last executing test programs: 1m22.675854565s ago: executing program 32 (id=399): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/134, 0x86}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0xffff8000}], 0x1, 0x40002102, 0x0) sendmsg$tipc(r0, &(0x7f0000000440)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b9c", 0x2}], 0x1, 0x0, 0x0, 0x404c8c4}, 0x4000044) 1m15.128055319s ago: executing program 0 (id=612): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m15.005524801s ago: executing program 1 (id=616): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="469dc2d34ae2b700000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m15.003712427s ago: executing program 0 (id=626): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$eJzs3M9vFFUcAPDvTLflt62KP0DQKhqJPwotPw9eMJp40MREDxhPtS0EWajSmgghWj3g0ZB4Nx5N/As86cWoJxOvejckxHABNSZjZna2XZbd0rVbFtjPJ1n2vZ23zPvuzJt5895MA+hbo/k/ScTmiPgtIoZr2esLjNberl05P/XXlfNTSWTZG38mRbmrV85P1YvWv7eplsmyMr+uxXovvB0xWa3OnCnze+ZPvbdn7uy550+cmjw+c3zm9MThw/v37Rw6OHGgK3HmcV3d/tHsjm2vvHXxtamjF9/56Zu8vpvL5Y1xdMmG0dqv29JTXV5Zr21pSCeVHlaEjgxERL65Bov2PxwDsWFx2XC8/GlPKwesqSzLslbn59JCBtzFkuh1DYDeqJ/o8+vf+usWdT1uC5ePRLx/qBb/tfJVW1KJtCwz2HR9202jEXF04e8v81eszTgEAMB1vjsSEc+16v+l8WBDuXvKOZSRiLg3Iu6LiPsjYmtEPBBRlH0oIh7ucP3NMyQ39n/SS/8rsBXK+38vlHNbi/2/f7Mi/tLIQJnbUsQ/mBw7UZ3ZW/4mu2NwXZ4fX2Yd37/06+ftluXxJwtLfcB8/fW+YE16qdI0QDc9OT+5yrAXXf4kYnulKf5CEvVpnCQitkXE9o7+56UrjBPPfL2jXanG/m/r+JfRhXmm7KuIp2vbfyGa4q9L2s5Pjh86OHFgz/qozuz9J8uyYq9YslC+//zLhdfbrX9V8XdBvv03Nu//hcX4R5L1EXNnz50s5mvnonmG+KYu/P5Z22uam8ffev8fSt4s0kPlZx9Ozs+fGY8YSl698fOJpe+W+Upj/Lt3tYo/LY5x9WgfiYh8J94ZEY9GxGNl3R+PiCciYtcy8f/44pPvdh7/MqPyNZ0ealvK45++2faPxu3feWLg5A/fdh5/Xb799xep3eUnKzn+rbSCq/ntAAAA4E6RFvfAJ+nYYjpNx8Zq9/BvjY1pdXZu/tljsx+cnq7dKz8Sg2l9/HO4YTx0vBwbrucnloZgivy+ctz4i4ENRX5sarY63ePYod9tatP+c38M9Lp2wJrzvBb0L+0f+pf2D/1L+4f+pf1D/2rV/j/uQT2AW8/5H/qX9g/9q6n9d/Z0J3BHc/6HvtT22fh0VY/8S9z1iUg7/1YlelrnpIM/DHH7JCprXed1LRf1+sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHf8FAAD//4sz60A=") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(r0, &(0x7f0000000380)='./file0/../file0\x00', r0, &(0x7f0000000400)='./file0/../file0\x00', 0x1) 1m14.887384512s ago: executing program 1 (id=620): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x1, 0x8ffff) lseek(r0, 0x2, 0x4) 1m14.845555108s ago: executing program 0 (id=622): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x76, &(0x7f0000002500)=0x0) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000000000)='\v', 0x1, 0x7fffffffffffffff}]) 1m14.666500738s ago: executing program 1 (id=628): unshare(0x22020400) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x10000, @empty, 0xfffffffb}, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x48004) syz_clone3(&(0x7f00000003c0)={0x2020000, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80000) 1m14.572935068s ago: executing program 0 (id=631): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x158) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) read$FUSE(r0, &(0x7f0000004a80)={0x2020}, 0x2020) 1m14.39621876s ago: executing program 33 (id=631): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x158) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) read$FUSE(r0, &(0x7f0000004a80)={0x2020}, 0x2020) 1m14.386730876s ago: executing program 1 (id=634): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(r0, &(0x7f0000000380)='./file0/../file0\x00', r0, &(0x7f0000000400)='./file0/../file0\x00', 0x1) 1m14.18119872s ago: executing program 1 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x800) 1m13.599361408s ago: executing program 1 (id=650): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0xa) 1m13.431393338s ago: executing program 34 (id=650): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0xa) 49.672188033s ago: executing program 5 (id=1294): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 49.54021716s ago: executing program 5 (id=1296): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x2, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0xb, 0x1, 0x3, 0x2}]}}}}}}}}, 0x0) 49.426969996s ago: executing program 5 (id=1299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x42) 49.298430941s ago: executing program 5 (id=1300): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 49.058123202s ago: executing program 5 (id=1307): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x1b0, 0x65, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_ACT={0x180, 0x1, [@m_bpf={0xec, 0x11, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xa4, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x90, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x5e, 0x6, "0ca6ab8b50882586528e9ec38e8259f43d6780311e17c01ed5d6e6c71a3dda7d853c7197b102483489f2edf74dbf2a6525bc9fe5b630bf4bacfa86b667f3b3b20adcee91ba595b8db78cf6432567c610efede1a2c048eb39e87b"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 48.686746858s ago: executing program 5 (id=1317): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 48.514536631s ago: executing program 35 (id=1317): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 37.377902379s ago: executing program 7 (id=1610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x102, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='d'], 0x64}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 37.261159657s ago: executing program 7 (id=1614): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) 37.11859021s ago: executing program 7 (id=1618): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 37.015890911s ago: executing program 7 (id=1621): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x521, &(0x7f0000000500)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x141104, 0x80) 36.752829394s ago: executing program 7 (id=1627): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, 0xffffffffffffffff, 0x1c, &(0x7f00000002c0)={{0xa, 0x4e20, 0x81, @mcast2, 0x80}}}) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 35.993976544s ago: executing program 7 (id=1640): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) pread64$ublk_bdev(r0, &(0x7f0000000080)=""/20, 0x14, 0xcd16) 35.864584082s ago: executing program 36 (id=1640): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) pread64$ublk_bdev(r0, &(0x7f0000000080)=""/20, 0x14, 0xcd16) 26.235152425s ago: executing program 4 (id=1871): socket(0x2, 0x2, 0x1) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffda1, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18) 26.081659846s ago: executing program 4 (id=1876): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x797, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xe024, 0xd000007}) 25.919074487s ago: executing program 4 (id=1881): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000100)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x1ad) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x1f, 0x1, 0x0, r0, 0x0, 0x0, 0x73f580000000, 0x0, 0x2}]) 25.646581117s ago: executing program 4 (id=1888): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{}, {@init_itable}, {@nolazytime}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000780)="$eJzs3M9vFFUcAPDvzHaLCNiKqPxS8Vck/mgpoHLwoEYTD5iY6EGPTVsIslBDayKEKBiDJ2NMvBuP/gt60Ysxnoxe9W5IiOECeFozuzN0d7u7tNsti93PJxl4b+ZN3/v2zdt9M2+3AQytfdk/ScTWiPgzIsbq2eYC++r/Xb96fubG1fMzSVSrb/+T1Mpdu3p+pihanLclz+xPI9LPktjTpt6Fs+dOTlcqc2fy/OTiqQ8mF86ee+7Eqenjc8fnTh88cuTwoakXXzj4fF/izNp0bffH83t3vfHeV28e/aIp/pY41mznpsYf3daT1WrfqrsTbGtIJyMDbAirUoqIrLvKtfE/FqVY6ryxeP3TgTYOWFfVarW6pfPhC1VgA0uiOW/Iw7Ao3uiz+99ia50EvLx+04+Bu/JK/QYoi/t6vtWPjESalym33N/2076IePfCv99kW/T7OQQAQBs/ZvOfZ9vN/9J4oKHcPfna0HhE3BsR2yPivojYERH3R9TKPhgRO1dZf+siyfL5T3q5p8BWKJv/vZSvbTXP/4rZX4yX8ty2Wvzl5NiJytyB/HeyP8qbsvxUlzp+eu2PLzsda5z/ZVtWfzEXzNtxeWRT8zmz04vTa4m50ZWLEbtH2sWf3FwJSCJiV0Ts7rGOE09/t7fTsVvH30Uf1pmq30Y8Ve//C9ESfyHpvj45eVdU5g5MFlfFcr/+dumtTvWvKf4+yPr/7rbX/834x5PG9dqF1ddx6a/PO97T9Hr9jybv1NKj+b6PphcXz0xFjCZH641u3H9w6dwiX5T/4ff6/nbjf3ss/Sb2RER2ET8UEQ9HxCN52x+NiMci4vEu8f/y6hPv9x7/+sr6f3ZV/b+UGI3WPe0TpZM/f99U6fiy+G907//DtdT+fM9KXv9W0q7ermYAAAD4/0kjYmsk6cTNdJpOTNQ/L78jIq3MLyw+c2z+w9Oz9e8IjEc5LZ50jTU8D53Kb+vr+YsRUf9oQXH8UP7c+OvS5lp+Yma+Mjvo4GHIbekw/jN/lwbdOmDd+b4WDC/jH4aX8Q/Dy/iH4dVm/G8eRDuA26/d+/8nA2gHcPu1jH/LfjBE3P/D8Oo4/jfyX/4Barz/w1Ba2By3/pJ810Txk3o8fcMmonxHNGPtiWrStnMjHXTDJNYzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75LwAA//8HW+BC") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0xb, 0x460, &(0x7f0000001380)="$eJzs289vFFUcAPDvzLZg+WEr4g9+qFU0Nv5oaUHl4EGNJh40MfGCx9oWgizU0JoIIYrG4NGQeDceTfwLPOnFqCcTr3o3JMRwEU1M1szuDLs77C4U2i5lP59k4L2d17733Tdv9715nQAG1nj2TxKxLSJ+j4jRRra9wHjjvyuXz879c/nsXBK12tt/JfVyf18+O1cULX5ua56ZSCPSz5LY06HepdNnjs9Wqwun8vzU8on3p5ZOn3n22InZowtHF07OHDp08MD0C8/PPHeDkfxX63X2nqytuz9a3Lvr9XcuvDl3+MK7P3+bFPGX4lgl471OPlHr2dwNZ3tLOhnqY0NYkUpEZN01XB//o1GJZueNxmuf9rVxwJqq5bqcPlcD7mBJ9LsFQH8UX/TZ+rc41m/20X+XXm4sgLK4r+RH48xQpNFYGA2X1reraTwiDp/796vsiLW5DwEA0Ob7bP7zTKf5Xxr3t5S7O98bGsv3UnZExL0RsTMi7ouol30gIh5cYf3lTZJr5z/pxZsK7AZl878X872t9vlfWhQZq+S57fXMcHLkWHVhf/6eTMTw5iw/3aOOH1797Ytu51rnf9mR1V/MBfN2XBza3P4z87PLs7cSc6tLn0TsHuoUf3J1JyCJiF0Rsfsm6zj21Dd7u50rxT/SvvlY9lJ7dhX2mWpfRzzZ6P9zUYq/kPTen5y6K6oL+6eKq+Jav/x6/q1u9V+//9dW1v9bOl7/V+MfS1r3a5dWXsf5Pz7vuqaZXPH1vyk65T6cXV4+NR2xKXmj0ejW12ea5Yt8UT6Lf2Jf5/G/I5rvxJ6IyC7ihyLi4Yh4JO+7RyPisYjYVw4sbSZ/euXx95q59gv8duj/+VL/j7UXKfV/M7Epyq90TlSO//hd+29sJm/s8+9gPTWRv5J9/l1v97y1FUmPBt7auwcAAAAbQxoR2yJJJ6+m03RysvE3/DtjS1pdXFp++sjiByfnG88IjMVwWtzpatwPbtwPnc6X9UV+ppQ/kN83/rIyUs9Pzi1W5/sdPAy4rV3Gf+bPSr9bB6w5z2vB4DL+YXAZ/zC4jH8YXB3G/0g/2gGsv07f/x83k7XR9WwMsK5K49+2HwwQ638YXMY/DK7W8d/z+XvgTrI0Er0f3h+ARHp7NGODJSLtW+3pqv/mZI1Hwbb+99dKE/3+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgd/wcAAP//nHbk3g==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x304824, &(0x7f0000000140)='usrjquota=') 25.385386163s ago: executing program 4 (id=1895): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0xf7b2}}, {@grpquota}]}, 0x1, 0x51f, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc2}}) 25.131853755s ago: executing program 4 (id=1903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x10000050) 24.949303438s ago: executing program 37 (id=1903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x10000050) 19.472403079s ago: executing program 2 (id=2015): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, 0xfffffffffffffffe) 19.327087544s ago: executing program 2 (id=2020): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 19.229405099s ago: executing program 2 (id=2022): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(r0, 0x0, 0x2) 19.171052246s ago: executing program 2 (id=2025): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0xffffffffffffffff, 0x80d}}, 0x48) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 18.85827483s ago: executing program 2 (id=2026): mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc018aa09, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 18.756255894s ago: executing program 2 (id=2030): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 3.722213952s ago: executing program 38 (id=2030): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 1.051886657s ago: executing program 3 (id=2543): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x4}}]}}, 0x11) 793.551813ms ago: executing program 9 (id=2548): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) 746.141627ms ago: executing program 6 (id=2549): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r1}, 0x14) 619.592357ms ago: executing program 9 (id=2550): write(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x329) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 619.223291ms ago: executing program 0 (id=2486): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0xa1328f59b7fd100f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x65d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000300)="15", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 600.06193ms ago: executing program 6 (id=2552): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc9b, 0xffffffdf, {}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "6c5b6048a2e4931133f6d9919fd48557d96811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4000044) 572.717589ms ago: executing program 9 (id=2553): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 519.717932ms ago: executing program 8 (id=2554): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_REGISTER(r0, 0xc018aa09, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 510.488226ms ago: executing program 0 (id=2555): utimensat(0xffffffffffffffff, &(0x7f0000000000)='./proc_mnt/kcore\x00', 0x0, 0x100) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000180001"], 0x2c}}, 0x20000050) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e110b07"], 0xec) 485.757782ms ago: executing program 3 (id=2556): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000051}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x5}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 427.915068ms ago: executing program 6 (id=2557): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000000004, 0x0, 0x0, 0x3fe, 0x1e, 0x10, 0x2c, 0x5f}) 427.785538ms ago: executing program 8 (id=2558): setuid(0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 414.806519ms ago: executing program 9 (id=2559): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="6b766d2d636c6f636b0ac86464404d48d94b0ce5ea6a63cd71da894c40d747c3", 0x20) 405.614269ms ago: executing program 3 (id=2560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000040000000c001a800800048004000380"], 0x2c}}, 0x800) 323.741934ms ago: executing program 6 (id=2561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 323.597275ms ago: executing program 8 (id=2562): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/,0x400000,0x401000,', 0x14) 315.675502ms ago: executing program 9 (id=2563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0xba01}, 0x810) 283.322453ms ago: executing program 6 (id=2564): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x4000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 282.94689ms ago: executing program 8 (id=2565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x34}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x34}}, 0x0) 233.633891ms ago: executing program 3 (id=2566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0fc5:', 0x5) 27.609454ms ago: executing program 3 (id=2567): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)='\x00\x00\x00', 0x3}, 0x1, 0x0, 0x0, 0x40894}, 0x24046006) 27.276896ms ago: executing program 8 (id=2568): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="2f2c307814", 0x5) 27.001133ms ago: executing program 9 (id=2569): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 26.843608ms ago: executing program 6 (id=2570): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='!