller #0 [ 59.695069][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 59.697039][ T6171] Call trace: [ 59.697743][ T6171] dump_backtrace+0x1c4/0x1f0 [ 59.698761][ T6171] show_stack+0x2c/0x3c [ 59.699553][ T6171] __dump_stack+0x30/0x40 [ 59.700479][ T6171] dump_stack_lvl+0xf4/0x15c [ 59.701471][ T6171] dump_stack+0x1c/0x5c [ 59.702360][ T6171] should_fail_ex+0x3cc/0x524 [ 59.703374][ T6171] should_fail_alloc_page+0x74/0xb8 [ 59.704477][ T6171] prepare_alloc_pages+0x1b8/0x4f0 [ 59.705594][ T6171] __alloc_pages+0x134/0x544 [ 59.706595][ T6171] alloc_pages+0x434/0x6fc [ 59.707566][ T6171] pipe_write+0x3bc/0x18b4 [ 59.708542][ T6171] vfs_write+0x3c8/0x7c8 [ 59.709489][ T6171] ksys_write+0x12c/0x228 [ 59.710434][ T6171] __arm64_sys_write+0x7c/0x90 [ 59.711502][ T6171] invoke_syscall+0x98/0x290 [ 59.712541][ T6171] el0_svc_common+0x13c/0x258 [ 59.713491][ T6171] do_el0_svc+0x5c/0x134 [ 59.714324][ T6171] el0_svc+0x58/0x12c [ 59.715078][ T6171] el0t_64_sync_handler+0x84/0xf0 [ 59.715972][ T6171] el0t_64_sync+0x18c/0x190 [ 59.718220][ T6126] overlayfs: failed to resolve 'lower': -2 [ 59.773424][ T4332] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 59.892057][ T4322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.907663][ T6181] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 59.944121][ T6180] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 59.947031][ T6180] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 59.950523][ T6180] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.950523][ T6180] [ 59.952748][ T6180] EXT4-fs (loop5): Total free blocks count 0 [ 59.953933][ T6180] EXT4-fs (loop5): Free/Dirty block details [ 59.955147][ T6180] EXT4-fs (loop5): free_blocks=4096 [ 59.956201][ T6180] EXT4-fs (loop5): dirty_blocks=64 [ 59.957262][ T6180] EXT4-fs (loop5): Block reservation details [ 59.958472][ T6180] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 59.960201][ T6181] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 60.183455][ T6207] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.186242][ T6207] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 60.188606][ T6207] REISERFS (device loop2): using ordered data mode [ 60.190139][ T6207] reiserfs: using flush barriers [ 60.191786][ T6207] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.195561][ T6207] REISERFS (device loop2): checking transaction log (loop2) [ 60.198623][ T6207] REISERFS (device loop2): Using r5 hash to sort names [ 60.200207][ T6207] REISERFS (device loop2): using 3.5.x disk format [ 60.203188][ T6207] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 60.548815][ T6248] set_capacity_and_notify: 12 callbacks suppressed [ 60.548825][ T6248] loop2: detected capacity change from 0 to 33792 [ 60.553637][ T6248] EXT4-fs: Ignoring removed bh option [ 60.574150][ T6248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 60.632538][ T6248] EXT4-fs (loop2): shut down requested (1) [ 60.654099][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 60.756278][ T6255] syz.2.540 (6255): drop_caches: 1 [ 60.791404][ T6255] syz.2.540 (6255): drop_caches: 1 [ 60.995612][ T6274] loop6: detected capacity change from 0 to 33280 [ 61.030583][ T6274] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #15: comm syz.6.549: corrupted inode contents [ 61.033357][ T6274] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 61.035354][ T6274] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #15: comm syz.6.549: corrupted inode contents [ 61.040063][ T6274] EXT4-fs error (device loop6): ext4_evict_inode:329: inode #15: comm syz.6.549: mark_inode_dirty error [ 61.044873][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.561'. [ 61.046762][ T6279] netlink: 1 bytes leftover after parsing attributes in process `syz.5.561'. [ 61.057292][ T6279] tc_dump_action: action bad kind [ 61.058648][ T6274] EXT4-fs (loop6): 1 orphan inode deleted [ 61.060051][ T6274] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 61.134319][ T6288] loop4: detected capacity change from 0 to 33792 [ 61.139405][ T6288] EXT4-fs: Ignoring removed bh option [ 61.162762][ T6288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.214560][ T6296] loop2: detected capacity change from 0 to 64 [ 61.216702][ T6288] EXT4-fs (loop4): shut down requested (1) [ 61.243766][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 61.274180][ T6294] syz.5.553 (6294): drop_caches: 1 [ 61.279957][ T6304] mmap: syz.4.557 (6304) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.347308][ T6306] loop3: detected capacity change from 0 to 2048 [ 61.350669][ T6300] syz.5.553 (6300): drop_caches: 1 [ 61.381781][ T6309] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.406433][ T6306] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 61.419137][ T6306] Remounting filesystem read-only [ 61.421269][ T6313] loop4: detected capacity change from 0 to 33280 [ 61.440516][ T6313] EXT2-fs (loop4): (no)acl options not supported [ 61.443070][ T4332] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 61.446739][ T6313] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 61.493373][ T6313] EXT2-fs (loop4): error: ext2_new_blocks: Allocating block in system zone - blocks from 1, length 4 [ 61.502524][ T6313] EXT2-fs (loop4): error: ext2_new_blocks: Allocating block in system zone - blocks from 5, length 4 [ 61.506374][ T6320] FAULT_INJECTION: forcing a failure. [ 61.506374][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.509792][ T6313] EXT2-fs (loop4): error: ext2_new_blocks: Allocating block in system zone - blocks from 9, length 4 [ 61.512394][ T6320] CPU: 1 PID: 6320 Comm: syz.3.568 Not tainted syzkaller #0 [ 61.513835][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 61.515727][ T6320] Call trace: [ 61.516426][ T6320] dump_backtrace+0x1c4/0x1f0 [ 61.517421][ T6320] show_stack+0x2c/0x3c [ 61.518304][ T6320] __dump_stack+0x30/0x40 [ 61.519298][ T6320] dump_stack_lvl+0xf4/0x15c [ 61.520336][ T6320] dump_stack+0x1c/0x5c [ 61.521273][ T6320] should_fail_ex+0x3cc/0x524 [ 61.522337][ T6320] should_fail+0x14/0x24 [ 61.523295][ T6320] should_fail_usercopy+0x20/0x30 [ 61.524429][ T6320] do_ip6t_get_ctl+0xd04/0x13d0 [ 61.525577][ T6320] nf_getsockopt+0x254/0x274 [ 61.526603][ T6320] ipv6_getsockopt+0x2c4/0x3f4 [ 61.527682][ T6320] udpv6_getsockopt+0x94/0xac [ 61.528767][ T6320] sock_common_getsockopt+0xa8/0xc4 [ 61.529926][ T6320] __sys_getsockopt+0x1e0/0x474 [ 61.531009][ T6320] __arm64_sys_getsockopt+0xc0/0xdc [ 61.532204][ T6320] invoke_syscall+0x98/0x290 [ 61.533257][ T6320] el0_svc_common+0x13c/0x258 [ 61.534270][ T6320] do_el0_svc+0x5c/0x134 [ 61.535201][ T6320] el0_svc+0x58/0x12c [ 61.536049][ T6320] el0t_64_sync_handler+0x84/0xf0 [ 61.537177][ T6320] el0t_64_sync+0x18c/0x190 [ 61.548406][ T6322] syz.4.566: attempt to access beyond end of device [ 61.548406][ T6322] loop4: rw=0, sector=3606377190, nr_sectors = 2 limit=33280 [ 61.551605][ T6322] Buffer I/O error on dev loop4, logical block 1803188595, async page read [ 61.553402][ T6322] syz.4.566: attempt to access beyond end of device [ 61.553402][ T6322] loop4: rw=0, sector=3403208898, nr_sectors = 2 limit=33280 [ 61.556124][ T6322] Buffer I/O error on dev loop4, logical block 1701604449, async page read [ 61.581518][ T6322] syz.4.566: attempt to access beyond end of device [ 61.581518][ T6322] loop4: rw=0, sector=59108, nr_sectors = 2 limit=33280 [ 61.597176][ T6322] Buffer I/O error on dev loop4, logical block 29554, async page read [ 61.599257][ T6322] syz.4.566: attempt to access beyond end of device [ 