last executing test programs: 1m16.492543586s ago: executing program 0 (id=1102): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 1m16.455277614s ago: executing program 0 (id=1104): eventfd2(0x4, 0x801) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x1005f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x3, 0x8006, 0x0, 0x6, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xfffffffc, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8001, 0x1, 0x40], [0x10000007, 0x2e0084f6, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xc, 0x402bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x4, 0x7, 0xd5, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x9, 0x5e, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x5f7681e0, 0x0, 0x29, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x100008, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2910bfaf, 0x8, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0x1, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x2, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x105, 0xfffffffd, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xfffffff8, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0xfffffffc, 0x2, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) unshare(0x2000400) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 1m16.411924691s ago: executing program 0 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r0, 0x18}, 0x38) 1m16.302783962s ago: executing program 0 (id=1109): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='./file0/file0/../file0\x00', 0x0, 0x12f451, 0x0) 1m16.261059338s ago: executing program 0 (id=1112): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) 1m15.889727122s ago: executing program 0 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310700000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005000000000b4400"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1m15.810183792s ago: executing program 32 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310700000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005000000000b4400"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 58.227844652s ago: executing program 4 (id=1940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 58.198263593s ago: executing program 4 (id=1941): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x400}) 58.082801389s ago: executing program 4 (id=1947): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002780)={0x3, 0x0, [{0x0, 0xffffffffffffff56, &(0x7f0000001600)=""/4096}, {0xeeee0000, 0x47, &(0x7f0000002600)=""/71}, {0xeeee8000, 0xd2, &(0x7f0000002680)=""/210}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) 57.951947624s ago: executing program 4 (id=1956): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2042, 0x0) 57.919729793s ago: executing program 4 (id=1960): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xc2143, 0x11) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 57.49740388s ago: executing program 4 (id=1978): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) 57.497318698s ago: executing program 33 (id=1978): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) 53.197579686s ago: executing program 5 (id=2126): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) 53.181106296s ago: executing program 5 (id=2127): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x34325241, 0x6, 0xf7fffffe, 0x9, 0xa, 0x1, 0x0, 0x7, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 52.96704411s ago: executing program 5 (id=2136): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9e) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) 52.934564856s ago: executing program 5 (id=2138): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 52.823785597s ago: executing program 5 (id=2142): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x8, &(0x7f0000001680)=""/51, &(0x7f0000000000)=0x33) 52.270996444s ago: executing program 5 (id=2164): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x23, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x3, 0x2}}, 0x48}, 0x300}, 0x20000000) 52.182484549s ago: executing program 34 (id=2164): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x23, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x3, 0x2}}, 0x48}, 0x300}, 0x20000000) 6.653887142s ago: executing program 6 (id=3371): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)="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", 0x52) 6.607841678s ago: executing program 6 (id=3374): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000200000006a0a00fe00000000850000000b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2b}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x54) 6.559672925s ago: executing program 6 (id=3377): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000750000000000000003000400850000002e000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.524132254s ago: executing program 6 (id=3378): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@bh}, {@mblk_io_submit}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 6.428127053s ago: executing program 6 (id=3382): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000002c0)=[@acquire, @decrefs], 0x0, 0x0, 0x0}) 6.176095927s ago: executing program 6 (id=3393): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f', 0x33) 6.102594712s ago: executing program 35 (id=3393): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f', 0x33) 826.540227ms ago: executing program 2 (id=3584): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, '\'a'}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "92dbd9c377f97b4d60dff38f9b"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 738.704328ms ago: executing program 2 (id=3588): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x9, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101a, 0x90, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x40, 0x7e9, 0x1401, 0x9aa5, "cb630dab3a0338057401a19241951ead1f50be109c34b204d11ab8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r1}) 730.365946ms ago: executing program 3 (id=3590): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="056471ebe7", 0x5}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0xfd66) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) 655.028111ms ago: executing program 2 (id=3592): syz_mount_image$fuse(0x0, 0x0, 0x1100400, 0x0, 0x0, 0x0, &(0x7f0000000340)="f23939") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000276000/0x2000)=nil, 0x2000, 0x64) 654.842288ms ago: executing program 8 (id=3593): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {0x10}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) 654.735978ms ago: executing program 3 (id=3594): socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 624.059264ms ago: executing program 8 (id=3596): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x2, &(0x7f0000000400)="c20b", 0xb, 0x1, 0x4c4a, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) 518.223905ms ago: executing program 8 (id=3598): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 513.376505ms ago: executing program 2 (id=3599): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x1, 0x0, 0xfe}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x800}) close(r0) 426.640667ms ago: executing program 8 (id=3601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 426.336135ms ago: executing program 7 (id=3603): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 426.087216ms ago: executing program 3 (id=3604): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x10800) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0xc8000}], 0x1c, 0x0, 0x0, 0x22) 391.259516ms ago: executing program 1 (id=3605): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x0, 0x47, 0x9, 0x5, 0x8}, &(0x7f0000000280)=0x14) 381.110529ms ago: executing program 7 (id=3606): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) 294.983568ms ago: executing program 8 (id=3607): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0x4, 0x20}, 0x0, &(0x7f0000005840)="00000002", 0x0) 294.788106ms ago: executing program 1 (id=3608): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af83, &(0x7f00000008c0)=0x8000) 294.669178ms ago: executing program 2 (id=3609): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000100001042abd70000000000000080000", @ANYRES32=0x0, @ANYBLOB="99800300000000002c0012800b000100697036746e6c00001c00028006000f00020000000400130004001300060011004e210000140003006e6963766630"], 0x60}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 294.539278ms ago: executing program 3 (id=3610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004740)={0x44, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7f, 0x4, 0x6, 0x1, 0x4, 0x4, 0xb6]}}]}]}]}, 0x44}}, 0x0) 280.961236ms ago: executing program 8 (id=3611): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r0, 0x400455c8, 0x25) 257.854779ms ago: executing program 7 (id=3612): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 214.906014ms ago: executing program 1 (id=3613): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x13c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_MASK={0xb8, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9d}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 214.626426ms ago: executing program 2 (id=3614): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x802, 0x4000011) 214.4842ms ago: executing program 3 (id=3615): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80241, 0x48) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 174.614905ms ago: executing program 1 (id=3616): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, 0xffffffffffffffff) 166.190051ms ago: executing program 7 (id=3617): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x1) writev(r0, &(0x7f00000018c0)=[{&(0x7f0000000180)='\tu', 0x2}, {0x0}], 0x2) 89.42886ms ago: executing program 7 (id=3618): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000002000)=0x4) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0xe47, 0x102, 0x2080060f, 0xffffbffe, 0x14, "1c6b6f29626102237e03b098c4ac59b4c2e708"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x100, 0xe2, 0x10, 0x0, 0x11, "cb66107c94567f0fbe80513b0661e0bf569aba"}) 74.641116ms ago: executing program 3 (id=3619): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r0) 65.32307ms ago: executing program 1 (id=3620): timerfd_create(0x0, 0x800) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x2bd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 287.987µs ago: executing program 7 (id=3621): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x400000000007, 0x0, 0x0, 0x16, 0x14, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8db65b5598948224a0010000000000000bdb22d0000b420a1cb84ddb875d72c9f01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000006c0)) 0s ago: executing program 1 (id=3622): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='!*on_existent_event:mod:', 0x18) kernel console output (not intermixed with test programs): 000-000000000000 r/w without journal. Quota mode: writeback. [ 69.829616][ T9043] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (27202!=33349) [ 69.837150][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.841858][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.885647][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.928866][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.253172][ T9090] ./file0: Can't open blockdev [ 70.365856][ T9110] netlink: 'syz.3.1866': attribute type 2 has an invalid length. [ 70.385838][ T9106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.442583][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.580174][ T9143] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.584883][ T9146] __nla_validate_parse: 2 callbacks suppressed [ 70.599522][ T9146] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1880'. [ 70.599563][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1880'. [ 70.635753][ T9143] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 70.658853][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.767435][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 70.786898][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.841872][ T9176] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 70.855213][ T9176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 70.856878][ T9176] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.858338][ T9176] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1891: bg 0: block 361: padding at end of block bitmap is not set [ 70.861973][ T9176] loop4: lost filesystem error report for type 5 error -117 [ 70.863004][ T9176] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 70.863047][ T9176] loop4: lost filesystem error report for type 5 error -117 [ 70.863608][ T9176] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.1891: attempt to clear invalid blocks 33619980 len 1 [ 70.863629][ T9176] fserror_report: 4 callbacks suppressed [ 70.863636][ T9176] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.863876][ T9176] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1891: invalid indirect mapped block 1811939328 (level 0) [ 70.863890][ T9176] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.864438][ C1] EXT4-fs (loop4): error count since last fsck: 4 [ 70.864455][ C1] EXT4-fs (loop4): initial error at time 584: ext4_validate_block_bitmap:441 [ 70.864474][ C1] EXT4-fs (loop4): last error at time 584: ext4_free_branches:1023: inode 11 [ 70.866088][ T9176] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1891: invalid indirect mapped block 2185560079 (level 1) [ 70.866110][ T9176] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.866392][ T9176] EXT4-fs (loop4): 1 truncate cleaned up [ 70.868087][ T9176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 70.977873][ T4724] block nbd0: Receive control failed (result -32) [ 70.977873][ T50] block nbd0: Receive control failed (result -32) [ 70.985821][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.986081][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.988367][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 71.082803][ T9196] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1901: iget: bad i_size value: 38620345925642 [ 71.082851][ T9196] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.083058][ T9196] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1901: couldn't read orphan inode 15 (err -117) [ 71.083075][ T9196] loop2: lost filesystem error report for type 5 error -117 [ 71.083655][ T9196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.094812][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.094848][ T9194] FAT-fs (loop5): Filesystem has been set read-only [ 71.099598][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.099997][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.100175][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.100435][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.100583][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.101122][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.101348][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.101593][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.101738][ T9194] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 71.102814][ T9194] syz.5.1900: attempt to access beyond end of device [ 71.102814][ T9194] loop5: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 71.151751][ T9200] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.169888][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.407372][ T9233] netlink: 'syz.4.1918': attribute type 12 has an invalid length. [ 71.408865][ T9233] netlink: 'syz.4.1918': attribute type 29 has an invalid length. [ 71.410260][ T9233] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1918'. [ 71.455841][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1922'. [ 71.471573][ T9243] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.472120][ T9243] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.472222][ T9243] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.477832][ T9243] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.1921: Invalid inode table block 0 in block_group 0 [ 71.477879][ T9243] loop4: lost filesystem error report for type 5 error -117 [ 71.478288][ T9243] EXT4-fs (loop4): Remounting filesystem read-only [ 71.478310][ T9243] Quota error (device loop4): write_blk: dquota write failed [ 71.478359][ T9243] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 71.478422][ T9243] EXT4-fs (loop4): 1 truncate cleaned up [ 71.485209][ T9243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.526840][ T9247] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1923'. [ 71.539462][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.556191][ T30] audit: type=1326 audit(585.543:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9250 comm="syz.1.1925" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977781a8 code=0x7ffc0000 [ 71.556241][ T30] audit: type=1326 audit(585.543:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9250 comm="syz.1.1925" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977781a8 code=0x7ffc0000 [ 71.562175][ T30] audit: type=1326 audit(585.543:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9250 comm="syz.1.1925" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff977781a8 code=0x7ffc0000 [ 71.562198][ T30] audit: type=1326 audit(585.543:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9250 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977781a8 code=0x7ffc0000 [ 71.567078][ T30] audit: type=1326 audit(585.553:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9250 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff977781a8 code=0x7ffc0000 [ 71.567102][ T30] audit: type=1326 audit(585.553:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9250 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977781a8 code=0x7ffc0000 [ 71.622557][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 71.622595][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'. [ 71.626642][ T9255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.631689][ T9255] EXT4-fs (loop3): 1 truncate cleaned up [ 71.632187][ T9255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.646477][ T9255] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.3.1928: path /366/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 71.648148][ T9255] EXT4-fs (loop3): Remounting filesystem read-only [ 71.656297][ T9264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.677391][ T9264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.683353][ T9269] block nbd4: not configured, cannot reconfigure [ 71.683457][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.700495][ T9264] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.1931: path /404/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 71.741167][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.796015][ T9281] pimreg: entered allmulticast mode [ 71.815398][ T9281] pimreg: left allmulticast mode [ 71.886255][ T9289] pimreg: tun_chr_ioctl cmd 2147767507 [ 71.943156][ T9295] binder: 9294:9295 ERROR: BC_REGISTER_LOOPER called without request [ 71.943201][ T9295] binder: 9294:9295 got transaction to invalid handle, 1 [ 71.943224][ T9295] binder: 9294:9295 cannot find target node [ 71.943242][ T9295] binder: 9294:9295 transaction async to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3252 [ 71.996953][ T9305] block2mtd: illegal erase size [ 72.272726][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1965'. [ 72.432944][ T9354] FAT-fs (loop1): bogus logical sector size 0 [ 72.432978][ T9354] FAT-fs (loop1): Can't find a valid FAT filesystem [ 72.492974][ T4724] Bluetooth: hci3: ISO packet too small [ 72.620178][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.634501][ T1414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.636880][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.639103][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.639556][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.639780][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.755926][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 72.759153][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.852452][ T9396] set_capacity_and_notify: 12 callbacks suppressed [ 72.856263][ T9396] loop5: detected capacity change from 0 to 512 [ 72.859487][ T9396] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.862162][ T9396] EXT4-fs (loop5): 1 truncate cleaned up [ 72.864562][ T9396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.907134][ T9396] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #2: comm syz.5.1987: invalid size [ 72.910763][ T9396] EXT4-fs (loop5): Remounting filesystem read-only [ 72.924606][ T9401] loop3: detected capacity change from 0 to 512 [ 72.935883][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.939539][ T9401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 72.939598][ T9401] System zones: 1-12 [ 72.942707][ T9401] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1989: missing EA_INODE flag [ 72.942734][ T9401] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 72.946099][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 72.946115][ C1] EXT4-fs (loop3): initial error at time 586: ext4_xattr_inode_iget:441: inode 12 [ 72.946134][ C1] EXT4-fs (loop3): last error at time 586: ext4_xattr_inode_iget:441: inode 12 [ 72.959217][ T9401] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1989: error while reading EA inode 12 err=-117 [ 72.962378][ T9401] loop3: lost filesystem error report for type 5 error -117 [ 72.968209][ T9401] EXT4-fs (loop3): 1 orphan inode deleted [ 72.979337][ T9401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.991998][ T9401] fscrypt (loop3, inode 15): Unsupported log2_data_unit_size in encryption policy: 200 [ 73.023194][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.085909][ T1414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.316861][ T9430] loop5: detected capacity change from 0 to 512 [ 73.353755][ T9373] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.353850][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.357825][ T9373] bridge_slave_0: entered allmulticast mode [ 73.358750][ T9373] bridge_slave_0: entered promiscuous mode [ 73.360059][ T9373] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.360117][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.360180][ T9373] bridge_slave_1: entered allmulticast mode [ 73.360645][ T9373] bridge_slave_1: entered promiscuous mode [ 73.368520][ T9430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.372032][ T9373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.398786][ T9373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.416364][ T9373] team0: Port device team_slave_0 added [ 73.426890][ T9373] team0: Port device team_slave_1 added [ 73.456483][ T1414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.476194][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.490070][ T9373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.490110][ T9373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.498431][ T9373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.520888][ T9373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.520921][ T9373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.520949][ T9373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.554386][ T9449] support for cryptoloop has been removed. Use dm-crypt instead. [ 73.563394][ T9373] hsr_slave_0: entered promiscuous mode [ 73.563844][ T9373] hsr_slave_1: entered promiscuous mode [ 73.581576][ T9373] debugfs: 'hsr0' already exists in 'hsr' [ 73.581620][ T9373] Cannot create hsr debugfs directory [ 73.607887][ T1414] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.855986][ T9373] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 73.872193][ T9373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.872616][ T9373] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 73.876121][ T9373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.926195][ T9373] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 73.959930][ T9373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.960308][ T9373] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 73.962263][ T9373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.005997][ T9482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.009098][ T9482] bond0: (slave bond1): Enslaving as an active interface with an up link [ 74.142957][ T9373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.151595][ T9373] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.350633][ T1414] bridge_slave_1: left allmulticast mode [ 74.352284][ T1414] bridge_slave_1: left promiscuous mode [ 74.354364][ T1414] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.378830][ T1414] bridge_slave_0: left allmulticast mode [ 74.378863][ T1414] bridge_slave_0: left promiscuous mode [ 74.378953][ T1414] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.418776][ T9529] nfs: Deprecated parameter 'nointr' [ 74.490954][ T9535] loop5: detected capacity change from 0 to 256 [ 74.561199][ T9539] binder: 9538:9539 ioctl c018620c 200000c0 returned -1 [ 74.726847][ T50] Bluetooth: hci1: command tx timeout [ 74.739095][ T1414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.775449][ T1414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.799541][ T1414] bond0 (unregistering): Released all slaves [ 74.811188][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 74.817238][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.817291][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.837113][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.837161][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.871399][ T9373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.309526][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 75.364773][ T50] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 75.366909][ T50] Bluetooth: hci0: Injecting HCI hardware error event [ 75.369004][ T50] Bluetooth: hci0: hardware error 0x00 [ 75.410798][ T9373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.450563][ T9644] loop2: detected capacity change from 0 to 128 [ 75.456026][ T9644] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.484869][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.500470][ T1414] hsr_slave_0: left promiscuous mode [ 75.501939][ T1414] hsr_slave_1: left promiscuous mode [ 75.502319][ T1414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.502355][ T1414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.507570][ T1414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.508993][ T1414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.517675][ T1414] veth1_macvtap: left promiscuous mode [ 75.518762][ T1414] veth0_macvtap: left promiscuous mode [ 75.519766][ T1414] veth1_vlan: left promiscuous mode [ 75.520727][ T1414] veth0_vlan: left promiscuous mode [ 75.701467][ T1414] team0 (unregistering): Port device team_slave_1 removed [ 75.711028][ T1414] team0 (unregistering): Port device team_slave_0 removed [ 75.771382][ T9640] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 75.868555][ T9671] loop1: detected capacity change from 0 to 1024 [ 75.916017][ T9671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.928835][ T9373] veth0_vlan: entered promiscuous mode [ 75.945499][ T9671] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.2086: lblock 0 mapped to illegal pblock 0 (length 6) [ 75.953549][ T9373] veth1_vlan: entered promiscuous mode [ 75.957793][ T9671] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 75.960562][ T9671] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.960562][ T9671] [ 76.001705][ T9373] veth0_macvtap: entered promiscuous mode [ 76.005835][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 76.016791][ T9373] veth1_macvtap: entered promiscuous mode [ 76.031347][ T3621] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 76.038161][ T9373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.039897][ T3621] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 76.039929][ T3621] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.039929][ T3621] [ 76.039954][ T3621] EXT4-fs (loop1): Total free blocks count 0 [ 