~', 0x2) 95.646µs ago: executing program 8 (id=2571): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 3 (id=2572): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) close(r0) kernel console output (not intermixed with test programs): ] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 61.890860][ T7352] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0014 with DS=0x19 [ 61.933500][ T1589] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.933538][ T1589] ieee802154 phy1 wpan1: encryption failed: -22 [ 62.014244][ T7357] loop7: detected capacity change from 0 to 128 [ 62.027794][ T7357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 62.027839][ T7357] System zones: 1-3, 19-19, 35-36 [ 62.341056][ T7376] WARNING! power/level is deprecated; use power/control instead [ 62.489946][ T7385] pimreg: tun_chr_ioctl cmd 1074025677 [ 62.490014][ T7385] pimreg: linktype set to 774 [ 62.526396][ T7387] loop5: detected capacity change from 0 to 4096 [ 62.537702][ T7387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.537714][ T7387] EXT4-fs (loop5): Test dummy encryption mode enabled [ 62.546642][ T7387] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 62.546678][ T7387] System zones: 0-5 [ 62.569154][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 62.892402][ T7418] loop6: detected capacity change from 0 to 512 [ 63.119751][ T7429] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0014 with DS=0x19 [ 63.219802][ T26] cfg80211: failed to load regulatory.db [ 63.374548][ T7456] pimreg: tun_chr_ioctl cmd 1074025677 [ 63.374608][ T7456] pimreg: linktype set to 774 [ 63.452252][ T6552] EXT4-fs unmount: 31 callbacks suppressed [ 63.452274][ T6552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.952321][ T7513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.056572][ T7513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.112698][ T7533] binder: 7533 RLIMIT_NICE not set [ 65.167030][ T7513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.175189][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1008'. [ 65.175211][ T7536] netlink: 'syz.7.1008': attribute type 7 has an invalid length. [ 65.175219][ T7536] netlink: 'syz.7.1008': attribute type 8 has an invalid length. [ 65.175226][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1008'. [ 65.293245][ T7513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.555642][ T40] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.575625][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.580929][ T40] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.620067][ T40] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.719388][ T7569] set_capacity_and_notify: 2 callbacks suppressed [ 65.719402][ T7569] loop6: detected capacity change from 0 to 256 [ 65.741445][ T7569] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 65.741459][ T7569] FAT-fs (loop6): bogus number of directory entries (1) [ 65.741466][ T7569] FAT-fs (loop6): Can't find a valid FAT filesystem [ 65.907972][ T30] audit: type=1400 audit(65.880:23): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=7581 comm="syz.4.1024" name="222" dev="tmpfs" ino=1168 [ 65.954827][ T7585] binder: 7584:7585 ioctl 4018620d 0 returned -22 [ 66.152345][ T4716] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 66.161569][ T7595] loop6: detected capacity change from 0 to 4096 [ 66.177706][ T7595] EXT4-fs: Ignoring removed orlov option [ 66.200689][ T7595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.317467][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.526144][ T7626] loop5: detected capacity change from 0 to 4096 [ 66.549710][ T7626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.613020][ T7626] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.1040: corrupted inode contents [ 66.617250][ T7635] input: syz0 as /devices/virtual/input/input8 [ 66.629063][ T7626] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #15: comm syz.5.1040: mark_inode_dirty error [ 66.629635][ T7626] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.1040: corrupted inode contents [ 66.629917][ T7626] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.1040: mark_inode_dirty error [ 66.630063][ T7626] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.1040: corrupted inode contents [ 66.630864][ T7626] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.1040: mark_inode_dirty error [ 66.632887][ T7626] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.1040: corrupted inode contents [ 66.635241][ T7626] EXT4-fs error (device loop5): ext4_truncate:4721: inode #15: comm syz.5.1040: mark_inode_dirty error [ 66.636837][ T7626] EXT4-fs error (device loop5) in ext4_setattr:6247: Corrupt filesystem [ 66.695283][ T7626] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.1040: corrupted inode contents [ 66.764978][ T5872] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.768585][ T5872] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.768912][ T5872] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 66.778518][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.791585][ T7643] netlink: 888 bytes leftover after parsing attributes in process `syz.2.1046'. [ 66.872233][ T7649] loop7: detected capacity change from 0 to 512 [ 66.891843][ T7649] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.964380][ T6552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.132853][ T7672] logitech-hidpp-device 0005:046D:B012.0003: received hid++ report of bad size (4096) [ 67.135670][ T9] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 67.223478][ T7676] fido_id[7676]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.237593][ T7677] loop5: detected capacity change from 0 to 7 [ 67.289392][ T7683] netlink: 888 bytes leftover after parsing attributes in process `syz.6.1061'. [ 67.503205][ T7677] Dev loop5: unable to read RDB block 7 [ 67.503229][ T7677] loop5: unable to read partition table [ 67.503327][ T7677] loop5: partition table beyond EOD, truncated [ 67.503348][ T7677] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 67.682540][ T7711] trusted_key: encrypted_key: key user:syz not found [ 67.876304][ T7721] loop5: detected capacity change from 0 to 8192 [ 68.088503][ T7740] : renamed from vlan0 (while UP) [ 68.169245][ T4716] Bluetooth: hci0: command tx timeout [ 68.668732][ T7778] trusted_key: encrypted_key: key user:syz not found [ 68.804240][ T7790] macvlan0: entered promiscuous mode [ 68.804275][ T7790] macvlan0: entered allmulticast mode [ 68.804343][ T7790] team0: Device macvlan0 is already an upper device of the team interface [ 68.920985][ T7804] loop2: detected capacity change from 0 to 512 [ 68.927679][ T7804] EXT4-fs: Ignoring removed bh option [ 68.947027][ T7804] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 68.953393][ T7804] EXT4-fs (loop2): 1 truncate cleaned up [ 68.953844][ T7804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.016402][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.051460][ T7811] loop6: detected capacity change from 0 to 512 [ 69.076070][ T7811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 69.076128][ T7811] System zones: 1-12 [ 69.076634][ T7811] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.1116: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 69.076649][ T7811] loop6: lost filesystem error report for type 5 error -117 [ 69.077596][ T7811] EXT4-fs (loop6): 1 orphan inode deleted [ 69.078041][ T7811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.178463][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.335626][ T7835] macvlan2: entered promiscuous mode [ 69.335648][ T7835] macvlan2: entered allmulticast mode [ 69.335713][ T7835] team0: Device macvlan2 is already an upper device of the team interface [ 69.380731][ T7842] loop5: detected capacity change from 0 to 256 [ 69.482405][ T7845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1132'. [ 69.544172][ T7852] loop5: detected capacity change from 0 to 512 [ 69.552302][ T7852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 69.552340][ T7852] System zones: 1-12 [ 69.553850][ T7852] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.1134: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 69.553868][ T7852] loop5: lost filesystem error report for type 5 error -117 [ 69.554976][ T7852] EXT4-fs (loop5): 1 orphan inode deleted [ 69.555445][ T7852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.623736][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.679210][ T7860] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1137'. [ 69.699262][ T7862] #! ./dev/kmsg [ 69.872777][ T7877] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.957921][ T7881] sctp: [Deprecated]: syz.6.1147 (pid 7881) Use of int in maxseg socket option. [ 69.957921][ T7881] Use struct sctp_assoc_value instead [ 70.076926][ T7889] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1152: corrupted in-inode xattr: invalid ea_ino [ 70.076951][ T7889] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.077122][ T7889] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1152: couldn't read orphan inode 15 (err -117) [ 70.077134][ T7889] loop5: lost filesystem error report for type 5 error -117 [ 70.077679][ T7889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.156608][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.414891][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1160'. [ 70.414952][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1160'. [ 71.270576][ T7927] batman_adv: batadv0: Adding interface: gretap1 [ 71.270590][ T7927] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.270605][ T7927] batman_adv: batadv0: Interface activated: gretap1 [ 71.553056][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1182'. [ 71.605922][ T7959] hugetlbfs: syz.7.1184 (7959): Using mlock ulimits for SHM_HUGETLB is obsolete [ 71.647957][ T7966] nvme_fcloop: unknown parameter or missing value 'w' [ 71.768562][ T9] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 71.768581][ T9] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 71.774540][ T9] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 71.809399][ T7980] netlink: 'syz.6.1193': attribute type 6 has an invalid length. [ 71.830664][ T7982] fido_id[7982]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.921197][ T7992] set_capacity_and_notify: 1 callbacks suppressed [ 71.921211][ T7992] loop7: detected capacity change from 0 to 512 [ 71.969289][ T7992] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.1200: inode has both inline data and extents flags [ 71.969314][ T7992] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.969427][ T7992] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1200: couldn't read orphan inode 15 (err -117) [ 71.969440][ T7992] loop7: lost filesystem error report for type 5 error -117 [ 71.969940][ T7992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.033034][ T8001] loop2: detected capacity change from 0 to 512 [ 72.038165][ T6552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.061707][ T8001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.152060][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.322521][ T8023] loop2: detected capacity change from 0 to 1024 [ 72.335048][ T8023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.350572][ T8015] loop7: detected capacity change from 0 to 8192 [ 72.363301][ T8015] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.369535][ T8023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.431115][ T8027] nvme_fcloop: unknown parameter or missing value 'w' [ 72.527124][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.570993][ T8033] loop4: detected capacity change from 0 to 512 [ 72.578511][ T8033] EXT4-fs: Ignoring removed bh option [ 72.586600][ T8033] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 72.587102][ T8033] EXT4-fs (loop4): 1 truncate cleaned up [ 72.587560][ T8033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.644894][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.662025][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1218'. [ 72.868759][ T4716] block nbd1: Receive control failed (result -32) [ 72.882708][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 72.882729][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 72.882739][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 72.907465][ T8057] bpf: Bad value for 'gid' [ 72.953203][ T8061] loop4: detected capacity change from 0 to 512 [ 72.991364][ T8063] loop7: detected capacity change from 0 to 512 [ 72.996258][ T8063] EXT4-fs (loop7): Test dummy encryption mode enabled [ 73.002331][ T8063] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.1231: missing EA_INODE flag [ 73.002350][ T8063] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 73.003462][ T8063] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1231: error while reading EA inode 12 err=-117 [ 73.003483][ T8063] loop7: lost filesystem error report for type 5 error -117 [ 73.004686][ T8063] EXT4-fs (loop7): 1 orphan inode deleted [ 73.005154][ T8063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.095157][ T6552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.439416][ T8090] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1241'. [ 74.281574][ T8157] netlink: 774 bytes leftover after parsing attributes in process `syz.4.1274'. [ 74.369328][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1276'. [ 74.463167][ T8171] loop5: detected capacity change from 0 to 128 [ 74.495638][ T8169] Process accounting resumed [ 74.507289][ T8171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 74.507321][ T8171] System zones: 1-3, 19-19, 35-36 [ 74.507871][ T8171] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.727718][ T5872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.901804][ T8195] loop7: detected capacity change from 0 to 1024 [ 74.908484][ T8195] EXT4-fs: Ignoring removed oldalloc option [ 74.908495][ T8195] EXT4-fs: Ignoring removed orlov option [ 74.923855][ T8195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.067745][ T8204] loop4: detected capacity change from 0 to 2048 [ 75.100383][ T8204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.124570][ T6552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.215019][ T8204] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 75.215035][ T8204] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 75.215053][ T8204] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 75.366154][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.391647][ T8217] EXT4-fs (loop5): Test dummy encryption mode enabled [ 75.391666][ T8217] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.406793][ T8217] EXT4-fs (loop5): 1 truncate cleaned up [ 75.437952][ T8217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.511477][ T5872] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 75.595565][ T5872] EXT4-fs error (device loop5): __ext4_iget:5592: inode #13: block 768: comm syz-executor: invalid block [ 75.630703][ T5872] EXT4-fs