61.599257][ T6322] loop4: rw=0, sector=131072, nr_sectors = 2 limit=33280 [ 61.613558][ T6322] Buffer I/O error on dev loop4, logical block 65536, async page read [ 61.623780][ T6332] FAULT_INJECTION: forcing a failure. [ 61.623780][ T6332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.626471][ T6332] CPU: 0 PID: 6332 Comm: syz.3.572 Not tainted syzkaller #0 [ 61.627952][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 61.629985][ T6332] Call trace: [ 61.630699][ T6332] dump_backtrace+0x1c4/0x1f0 [ 61.631736][ T6332] show_stack+0x2c/0x3c [ 61.632627][ T6332] __dump_stack+0x30/0x40 [ 61.633567][ T6332] dump_stack_lvl+0xf4/0x15c [ 61.634560][ T6332] dump_stack+0x1c/0x5c [ 61.635435][ T6332] should_fail_ex+0x3cc/0x524 [ 61.636431][ T6332] should_fail_alloc_page+0x74/0xb8 [ 61.637569][ T6332] prepare_alloc_pages+0x1b8/0x4f0 [ 61.638655][ T6332] __alloc_pages+0x134/0x544 [ 61.639643][ T6332] alloc_pages+0x434/0x6fc [ 61.640566][ T6332] __get_free_pages+0x18/0x84 [ 61.641463][ T6332] environ_read+0xb0/0x484 [ 61.642381][ T6332] vfs_read+0x2a4/0x7b8 [ 61.643251][ T6332] ksys_read+0x12c/0x228 [ 61.644120][ T6332] __arm64_sys_read+0x7c/0x90 [ 61.645057][ T6332] invoke_syscall+0x98/0x290 [ 61.646033][ T6332] el0_svc_common+0x13c/0x258 [ 61.647050][ T6332] do_el0_svc+0x5c/0x134 [ 61.647970][ T6332] el0_svc+0x58/0x12c [ 61.648772][ T6332] el0t_64_sync_handler+0x84/0xf0 [ 61.649777][ T6332] el0t_64_sync+0x18c/0x190 [ 61.653942][ T6322] syz.4.566: attempt to access beyond end of device [ 61.653942][ T6322] loop4: rw=0, sector=3606377190, nr_sectors = 2 limit=33280 [ 61.656533][ T6322] Buffer I/O error on dev loop4, logical block 1803188595, async page read [ 61.658514][ T6322] syz.4.566: attempt to access beyond end of device [ 61.658514][ T6322] loop4: rw=0, sector=3403208898, nr_sectors = 2 limit=33280 [ 61.661224][ T6322] Buffer I/O error on dev loop4, logical block 1701604449, async page read [ 61.664410][ T6322] syz.4.566: attempt to access beyond end of device [ 61.664410][ T6322] loop4: rw=0, sector=59108, nr_sectors = 2 limit=33280 [ 61.670230][ T6322] Buffer I/O error on dev loop4, logical block 29554, async page read [ 61.671999][ T6322] syz.4.566: attempt to access beyond end of device [ 61.671999][ T6322] loop4: rw=0, sector=3606377190, nr_sectors = 2 limit=33280 [ 61.674893][ T6322] Buffer I/O error on dev loop4, logical block 1803188595, async page read [ 61.676610][ T6322] syz.4.566: attempt to access beyond end of device [ 61.676610][ T6322] loop4: rw=0, sector=3403208898, nr_sectors = 2 limit=33280 [ 61.680167][ T6322] Buffer I/O error on dev loop4, logical block 1701604449, async page read [ 61.681933][ T6322] Buffer I/O error on dev loop4, logical block 29554, async page read [ 61.697005][ T6341] FAULT_INJECTION: forcing a failure. [ 61.697005][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 61.703067][ T6341] CPU: 1 PID: 6341 Comm: syz.5.575 Not tainted syzkaller #0 [ 61.704422][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 61.706619][ T6341] Call trace: [ 61.707274][ T6341] dump_backtrace+0x1c4/0x1f0 [ 61.708200][ T6341] show_stack+0x2c/0x3c [ 61.709037][ T6341] __dump_stack+0x30/0x40 [ 61.710000][ T6341] dump_stack_lvl+0xf4/0x15c [ 61.711067][ T6341] dump_stack+0x1c/0x5c [ 61.712024][ T6341] should_fail_ex+0x3cc/0x524 [ 61.713111][ T6341] __should_failslab+0xc0/0x11c [ 61.714217][ T6341] should_failslab+0x10/0x28 [ 61.715282][ T6341] __kmem_cache_alloc_node+0x7c/0x318 [ 61.716477][ T6341] __kmalloc+0xc4/0x180 [ 61.717428][ T6341] inotify_handle_inode_event+0x294/0x7d8 [ 61.718741][ T6341] fsnotify+0x1658/0x19ec [ 61.719661][ T6341] __fsnotify_parent+0x420/0x6c0 [ 61.720742][ T6341] vfs_write+0x668/0x7c8 [ 61.721605][ T6341] ksys_write+0x12c/0x228 [ 61.722502][ T6341] __arm64_sys_write+0x7c/0x90 [ 61.723496][ T6341] invoke_syscall+0x98/0x290 [ 61.724437][ T6341] el0_svc_common+0x13c/0x258 [ 61.725373][ T6341] do_el0_svc+0x5c/0x134 [ 61.726228][ T6341] el0_svc+0x58/0x12c [ 61.727085][ T6341] el0t_64_sync_handler+0x84/0xf0 [ 61.728164][ T6341] el0t_64_sync+0x18c/0x190 [ 61.842344][ T6274] EXT4-fs (loop6): unmounting filesystem. [ 61.999001][ T6351] syz.3.578 (6351): drop_caches: 1 [ 62.106223][ T6360] syz.3.578 (6360): drop_caches: 1 [ 62.210930][ T6379] binder: 6378:6379 got reply transaction with no transaction stack [ 62.218560][ T6379] binder: 6378:6379 transaction reply to 0:0 failed 7/29201/-71, size 0-0 line 2964 [ 62.272633][ T6370] loop6: detected capacity change from 0 to 32768 [ 62.307947][ T6368] loop2: detected capacity change from 0 to 40427 [ 62.315796][ T6368] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 62.321018][ T6368] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 62.329789][ T6368] F2FS-fs (loop2): invalid crc value [ 62.346899][ T6370] XFS (loop6): Mounting V5 Filesystem [ 62.355553][ T6368] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.372541][ T6370] XFS (loop6): Ending clean mount [ 62.373022][ T6368] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8 [ 62.413522][ T6368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 62.424814][ T6368] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x608/0x1b5c [ 62.439105][ T6368] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x110/0x91c [ 62.473504][ T5220] XFS (loop6): Unmounting Filesystem [ 62.500855][ T6406] netlink: 'syz.4.589': attribute type 7 has an invalid length. [ 62.515627][ T6406] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.517492][ T6406] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.519128][ T6406] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.520761][ T6406] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.523983][ T6366] loop5: detected capacity change from 0 to 65536 [ 62.548576][ T6366] XFS (loop5): Mounting V5 Filesystem [ 62.551356][ T6406] netlink: 'syz.4.589': attribute type 7 has an invalid length. [ 62.584258][ T6366] XFS (loop5): Ending clean mount [ 62.679436][ T4736] XFS (loop5): Unmounting Filesystem [ 62.794898][ T6438] loop4: detected capacity change from 0 to 33792 [ 62.827296][ T6438] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.854224][ T6438] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.605: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.863086][ T6438] EXT4-fs (loop4): Remounting filesystem read-only [ 62.878449][ T6438] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.605: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.896020][ T6438] EXT4-fs (loop4): Remounting filesystem read-only [ 62.897651][ T6438] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.605: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.930192][ T6438] EXT4-fs (loop4): Remounting filesystem read-only [ 62.964082][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 63.040085][ T6449] syz.6.596 (6449): drop_caches: 1 [ 63.067354][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.068913][ T7] binder: undelivered death notification, 0000000000000000 [ 63.169042][ T6454] syz.6.596 (6454): drop_caches: 1 [ 63.291834][ T6496] netlink: 'syz.4.610': attribute type 19 has an invalid length. [ 63.334403][ T6502] gadgetfs: bound to dummy_udc driver [ 63.428683][ T6517] netlink: 'syz.5.615': attribute type 1 has an invalid length. [ 63.430421][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.615'. [ 63.446600][ T6511] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 10000) [ 63.492996][ T6525] "syz.5.620" (6525) uses obsolete ecb(arc4) skcipher [ 63.602651][ T6531] hfsplus: request for non-existent node 33554434 