76.039968][ T3621] EXT4-fs (loop1): Free/Dirty block details [ 76.039981][ T3621] EXT4-fs (loop1): free_blocks=0 [ 76.039993][ T3621] EXT4-fs (loop1): dirty_blocks=32 [ 76.040003][ T3621] EXT4-fs (loop1): Block reservation details [ 76.044433][ T4717] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 76.057704][ T9373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.060244][ T3621] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.060403][ T3621] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.060492][ T3621] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.060562][ T3621] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.110626][ T9693] __nla_validate_parse: 6 callbacks suppressed [ 76.110686][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'. [ 76.110757][ T9693] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2090'. [ 76.193011][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.193054][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.234634][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.234676][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.245170][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 76.325279][ T9719] loop6: detected capacity change from 0 to 128 [ 76.347832][ T9719] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.416755][ T9373] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.630743][ T9756] sctp: [Deprecated]: syz.6.2111 (pid 9756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.630743][ T9756] Use struct sctp_sack_info instead [ 76.649881][ T9763] loop2: detected capacity change from 0 to 1024 [ 76.672726][ T9763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.685222][ T9763] EXT4-fs (loop2): shut down requested (2) [ 76.705783][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.710953][ T9769] loop6: detected capacity change from 0 to 512 [ 76.730110][ T9769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.804381][ T4724] Bluetooth: hci1: command tx timeout [ 76.867407][ T9373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.920484][ T9793] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 76.947288][ T9795] Bluetooth: MGMT ver 1.23 [ 77.090945][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 77.131351][ T9817] loop5: detected capacity change from 0 to 1024 [ 77.133170][ T9817] EXT4-fs: Ignoring removed oldalloc option [ 77.134894][ T9817] EXT4-fs: Ignoring removed orlov option [ 77.148872][ T9817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.165531][ T9817] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 77.184536][ T9817] EXT4-fs error (device loop5): ext4_readdir:265: inode #12: block 80: comm syz.5.2138: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 77.191855][ T9817] overlayfs: failed to look up () for ino (-13) [ 77.215969][ T7422] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /195/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 77.222057][ T7422] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /195/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 77.232542][ T7422] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 77.240546][ T7422] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /195/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 77.240888][ T7422] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 77.241183][ T7422] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /195/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 77.241603][ T7422] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 77.241865][ T7422] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /195/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 77.242099][ T7422] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 77.307764][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2146'. [ 77.336772][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 77.524188][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 77.568953][ T9858] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.571621][ T9858] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.749527][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.801815][ T9869] 8021q: adding VLAN 0 to HW filter on device eth0 [ 77.808916][ T9869] 8021q: adding VLAN 0 to HW filter on device eth1 [ 77.811309][ T9869] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.813813][ T9869] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.888661][ T3621] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.916659][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.919094][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.921472][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.923900][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.927256][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.967308][ T3621] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.997810][ T9886] set_capacity_and_notify: 1 callbacks suppressed [ 77.999252][ T9886] loop2: detected capacity change from 0 to 512 [ 78.006307][ T9891] loop1: detected capacity change from 0 to 256 [ 78.023374][ T9886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2170: bg 0: block 5: invalid block bitmap [ 78.023419][ T9886] loop2: lost filesystem error report for type 5 error -117 [ 78.023779][ T9886] EXT4-fs (loop2): Remounting filesystem read-only [ 78.023863][ T9886] EXT4-fs (loop2): 2 truncates cleaned up [ 78.025127][ T9886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.049384][ T9895] trusted_key: encrypted_key: key user:syz not found [ 78.074805][ T3621] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.098721][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.181162][ T3621] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.236228][ T9914] loop3: detected capacity change from 0 to 2048 [ 78.261823][ T9914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.402290][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.459177][ T9937] loop1: detected capacity change from 0 to 256 [ 78.459724][ T9937] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.459906][ T3621] bridge_slave_1: left allmulticast mode [ 78.459918][ T3621] bridge_slave_1: left promiscuous mode [ 78.460010][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.474381][ T3621] bridge_slave_0: left allmulticast mode [ 78.474419][ T3621] bridge_slave_0: left promiscuous mode [ 78.474522][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.760567][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.787175][ T3621] bond_slave_0: left promiscuous mode [ 78.790935][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.805535][ T3621] bond_slave_1: left promiscuous mode [ 78.807761][ T3621] bond0 (unregistering): Released all slaves [ 78.837325][ T9953] tap0: tun_chr_ioctl cmd 1074025677 [ 78.837434][ T9953] tap0: linktype set to 778 [ 78.860505][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.882935][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2204'. [ 78.885649][ T50] Bluetooth: hci1: command tx timeout [ 78.918216][ T9878] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.918270][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.918430][ T9878] bridge_slave_0: entered allmulticast mode [ 78.919126][ T9878] bridge_slave_0: entered promiscuous mode [ 78.922647][ T9878] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.922710][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.922775][ T9878] bridge_slave_1: entered allmulticast mode [ 78.923253][ T9878] bridge_slave_1: entered promiscuous mode [ 78.932777][ T9989] veth0: entered promiscuous mode [ 78.934081][ T9989] veth0: left promiscuous mode [ 78.958290][ T9878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.961150][ T9878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.060620][ T9878] team0: Port device team_slave_0 added [ 79.061594][ T9878] team0: Port device team_slave_1 added [ 79.096703][T10016] io-wq is not configured for unbound workers [ 79.130047][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2213'. [ 79.249094][T10040] loop6: detected capacity change from 0 to 256 [ 79.252542][T10021] bridge_slave_1: left allmulticast mode [ 79.252578][T10021] bridge_slave_1: left promiscuous mode [ 79.252686][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.276091][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.276128][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.276145][ T9878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.276833][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.276842][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.276856][ T9878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.294684][T10040] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 79.294721][T10040] FAT-fs (loop6): Filesystem has been set read-only [ 79.350980][T10050] loop2: detected capacity change from 0 to 1024 [ 79.370083][ T3621] hsr_slave_0: left promiscuous mode [ 79.371230][ T3621] hsr_slave_1: left promiscuous mode [ 79.371662][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.371674][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.380371][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.380402][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.386208][T10050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.392320][ T3621] veth1_macvtap: left promiscuous mode [ 79.392382][ T3621] veth0_macvtap: left promiscuous mode [ 79.392432][ T3621] veth1_vlan: left promiscuous mode [ 79.392470][ T3621] veth0_vlan: left promiscuous mode [ 79.402403][T10050] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.2219: lblock 3 mapped to illegal pblock 3 (length 3) [ 79.406780][T10050] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 79.406821][T10050] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.406821][T10050] [ 79.412100][T10050] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.2219: lblock 8 mapped to illegal pblock 8 (length 5) [ 79.418437][T10050] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 79.418474][T10050] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.418474][T10050] [ 79.442488][ T40] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 79.448407][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 79.449169][ T40] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.449169][ T40] [ 79.449184][ T40] EXT4-fs (loop2): Total free blocks count 0 [ 79.449192][ T40] EXT4-fs (loop2): Free/Dirty block details [ 79.449200][ T40] EXT4-fs (loop2): free_blocks=0 [ 79.456295][ T4722] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 79.569495][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 79.579312][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 79.643231][T10046] netlink: 'syz.3.2220': attribute type 1 has an invalid length. [ 79.643265][T10046] netlink: 'syz.3.2220': attribute type 2 has an invalid length. [ 79.644373][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 79.659177][ T9878] hsr_slave_0: entered promiscuous mode [ 79.659586][ T9878] hsr_slave_1: entered promiscuous mode [ 79.659802][ T9878] debugfs: 'hsr0' already exists in 'hsr' [ 79.659814][ T9878] Cannot create hsr debugfs directory [ 79.761179][T10067] veth0: entered promiscuous mode [ 79.761493][T10065] veth0: left promiscuous mode [ 79.855015][T10080] sctp: [Deprecated]: syz.6.2231 (pid 10080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.855015][T10080] Use struct sctp_sack_info instead [ 79.890433][ T9878] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 79.908517][ T9878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.908915][ T9878] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 79.917295][ T9878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.917716][ T9878] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 79.929198][ T9878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.931082][ T9878] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 79.958135][ T9878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.971317][T10098] CUSE: unknown device info "" [ 79.971351][T10098] CUSE: unknown device info "" [ 79.972213][T10098] CUSE: unknown device info "ÿw" [ 79.972229][T10098] CUSE: unknown device info "" [ 79.972235][T10098] CUSE: unknown device info "" [ 79.972241][T10098] CUSE: unknown device info "" [ 79.972247][T10098] CUSE: unknown device info "" [ 79.972251][T10098] CUSE: unknown device info "" [ 79.972255][T10098] CUSE: DEVNAME unspecified [ 79.990976][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.004222][ T50] Bluetooth: hci0: command tx timeout [ 80.125600][ T9878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.140820][ T9878] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.166039][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.166091][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.166691][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.166719][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.178890][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 80.247261][T10136] nvme_fcloop: unknown parameter or missing value 'w' [ 80.340073][ T30] audit: type=1400 audit(594.323:18): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="l" requested=r pid=10144 comm="syz.1.2252" path="/477/file1" dev="tmpfs" ino=2486 [ 80.478451][T10169] loop2: detected capacity change from 0 to 128 [ 80.489440][T10163] loop6: detected capacity change from 0 to 1024 [ 80.497054][T10169] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 80.498154][T10169] FAT-fs (loop2): Filesystem has been set read-only [ 80.510923][T10163] EXT4-fs: Ignoring removed orlov option [ 80.522882][T10163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.561873][T10180] TCP: TCP_TX_DELAY enabled [ 80.609718][ T9373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.691293][T10178] psci: CPU1 killed (polled 0 ms) [ 80.771893][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.905371][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 80.976811][ T50] Bluetooth: hci1: command tx timeout [ 81.068007][T10213] netlink: 'syz.3.2271': attribute type 10 has an invalid length. [ 81.135958][T10213] team0: Port device dummy0 added [ 81.250627][ T9878] veth0_vlan: entered promiscuous mode [ 81.279926][ T9878] veth1_vlan: entered promiscuous mode [ 81.321698][ T9878] veth0_macvtap: entered promiscuous mode [ 81.351099][ T9878] veth1_macvtap: entered promiscuous mode [ 81.362894][T10221] loop2: detected capacity change from 0 to 8192 [ 81.393196][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.432381][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.441037][T10234] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 81.441037][T10234] The task syz.1.2277 (10234) triggered the difference, watch for misbehavior. [ 81.494843][ T3646] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.496791][ T3646] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.498743][ T3646] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.498787][ T3646] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.591478][ T3646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.591497][ T3646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.611171][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'. [ 81.651789][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.653725][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.782954][T10250] loop6: detected capacity change from 0 to 256 [ 82.008066][T10263] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2291'. [ 82.084613][ T50] Bluetooth: hci0: command tx timeout [ 82.136131][T10272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.174428][T10272] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2295: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.186631][T10272] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 82.189051][T10272] EXT4-fs (loop6): This should not happen!! Data will be lost [ 82.189051][T10272] [ 82.200619][T10272] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2295: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.205944][T10272] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2295: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.278196][ T9373] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.298174][ T9373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.415597][T10289] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:107: comm syz.7.2302: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 82.439724][T10289] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 82.496174][T10299] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 82.778973][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2316'. [ 82.894919][T10331] EXT4-fs: Ignoring removed i_version option [ 82.894956][T10331] EXT4-fs: Ignoring removed nobh option [ 82.902503][T10331] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.912702][T10331] EXT4-fs (loop3): 1 truncate cleaned up [ 82.994428][T10339] SQUASHFS error: Unable to read directory block [631:72] [ 82.994480][T10339] SQUASHFS error: Unable to read directory block [631:72] [ 83.119443][T10347] set_capacity_and_notify: 4 callbacks suppressed [ 83.126248][T10347] loop3: detected capacity change from 0 to 512 [ 83.126755][T10347] EXT4-fs: inline encryption not supported [ 83.131632][T10347] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.151625][T10347] EXT4-fs (loop3): 1 truncate cleaned up [ 83.271729][T10355] erspan0: entered promiscuous mode [ 83.293267][T10355] macsec1: entered promiscuous mode [ 83.597899][T10373] Injecting memory failure for pfn 0x219270 at process virtual address 0x20289000 [ 83.600254][T10373] Memory failure: 0x219270: Sending SIGBUS to syz.7.2338:10373 due to hardware memory corruption [ 83.607028][T10373] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 83.613728][T10376] veth0_macvtap: left promiscuous mode [ 83.638810][T10376] netlink: 'syz.6.2339': attribute type 1 has an invalid length. [ 83.640563][T10376] netlink: 'syz.6.2339': attribute type 2 has an invalid length. [ 83.821019][T10388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2346'. [ 84.126596][T10410] loop6: detected capacity change from 0 to 2048 [ 84.164578][ T50] Bluetooth: hci0: command tx timeout [ 84.229084][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 84.231030][T10421] netlink: 'syz.2.2359': attribute type 26 has an invalid length. [ 84.251407][T10410] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 84.256561][T10410] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.259920][T10410] EXT4-fs (loop6): This should not happen!! Data will be lost [ 84.259920][T10410] [ 84.261857][T10410] EXT4-fs (loop6): Total free blocks count 0 [ 84.263001][T10410] EXT4-fs (loop6): Free/Dirty block details [ 84.264267][T10410] EXT4-fs (loop6): free_blocks=4096 [ 84.271619][T10410] EXT4-fs (loop6): dirty_blocks=32 [ 84.271674][T10410] EXT4-fs (loop6): Block reservation details [ 84.271693][T10410] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 84.272738][T10410] EXT4-fs error (device loop6) in ext4_setattr:6172: error 28 [ 84.347722][ T40] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 84.347764][ T40] EXT4-fs (loop6): This should not happen!! Data will be lost [ 84.347764][ T40] [ 84.352945][ T9373] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 84.516815][ T50] Bluetooth: hci4: Dropping invalid advertising data [ 84.516844][ T50] Bluetooth: hci4: Malformed LE Event: 0x02 [ 84.861590][T10459] netlink: 552 bytes leftover after parsing attributes in process `syz.2.2378'. [ 85.017189][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2381'. [ 85.019100][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2381'. [ 85.117339][T10463] loop2: detected capacity change from 0 to 8192 [ 85.149069][T10463] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.154254][ T10] lg-g15 0003:046D:C21C.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 85.158111][ T10] lg-g15 0003:046D:C21C.0004: Error getting backlight brightness: -5 [ 85.164816][ T10] lg-g15 0003:046D:C21C.0004: probe with driver lg-g15 failed with error -5 [ 85.168725][T10463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 85.172991][T10463] FAT-fs (loop2): Filesystem has been set read-only [ 85.281516][T10474] loop7: detected capacity change from 0 to 512 [ 85.300948][T10474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.313167][T10474] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2385: iget: bad i_size value: 38620345925642 [ 85.313210][T10474] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.313962][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 85.313983][ C0] EXT4-fs (loop7): initial error at time 599: ext4_orphan_get:1399: inode 15 [ 85.314020][ C0] EXT4-fs (loop7): last error at time 599: ext4_orphan_get:1399: inode 15 [ 85.315281][T10474] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2385: couldn't read orphan inode 15 (err -117) [ 85.315312][T10474] loop7: lost filesystem error report for type 5 error -117 [ 85.641287][T10499] netlink: 276 bytes leftover after parsing attributes in process `syz.7.2395'. [ 85.657002][T10499] netlink: 276 bytes leftover after parsing attributes in process `syz.7.2395'. [ 85.913698][T10518] loop6: detected capacity change from 0 to 512 [ 86.245955][ T4724] Bluetooth: hci0: command tx timeout [ 86.255795][T10540] can0: slcan on ttyS3. [ 86.362182][ T30] audit: type=1400 audit(600.343:19): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=10545 comm="syz.1.2417" name="502" dev="tmpfs" ino=2612 [ 86.514505][T10540] can0 (unregistered): slcan off ttyS3. [ 86.517288][T10540] Falling back ldisc for ttyS3. [ 86.860464][T10577] loop3: detected capacity change from 0 to 512 [ 86.891543][T10577] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2430: bad orphan inode 15 [ 86.891582][T10577] loop3: lost filesystem error report for type 5 error -117 [ 86.893970][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 86.893997][ C0] EXT4-fs (loop3): initial error at time 600: ext4_orphan_get:1425 [ 86.894028][ C0] EXT4-fs (loop3): last error at time 600: ext4_orphan_get:1425 [ 86.903468][T10577] ext4_test_bit(bit=14, block=5) = 0 [ 86.940033][T10585] device-mapper: ioctl: name not supplied when creating device [ 87.175024][T10597] netlink: 'syz.6.2433': attribute type 2 has an invalid length. [ 87.175054][T10597] __nla_validate_parse: 1 callbacks suppressed [ 87.175074][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2433'. [ 87.368388][T10608] loop7: detected capacity change from 0 to 512 [ 87.799044][T10642] loop2: detected capacity change from 0 to 256 [ 87.853469][T10642] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 87.855668][T10642] FAT-fs (loop2): Filesystem has been set read-only [ 87.895201][ T50] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 88.042454][T10657] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2455'. [ 88.042495][T10657] netlink: 160 bytes leftover after parsing attributes in process `syz.7.2455'. [ 88.063824][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2456'. [ 88.496689][T10682] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.195844][T10713] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.407870][T10738] loop3: detected capacity change from 0 to 256 [ 89.447254][T10738] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 89.449368][T10738] FAT-fs (loop3): Filesystem has been set read-only [ 89.502114][T10713] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.800121][T10759] loop2: detected capacity change from 0 to 256 [ 89.855782][T10713] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.959015][T10713] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.011363][T10767] loop3: detected capacity change from 0 to 512 [ 90.022015][T10767] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 90.050228][T10767] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2496: bg 0: block 104: invalid block bitmap [ 90.050284][T10767] loop3: lost filesystem error report for type 5 error -117 [ 90.053980][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 90.054013][ C0] EXT4-fs (loop3): initial error at time 604: ext4_validate_block_bitmap:432 [ 90.054050][ C0] EXT4-fs (loop3): last error at time 604: ext4_validate_block_bitmap:432 [ 90.067682][T10767] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 90.067721][T10767] loop3: lost filesystem error report for type 5 error -117 [ 90.069733][T10767] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2496: invalid indirect mapped block 1 (level 1) [ 90.073538][T10767] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.074122][T10767] EXT4-fs (loop3): 1 truncate cleaned up [ 90.469054][T10789] bridge0: port 3(vlan2) entered blocking state [ 90.482832][T10789] bridge0: port 3(vlan2) entered disabled state [ 90.483049][T10789] vlan2: entered allmulticast mode [ 90.483065][T10789] bridge0: entered allmulticast mode [ 90.500893][T10789] vlan2: left allmulticast mode [ 90.500929][T10789] bridge0: left allmulticast mode [ 90.762597][T10807] netlink: 'syz.2.2510': attribute type 12 has an invalid length. [ 90.771143][T10807] netlink: 'syz.2.2510': attribute type 29 has an invalid length. [ 90.772576][T10807] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2510'. [ 90.792559][T10805] can0: slcan on ptm0. [ 90.876071][T10804] can0 (unregistered): slcan off ptm0. [ 90.967177][T10822] netlink: 1371 bytes leftover after parsing attributes in process `syz.2.2517'. [ 90.974292][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'. [ 91.400196][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2532'. [ 91.414387][T10854] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2531'. [ 91.946519][T10885] loop7: detected capacity change from 0 to 512 [ 92.432398][T10905] tipc: Enabled bearer , priority 0 [ 92.483882][T10907] loop6: detected capacity change from 0 to 256 [ 92.521739][T10911] batadv_slave_0: entered promiscuous mode [ 92.523659][T10910] batadv_slave_0: left promiscuous mode [ 92.697269][T10918] netlink: 'syz.3.2563': attribute type 12 has an invalid length. [ 92.698881][T10918] netlink: 'syz.3.2563': attribute type 29 has an invalid length. [ 92.700487][T10918] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2563'. [ 92.702654][T10918] netlink: 'syz.3.2563': attribute type 1 has an invalid length. [ 92.702686][T10918] netlink: 'syz.3.2563': attribute type 2 has an invalid length. [ 93.068250][T10935] vlan2: entered allmulticast mode [ 93.068291][T10935] macsec0: entered allmulticast mode [ 93.068319][T10935] veth1_macvtap: entered allmulticast mode [ 93.242791][T10945] loop6: detected capacity change from 0 to 1024 [ 93.342432][T10945] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2576: lblock 0 mapped to illegal pblock 0 (length 1) [ 93.364797][T10945] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 93.364851][T10945] EXT4-fs (loop6): This should not happen!! Data will be lost [ 93.364851][T10945] [ 93.431397][ T9373] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 94.157548][T11013] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2605'. [ 94.571595][ T30] audit: type=1807 audit(608.543:20): action=measure res=1 [ 94.590430][T11046] ima: policy update completed [ 94.591668][ T30] audit: type=1802 audit(608.573:21): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.3.2619" res=1 errno=0 [ 94.609297][ T30] audit: type=1800 audit(608.593:22): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 94.609357][ T30] audit: type=1800 audit(608.593:23): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 94.644994][ T30] audit: type=1800 audit(608.623:24): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 94.654303][ T30] audit: type=1800 audit(608.633:25): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 94.669093][ T30] audit: type=1800 audit(608.653:26): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 94.689791][ T30] audit: type=1800 audit(608.673:27): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 94.744993][ T30] audit: type=1800 audit(608.723:28): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 94.796413][ T30] audit: type=1800 audit(608.783:29): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 94.859548][T11054] loop1: detected capacity change from 0 to 8192 [ 95.274714][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2633'. [ 95.394687][T11091] loop7: detected capacity change from 0 to 4096 [ 