error (device loop5): __ext4_iget:5592: inode #13: block 768: comm syz-executor: invalid block [ 75.855661][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.948193][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.963608][ T8249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.005400][ T8249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.039917][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.093425][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.120576][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.168145][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.234148][ T4710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.235482][ T4710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.236103][ T4710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.236998][ T4710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.237352][ T4710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.502400][ T40] bridge_slave_1: left allmulticast mode [ 76.502420][ T40] bridge_slave_1: left promiscuous mode [ 76.502501][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.503544][ T40] bridge_slave_0: left allmulticast mode [ 76.503555][ T40] bridge_slave_0: left promiscuous mode [ 76.503614][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.840726][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.856703][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.864276][ T40] bond0 (unregistering): Released all slaves [ 77.193951][ T40] hsr_slave_0: left promiscuous mode [ 77.194387][ T40] hsr_slave_1: left promiscuous mode [ 77.194657][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.194668][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.195588][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.195599][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.247839][ T40] veth1_macvtap: left promiscuous mode [ 77.247891][ T40] veth0_macvtap: left promiscuous mode [ 77.247944][ T40] veth1_vlan: left promiscuous mode [ 77.247980][ T40] veth0_vlan: left promiscuous mode [ 77.657118][ T40] team0 (unregistering): Port device team_slave_1 removed [ 77.680240][ T40] team0 (unregistering): Port device team_slave_0 removed [ 77.868550][ T4396] 8021q: adding VLAN 0 to HW filter on device eth8 [ 78.131369][ T8374] __nla_validate_parse: 1 callbacks suppressed [ 78.131386][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1360'. [ 78.145426][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1360'. [ 78.195942][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.208398][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.208492][ T8263] bridge_slave_0: entered allmulticast mode [ 78.208933][ T8263] bridge_slave_0: entered promiscuous mode [ 78.216474][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.220193][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.220261][ T8263] bridge_slave_1: entered allmulticast mode [ 78.220688][ T8263] bridge_slave_1: entered promiscuous mode [ 78.267121][ T8263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.268025][ T8263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.286300][ T8263] team0: Port device team_slave_0 added [ 78.312181][ T8263] team0: Port device team_slave_1 added [ 78.339233][ T4716] Bluetooth: hci2: command tx timeout [ 78.391842][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.391854][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.391868][ T8263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.392404][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.392410][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.392422][ T8263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.397140][ T8393] set_capacity_and_notify: 3 callbacks suppressed [ 78.397150][ T8393] loop4: detected capacity change from 0 to 4096 [ 78.443168][ T8393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.516672][ T8263] hsr_slave_0: entered promiscuous mode [ 78.517042][ T8263] hsr_slave_1: entered promiscuous mode [ 78.517234][ T8263] debugfs: 'hsr0' already exists in 'hsr' [ 78.517244][ T8263] Cannot create hsr debugfs directory [ 78.573742][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.726759][ T8418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1373'. [ 78.728652][ T8418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1373'. [ 78.788566][ T8263] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 78.809476][ T8263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.810028][ T8263] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 78.811404][ T8263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.811727][ T8263] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.814178][ T8263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.814732][ T8263] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.840426][ T8263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.862014][ T4396] 8021q: adding VLAN 0 to HW filter on device eth9 [ 78.885076][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.885106][ T8263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.885185][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.885218][ T8263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.957525][ T8438] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 78.957601][ T8438] syzkaller1: linktype set to 826 [ 78.968549][ T8263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.003955][ T8263] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.006333][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.006642][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.031358][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.031385][ T5709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.057109][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.057136][ T5706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.087378][ T8263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.365284][ T8476] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 79.365301][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 79.365309][ T8476] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 79.365316][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 79.365342][ T8476] iwpm_send_hello: Unable to send a nlmsg [ 79.495144][ T8263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.585832][ T8495] loop2: detected capacity change from 0 to 512 [ 79.590759][ T8495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.610236][ T8495] EXT4-fs (loop2): 1 truncate cleaned up [ 79.610714][ T8495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.625963][ T4396] 8021q: adding VLAN 0 to HW filter on device eth10 [ 79.642659][ T8495] EXT4-fs (loop2): shut down requested (2) [ 79.661444][ T4716] Bluetooth: hci1: connection err: -111 [ 79.694853][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.771181][ T9] atkbd serio0: keyboard reset failed on [ 79.792833][ T8263] veth0_vlan: entered promiscuous mode [ 79.804444][ T8263] veth1_vlan: entered promiscuous mode [ 79.833826][ T8263] veth0_macvtap: entered promiscuous mode [ 79.856138][ T8263] veth1_macvtap: entered promiscuous mode [ 79.866320][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.878780][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.914129][ T260] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.921832][ T5706] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.922227][ T5706] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 syzkaller syzkaller login: [ 79.933780][ T260] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.966512][ T8524] syz.2.1402 uses obsolete (PF_INET,SOCK_PACKET) [ 79.980677][ T260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.980693][ T260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.020589][ T5709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.020604][ T5709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.085944][ T8528] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 80.316427][ T4396] 8021q: adding VLAN 0 to HW filter on device eth11 [ 80.409277][ T4716] Bluetooth: hci2: command tx timeout [ 80.568124][ T8567] netlink: 'syz.6.1418': attribute type 1 has an invalid length. [ 80.568142][ T8567] nbd: error processing sock list [ 80.568299][ T8567] block nbd2: shutting down sockets [ 80.765201][ T8579] loop6: detected capacity change from 0 to 1024 [ 80.791627][ T8579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.807723][ T8579] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1423: bg 0: block 112: padding at end of block bitmap is not set [ 80.826071][ T8579] EXT4-fs (loop6): Remounting filesystem read-only [ 81.030284][ T8587] loop8: detected capacity change from 0 to 512 [ 81.060749][ T8587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.185786][ T8263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.196140][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.406916][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1433'. [ 81.483950][ T8613] loop7: detected capacity change from 0 to 1024 [ 81.495126][ T8613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.513664][ T8613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.627197][ T6552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.757964][ T8637] ip_tables: iptables: counters copy to user failed while replacing table [ 81.850897][ T8645] loop2: detected capacity change from 0 to 512 [ 81.863649][ T8651] loop4: detected capacity change from 0 to 1024 [ 81.864182][ T8650] ip_tables: iptables: counters copy to user failed while replacing table [ 81.880140][ T8651] EXT4-fs: Ignoring removed bh option [ 81.907028][ T8651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.018823][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.158882][ T8669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1460'. [ 82.361645][ T8689] bond0: option arp_validate: invalid value (a) [ 82.385280][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1472'. [ 82.461870][ T8698] ip6gre1: entered promiscuous mode [ 82.461887][ T8698] ip6gre1: entered allmulticast mode [ 82.489173][ T4716] Bluetooth: hci2: command tx timeout [ 83.152947][ T8747] netlink: 280 bytes leftover after parsing attributes in process `syz.6.1495'. [ 83.186553][ T8749] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.235247][ T8752] loop8: detected capacity change from 0 to 1024 [ 83.256287][ T8752] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.265006][ T8755] loop4: detected capacity change from 0 to 512 [ 83.274651][ T8755] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.275823][ T8755] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1500: inode has both inline data and extents flags [ 83.275844][ T8755] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.276296][ T8755] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1500: couldn't read orphan inode 15 (err -117) [ 83.276317][ T8755] loop4: lost filesystem error report for type 5 error -117 [ 83.276849][ T8755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.386067][ T8263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.458488][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.578615][ T8774] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1507'. [ 83.717592][ T8783] loop6: detected capacity change from 0 to 4096 [ 83.735034][ T8783] EXT4-fs (loop6): Test dummy encryption mode enabled [ 83.736837][ T8783] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 83.736859][ T8783] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237) [ 83.736906][ T8783] EXT4-fs (loop6): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 83.737162][ T8783] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz.6.1512: Invalid inode table block 0 in block_group 0 [ 83.737175][ T8783] loop6: lost filesystem error report for type 5 error -117 [ 83.737355][ T8783] EXT4-fs (loop6): Remounting filesystem read-only [ 83.737396][ T8783] EXT4-fs (loop6): get root inode failed [ 83.737404][ T8783] EXT4-fs (loop6): mount failed [ 83.739044][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 83.739056][ C0] EXT4-fs (loop6): initial error at time 342: __ext4_get_inode_loc:4916 [ 83.739070][ C0] EXT4-fs (loop6): last error at time 342: __ext4_get_inode_loc:4916 [ 83.978205][ T8804] loop4: detected capacity change from 0 to 512 [ 83.990075][ T8804] EXT4-fs: Ignoring removed oldalloc option [ 83.996908][ T8804] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 83.997070][ T8804] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.998456][ T8804] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.998623][ T8804] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 84.010398][ T8804] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.1521: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 84.010426][ T8804] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 84.011038][ T8804] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1521: couldn't read orphan inode 13 (err -117) [ 84.011059][ T8804] loop4: lost filesystem error report for type 5 error -117 [ 84.014508][ T8804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.077158][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.322311][ T8822] loop8: detected capacity change from 0 to 4096 [ 84.337795][ T8822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.358836][ T8827] loop5: detected capacity change from 0 to 7 [ 84.456746][ T8263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.571741][ T4716] Bluetooth: hci2: command tx timeout [ 84.603672][ T8827] Dev loop5: unable to read RDB block 7 [ 84.603695][ T8827] loop5: unable to read partition table [ 84.603760][ T8827] loop5: partition table beyond EOD, truncated [ 84.603780][ T8827] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 84.604342][ T8828] support for cryptoloop has been removed. Use dm-crypt instead. [ 84.619753][ T8832] loop6: detected capacity change from 0 to 1024 [ 84.627058][ T8832] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 84.645429][ T8832] JBD2: no valid journal superblock found [ 84.661941][ T8832] EXT4-fs (loop6): Could not load journal inode [ 84.885405][ T8849] ip_tables: iptables: counters copy to user failed while replacing table [ 84.926951][ T8854] loop2: detected capacity change from 0 to 512 [ 84.964397][ T8854] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1544: inode has both inline data and extents flags [ 84.964436][ T8854] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.964655][ T8854] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1544: couldn't read orphan inode 15 (err -117) [ 84.964671][ T8854] loop2: lost filesystem error report for type 5 error -117 [ 84.965192][ T8854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.991091][ T8862] loop6: detected capacity change from 0 to 128 [ 85.098830][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.117089][ T8864] netlink: 192 