in B*Tree [ 63.606245][ T6531] hfsplus: request for non-existent node 33554434 in B*Tree [ 63.611507][ T6531] hfsplus: request for non-existent node 33554434 in B*Tree [ 63.614912][ T6531] hfsplus: request for non-existent node 33554434 in B*Tree [ 63.621833][ T6531] hfsplus: request for non-existent node 33554434 in B*Tree [ 63.625015][ T6531] hfsplus: request for non-existent node 33554434 in B*Tree [ 63.674693][ T6541] ip_tables: iptables: counters copy to user failed while replacing table [ 63.993713][ T6524] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 64.001588][ T6524] F2FS-fs (loop6): invalid crc value [ 64.001646][ T6550] XFS (loop4): Mounting V5 Filesystem [ 64.015773][ T6524] F2FS-fs (loop6): Found nat_bits in checkpoint [ 64.028803][ T6524] F2FS-fs (loop6): recover fsync data on readonly fs [ 64.036176][ T6524] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 64.039180][ T6524] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 64.042311][ T6550] XFS (loop4): Ending clean mount [ 64.045588][ T6524] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 64.061042][ T6524] F2FS-fs (loop6): Try to recover all the superblocks, ret: 0 [ 64.073802][ T6571] Set syz1 is full, maxelem 2 reached [ 64.077616][ T6573] bio_check_eod: 17357 callbacks suppressed [ 64.077627][ T6573] f2fs_ckpt-7:6: attempt to access beyond end of device [ 64.077627][ T6573] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.146812][ T6577] FAULT_INJECTION: forcing a failure. [ 64.146812][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 64.154055][ T6577] CPU: 0 PID: 6577 Comm: syz.2.631 Not tainted syzkaller #0 [ 64.155636][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.157789][ T6577] Call trace: [ 64.158479][ T6577] dump_backtrace+0x1c4/0x1f0 [ 64.159463][ T6577] show_stack+0x2c/0x3c [ 64.160332][ T6577] __dump_stack+0x30/0x40 [ 64.161309][ T6577] dump_stack_lvl+0xf4/0x15c [ 64.162318][ T6577] dump_stack+0x1c/0x5c [ 64.163241][ T6577] should_fail_ex+0x3cc/0x524 [ 64.164269][ T6577] __should_failslab+0xc0/0x11c [ 64.165343][ T6577] should_failslab+0x10/0x28 [ 64.166363][ T6577] __kmem_cache_alloc_node+0x7c/0x318 [ 64.167570][ T6577] kmalloc_trace+0x48/0x94 [ 64.168380][ T6577] kobject_uevent_env+0x258/0x88c [ 64.169483][ T6577] kobject_uevent+0x2c/0x3c [ 64.170452][ T6577] driver_register+0x2a0/0x37c [ 64.171408][ T6577] usb_gadget_register_driver_owner+0xf0/0x25c [ 64.172702][ T6577] raw_ioctl+0x1014/0x326c [ 64.173618][ T6577] __arm64_sys_ioctl+0x14c/0x1c8 [ 64.174649][ T6577] invoke_syscall+0x98/0x290 [ 64.175609][ T6577] el0_svc_common+0x13c/0x258 [ 64.176513][ T6577] do_el0_svc+0x5c/0x134 [ 64.177369][ T6577] el0_svc+0x58/0x12c [ 64.178185][ T6577] el0t_64_sync_handler+0x84/0xf0 [ 64.179245][ T6577] el0t_64_sync+0x18c/0x190 [ 64.180125][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.184253][ T4338] XFS (loop4): Unmounting Filesystem [ 64.185174][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.189017][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.269047][ T6579] exfat: Deprecated parameter 'utf8' [ 64.271997][ T6579] exfat: Deprecated parameter 'namecase' [ 64.287012][ T6579] exfat: Deprecated parameter 'utf8' [ 64.295091][ T6579] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 64.485200][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486732][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.522715][ T6585] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "hash=tea" [ 64.548374][ T5220] batman_adv: batadv0: Interface deactivated: syz_tun [ 64.588567][ T5220] batman_adv: batadv0: Removing interface: syz_tun [ 64.681456][ T6599] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.716369][ T6599] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 64.719945][ T6599] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 64.720304][ T6601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.722877][ T6599] Remounting filesystem read-only [ 64.747946][ T6601] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 64.758466][ T4736] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 64.855762][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 64.871284][ T6611] Unable to handle kernel paging request at virtual address dfff800000000001 [ 64.873019][ T6611] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.882374][ T6611] Mem abort info: [ 64.883460][ T6611] ESR = 0x0000000096000006 [ 64.884410][ T6611] EC = 0x25: DABT (current EL), IL = 32 bits [ 64.885607][ T6611] SET = 0, FnV = 0 [ 64.886356][ T6611] EA = 0, S1PTW = 0 [ 64.931357][ T6611] FSC = 0x06: level 2 translation fault [ 64.932485][ T6611] Data abort info: [ 64.933168][ T6611] ISV = 0, ISS = 0x00000006 [ 64.933967][ T6611] CM = 0, WnR = 0 [ 64.934706][ T6611] [dfff800000000001] address between user and kernel address ranges [ 64.936386][ T6611] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 64.937770][ T6611] Modules linked in: [ 64.938573][ T6611] CPU: 1 PID: 6611 Comm: syz-executor Not tainted syzkaller #0 [ 64.940150][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.942327][ T6611] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 64.944006][ T6611] pc : ext4_mb_load_buddy_gfp+0x21c/0xec0 [ 64.945289][ T6611] lr : ext4_mb_load_buddy_gfp+0x1e8/0xec0 [ 64.946578][ T6611] sp : ffff8000237e6fc0 [ 64.947516][ T6611] x29: ffff8000237e7020 x28: 1ffff000046fce3c x27: dfff800000000000 [ 64.949109][ T6611] x26: 0000000000000008 x25: 0000000000000000 x24: ffff0000d64516f0 [ 64.950949][ T6611] x23: ffff0000d64516c0 x22: 0000000000000000 x21: 0000000000000001 [ 64.952789][ T6611] x20: 1ffff000046fce3c x19: ffff8000237e71d0 x18: 1fffe00033c2597e [ 64.954651][ T6611] x17: ffff8000163dd000 x16: ffff800011ba16d0 x15: 0000000000000000 [ 64.956530][ T6611] x14: 0000000000000406 x13: 0000000000ff0100 x12: ffff800016647a88 [ 64.958386][ T6611] x11: ff008000086f8b74 x10: 0000000000000000 x9 : 7ac8e58d22cfd900 [ 64.960256][ T6611] x8 : 7ac8e58d22cfd900 x7 : ffff800008704dd0 x6 : 0000000000000000 [ 64.962063][ T6611] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 64.963618][ T6611] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 64.965253][ T6611] Call trace: [ 64.965928][ T6611] ext4_mb_load_buddy_gfp+0x21c/0xec0 [ 64.967030][ T6611] ext4_mb_regular_allocator+0xfb4/0x2b60 [ 64.968256][ T6611] ext4_mb_new_blocks+0xb78/0x4244 [ 64.969311][ T6611] ext4_ext_map_blocks+0x12bc/0x5680 [ 64.970433][ T6611] ext4_map_blocks+0x7b0/0x160c [ 64.971472][ T6611] ext4_getblk+0x178/0x680 [ 64.972418][ T6611] ext4_bread+0x3c/0x1a8 [ 64.973213][ T6611] ext4_append+0x23c/0x488 [ 64.974130][ T6611] ext4_init_new_dir+0x270/0x4f0 [ 64.975148][ T6611] ext4_mkdir+0x3b8/0xa28 [ 64.976048][ T6611] vfs_mkdir+0x314/0x4d8 [ 64.976884][ T6611] do_mkdirat+0x1b8/0x3ec [ 64.977752][ T6611] __arm64_sys_mkdirat+0x90/0xa8 [ 64.978745][ T6611] invoke_syscall+0x98/0x290 [ 64.979668][ T6611] el0_svc_common+0x13c/0x258 [ 64.980601][ T6611] do_el0_svc+0x5c/0x134 [ 64.981464][ T6611] el0_svc+0x58/0x12c [ 64.982237][ T6611] el0t_64_sync_handler+0x84/0xf0 [ 64.983129][ T6611] el0t_64_sync+0x18c/0x190 [ 64.983936][ T6611] Code: aa0003f6 d343ff55 f9000ff4 aa1c03f4 (387b6aa8) [ 64.985138][ T6611] ---[ end trace 0000000000000000 ]--- [ 65.270847][ T6611] Kernel panic - not syncing: Oops: Fatal exception [ 65.272176][ T6611] SMP: stopping secondary CPUs [ 65.273145][ T6611] Kernel Offset: disabled [ 65.273950][ T6611] CPU features: 0x050000,000f0097,a65bfea7 [ 65.275158][ T6611] Memory Limit: none [ 65.561370][ T6611] Rebooting in 86400 seconds..