95.416441][T11091] EXT4-fs mount: 22 callbacks suppressed [ 95.417860][T11091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.450163][T11098] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x42 [ 95.568162][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.609123][T11108] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 95.973064][T11135] loop1: detected capacity change from 0 to 128 [ 96.069916][T11139] mt6360 0-0034: probe with driver mt6360 failed with error -5 [ 96.089860][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2654'. [ 96.089906][T11145] netlink: 'syz.6.2654': attribute type 10 has an invalid length. [ 96.089931][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2654'. [ 96.106499][T11145] geneve2: entered promiscuous mode [ 96.107467][T11145] geneve2: entered allmulticast mode [ 96.128523][T11139] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34 [ 97.319194][T11191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2663'. [ 97.440291][T11200] dyndbg: bad flag-op f, at start of f_subset.cZ+p [ 97.447094][T11200] dyndbg: flags parse failed [ 97.472231][ T0] Detected PIPT I-cache on CPU1 [ 97.472282][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 97.472476][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 97.495876][T11153] infiniband syz1: set active [ 97.497656][T11153] infiniband syz1: added syz_tun [ 97.534907][T11204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2669'. [ 97.563651][T11153] RDS/IB: syz1: added [ 97.569976][T11153] smc: adding ib device syz1 with port count 1 [ 97.571897][T11153] smc: ib device syz1 port 1 has no pnetid [ 97.683821][T11225] loop3: detected capacity change from 0 to 128 [ 97.743625][T11235] loop3: detected capacity change from 0 to 256 [ 97.824557][T11239] loop6: detected capacity change from 0 to 512 [ 97.854247][T11239] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 97.854321][T11239] System zones: 1-12 [ 97.858161][T11239] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.2686: missing EA_INODE flag [ 97.858189][T11239] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 97.858581][T11239] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2686: error while reading EA inode 12 err=-117 [ 97.858598][T11239] loop6: lost filesystem error report for type 5 error -117 [ 97.860566][T11239] EXT4-fs (loop6): 1 orphan inode deleted [ 97.861401][T11239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.899117][ T9373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.930143][T11248] ip_tables: iptables: counters copy to user failed while replacing table [ 97.963033][T11252] loop7: detected capacity change from 0 to 8 [ 97.966808][T11251] vxcan0: tx address claim with dest, not broadcast [ 97.971888][T11252] squashfs image failed sanity check [ 98.020154][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.048749][T11260] loop3: detected capacity change from 0 to 512 [ 98.082274][T11260] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 98.082333][T11260] System zones: 0-2, 18-18, 34-34 [ 98.096286][T11260] EXT4-fs (loop3): 1 orphan inode deleted [ 98.098137][T11260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.210681][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.298037][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 98.451503][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2701'. [ 98.453478][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2701'. [ 98.455479][T11279] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2701'. [ 98.494501][T11281] loop1: detected capacity change from 0 to 512 [ 98.496758][T11281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.500461][T11281] EXT4-fs (loop1): 1 truncate cleaned up [ 98.502072][T11281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.515691][T11281] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6455: inode #12: comm syz.1.2702: bad extra_isize 62 (inode size 256) [ 98.519879][T11281] EXT4-fs (loop1): Remounting filesystem read-only [ 98.535732][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.557622][T11284] loop1: detected capacity change from 0 to 1024 [ 98.558090][T11284] EXT4-fs: Ignoring removed bh option [ 98.580278][T11284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.614670][ T4717] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /544/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 98.615495][ T4717] EXT4-fs (loop1): Remounting filesystem read-only [ 98.622503][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.684836][T11290] overlayfs: upper fs does not support tmpfile. [ 99.239590][T11340] EXT4-fs: Ignoring removed nobh option [ 99.255038][T11340] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.320941][ T9878] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.595123][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 99.595167][ T30] audit: type=1800 audit(869.581:153): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 99.622804][ T30] audit: type=1800 audit(869.601:154): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 99.653360][ T30] audit: type=1800 audit(869.631:155): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 99.675602][T11387] batman_adv: batadv0: Adding interface: macvtap1 [ 99.676816][T11387] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 99.677158][ T30] audit: type=1800 audit(869.661:156): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 99.690290][ T30] audit: type=1800 audit(869.671:157): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 99.720472][ T30] audit: type=1800 audit(869.701:158): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 99.749198][ T30] audit: type=1800 audit(869.731:159): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 99.849266][ T30] audit: type=1800 audit(869.831:160): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 99.892957][ T30] audit: type=1800 audit(869.871:161): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 99.903645][ T30] audit: type=1800 audit(869.891:162): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 99.921920][T11404] set_capacity_and_notify: 4 callbacks suppressed [ 99.923297][T11404] loop6: detected capacity change from 0 to 128 [ 99.943637][T11404] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.979970][ T9373] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.028794][T11410] loop7: detected capacity change from 0 to 1024 [ 100.043045][T11410] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 100.044972][T11410] System zones: 0-1, 3-12 [ 100.053612][T11410] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.082302][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 100.112928][T11415] loop7: detected capacity change from 0 to 512 [ 100.117077][T11415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.140869][T11415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.191702][T11415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.324949][ T4724] Bluetooth: hci5: command 0x1003 tx timeout [ 100.326431][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 100.546909][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'. [ 100.546941][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2762'. [ 100.546975][T11447] netlink: 'syz.2.2762': attribute type 12 has an invalid length. [ 100.546990][T11447] netlink: 'syz.2.2762': attribute type 13 has an invalid length. [ 100.617770][T11453] loop1: detected capacity change from 0 to 512 [ 100.618638][T11453] EXT4-fs: Conflicting test_dummy_encryption options [ 101.085199][T11499] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2788'. [ 101.088001][T11499] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2788'. [ 101.190027][T11507] loop2: detected capacity change from 0 to 4096 [ 101.208726][T11507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.317973][T11518] loop7: detected capacity change from 0 to 2048 [ 101.341247][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.391623][T11518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.489608][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.669190][T11536] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2805'. [ 102.008028][T11567] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2820'. [ 102.118712][T11576] loop2: detected capacity change from 0 to 512 [ 102.119416][T11576] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 102.123157][T11576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 102.123271][T11576] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.124172][T11576] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2825: bg 0: block 361: padding at end of block bitmap is not set [ 102.124194][T11576] loop2: lost filesystem error report for type 5 error -117 [ 102.124492][T11576] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 102.124515][T11576] loop2: lost filesystem error report for type 5 error -117 [ 102.124724][T11576] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2825: attempt to clear invalid blocks 33619980 len 1 [ 102.124748][T11576] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 102.125509][T11576] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2825: invalid indirect mapped block 1811939328 (level 0) [ 102.125525][T11576] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 102.125607][T11576] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2825: invalid indirect mapped block 2185560079 (level 1) [ 102.125620][T11576] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 102.125790][T11576] EXT4-fs (loop2): 1 truncate cleaned up [ 102.126340][T11576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 102.154721][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 102.207963][T11585] loop2: detected capacity change from 0 to 512 [ 102.218089][T11585] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2828: inode has both inline data and extents flags [ 102.218124][T11585] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.218249][T11585] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2828: couldn't read orphan inode 15 (err -117) [ 102.218263][T11585] loop2: lost filesystem error report for type 5 error -117 [ 102.218795][T11585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.308234][T11591] loop6: detected capacity change from 0 to 512 [ 102.330519][T11591] EXT4-fs (loop6): orphan cleanup on readonly fs [ 102.330555][T11591] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 102.335895][T11591] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 102.338668][T11591] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2831: attempt to clear invalid blocks 2 len 1 [ 102.338687][T11591] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.343971][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 102.344008][ C1] EXT4-fs (loop6): initial error at time 872: ext4_mb_generate_buddy:1317 [ 102.344035][ C1] EXT4-fs (loop6): last error at time 872: ext4_clear_blocks:876: inode 13 [ 102.350980][T11591] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2831: invalid indirect mapped block 1819239214 (level 0) [ 102.351029][T11591] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.351848][T11591] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2831: invalid indirect mapped block 1819239214 (level 1) [ 102.351865][T11591] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.352553][T11591] EXT4-fs (loop6): 1 truncate cleaned up [ 102.353009][T11591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.379655][T11591] EXT4-fs: Ignoring removed oldalloc option [ 102.381032][T11591] EXT4-fs: user quota file already specified [ 102.412845][ T9373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.471223][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.740135][T11634] loop7: detected capacity change from 0 to 512 [ 102.788322][T11634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.841828][T11634] EXT4-fs error (device loop7): ext4_validate_block_bitmap:423: comm syz.7.2850: bg 0: bad block bitmap checksum [ 102.843529][T11634] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 102.924693][T11647] Bluetooth: MGMT ver 1.23 [ 102.934354][T11634] Invalid ELF header magic: != ELF [ 103.069405][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.178491][T11665] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.222448][T11674] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2868'. [ 103.309159][T11681] tap0: tun_chr_ioctl cmd 1074025677 [ 103.309255][T11681] tap0: linktype set to 805 [ 103.411121][T11694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.432487][T11694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.485529][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.523500][T11709] EXT4-fs (loop3): 1 truncate cleaned up [ 103.524405][T11709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.584971][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.667768][T11726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.710790][T11726] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 16: block 46:freeing already freed block (bit 46); block bitmap corrupt. [ 103.833675][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.878513][T11748] vhci_hcd vhci_hcd.0: failed to lookup sock [ 103.956540][T11756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.999905][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.105416][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 104.107214][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 104.114182][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 104.411109][T11800] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2924'. [ 104.431068][T11802] tun0: tun_chr_ioctl cmd 1074025677 [ 104.431164][T11802] tun0: linktype set to 823 [ 104.612669][ T30] kauditd_printk_skb: 174 callbacks suppressed [ 104.612715][ T30] audit: type=1800 audit(875.592:337): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 104.626871][ T30] audit: type=1800 audit(875.612:338): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 104.655341][ T30] audit: type=1800 audit(875.642:339): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 104.691533][ T30] audit: type=1800 audit(875.672:340): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 104.711567][ T30] audit: type=1800 audit(875.692:341): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 104.720973][ T30] audit: type=1800 audit(875.702:342): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 104.723372][ T30] audit: type=1800 audit(875.702:343): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.2937" name="devnum" dev="sysfs" ino=27197 res=0 errno=0 [ 104.750721][ T30] audit: type=1800 audit(875.732:344): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 104.763195][ T30] audit: type=1800 audit(875.742:345): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 104.786751][ T30] audit: type=1800 audit(875.772:346): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 104.799738][T11834] tipc: Started in network mode [ 104.799780][T11834] tipc: Node identity ac14140f, cluster identity 4711 [ 104.799888][T11834] tipc: New replicast peer: 255.255.255.255 [ 104.800095][T11834] tipc: Enabled bearer , priority 10 [ 104.866666][ T3621] Bluetooth: hci6: Frame reassembly failed (-84) [ 104.867652][T11837] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 104.872007][T11842] netlink: 'syz.7.2945': attribute type 5 has an invalid length. [ 105.008513][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2952'. [ 105.128652][T11863] set_capacity_and_notify: 4 callbacks suppressed [ 105.128701][T11863] loop3: detected capacity change from 0 to 512 [ 105.143849][T11863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.175886][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.245953][T11871] loop6: detected capacity change from 0 to 256 [ 105.252105][T11871] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 105.252138][T11871] FAT-fs (loop6): Filesystem has been set read-only [ 105.805646][ T4815] tipc: Node number set to 2886997007 [ 106.164099][ T4719] Bluetooth: hci5: command 0x1003 tx timeout [ 106.164183][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 106.278233][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 106.340682][T11908] loop7: detected capacity change from 0 to 2048 [ 106.370949][T11908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.427717][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.479759][T11922] loop7: detected capacity change from 0 to 256 [ 106.526407][T11928] loop6: detected capacity change from 0 to 512 [ 106.533189][T11928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.587184][ T9373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.617336][T11938] sctp: [Deprecated]: syz.3.2987 (pid 11938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.617336][T11938] Use struct sctp_sack_info instead [ 106.825580][T11966] loop6: detected capacity change from 0 to 1024 [ 106.839311][T11966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.882204][ T1140] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 106.884203][ T4724] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 106.893718][ T1140] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 106.893761][ T1140] EXT4-fs (loop6): This should not happen!! Data will be lost [ 106.893761][ T1140] [ 106.906001][ T39] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 106.908255][ T39] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 29 with error 28 [ 106.908272][ T39] EXT4-fs (loop6): This should not happen!! Data will be lost [ 106.908272][ T39] [ 106.908280][ T39] EXT4-fs (loop6): Total free blocks count 0 [ 106.908287][ T39] EXT4-fs (loop6): Free/Dirty block details [ 106.908295][ T39] EXT4-fs (loop6): free_blocks=0 [ 106.908303][ T39] EXT4-fs (loop6): dirty_blocks=32 [ 106.908309][ T39] EXT4-fs (loop6): Block reservation details [ 106.915793][ T9373] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 107.004772][T11979] nbd1: detected capacity change from 0 to 549764202496 [ 107.006655][ T4724] block nbd1: Receive control failed (result -32) [ 107.012872][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3007'. [ 107.017437][ T25] block nbd1: Dead connection, failed to find a fallback [ 107.017473][ T25] block nbd1: shutting down sockets [ 107.017500][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.017521][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.026113][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.028616][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.031750][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.031785][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.036367][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.036408][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.039963][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.039991][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.043264][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.043292][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.069530][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.069581][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.069691][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.069704][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.069727][ T6770] ldm_validate_partition_table(): Disk read failed. [ 107.069763][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.069774][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.069820][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.069831][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.069929][ T6770] Dev nbd1: unable to read RDB block 0 [ 107.070113][ T6770] nbd1: unable to read partition table [ 107.095396][ T6770] ldm_validate_partition_table(): Disk read failed. [ 107.097829][ T6770] Dev nbd1: unable to read RDB block 0 [ 107.099070][ T6770] nbd1: unable to read partition table [ 107.319142][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3023'. [ 107.347860][T12025] loop2: detected capacity change from 0 to 128 [ 107.358735][T12025] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.452392][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.501089][T12033] loop7: detected capacity change from 0 to 8192 [ 107.545581][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.545629][T12033] FAT-fs (loop7): Filesystem has been set read-only [ 107.545654][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.545689][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.545737][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.545750][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.546925][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.546947][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.550174][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.550199][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.550217][T12033] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 107.617950][T12052] loop3: detected capacity change from 0 to 1024 [ 107.635940][T12052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.715213][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.788035][T12071] EXT4-fs: inline encryption not supported [ 107.816929][T12071] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.816971][T12071] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.821719][T12071] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002] [ 107.822636][T12071] System zones: 0-5 [ 107.827573][T12071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.886220][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.048767][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3060'. [ 108.510280][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'. [ 108.694171][T12163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.432204][T12163] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 111.442227][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 111.443469][ T30] audit: type=1800 audit(882.422:496): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 111.476929][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.480517][ T30] audit: type=1800 audit(882.462:497): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 111.499344][ T30] audit: type=1800 audit(882.482:498): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 112.658807][ T30] audit: type=1800 audit(883.642:499): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 112.680593][ T30] audit: type=1800 audit(883.662:500): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 112.697695][ T30] audit: type=1800 audit(883.682:501): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 112.712541][ T30] audit: type=1800 audit(883.702:502): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 112.722051][T12180] netlink: 'syz.3.3096': attribute type 1 has an invalid length. [ 112.742885][ T30] audit: type=1800 audit(883.722:503): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 112.754245][ T30] audit: type=1800 audit(883.732:504): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 112.771074][T12187] netlink: 'syz.3.3099': attribute type 10 has an invalid length. [ 112.777420][ T30] audit: type=1800 audit(883.762:505): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 112.789260][T12187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.790575][T12187] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.813785][T12194] set_capacity_and_notify: 3 callbacks suppressed [ 112.815759][T12194] loop7: detected capacity change from 0 to 2048 [ 112.975869][T12210] loop1: detected capacity change from 0 to 512 [ 113.001042][T12210] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.3109: corrupted in-inode xattr: invalid ea_ino [ 113.001089][T12210] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.003889][T12210] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3109: couldn't read orphan inode 15 (err -117) [ 113.004714][T12210] loop1: lost filesystem error report for type 5 error -117 [ 113.008965][T12210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.028698][T12210] EXT4-fs warning (device loop1): ext4_empty_dir:3094: inode #2: comm syz.1.3109: directory missing '.' [ 113.049806][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.113695][T12226] loop7: detected capacity change from 0 to 512 [ 113.133778][T12226] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.133823][T12226] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 113.133840][T12226] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3117: Corrupt directory, running e2fsck is recommended [ 113.148435][T12226] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 113.150058][T12226] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.3117: corrupted in-inode xattr: invalid ea_ino [ 113.150095][T12226] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.152622][T12226] EXT4-fs (loop7): Remounting filesystem read-only [ 113.153155][T12226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.189445][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.352145][T12245] loop3: detected capacity change from 0 to 1024 [ 113.352491][T12245] EXT4-fs: Ignoring removed bh option [ 113.385820][T12245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c028, mo2=0002] [ 113.385876][T12245] System zones: 0-1, 3-8 [ 113.386438][T12245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.399701][T12245] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3125: bg 0: block 112: padding at end of block bitmap is not set [ 113.402629][T12245] EXT4-fs (loop3): Remounting filesystem read-only [ 113.421290][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.520526][T12260] loop2: detected capacity change from 0 to 512 [ 113.567294][T12260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.593333][T12271] loop3: detected capacity change from 0 to 1024 [ 113.593730][T12271] EXT4-fs: Ignoring removed orlov option [ 113.605277][T12271] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 113.619253][T12271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.636890][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3134'. [ 113.693097][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.741550][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.775167][ T4815] kernel read not supported for file /vcs (pid: 4815 comm: kworker/1:5) [ 113.901814][T12296] loop1: detected capacity change from 0 to 1024 [ 113.935857][T12298] bridge0: port 2(syz_tun) entered blocking state [ 113.935961][T12298] bridge0: port 2(syz_tun) entered disabled state [ 113.936214][T12298] syz_tun: entered allmulticast mode [ 113.939215][T12298] syz_tun: entered promiscuous mode [ 113.942975][T12298] bridge0: port 2(syz_tun) entered blocking state [ 113.943076][T12298] bridge0: port 2(syz_tun) entered forwarding state [ 113.963214][T12296] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.3145: Freeing blocks not in datazone - block = 0, count = 16 [ 114.033858][T12314] loop3: detected capacity change from 0 to 256 [ 114.038802][T12314] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 114.051345][T12317] loop7: detected capacity change from 0 to 512 [ 114.051715][T12317] EXT4-fs: Ignoring removed bh option [ 114.072033][T12317] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 114.072548][T12317] EXT4-fs (loop7): 1 truncate cleaned up [ 114.107536][T12317] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.3154: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 114.236079][T12335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3162'. [ 114.303394][T12345] loop7: detected capacity change from 0 to 256 [ 114.318154][T12345] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 114.318186][T12345] FAT-fs (loop7): Filesystem has been set read-only [ 114.331206][T12347] EXT4-fs: Ignoring removed oldalloc option [ 114.334853][T12347] EXT4-fs: Ignoring removed orlov option [ 114.336459][T12347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.404580][ T39] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 114.518219][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3173'. [ 114.601637][T12368] Injecting memory failure for pfn 0x122b0f at process virtual address 0x20f0f000 [ 114.618214][T12368] Memory failure: 0x122b0f: recovery action for dirty LRU page: Recovered [ 114.758786][T12384] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.761995][T12384] FAT-fs (loop7): Filesystem has been set read-only [ 