bytes leftover after parsing attributes in process `syz.8.1548'. [ 85.231408][ T8874] loop8: detected capacity change from 0 to 2048 [ 85.307619][ T8874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.380537][ T8263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.072505][ T30] audit: type=1400 audit(345.045:24): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=w pid=8931 comm="syz.4.1579" name="file1" dev="tmpfs" ino=1812 [ 86.141862][ T8937] loop2: detected capacity change from 0 to 2048 [ 86.203745][ T8937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.261832][ T8947] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 86.265094][ T8947] batman_adv: batadv0: Adding interface: macvlan2 [ 86.265104][ T8947] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.265121][ T8947] batman_adv: batadv0: Interface activated: macvlan2 [ 86.321534][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.540537][ T8964] netlink: 'syz.4.1593': attribute type 3 has an invalid length. [ 86.685811][ T8975] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 86.685850][ T8975] nvme 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 86.706818][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 86.706833][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1597'. [ 86.781370][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1601'. [ 87.311980][ T9014] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 87.615230][ T9043] loop7: detected capacity change from 0 to 512 [ 87.654263][ T9042] binder: 9041:9042 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 87.654291][ T9042] binder: 9042 RLIMIT_NICE not set [ 87.683278][ T9043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 87.720539][ T9043] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 87.816014][ T6552] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /190/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.837814][ T6552] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.851138][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 87.851349][ T6552] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /190/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.854412][ T6552] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.855927][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 87.856118][ T6552] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /190/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.885636][ T6552] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.887536][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 87.887727][ T6552] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /190/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.907731][ T6552] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.915497][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 87.915707][ T6552] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /190/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.927419][ T6552] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 87.934071][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 87.935599][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 87.936191][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 87.946787][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 87.947620][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 87.948114][ T6552] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 88.352039][ T8880] Set syz1 is full, maxelem 65536 reached [ 88.451473][ T9083] pi3usb30532 0-0005: Error reading config register -5 [ 88.451748][ T9083] pi3usb30532 0-0005: probe with driver pi3usb30532 failed with error -5 [ 88.452148][ T9083] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 88.514657][ T6552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 88.580852][ T9092] netlink: 'syz.4.1638': attribute type 12 has an invalid length. [ 88.580871][ T9092] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1638'. [ 88.606412][ T260] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.621630][ T9094] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.668681][ T260] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.725688][ T260] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.753176][ T9101] loop4: detected capacity change from 0 to 512 [ 88.781071][ T260] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.797882][ T9101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.888531][ T9109] loop2: detected capacity change from 0 to 512 [ 88.894896][ T4710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.901515][ T4710] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.902090][ T4710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.903383][ T4710] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.904899][ T4710] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.918411][ T9109] EXT4-fs (loop2): Test dummy encryption mode enabled [ 88.918424][ T9109] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.930857][ T9109] EXT4-fs (loop2): 1 truncate cleaned up [ 89.025343][ T260] bridge_slave_1: left allmulticast mode [ 89.025365][ T260] bridge_slave_1: left promiscuous mode [ 89.025446][ T260] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.042428][ T260] bridge_slave_0: left allmulticast mode [ 89.042445][ T260] bridge_slave_0: left promiscuous mode [ 89.042530][ T260] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.233030][ T9136] loop8: detected capacity change from 0 to 1024 [ 89.629492][ T30] audit: type=1400 audit(348.595:25): lsm=SMACK fn=smack_file_lock action=denied subject="_" object="l" requested=l pid=9150 comm="syz.6.1661" path="/168/file1" dev="tmpfs" ino=899 [ 89.762936][ T260] hsr_slave_0: left promiscuous mode [ 89.774061][ T260] hsr_slave_1: left promiscuous mode [ 89.774383][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.774394][ T260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.781237][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.781258][ T260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.803259][ T260] veth1_macvtap: left promiscuous mode [ 89.803306][ T260] veth0_macvtap: left promiscuous mode [ 89.803402][ T260] veth1_vlan: left promiscuous mode [ 89.803436][ T260] veth0_vlan: left promiscuous mode [ 89.804118][ T9165] synth uevent: /bus/acpi: unknown uevent action string [ 90.143552][ T260] team0 (unregistering): Port device team_slave_1 removed [ 90.154886][ T260] team0 (unregistering): Port device team_slave_0 removed [ 90.268057][ T4396] 8021q: adding VLAN 0 to HW filter on device eth15 [ 90.333414][ T9191] loop4: detected capacity change from 0 to 256 [ 90.377768][ T9192] loop6: detected capacity change from 0 to 512 [ 90.430964][ T9192] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.1674: inode has both inline data and extents flags [ 90.430988][ T9192] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.431106][ T9192] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1674: couldn't read orphan inode 15 (err -117) [ 90.431118][ T9192] loop6: lost filesystem error report for type 5 error -117 [ 90.683353][ T9214] loop4: detected capacity change from 0 to 512 [ 90.732096][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.732121][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.732171][ T9112] bridge_slave_0: entered allmulticast mode [ 90.732576][ T9112] bridge_slave_0: entered promiscuous mode [ 90.755519][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.755540][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.755589][ T9112] bridge_slave_1: entered allmulticast mode [ 90.756023][ T9112] bridge_slave_1: entered promiscuous mode [ 90.805282][ T9112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.816247][ T9112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.904341][ T9112] team0: Port device team_slave_0 added [ 90.905102][ T9112] team0: Port device team_slave_1 added [ 90.969061][ T4710] Bluetooth: hci1: command tx timeout [ 90.971278][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.971292][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.971308][ T9112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.974002][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.974016][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.974028][ T9112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.071975][ T9112] hsr_slave_0: entered promiscuous mode [ 91.072300][ T9112] hsr_slave_1: entered promiscuous mode [ 91.072477][ T9112] debugfs: 'hsr0' already exists in 'hsr' [ 91.072487][ T9112] Cannot create hsr debugfs directory [ 91.313565][ T30] audit: type=1400 audit(350.285:26): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=9261 comm="syz.6.1694" name="file0" dev="tmpfs" ino=948 [ 91.369413][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.382210][ T4396] 8021q: adding VLAN 0 to HW filter on device eth14 [ 91.403010][ T9112] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 91.412075][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.412917][ T9112] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 91.426742][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.427104][ T9112] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 91.436022][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.436396][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1697'. [ 91.436687][ T9112] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 91.445734][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.512616][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.512646][ T9112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.592420][ T9112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.595486][ T9112] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.685837][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.685879][ T5709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.854057][ T9303] loop6: detected capacity change from 0 to 1024 [ 92.143294][ T9321] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1709'. [ 92.143391][ T9321] sch_fq: defrate 0 ignored. [ 92.284100][ T9112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.643211][ T9112] veth0_vlan: entered promiscuous mode [ 92.647650][ T9112] veth1_vlan: entered promiscuous mode [ 92.687310][ T9363] loop4: detected capacity change from 0 to 512 [ 92.716852][ T9363] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1720: inode has both inline data and extents flags [ 92.716879][ T9363] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.717750][ T9363] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1720: couldn't read orphan inode 15 (err -117) [ 92.717772][ T9363] loop4: lost filesystem error report for type 5 error -117 [ 92.729534][ T9112] veth0_macvtap: entered promiscuous mode [ 92.730736][ T9112] veth1_macvtap: entered promiscuous mode [ 92.734207][ T9112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.735202][ T9112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.790415][ T5709] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.790446][ T5709] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.790461][ T5709] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.790474][ T5709] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.915165][ T5706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.915180][ T5706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.968748][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.968765][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.981207][ T4396] 8021q: adding VLAN 0 to HW filter on device eth12 [ 93.049465][ T4710] Bluetooth: hci1: command tx timeout [ 93.442485][ T9412] tcpci 0-0050: probe with driver tcpci failed with error -5 [ 93.442733][ T9412] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 93.491369][ T9418] loop2: detected capacity change from 0 to 256 [ 93.586592][ T9418] FAT-fs (loop2): error, invalid FAT chain (i_pos 196, last_block 1024) [ 93.586615][ T9418] FAT-fs (loop2): Filesystem has been set read-only [ 93.719620][ T9434] loop4: detected capacity change from 0 to 512 [ 93.743377][ T9434] EXT4-fs mount: 13 callbacks suppressed [ 93.743391][ T9434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.786658][ T9442] loop8: detected capacity change from 0 to 1024 [ 93.800504][ T9442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.826856][ T9434] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 93.881532][ T9442] EXT4-fs (loop8): shut down requested (2) [ 93.895286][ T5709] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2 with error 28 [ 93.895305][ T5709] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.895305][ T5709] [ 93.895314][ T5709] EXT4-fs (loop4): Total free blocks count 0 [ 93.895323][ T5709] EXT4-fs (loop4): Free/Dirty block details [ 93.895333][ T5709] EXT4-fs (loop4): free_blocks=65281 [ 93.895343][ T5709] EXT4-fs (loop4): dirty_blocks=2 [ 93.895350][ T5709] EXT4-fs (loop4): Block reservation details [ 93.895355][ T5709] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 93.916776][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.984087][ T8263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.098894][ T9457] loop8: detected capacity change from 0 to 512 [ 94.104582][ T9457] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 94.125731][ T9457] EXT4-fs (loop8): 1 truncate cleaned up [ 94.144854][ T9457] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.215256][ T9467] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1755'. [ 94.215293][ T9467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1755'. [ 94.280861][ T8263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.343810][ T9477] loop4: detected capacity change from 0 to 1024 [ 94.372975][ T9477] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 94.373215][ T9477] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.373972][ T9477] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #32: comm syz.4.1758: iget: special inode unallocated [ 94.373994][ T9477] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 94.374103][ T9477] EXT4-fs (loop4): Remounting filesystem read-only [ 94.374140][ T9477] EXT4-fs (loop4): no journal found [ 94.374146][ T9477] EXT4-fs (loop4): can't get journal size [ 94.378013][ T9477] EXT4-fs (loop4): filesystem is read-only [ 94.378455][ T9477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.456386][ T9477] EXT4-fs (loop4): shut down requested (2) [ 94.483481][ T9483] sctp: [Deprecated]: syz.2.1760 (pid 9483) Use of int in max_burst socket option. [ 94.483481][ T9483] Use struct sctp_assoc_value instead [ 94.514287][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.714825][ T9488] loop8: detected capacity change from 0 to 8192 [ 94.747372][ T9501] loop4: detected capacity change from 0 to 256 [ 94.781557][ T9488] loop8: p1 p2 p3 [ 94.792713][ T9501] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.933800][ T9507] overlayfs: workdir and upperdir must reside under the same mount [ 95.132197][ T4710] Bluetooth: hci1: command tx timeout [ 95.182504][ T9529] xt_hashlimit: max too large, truncated to 1048576 [ 95.195683][ T4696] udevd[4696]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 95.206074][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 95.216044][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 95.485739][ T9561] loop4: detected capacity change from 0 to 1024 [ 95.499060][ T9561] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 95.516988][ T9561] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.1787: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.517012][ T9561] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.518982][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 95.518999][ C0] EXT4-fs (loop4): initial error at time 354: ext4_map_blocks:790: inode 3: block 2 [ 95.519017][ C0] EXT4-fs (loop4): last error at time 354: ext4_map_blocks:790: inode 3: block 2 [ 95.552821][ T9561] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 95.552852][ T9561] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.1787: lblock 0 mapped to illegal pblock 48 (length 1) [ 95.552868][ T9561] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.553740][ T9561] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 95.553755][ T9561] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1787: Failed to acquire dquot type 0 [ 95.553766][ T9561] loop4: lost filesystem error report for type 5 error -117 [ 95.554079][ T9561] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 95.554092][ T9561] loop4: lost filesystem error report for type 5 error -117 [ 95.554713][ T9561] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.1787: mark_inode_dirty error [ 95.554734][ T9561] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.554824][ T9561] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 95.554866][ T9561] EXT4-fs (loop4): 1 orphan inode deleted [ 95.555350][ T9561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.603459][ T260] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.621194][ T260] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 95.621220][ T260] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 95.667531][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 95.715576][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.719602][ T5709] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.719625][ T5709] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.719972][ T5709] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 95.719991][ T5709] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 0 [ 95.720008][ T5709] loop4: lost filesystem error report for type 5 error -117 [ 95.743480][ T4705] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 95.743503][ T4705] loop4: lost filesystem error report for type 5 error -117 [ 95.744525][ T4705] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 95.744540][ T4705] loop4: lost filesystem error report for type 5 error -117 [ 95.745170][ T4705] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 95.745196][ T4705] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.745632][ T4705] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 95.745651][ T4705] loop4: lost filesystem error report for type 5 error -117 [ 95.947419][ T9586] 9p: Unknown uid 00000000004294967295 [ 96.051472][ T9599] netlink: 'syz.8.1801': attribute type 3 has an invalid length. [ 96.051492][ T9599] netlink: 'syz.8.1801': attribute type 2 has an invalid length. [ 96.066437][ T9602] loop4: detected capacity change from 0 to 512 [ 96.124389][ T9602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.214156][ T9617] loop9: detected capacity change from 0 to 256 [ 96.241916][ T9617] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.294966][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.295003][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.295019][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.295163][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.295194][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.295220][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.295246][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.295278][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.295306][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.295332][ T9617] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.324323][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.642581][ T4396] 8021q: adding VLAN 0 to HW filter on device eth13 [ 96.768569][ T9650] ip_tables: iptables: counters copy to user failed while replacing table [ 96.877763][ T9659] loop6: detected capacity change from 0 to 512 [ 96.915730][ T9659] EXT4-fs (loop6): 1 truncate cleaned up [ 96.916230][ T9659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.986440][ T9659] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1826: bg 0: block 465: padding at end of block bitmap is not set [ 96.988685][ T9659] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 96.988839][ T9659] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1826: invalid indirect mapped block 234881024 (level 0) [ 97.045369][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.210318][ T4710] Bluetooth: hci1: command tx timeout [ 97.438899][ T9702] sch_fq: defrate 2 ignored. [ 97.440447][ T9701] loop2: detected capacity change from 0 to 512 [ 97.474152][ T9701] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1844: inode has both inline data and extents flags [ 97.474176][ T9701] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.474333][ T9701] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1844: couldn't read orphan inode 15 (err -117) [ 97.474351][ T9701] loop2: lost filesystem error report for type 5 error -117 [ 97.474855][ T9701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.507699][ T9707] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 97.508536][ T9707] EXT4-fs (loop6): orphan cleanup on readonly fs [ 97.514477][ T9707] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:521: comm syz.6.1846: Block bitmap for bg 0 marked uninitialized [ 97.514493][ T9707] loop6: lost filesystem error report for type 5 error -117 [ 97.518977][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 97.518994][ C0] EXT4-fs (loop6): initial error at time 356: ext4_read_block_bitmap_nowait:521 [ 97.519006][ C0] EXT4-fs (loop6): last error at time 356: ext4_read_block_bitmap_nowait:521 [ 97.540935][ T9707] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 97.540971][ T9707] loop6: lost filesystem error report for type 5 error -117 [ 97.542294][ T9707] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:521: comm syz.6.1846: Block bitmap for bg 0 marked uninitialized [ 97.542318][ T9707] loop6: lost filesystem error report for type 5 error -117 [ 97.542707][ T9707] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 97.542876][ T9707] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:521: comm syz.6.1846: Block bitmap for bg 0 marked uninitialized [ 97.543028][ T9707] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 97.543204][ T9707] EXT4-fs (loop6): 1 orphan inode deleted [ 97.543668][ T9707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 97.615539][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.645131][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.806396][ T13] IPVS: starting estimator thread 0... [ 97.889246][ T9726] IPVS: using max 55 ests per chain, 132000 per kthread [ 97.894176][ T9731] EXT4-fs: Ignoring removed orlov option [ 97.914790][ T9731] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 97.914810][ T9731] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 97.914819][ T9731] EXT4-fs (loop2): group descriptors corrupted! [ 98.070199][ T9741] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1861'. [ 98.190111][ T9749] bond0: option slaves: interface -VetN6h0-g does not exist! [ 98.191458][ T4710] block nbd2: Receive control failed (result -104) [ 98.383806][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1870'. [ 98.383855][ T9762] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1870'. [ 98.440663][ T9766] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1872'. [ 98.603727][ T9773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.656306][ T9784] netlink: 'syz.6.1879': attribute type 1 has an invalid length. [ 98.671653][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.760738][ T9791] EXT4-fs (loop4): 1 truncate cleaned up [ 98.770773][ T9791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.853828][ T9799] set_capacity_and_notify: 5 callbacks suppressed [ 98.853842][ T9799] loop6: detected capacity change from 0 to 512 [ 98.879483][ T9799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 98.879540][ T9799] System zones: 1-12 [ 98.880626][ T9799] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.1886: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 98.885629][ T9799] EXT4-fs (loop6): 1 orphan inode deleted [ 98.886097][ T9799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.927367][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.997954][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.015266][ T9807] loop4: detected capacity change from 0 to 512 [ 99.070390][ T9807] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.072527][ T9807] EXT4-fs (loop4): 1 truncate cleaned up [ 99.073021][ T9807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.143907][ T9807] EXT4-fs: Ignoring removed bh option [ 99.150922][ T9807] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 99.243652][ T7236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.274727][ T7236] tipc: Resetting bearer [ 99.303932][ T7236] tipc: Disabling bearer [ 99.307986][ T9828] loop9: detected capacity change from 0 to 512 [ 99.315410][ T9824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1896'. [ 99.361361][ T9828] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.405011][ T9834] loop6: detected capacity change from 0 to 512 [ 99.421573][ T9828] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 99.431229][ T9834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.435034][ T260] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.445550][ T9828] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 99.456073][ T9834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.505169][ T260] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.522594][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.556503][ T260] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.581094][ T9112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.597293][ T260] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.706145][ T9846] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1907'. [ 99.711814][ T260] bridge_slave_1: left allmulticast mode [ 99.711830][ T260] bridge_slave_1: left promiscuous mode [ 99.712118][ T260] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.713255][ T260] bridge_slave_0: left allmulticast mode [ 99.713276][ T260] bridge_slave_0: left promiscuous mode [ 99.713343][ T260] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.775926][ T9850] loop9: detected capacity change from 0 to 4096 [ 99.799576][ T9850] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.832184][ T9850] EXT4-fs (loop9): Test dummy encryption mode enabled [ 99.845759][ T9850] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.865850][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.866968][ T4716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.868153][ T4716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.893026][ T4716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.893798][ T4716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.931432][ T9859] Bluetooth: MGMT ver 1.23 [ 100.012391][ T9112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.152613][ T260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.170748][ T260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.171619][ T260] bond0 (unregistering): Released all slaves [ 100.210313][ T260] tipc: Disabling bearer [ 100.210882][ T260] tipc: Left network mode [ 100.233784][ T9869] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 100.233866][ T9869] syzkaller1: linktype set to 773 [ 100.312999][ T9878] loop2: detected capacity change from 0 to 512 [ 100.346686][ T9878] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.352469][ T9878] EXT4-fs (loop2): orphan cleanup on readonly fs [ 100.363572][ T9878] EXT4-fs (loop2): 1 truncate cleaned up [ 100.364079][ T9878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.469875][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.586370][ T260] hsr_slave_0: left promiscuous mode [ 100.586655][ T260] hsr_slave_1: left promiscuous mode [ 100.587913][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.587927][ T260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.596925][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.596958][ T260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.598032][ T260] batman_adv: batadv0: Interface deactivated: macsec0 [ 100.598043][ T260] batman_adv: batadv0: Removing interface: macsec0 [ 100.616238][ T260] veth1_macvtap: left promiscuous mode [ 100.618573][ T260] veth0_macvtap: left promiscuous mode [ 100.618630][ T260] veth1_vlan: left promiscuous mode [ 100.618715][ T260] veth0_vlan: left promiscuous mode [ 100.644682][ T9899] Format for adding new port is "id [perm_addr]" (uint MAC). [ 100.981590][ T30] audit: type=1326 audit(359.955:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9918 comm="syz.8.1928" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffafd79368 code=0x0 [ 101.001407][ T260] team0 (unregistering): Port device team_slave_1 removed [ 101.006174][ T260] team0 (unregistering): Port device team_slave_0 removed [ 101.105205][ T4396] 8021q: adding VLAN 0 to HW filter on device eth16 [ 101.222281][ T9922] ima: policy update failed [ 101.222463][ T30] audit: type=1802 audit(360.195:28): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.9.1929" res=0 errno=0 [ 101.531325][ T9855] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.531988][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.532058][ T9855] bridge_slave_0: entered allmulticast mode [ 101.534104][ T9855] bridge_slave_0: entered promiscuous mode [ 101.545695][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.547393][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.547460][ T9855] bridge_slave_1: entered allmulticast mode [ 101.556586][ T9855] bridge_slave_1: entered promiscuous mode [ 101.605474][ T9855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.617087][ T9855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.669928][ T9855] team0: Port device team_slave_0 added [ 101.670696][ T9855] team0: Port device team_slave_1 added [ 101.713246][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.713261][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.713280][ T9855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.717820][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.717833][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.717848][ T9855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.791312][ T9855] hsr_slave_0: entered promiscuous mode [ 101.794451][ T9855] hsr_slave_1: entered promiscuous mode [ 101.912675][ T9975] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 101.929193][ T4716] Bluetooth: hci0: command tx timeout [ 101.983163][ T4396] 8021q: adding VLAN 0 to HW filter on device eth17 [ 102.104850][ T30] audit: type=1326 audit(361.075:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9979 comm="syz.6.1947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86179368 code=0x7fc00000 [ 102.104876][ T30] audit: type=1326 audit(361.075:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9979 comm="syz.6.1947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=451 compat=0 ip=0xffff86179368 code=0x7fc00000 [ 102.104892][ T30] audit: type=1326 audit(361.075:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9979 comm="syz.6.1947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86179368 code=0x7fc00000 [ 102.104906][ T30] audit: type=1326 audit(361.075:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9979 comm="syz.6.1947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86179368 code=0x7fc00000 [ 102.104922][ T30] audit: type=1326 audit(361.075:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9979 comm="syz.6.1947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86179368 code=0x7fc00000 [ 102.104936][ T30] audit: type=1326 audit(361.075:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9979 comm="syz.6.1947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86179368 code=0x7fc00000 [ 102.104966][ T30] audit: type=1326 audit(361.075:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9979 comm="syz.6.1947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86179368 code=0x7fc00000 [ 102.104980][ T30] audit: type=1326 audit(361.075:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9979 comm="syz.6.1947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86179368 code=0x7fc00000 [ 102.264747][ T9999] loop6: detected capacity change from 0 to 512 [ 102.294027][ T9999] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.1954: corrupted in-inode xattr: invalid ea_ino [ 102.294049][ T9999] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.294156][ T9999] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1954: couldn't read orphan inode 15 (err -117) [ 102.294168][ T9999] fserror_report: 4 callbacks suppressed [ 102.294174][ T9999] loop6: lost filesystem error report for type 5 error -117 [ 102.294668][ T9999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.414293][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.680528][ T9855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.696074][ T9855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.696816][ T9855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.713625][ T9855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.714367][ T9855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.727039][ T9855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.736045][ T9855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.737339][ T9855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.882195][ T9855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.911650][ T9855] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.921388][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.921420][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.928660][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.928684][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.994681][ T9855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.102433][T10055] bridge0: port 2(bridge_slave_1) entered listening state [ 103.103639][T10055] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.162148][ T4396] 8021q: adding VLAN 0 to HW filter on device eth18 [ 103.473752][T10087] loop6: detected capacity change from 0 to 4096 [ 103.506477][T10087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.508641][ T9855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.587952][ T9855] veth0_vlan: entered promiscuous mode [ 103.608168][ T9855] veth1_vlan: entered promiscuous mode [ 103.615965][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.681956][ T9855] veth0_macvtap: entered promiscuous mode [ 103.690609][ T9855] veth1_macvtap: entered promiscuous mode [ 103.693835][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.718873][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.762835][T10109] loop6: detected capacity change from 0 to 512 [ 103.788683][T10109] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 103.814854][T10109] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1987: invalid indirect mapped block 32768 (level 2) [ 103.814880][T10109] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.818987][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 103.819008][ C0] EXT4-fs (loop6): initial error at time 362: ext4_free_branches:1023: inode 16 [ 103.819027][ C0] EXT4-fs (loop6): last error at time 362: ext4_free_branches:1023: inode 16 [ 103.849905][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.851188][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.851384][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.851403][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.871456][T10109] EXT4-fs (loop6): 1 orphan inode deleted [ 103.871473][T10109] EXT4-fs (loop6): 1 truncate cleaned up [ 103.878339][T10109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.920467][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.920483][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.928407][T10109] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1987'. [ 103.948820][ T5709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.948832][ T5709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.968699][T10109] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1987'. [ 104.011704][ T4716] Bluetooth: hci0: command tx timeout [ 104.033209][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.154382][ T4396] 8021q: adding VLAN 0 to HW filter on device eth19 [ 104.223500][T10132] loop6: detected capacity change from 0 to 512 [ 104.230979][T10132] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 104.239702][T10132] EXT4-fs (loop6): 1 truncate cleaned up [ 104.273853][T10132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.460972][T10143] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1997'. [ 104.601916][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2000'. [ 104.625097][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.770028][T10166] loop2: detected capacity change from 0 to 256 [ 104.789280][T10166] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.865246][T10166] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 104.865265][T10166] FAT-fs (loop2): Filesystem has been set read-only [ 104.958014][T10187] loop8: detected capacity change from 0 to 512 [ 105.005047][T10187] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 105.005855][T10187] EXT4-fs (loop8): orphan cleanup on readonly fs [ 105.006921][T10187] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:521: comm syz.8.2012: Block bitmap for bg 0 marked uninitialized [ 105.006958][T10187] loop8: lost filesystem error report for type 5 error -117 [ 105.008985][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 105.008999][ C0] EXT4-fs (loop8): initial error at time 363: ext4_read_block_bitmap_nowait:521 [ 105.009014][ C0] EXT4-fs (loop8): last error at time 363: ext4_read_block_bitmap_nowait:521 [ 105.035478][T10187] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 105.035502][T10187] loop8: lost filesystem error report for type 5 error -117 [ 105.035723][T10187] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:521: comm syz.8.2012: Block bitmap for bg 0 marked uninitialized [ 105.035737][T10187] loop8: lost filesystem error report for type 5 error -117 [ 105.036280][T10187] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 105.036296][T10187] loop8: lost filesystem error report for type 5 error -117 [ 105.036468][T10187] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:521: comm syz.8.2012: Block bitmap for bg 0 marked uninitialized [ 105.036480][T10187] loop8: lost filesystem error report for type 5 error -117 [ 105.036593][T10187] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 105.036602][T10187] loop8: lost filesystem error report for type 5 error -117 [ 105.036764][T10187] EXT4-fs (loop8): 1 orphan inode deleted [ 105.037297][T10187] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.201350][ T8263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.090086][ T4716] Bluetooth: hci0: command tx timeout [ 106.395055][T10293] bonding: bond0 is being created... [ 106.395791][T10293] bonding: bond0 already exists [ 107.204165][T10361] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [163] [ 107.204182][T10361] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 107.204190][T10361] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 107.204196][T10361] One or more global auth toks could not properly register; rc = [-22] [ 107.204213][T10361] Error validating options; rc = [-22] [ 107.246217][T10366] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2071'. [ 107.264964][T10368] block2mtd: illegal erase size [ 107.354192][T10377] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 107.366264][T10374] loop8: detected capacity change from 0 to 4096 [ 107.396685][T10374] EXT4-fs (loop8): Test dummy encryption mode enabled [ 107.403601][T10374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.483636][T10390] loop9: detected capacity change from 0 to 512 [ 107.506507][T10390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 107.506542][T10390] System zones: 1-12 [ 107.507983][T10390] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.2079: missing EA_INODE flag [ 107.508005][T10390] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.508982][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 107.508996][ C0] EXT4-fs (loop9): initial error at time 366: ext4_xattr_inode_iget:437: inode 12 [ 107.509012][ C0] EXT4-fs (loop9): last error at time 366: ext4_xattr_inode_iget:437: inode 12 [ 107.526704][T10390] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.2079: error while reading EA inode 12 err=-117 [ 107.526729][T10390] loop9: lost filesystem error report for type 5 error -117 [ 107.527119][T10390] EXT4-fs (loop9): 1 orphan inode deleted [ 107.527590][T10390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.528637][ T8263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.558707][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 107.558726][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 107.558738][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 107.611707][T10390] fscrypt (loop9, inode 15): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 107.667770][ T9112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.037369][T10425] loop6: detected capacity change from 0 to 1024 [ 108.056011][T10425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.146684][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.169291][ T4716] Bluetooth: hci0: command tx timeout [ 108.382113][T10456] sctp: [Deprecated]: syz.3.2101 (pid 10456) Use of int in maxseg socket option. [ 108.382113][T10456] Use struct sctp_assoc_value instead [ 108.558232][T10470] netlink: 'syz.8.2105': attribute type 12 has an invalid length. [ 108.558254][T10470] netlink: 'syz.8.2105': attribute type 29 has an invalid length. [ 108.558264][T10470] netlink: 'syz.8.2105': attribute type 44 has an invalid length. [ 108.830517][T10498] loop9: detected capacity change from 0 to 1024 [ 108.837491][T10498] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.857534][T10498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.945159][ T1159] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.945542][ T1159] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 108.945555][ T1159] EXT4-fs (loop9): This should not happen!! Data will be lost [ 108.945555][ T1159] [ 108.947036][ T9112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.465194][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 109.465260][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 109.481754][T10558] loop8: detected capacity change from 0 to 256 [ 109.767300][T10584] loop6: detected capacity change from 0 to 512 [ 109.825524][T10584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.859770][T10584] EXT4-fs (loop6): shut down requested (2) [ 109.911823][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.043152][T10607] loop8: detected capacity change from 0 to 256 [ 110.281641][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 110.281655][ T30] audit: type=1400 audit(369.255:96): lsm=SMACK fn=smack_inode_get_acl action=denied subject="_" object="lowerdir" requested=r pid=10624 comm="syz.6.2160" name="file0" dev="tmpfs" ino=1519 [ 110.313268][T10628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input13 [ 110.417717][T10639] ip_tables: iptables: counters copy to user failed while replacing table [ 110.671795][T10662] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2172'. [ 110.915080][T10686] netlink: 'syz.6.2179': attribute type 12 has an invalid length. [ 110.915099][T10686] netlink: 'syz.6.2179': attribute type 29 has an invalid length. [ 110.915107][T10686] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2179'. [ 110.915118][T10686] netlink: 'syz.6.2179': attribute type 1 has an invalid length. [ 110.915124][T10686] netlink: 'syz.6.2179': attribute type 2 has an invalid length. [ 111.052681][T10701] netlink: 'syz.6.2183': attribute type 3 has an invalid length. [ 111.264516][T10718] input: syz1 as /devices/virtual/input/input15 [ 111.365542][T10728] loop6: detected capacity change from 0 to 512 [ 111.382037][T10728] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.395398][T10728] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 111.407150][T10728] EXT4-fs (loop6): 1 truncate cleaned up [ 111.407621][T10728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.444180][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2194'. [ 111.444214][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2194'. [ 111.445671][T10728] EXT4-fs error (device loop6): ext4_readdir:280: inode #2: block 13: comm syz.6.2193: path /298/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=8, size=1024 fake=0 [ 