114.763545][T12384] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.767016][T12384] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.771749][T12384] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.774479][T12384] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 115.130688][T12429] Bluetooth: MGMT ver 1.23 [ 115.130740][T12429] Bluetooth: hci1: too big key_count value 4608 [ 115.195234][T12436] netlink: 'syz.1.3210': attribute type 12 has an invalid length. [ 115.195278][T12436] netlink: 'syz.1.3210': attribute type 29 has an invalid length. [ 115.195307][T12436] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3210'. [ 115.195332][T12436] netlink: 'syz.1.3210': attribute type 3 has an invalid length. [ 115.195346][T12436] netlink: 'syz.1.3210': attribute type 2 has an invalid length. [ 115.195359][T12436] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3210'. [ 115.408642][T12459] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop1' because it doesn't have stable inode numbers [ 115.589098][T12476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.594829][T12476] EXT4-fs (loop1): 1 truncate cleaned up [ 115.670745][T12480] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.3227: lblock 0 mapped to illegal pblock 0 (length 1) [ 115.678017][T12480] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 115.678076][T12480] EXT4-fs (loop7): This should not happen!! Data will be lost [ 115.678076][T12480] [ 115.698252][T12480] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3227: bg 0: block 112: padding at end of block bitmap is not set [ 115.714125][T12480] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 115.717674][T12480] EXT4-fs (loop7): This should not happen!! Data will be lost [ 115.717674][T12480] [ 115.719688][T12480] EXT4-fs (loop7): Total free blocks count 0 [ 115.721062][T12480] EXT4-fs (loop7): Free/Dirty block details [ 115.722367][T12480] EXT4-fs (loop7): free_blocks=0 [ 115.723582][T12480] EXT4-fs (loop7): dirty_blocks=64 [ 115.726206][T12480] EXT4-fs (loop7): Block reservation details [ 115.726250][T12480] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 115.745099][ T9878] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 115.882456][T12508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3239'. [ 115.894830][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.193086][T12537] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 116.193121][T12537] unable to read xattr id index table [ 116.197036][T12537] SQUASHFS error: zlib decompression failed, data probably corrupt [ 116.197062][T12537] SQUASHFS error: Failed to read block 0x9b: -5 [ 116.197081][T12537] SQUASHFS error: Unable to read metadata cache entry [99] [ 116.197093][T12537] SQUASHFS error: Unable to read inode 0x127 [ 116.211173][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3253'. [ 116.449877][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 116.449918][ T30] audit: type=1800 audit(887.432:666): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 116.462493][ T30] audit: type=1800 audit(887.442:667): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 116.495180][ T30] audit: type=1800 audit(887.482:668): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 116.521262][ T30] audit: type=1800 audit(887.502:669): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 116.584163][ T30] audit: type=1800 audit(887.562:670): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 116.599925][ T30] audit: type=1800 audit(887.582:671): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 116.613866][T12578] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3269'. [ 116.654116][T12579] EXT4-fs error (device loop3): ext4_resize_begin:60: comm syz.3.3270: resize_inode disabled but reserved GDT blocks non-zero [ 116.679499][ T30] audit: type=1800 audit(887.662:672): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 116.714980][ T30] audit: type=1800 audit(887.702:673): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 116.747964][ T30] audit: type=1800 audit(887.732:674): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 116.770239][ T30] audit: type=1800 audit(887.752:675): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 116.924112][T12608] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 117.002800][T12619] input: syz0 as /devices/virtual/input/input9 [ 117.272210][T12649] netlink: 'syz.1.3303': attribute type 12 has an invalid length. [ 117.272244][T12649] netlink: 'syz.1.3303': attribute type 29 has an invalid length. [ 117.272269][T12649] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3303'. [ 117.339995][T12659] input: syz0 as /devices/virtual/input/input10 [ 122.661218][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 122.661270][ T30] audit: type=1800 audit(893.642:743): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 122.673896][ T30] audit: type=1800 audit(893.652:744): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3327" name="multicast_igmp_version" dev="sysfs" ino=68279 res=0 errno=0 [ 122.702845][ T30] audit: type=1800 audit(893.682:745): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 122.702898][ T30] audit: type=1800 audit(893.682:746): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 122.712261][ T30] audit: type=1800 audit(893.692:747): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 122.727651][ T30] audit: type=1800 audit(893.712:748): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 122.735451][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3330'. [ 122.759491][ T30] audit: type=1800 audit(893.742:749): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 122.768104][ T30] audit: type=1800 audit(893.752:750): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 122.782070][ T30] audit: type=1800 audit(893.762:751): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 122.790677][T12715] input: syz1 as /devices/virtual/input/input11 [ 122.810343][ T30] audit: type=1800 audit(893.792:752): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 122.826532][T12719] set_capacity_and_notify: 12 callbacks suppressed [ 122.826577][T12719] loop7: detected capacity change from 0 to 512 [ 122.956243][ T4724] block nbd2: Receive control failed (result -32) [ 122.957862][ T50] block nbd2: Receive control failed (result -32) [ 123.125793][T12762] loop3: detected capacity change from 0 to 512 [ 123.418288][T12799] block2mtd: device name too long [ 123.542442][T12815] loop6: detected capacity change from 0 to 512 [ 123.545525][T12815] EXT4-fs: Ignoring removed bh option [ 123.546690][T12815] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.548367][T12815] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 123.551654][T12815] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3378: bad orphan inode 131083 [ 123.553804][T12815] loop6: lost filesystem error report for type 5 error -117 [ 123.553949][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 123.553971][ C1] EXT4-fs (loop6): initial error at time 894: ext4_orphan_get:1425 [ 123.553998][ C1] EXT4-fs (loop6): last error at time 894: ext4_orphan_get:1425 [ 123.576578][T12815] overlayfs: upper fs needs to support d_type. [ 123.611448][ T9373] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /250/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 123.672417][T12827] ip_tables: iptables: counters copy to user failed while replacing table [ 123.897463][ T3621] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.978009][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3397'. [ 123.985541][ T3621] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.020652][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.022362][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.024921][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.029508][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.031358][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.062476][T12861] loop2: detected capacity change from 0 to 512 [ 124.066118][T12861] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3400: iget: bad i_size value: 38620345925642 [ 124.066155][T12861] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.066312][T12861] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3400: couldn't read orphan inode 15 (err -117) [ 124.066333][T12861] loop2: lost filesystem error report for type 5 error -117 [ 124.080058][T12861] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3400: bg 0: block 5: invalid block bitmap [ 124.081804][T12861] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 124.081822][T12861] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.081822][T12861] [ 124.081830][T12861] EXT4-fs (loop2): Total free blocks count 0 [ 124.081838][T12861] EXT4-fs (loop2): Free/Dirty block details [ 124.081857][T12861] EXT4-fs (loop2): free_blocks=0 [ 124.081874][T12861] EXT4-fs (loop2): dirty_blocks=65 [ 124.081881][T12861] EXT4-fs (loop2): Block reservation details [ 124.081887][T12861] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 124.120685][ T4722] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 124.124989][ T3621] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.141774][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3401'. [ 124.238287][ T3621] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.267199][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 124.267284][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3403'. [ 124.444131][ T3621] bridge_slave_1: left allmulticast mode [ 124.444171][ T3621] bridge_slave_1: left promiscuous mode [ 124.444267][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.470042][T12897] loop1: detected capacity change from 0 to 8 [ 124.470416][ T3621] bridge_slave_0: left allmulticast mode [ 124.470446][ T3621] bridge_slave_0: left promiscuous mode [ 124.470623][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.497737][T12897] SQUASHFS error: zlib decompression failed, data probably corrupt [ 124.497782][T12897] SQUASHFS error: Failed to read block 0x4e8: -5 [ 124.624220][T12917] binder: 12916:12917 got transaction to invalid handle, 1 [ 124.624259][T12917] binder: 12916:12917 cannot find target node [ 124.624640][T12917] binder: 12916:12917 transaction async to 0:0 failed 5/29201/-22, code 0 size 0-0 line 3252 [ 124.718539][T12929] i2c i2c-0: new_device: Missing parameters [ 124.795319][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.816478][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.834060][ T3621] bond0 (unregistering): Released all slaves [ 124.905849][T12945] loop3: detected capacity change from 0 to 512 [ 124.910671][ T3621] tipc: Disabling bearer [ 124.910930][ T3621] tipc: Left network mode [ 124.973221][T12945] EXT4-fs (loop3): 1 orphan inode deleted [ 124.989800][ T1140] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 125.143110][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 125.144964][ T4402] 8021q: adding VLAN 0 to HW filter on device eth11 [ 125.191889][T12853] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.191991][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.192095][T12853] bridge_slave_0: entered allmulticast mode [ 125.198922][T12853] bridge_slave_0: entered promiscuous mode [ 125.225374][T12853] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.225423][T12853] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.225608][T12853] bridge_slave_1: entered allmulticast mode [ 125.247008][T12853] bridge_slave_1: entered promiscuous mode [ 125.293505][T12853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.319805][T12853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.391426][T12993] bridge0: port 3(syz_tun) entered blocking state [ 125.391474][T12993] bridge0: port 3(syz_tun) entered disabled state [ 125.391554][T12993] syz_tun: entered allmulticast mode [ 125.398918][T12993] syz_tun: entered promiscuous mode [ 125.399153][T12993] bridge0: port 3(syz_tun) entered blocking state [ 125.399182][T12993] bridge0: port 3(syz_tun) entered forwarding state [ 125.420682][ T3621] hsr_slave_0: left promiscuous mode [ 125.425298][ T3621] hsr_slave_1: left promiscuous mode [ 125.425609][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.425635][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.431428][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.432937][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.440392][ T3621] veth1_macvtap: left allmulticast mode [ 125.441705][ T3621] veth1_macvtap: left promiscuous mode [ 125.442922][ T3621] veth1_vlan: left promiscuous mode [ 125.447517][ T3621] veth0_vlan: left promiscuous mode [ 125.641141][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3450'. [ 125.698487][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 125.707092][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 125.818055][T12853] team0: Port device team_slave_0 added [ 125.819205][T12853] team0: Port device team_slave_1 added [ 125.841884][ T4402] 8021q: adding VLAN 0 to HW filter on device eth8 [ 125.902494][T12853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.909741][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.909818][T12853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.910620][T12853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.910628][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.910644][T12853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.927245][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.927276][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.012825][T12853] hsr_slave_0: entered promiscuous mode [ 126.013250][T12853] hsr_slave_1: entered promiscuous mode [ 126.013472][T12853] debugfs: 'hsr0' already exists in 'hsr' [ 126.013485][T12853] Cannot create hsr debugfs directory [ 126.032461][T13051] loop3: detected capacity change from 0 to 512 [ 126.058033][T13051] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.084730][T13051] EXT4-fs mount: 26 callbacks suppressed [ 126.084768][T13051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.086287][ T4724] Bluetooth: hci1: command tx timeout [ 126.134977][T12853] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 