111.482887][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.764311][ T9] kernel read not supported for file /media1 (pid: 9 comm: kworker/0:0) [ 112.184877][T10805] loop6: detected capacity change from 0 to 1024 [ 112.237931][T10805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.303798][T10805] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.2218: lblock 0 mapped to illegal pblock 0 (length 6) [ 112.345827][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.447403][T10828] loop3: detected capacity change from 0 to 512 [ 112.453662][T10828] EXT4-fs: Ignoring removed nobh option [ 112.470889][T10828] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 112.471177][T10828] EXT4-fs (loop3): Remounting filesystem read-only [ 112.471347][T10828] EXT4-fs (loop3): 1 truncate cleaned up [ 112.473533][T10828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.517326][T10828] EXT4-fs (loop3): shut down requested (1) [ 112.558114][ T9855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.629205][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'. [ 113.271451][T10892] ip_tables: iptables: counters copy to user failed while replacing table [ 113.422680][T10905] Injecting memory failure for pfn 0x11e30f at process virtual address 0x20f0f000 [ 113.452065][T10905] Memory failure: 0x11e30f: recovery action for dirty LRU page: Recovered [ 113.463106][T10910] loop6: detected capacity change from 0 to 512 [ 113.471396][T10910] EXT4-fs (loop6): Test dummy encryption mode enabled [ 113.472388][T10910] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.2253: inode has both inline data and extents flags [ 113.472404][T10910] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.472502][T10910] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2253: couldn't read orphan inode 15 (err -117) [ 113.472514][T10910] loop6: lost filesystem error report for type 5 error -117 [ 113.473062][T10910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.553382][T10914] loop3: detected capacity change from 0 to 8 [ 113.555433][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.611650][T10916] netlink: 'syz.9.2255': attribute type 2 has an invalid length. [ 113.749127][T10926] netlink: 42 bytes leftover after parsing attributes in process `syz.9.2260'. [ 113.929584][ T5709] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.939217][ T40] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.939782][ T5709] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.939801][ T5709] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.079414][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2271'. [ 114.169094][ T4716] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 114.169466][ T4716] Bluetooth: hci0: command 0x1405 tx timeout [ 114.569295][ T4844] atkbd serio1: keyboard reset failed on [ 114.595050][T10995] loop3: detected capacity change from 0 to 128 [ 114.601700][T10995] FAT-fs (loop3): bogus number of reserved sectors [ 114.601720][T10995] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 114.601728][T10995] FAT-fs (loop3): Can't find a valid FAT filesystem [ 114.733635][T11003] loop9: detected capacity change from 0 to 512 [ 114.753068][T11003] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.798118][ T9112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.886671][T11016] loop3: detected capacity change from 0 to 1024 [ 114.893202][T11016] EXT4-fs: Ignoring removed orlov option [ 115.058455][T11025] rnbd_client L127: Can't parse path h: -93 [ 115.093390][T11029] blkio.reset_stats is deprecated [ 115.135924][T11034] loop3: detected capacity change from 0 to 128 [ 115.164297][T11034] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.581362][T11071] loop8: detected capacity change from 0 to 512 [ 115.605491][T11071] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 115.606873][T11071] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2325: invalid indirect mapped block 32768 (level 2) [ 115.606892][T11071] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 115.609027][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 115.609039][ C0] EXT4-fs (loop8): initial error at time 374: ext4_free_branches:1023: inode 16 [ 115.609053][ C0] EXT4-fs (loop8): last error at time 374: ext4_free_branches:1023: inode 16 [ 115.632760][T11071] EXT4-fs (loop8): 1 orphan inode deleted [ 115.632775][T11071] EXT4-fs (loop8): 1 truncate cleaned up [ 115.659002][T11071] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.2325'. [ 115.662044][T11071] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.2325'. [ 115.837553][T11090] ima: Unable to open file: / (-22) [ 115.838360][T11087] ima: policy update failed [ 115.838423][ T30] audit: type=1802 audit(374.805:97): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.6.2334" res=0 errno=0 [ 115.907052][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2337'. [ 116.046677][T11109] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 116.166717][T11121] loop6: detected capacity change from 0 to 512 [ 116.216693][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.216714][T11121] FAT-fs (loop6): Filesystem has been set read-only [ 116.216790][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.216989][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.217061][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.218417][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.218554][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.218705][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.235247][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.236518][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 116.236961][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.237047][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.238392][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.238478][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.238601][T11121] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 116.238692][T11121] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 116.348893][T11129] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2353'. [ 116.437900][T11139] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.460363][T11140] device-mapper: ioctl: name not supplied when creating device [ 116.801164][T11174] loop6: detected capacity change from 0 to 512 [ 116.814404][T11174] EXT4-fs: Ignoring removed oldalloc option [ 116.834710][T11174] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 116.835547][T11174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 116.835643][T11174] EXT4-fs (loop6): orphan cleanup on readonly fs [ 116.835652][T11174] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.2369: bad orphan inode 267 [ 116.835666][T11174] loop6: lost filesystem error report for type 5 error -117 [ 116.835838][T11174] EXT4-fs (loop6): Remounting filesystem read-only [ 117.465461][T11224] netlink: 1032 bytes leftover after parsing attributes in process `syz.3.2384'. [ 117.695066][T11236] pimreg: tun_chr_ioctl cmd 35108 [ 117.785667][T11246] loop9: detected capacity change from 0 to 512 [ 117.797774][T11246] EXT4-fs (loop9): Test dummy encryption mode enabled [ 117.809789][T11245] netlink: 'syz.6.2394': attribute type 1 has an invalid length. [ 117.809804][T11245] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2394'. [ 117.823824][T11246] EXT4-fs error (device loop9): __ext4_add_entry:2414: inode #2: comm syz.9.2395: Directory hole found for htree leaf block 0 [ 117.827004][T11246] EXT4-fs (loop9): Remounting filesystem read-only [ 117.910526][T11251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2397'. [ 117.971120][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2402'. [ 118.187754][T11275] loop6: detected capacity change from 0 to 1024 [ 118.199981][T11275] EXT4-fs: Ignoring removed orlov option [ 118.453858][T11296] loop9: detected capacity change from 0 to 512 [ 118.465484][T11296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 118.465533][T11296] System zones: 1-12 [ 118.466532][T11296] EXT4-fs error (device loop9): ext4_xattr_inode_iget:473: comm syz.9.2417: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 118.466546][T11296] loop9: lost filesystem error report for type 5 error -117 [ 118.466753][T11296] EXT4-fs (loop9): 1 orphan inode deleted [ 118.600753][T11306] bond0: option ad_select: unable to set because the bond device is up [ 118.731506][ T30] audit: type=1326 audit(377.705:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11249 comm="syz.8.2398" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafd79368 code=0x7fc00000 [ 119.126094][T11344] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 119.137353][T11344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 119.137450][T11344] EXT4-fs (loop6): orphan cleanup on readonly fs [ 119.137763][T11344] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2437: bg 0: block 361: padding at end of block bitmap is not set [ 119.137777][T11344] loop6: lost filesystem error report for type 5 error -117 [ 119.137860][T11344] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 119.137870][T11344] loop6: lost filesystem error report for type 5 error -117 [ 119.137933][T11344] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.2437: attempt to clear invalid blocks 33619980 len 1 [ 119.137962][T11344] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 119.138243][T11344] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2437: invalid indirect mapped block 1811939328 (level 0) [ 119.138256][T11344] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 119.138342][T11344] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2437: invalid indirect mapped block 2185560079 (level 1) [ 119.138354][T11344] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 119.138599][T11344] EXT4-fs (loop6): 1 truncate cleaned up [ 119.407426][T11364] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 119.470896][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.470913][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.470922][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.470930][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.470954][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.470963][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.470971][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.470979][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.470988][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.470996][T10114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.473768][T10114] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 119.507910][T11370] EXT4-fs (loop6): 1 truncate cleaned up [ 119.650319][T11372] fido_id[11372]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.175808][T11401] vivid-000: ================= START STATUS ================= [ 120.175824][T11401] vivid-000: Enable Output Cropping: true grabbed [ 120.175845][T11401] vivid-000: Enable Output Composing: true grabbed [ 120.175858][T11401] vivid-000: Enable Output Scaler: true grabbed [ 120.175870][T11401] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 120.175883][T11401] vivid-000: Transmit Mode: HDMI grabbed [ 120.175894][T11401] vivid-000: Hotplug Present: 0x00000000 [ 120.175904][T11401] vivid-000: RxSense Present: 0x00000000 [ 120.175913][T11401] vivid-000: EDID Present: 0x00000000 [ 120.175922][T11401] vivid-000: ================== END STATUS ================== [ 120.239799][ T30] audit: type=1807 audit(635.209:99): action=measure func=FILE_CHECK res=1 [ 120.240696][T11405] ima: policy update completed [ 120.240748][ T30] audit: type=1802 audit(635.219:100): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.3.2466" res=1 errno=0 [ 120.363276][T11420] set_capacity_and_notify: 2 callbacks suppressed [ 120.363290][T11420] loop9: detected capacity change from 0 to 1024 [ 120.364964][T11419] ip_tables: iptables: counters copy to user failed while replacing table [ 120.376837][ T30] audit: type=1800 audit(635.339:101): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16718 res=0 errno=0 [ 120.425490][ T30] audit: type=1800 audit(635.399:102): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16718 res=0 errno=0 [ 120.533846][T10114] kernel read not supported for file /vcs (pid: 10114 comm: kworker/0:7) [ 120.550606][T11432] loop8: detected capacity change from 0 to 512 [ 120.565936][ T30] audit: type=1800 audit(635.539:103): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16601 res=0 errno=0 [ 120.583931][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'. [ 120.594741][T11432] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.2477: iget: bad extended attribute block 134217728 [ 120.594769][T11432] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.594931][T11432] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.2477: couldn't read orphan inode 15 (err -117) [ 120.594961][T11432] loop8: lost filesystem error report for type 5 error -117 [ 120.611367][ T30] audit: type=1800 audit(635.589:104): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2477" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 120.724558][T11446] loop6: detected capacity change from 0 to 512 [ 120.725706][ T30] audit: type=1800 audit(635.699:105): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16367 res=0 errno=0 [ 120.762345][ T30] audit: type=1800 audit(635.739:106): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16367 res=0 errno=0 [ 121.000023][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2490'. [ 121.005014][ T30] audit: type=1800 audit(635.979:107): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148265 res=0 errno=0 [ 121.022250][ T4716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.026648][ T30] audit: type=1800 audit(635.999:108): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148276 res=0 errno=0 [ 121.037121][ T4716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 121.037814][ T4716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 121.038480][ T4716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.044031][ T4716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.072528][ T30] audit: type=1800 audit(636.049:109): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148295 res=0 errno=0 [ 121.073215][ T30] audit: type=1800 audit(636.049:110): pid=4728 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148306 res=0 errno=0 [ 121.132744][T11470] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 121.297177][T11488] loop6: detected capacity change from 0 to 128 [ 121.335863][ T30] audit: type=1800 audit(636.309:111): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16367 res=0 errno=0 [ 121.520602][ T30] audit: type=1800 audit(636.499:112): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.2501" name="new_array" dev="sysfs" ino=47981 res=0 errno=0 [ 121.630998][T11464] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.636488][T11464] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.636564][T11464] bridge_slave_0: entered allmulticast mode [ 121.637019][T11464] bridge_slave_0: entered promiscuous mode [ 121.648259][T11464] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.648315][T11464] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.648377][T11464] bridge_slave_1: entered allmulticast mode [ 121.648801][T11464] bridge_slave_1: entered promiscuous mode [ 121.682384][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'. [ 121.708028][T11464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.719881][T11464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.747206][T11517] netlink: 'syz.6.2507': attribute type 11 has an invalid length. [ 121.747752][T11464] team0: Port device team_slave_0 added [ 121.784036][T11464] team0: Port device team_slave_1 added [ 121.815648][T11464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.815659][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.815674][T11464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.816191][T11464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.816198][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.816213][T11464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.892324][T11464] hsr_slave_0: entered promiscuous mode [ 121.892668][T11464] hsr_slave_1: entered promiscuous mode [ 121.895317][T11464] debugfs: 'hsr0' already exists in 'hsr' [ 121.895333][T11464] Cannot create hsr debugfs directory [ 121.938634][T11533] loop3: detected capacity change from 0 to 128 [ 121.945731][T11533] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.947086][ T30] audit: type=1800 audit(636.919:113): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16016 res=0 errno=0 [ 121.969974][T11533] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.066707][ T30] audit: type=1800 audit(637.039:114): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24167 res=0 errno=0 [ 122.137821][ T30] audit: type=1800 audit(637.109:115): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2518" name="quirks" dev="sysfs" ino=45711 res=0 errno=0 [ 122.333535][T11552] sctp: [Deprecated]: syz.9.2522 (pid 11552) Use of int in max_burst socket option deprecated. [ 122.333535][T11552] Use struct sctp_assoc_value instead [ 122.357810][T11556] Bluetooth: hci0: unsupported parameter 5135 [ 122.357825][T11556] Bluetooth: hci0: unsupported parameter 8192 [ 122.357835][T11556] Bluetooth: hci0: unsupported parameter 5135 [ 122.357843][T11556] Bluetooth: hci0: unsupported parameter 8192 [ 122.578803][ T30] audit: type=1800 audit(637.549:116): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24166 res=0 errno=0 [ 122.605881][T11573] loop3: detected capacity change from 0 to 128 [ 122.606438][T11573] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.606921][T11573] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.708140][T11464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.723109][T11464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.724467][T11464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.739830][T11464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.740201][T11464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.744807][T11464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.745216][T11464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.746896][T11464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.931988][T11464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.952939][T11464] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.970615][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.970643][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.973833][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.973865][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.044989][T11464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.045008][T11464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.130090][ T4710] Bluetooth: hci5: command tx timeout [ 123.130792][ T5709] wlan1: Trigger new scan to find an IBSS to join [ 123.167496][T11607] i2c i2c-0: new_device: Missing parameters [ 123.536178][T11464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.601618][T11464] veth0_vlan: entered promiscuous mode [ 123.610367][T11464] veth1_vlan: entered promiscuous mode [ 123.630569][ T1159] IPVS: starting estimator thread 0... [ 123.644098][T11464] veth0_macvtap: entered promiscuous mode [ 123.662530][T11464] veth1_macvtap: entered promiscuous mode [ 123.665976][T11464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.666978][T11464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.672016][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.672583][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.672645][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.672699][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.704761][T11650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.721046][T11646] IPVS: using max 60 ests per chain, 144000 per kthread [ 123.825039][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.825056][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.866230][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.866242][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.964170][T11662] batadv_slave_1: entered promiscuous mode [ 123.972417][T11661] batadv_slave_1: left promiscuous mode [ 124.343807][T11703] loop6: detected capacity change from 0 to 512 [ 124.373858][T11703] EXT4-fs mount: 24 callbacks suppressed [ 124.373872][T11703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.394151][T11705] ipvlan2: entered promiscuous mode [ 124.394707][T11705] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 124.484692][T11703] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #18: comm syz.6.2564: corrupted inode contents [ 124.484728][T11703] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 124.485792][T11703] EXT4-fs (loop6): Remounting filesystem read-only [ 124.485808][T11703] EXT4-fs warning (device loop6): ext4_evict_inode:288: xattr delete (err -30) [ 124.521881][ T6497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.209101][ T4710] Bluetooth: hci5: command tx timeout [ 125.931232][ T1589] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.931299][ T1589] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.089366][ T13] wlan1: Trigger new scan to find an IBSS to join [ 126.090969][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 126.090981][ T30] audit: type=1400 audit(641.069:137): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13 comm="kworker/u8:1" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 126.181420][ T30] audit: type=1400 audit(641.159:138): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=5709 comm="kworker/u8:9" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 126.391180][ T30] audit: type=1800 audit(641.369:139): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2574" name="scheduler" dev="sysfs" ino=19759 res=0 errno=0 [ 127.290939][ T4710] Bluetooth: hci5: command tx timeout [ 127.851178][ T30] audit: type=1400 audit(642.829:140): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 127.941411][ T30] audit: type=1400 audit(642.919:141): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 128.490620][ T4354] block nbd2: Possible stuck request 0000000097a2b7e5: control (read@0,1024B). Runtime 30 seconds [ 128.491057][ T4354] block nbd2: Possible stuck request 00000000e294b45c: control (read@1024,1024B). Runtime 30 seconds [ 128.491074][ T4354] block nbd2: Possible stuck request 00000000c0f77fac: control (read@2048,2048B). Runtime 30 seconds [ 129.130338][ T260] wlan1: Trigger new scan to find an IBSS to join [ 129.369331][ T4710] Bluetooth: hci5: command tx timeout [ 130.012691][ T40] wlan1: Creating new IBSS network, BSSID 26:a0:da:2d:54:21 [ 131.290276][ T30] audit: type=1400 audit(646.269:142): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=1159 comm="kworker/u8:6" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 131.429445][ T30] audit: type=1400 audit(646.409:143): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 138.091078][ T30] audit: type=1400 audit(653.069:144): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 138.601426][ T30] audit: type=1400 audit(653.579:145): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 146.409054][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.173407][ T30] audit: type=1400 audit(667.149:146): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=40 comm="kworker/u8:2" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 152.677406][ T30] audit: type=1400 audit(667.649:147): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 158.571119][ T4354] block nbd2: Possible stuck request 0000000097a2b7e5: control (read@0,1024B). Runtime 60 seconds [ 158.571150][ T4354] block nbd2: Possible stuck request 00000000e294b45c: control (read@1024,1024B). Runtime 60 seconds [ 158.571163][ T4354] block nbd2: Possible stuck request 00000000c0f77fac: control (read@2048,2048B). Runtime 60 seconds [ 160.071111][ T5709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 160.713103][ T4339] udevd[4339]: worker [4696] /devices/virtual/block/nbd2 is taking a long time [ 174.089133][ T4710] Bluetooth: hci3: command 0x0406 tx timeout [ 179.691323][ T30] audit: type=1400 audit(694.669:148): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=1159 comm="kworker/u8:6" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 182.117437][ T30] audit: type=1400 audit(697.089:149): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 187.372673][ T1589] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.372706][ T1589] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.650031][ T4354] block nbd2: Possible stuck request 0000000097a2b7e5: control (read@0,1024B). Runtime 90 seconds [ 188.650058][ T4354] block nbd2: Possible stuck request 00000000e294b45c: control (read@1024,1024B). Runtime 90 seconds [ 188.650070][ T4354] block nbd2: Possible stuck request 00000000c0f77fac: control (read@2048,2048B). Runtime 90 seconds [ 190.995759][ T5709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.049031][ T4714] Bluetooth: hci2: command 0x0406 tx timeout [ 215.049103][ T4714] Bluetooth: hci1: command 0x0406 tx timeout [ 218.750186][ T4354] block nbd2: Possible stuck request 0000000097a2b7e5: control (read@0,1024B). Runtime 120 seconds [ 218.750217][ T4354] block nbd2: Possible stuck request 00000000e294b45c: control (read@1024,1024B). Runtime 120 seconds [ 218.750232][ T4354] block nbd2: Possible stuck request 00000000c0f77fac: control (read@2048,2048B). Runtime 120 seconds [ 221.920592][ T260] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 235.531808][ T4710] Bluetooth: hci0: command 0x1405 tx timeout [ 238.570554][ T30] audit: type=1400 audit(753.549:150): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 239.465442][ T30] audit: type=1400 audit(754.439:151): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.75 dest=45212 netif=enp0s0 [ 245.769001][ T4716] Bluetooth: hci5: command 0x0406 tx timeout [ 248.810875][ T4354] block nbd2: Possible stuck request 0000000097a2b7e5: control (read@0,1024B). Runtime 150 seconds [ 248.810906][ T4354] block nbd2: Possible stuck request 00000000e294b45c: control (read@1024,1024B). Runtime 150 seconds [ 248.810919][ T4354] block nbd2: Possible stuck request 00000000c0f77fac: control (read@2048,2048B). Runtime 150 seconds [ 248.811216][ T1589] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.811236][ T1589] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.845484][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.289500][ T31] INFO: task syz.2.2030:10250 blocked for more than 143 seconds. [ 253.289522][ T31] Tainted: G L syzkaller #0 [ 253.289529][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.289534][ T31] task:syz.2.2030 state:D stack:0 pid:10250 tgid:10248 ppid:4718 task_flags:0x400040 flags:0x00800001 [ 253.289550][ T31] Call trace: [ 253.289554][ T31] __switch_to+0x2b4/0x6e4 (T) [ 253.289572][ T31] __schedule+0x135c/0x2b00 [ 253.289581][ T31] schedule+0x13c/0x20c [ 253.289590][ T31] schedule_preempt_disabled+0x18/0x2c [ 253.289599][ T31] __mutex_lock+0x5d4/0x1078 [ 253.289608][ T31] mutex_lock_nested+0x24/0x30 [ 253.289617][ T31] bdev_open+0xc4/0x880 [ 253.289626][ T31] blkdev_open+0x2d4/0x408 [ 253.289634][ T31] do_dentry_open+0x5c4/0xfbc [ 253.289646][ T31] vfs_open+0x44/0x2dc [ 253.289655][ T31] path_openat+0x1084/0x18f0 [ 253.289665][ T31] do_file_open+0x1c8/0x2e8 [ 253.289674][ T31] do_sys_openat2+0x114/0x1e8 [ 253.289684][ T31] do_sys_open+0xb0/0xe0 [ 253.289694][ T31] __arm64_sys_openat+0xa8/0xc4 [ 253.289704][ T31] invoke_syscall+0x98/0x244 [ 253.289715][ T31] el0_svc_common+0xec/0x23c [ 253.289725][ T31] do_el0_svc+0x4c/0x5c [ 253.289736][ T31] el0_svc+0x60/0x1d8 [ 253.289745][ T31] el0t_64_sync_handler+0x44/0x104 [ 253.289755][ T31] el0t_64_sync+0x198/0x19c [ 253.289773][ T31] [ 253.289773][ T31] Showing all locks held in the system: [ 253.289777][ T31] locks held by kworker/0:1/10: 1, last CPU#0: [ 253.289784][ T31] #0: ffff800088c618e0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x698/0x1250 [ 253.289810][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 253.289816][ T31] #0: ffff800088c618e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 253.289845][ T31] locks held by udevd/4696: 1, on CPU#0: [ 253.289851][ T31] #0: ffff0000c7450350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 253.289874][ T31] locks held by getty/8512: 2, on CPU#0: [ 253.289880][ T31] #0: ffff0000d0b110a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 253.289903][ T31] #1: ffff800095a772e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 253.289927][ T31] locks held by syz.2.2030/10250: 1, on CPU#0: [ 253.289932][ T31] #0: ffff0000c7450350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 253.289972][ T31] [ 253.289975][ T31] ============================================= [ 253.289975][ T31] [ 253.289981][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 253.338798][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 253.340838][ T31] Tainted: [L]=SOFTLOCKUP [ 253.341680][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 253.343573][ T31] Call trace: [ 253.344170][ T31] show_stack+0x2c/0x3c (C) [ 253.345042][ T31] __dump_stack+0x30/0x40 [ 253.345874][ T31] dump_stack_lvl+0x30/0x12c [ 253.346737][ T31] dump_stack+0x1c/0x28 [ 253.347584][ T31] vpanic+0x594/0xaf8 [ 253.348393][ T31] vpanic+0x0/0xaf8 [ 253.349191][ T31] hung_task_panic+0x0/0x2c [ 253.350125][ T31] kthread+0x304/0x3d4 [ 253.350943][ T31] ret_from_fork+0x10/0x20 [ 253.351799][ T31] Kernel Offset: disabled [ 253.352631][ T31] CPU features: 0x0,50000000,00f00020,9c080a02,a84ff6a7 [ 253.353949][ T31] Memory Limit: none [ 253.700650][ T31] Rebooting in 86400 seconds..