126.143819][T12853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.148426][T12853] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 126.154381][T12853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.154765][T12853] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 126.166875][T12853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.167304][T12853] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 126.183541][T12853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.206183][T13073] loop2: detected capacity change from 0 to 128 [ 126.223108][T13073] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.251670][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.264764][T12853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.302074][T12853] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.305391][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.305443][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.310822][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.310874][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.329683][T12853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.329734][T12853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.346418][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.442455][T13096] loop3: detected capacity change from 0 to 2048 [ 126.469151][T13096] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c029, mo2=0003] [ 126.469736][T13096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.471071][T13096] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.3475: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 126.475346][ T4402] 8021q: adding VLAN 0 to HW filter on device eth9 [ 126.504867][T13096] EXT4-fs (loop3): Remounting filesystem read-only [ 126.533663][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.585158][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3479'. [ 126.588294][T13111] loop7: detected capacity change from 0 to 4096 [ 126.611174][T13111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.637249][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3479'. [ 126.641940][T13111] EXT4-fs (loop7): shut down requested (1) [ 126.707874][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.739636][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3482'. [ 126.767673][T12853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.792805][T13140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.826154][T13140] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3484: bg 0: block 112: padding at end of block bitmap is not set [ 126.837538][T13140] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.3484: Freeing blocks not in datazone - block = 0, count = 16 [ 126.852400][T13153] netlink: 'syz.2.3489': attribute type 3 has an invalid length. [ 126.963061][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.988698][T12853] veth0_vlan: entered promiscuous mode [ 126.991024][T12853] veth1_vlan: entered promiscuous mode [ 127.028412][ T4402] 8021q: adding VLAN 0 to HW filter on device eth10 [ 127.075699][T12853] veth0_macvtap: entered promiscuous mode [ 127.080538][T12853] veth1_macvtap: entered promiscuous mode [ 127.098562][T12853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.099686][T12853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.137865][ T3620] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.137970][ T3620] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.174786][ T1140] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.174836][ T1140] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.215295][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.215327][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.262479][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.262515][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.607534][T13234] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 127.609637][T13234] FAT-fs (loop1): Filesystem has been set read-only [ 127.720199][T13238] EXT4-fs: Ignoring removed oldalloc option [ 127.723733][T13238] EXT4-fs: Ignoring removed orlov option [ 127.723785][T13238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.739646][T13238] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.771409][ T30] kauditd_printk_skb: 276 callbacks suppressed [ 127.771448][ T30] audit: type=1800 audit(898.752:1028): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 127.830101][ T30] audit: type=1800 audit(898.812:1029): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 127.842178][ T30] audit: type=1800 audit(898.822:1030): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 127.869248][T12853] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.883610][ T30] audit: type=1800 audit(898.862:1031): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 127.935849][ T30] audit: type=1800 audit(898.922:1032): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 127.965021][ T30] audit: type=1800 audit(898.952:1033): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 128.049097][ T30] audit: type=1800 audit(899.022:1034): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 128.063264][ T30] audit: type=1800 audit(899.042:1035): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 128.079103][ T30] audit: type=1800 audit(899.062:1036): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 128.103815][ T30] audit: type=1800 audit(899.082:1037): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 128.164189][ T4724] Bluetooth: hci1: command tx timeout [ 128.197752][T13263] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.197958][T13263] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.263237][T13263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.268055][T13263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.279297][T13278] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.312174][T13280] set_capacity_and_notify: 4 callbacks suppressed [ 128.313753][T13280] loop8: detected capacity change from 0 to 512 [ 128.322834][T13280] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 128.329812][T13280] EXT4-fs (loop8): 1 truncate cleaned up [ 128.332770][T13280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.356151][T13280] EXT4-fs (loop8): shut down requested (1) [ 128.391316][T12853] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.435145][T13286] loop2: detected capacity change from 0 to 256 [ 128.534748][ T3621] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.534848][ T39] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.534870][ T39] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.534891][ T39] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.558469][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3548'. [ 128.608937][T13304] loop2: detected capacity change from 0 to 128 [ 128.613398][T13301] loop1: detected capacity change from 0 to 1024 [ 128.619664][T13301] EXT4-fs: Ignoring removed bh option [ 128.623563][T13304] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.649593][T13301] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c028, mo2=0002] [ 128.649718][T13301] System zones: 0-1, 3-8 [ 128.650346][T13301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.660921][T13309] Injecting memory failure for pfn 0x139123 at process virtual address 0x20001000 [ 128.686847][T13301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3550: bg 0: block 112: padding at end of block bitmap is not set [ 128.689723][T13301] EXT4-fs (loop1): Remounting filesystem read-only [ 128.695120][T13309] Memory failure: 0x139123: recovery action for clean LRU page: Recovered [ 128.695159][T13309] Injecting memory failure for pfn 0x11e970 at process virtual address 0x20002000 [ 128.696809][T13309] Memory failure: 0x11e970: recovery action for clean LRU page: Recovered [ 128.696823][T13309] Injecting memory failure for pfn 0x1348b3 at process virtual address 0x20003000 [ 128.696886][T13309] Memory failure: 0x1348b3: recovery action for clean LRU page: Recovered [ 128.702038][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.735519][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.770096][T13318] ip_tables: iptables: counters copy to user failed while replacing table [ 128.964481][T13347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.010851][T13350] Injecting memory failure for pfn 0x13b1be at process virtual address 0x20000000 [ 129.013488][T13350] Memory failure: 0x13b1be: Sending SIGBUS to syz.2.3573:13350 due to hardware memory corruption [ 129.013723][T13350] Memory failure: 0x13b1be: recovery action for dirty LRU page: Recovered [ 129.455044][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3595'. [ 129.467092][ T4822] hid-generic 0005:4C4A:5505.0005: item fetching failed at offset 0/2 [ 129.467256][ T4822] hid-generic 0005:4C4A:5505.0005: probe with driver hid-generic failed with error -22 [ 129.495650][T13390] Injecting memory failure for pfn 0x11f369 at process virtual address 0x20276000 [ 129.498388][T13390] Memory failure: 0x11f369: keeping poisoned page in swap cache [ 129.498739][T13390] Memory failure: 0x11f369: recovery action for clean swapcache page: Recovered [ 129.498776][T13390] Injecting memory failure for pfn 0x1205e7 at process virtual address 0x20277000 [ 129.498877][T13390] Memory failure: 0x1205e7: keeping poisoned page in swap cache [ 129.498899][T13390] Memory failure: 0x1205e7: recovery action for clean swapcache page: Recovered [ 129.515395][T13401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.515424][T13401] IPv6: NLM_F_CREATE should be set when creating new route [ 129.515538][T13401] IPv6: NLM_F_CREATE should be set when creating new route [ 129.515553][T13401] IPv6: NLM_F_CREATE should be set when creating new route [ 129.515699][T13401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.611565][T13411] tap0: tun_chr_ioctl cmd 1074025672 [ 129.611605][T13411] tap0: ignored: set checksum disabled [ 129.668279][T13415] loop3: detected capacity change from 0 to 4096 [ 129.692949][T13415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.746558][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.833065][T13435] loop7: detected capacity change from 0 to 512 [ 129.837660][T13435] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 129.842651][T13435] EXT4-fs (loop7): 1 truncate cleaned up [ 129.849634][T13435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.866053][T13435] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6455: inode #12: comm syz.7.3612: bad extra_isize 62 (inode size 256) [ 129.866386][T13435] EXT4-fs (loop7): Remounting filesystem read-only [ 129.874589][ T9878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.880047][T13437] loop3: detected capacity change from 0 to 2048 [ 129.897632][T13437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.018537][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.059525][T13457] loop8: detected capacity change from 0 to 524288000 [ 130.06 ** replaying previous printk message ** [ 130.064503][T13456] Unable to handle kernel paging request at virtual address dfff800000000000 [ 130.064531][T13456] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 130.064550][T13456] Mem abort info: [ 130.064554][T13456] ESR = 0x0000000096000005 [ 130.064559][T13456] EC = 0x25: DABT (current EL), IL = 32 bits [ 130.064565][T13456] SET = 0, FnV = 0 [ 130.064569][T13456] EA = 0, S1PTW = 0 [ 130.064573][T13456] FSC = 0x05: level 1 translation fault [ 130.064578][T13456] Data abort info: [ 130.064581][T13456] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 130.064587][T13456] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 130.064593][T13456] GCS = 0, Overlay = 0, DirtyBit = 0 [ 130.064598][T13456] [dfff800000000000] address between user and kernel address ranges [ 130.064696][T13456] Internal error: Oops: 0000000096000005 [#1] SMP [ 130.078022][T13456] Modules linked in: [ 130.078689][T13456] CPU: 0 UID: 0 PID: 13456 Comm: syz.1.3622 Tainted: G L syzkaller #0 PREEMPT [ 130.080360][T13456] Tainted: [L]=SOFTLOCKUP [ 130.081050][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 130.082704][T13456] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 130.084011][T13456] pc : strcmp+0x28/0xf0 [ 130.084689][T13456] lr : __ftrace_set_clr_event_nolock+0x6a0/0x940 [ 130.085773][T13456] sp : ffff800094f07840 [ 130.086476][T13456] x29: ffff800094f07870 x28: dfff800000000000 x27: 0000000000000000 [ 130.087841][T13456] x26: ffff800088d7e870 x25: ffff0000d3e58580 x24: 00000000ffffffea [ 130.089228][T13456] x23: ffff800088d7e870 x22: 0000000000000000 x21: dfff800000000000 [ 130.090641][T13456] x20: ffff0000d3e58598 x19: ffff0000f01b7560 x18: 0000000000000000 [ 130.091963][T13456] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 130.093328][T13456] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 130.094702][T13456] x11: 0000000000000000 x10: dfff800000000000 x9 : ffff0000f2e90101 [ 130.096064][T13456] x8 : 0000000000000000 x7 : ffff800080539004 x6 : 0000000000000000 [ 130.097417][T13456] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000806c6944 [ 130.098803][T13456] x2 : 0000000000000000 x1 : ffff0000f2e90101 x0 : 0000000000000000 [ 130.100173][T13456] Call trace: [ 130.100751][T13456] strcmp+0x28/0xf0 (P) [ 130.101411][T13456] __ftrace_set_clr_event_nolock+0x6a0/0x940 [ 130.102382][T13456] __ftrace_set_clr_event+0xa8/0xec [ 130.103305][T13456] ftrace_set_clr_event+0x2a0/0x438 [ 130.104217][T13456] ftrace_event_write+0x1dc/0x28c [ 130.105091][T13456] vfs_write+0x2a4/0xa0c [ 130.105835][T13456] ksys_write+0x12c/0x228 [ 130.106571][T13456] __arm64_sys_write+0x84/0x98 [ 130.107376][T13456] invoke_syscall+0x98/0x244 [ 130.108139][T13456] el0_svc_common+0xec/0x23c [ 130.108916][T13456] do_el0_svc+0x4c/0x5c [ 130.109634][T13456] el0_svc+0x64/0x260 [ 130.110306][T13456] el0t_64_sync_handler+0x48/0x148 [ 130.111169][T13456] el0t_64_sync+0x198/0x19c [ 130.111975][T13456] Code: aa0103e9 f2fbffea d343fc0b 1200080c (38ea696b) [ 130.113166][T13456] ---[ end trace 0000000000000000 ]--- [ 130.246795][T13467] loop7: detected capacity change from 0 to 4096 [ 130.297238][T13470] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 130.428566][T13456] Kernel panic - not syncing: Oops: Fatal exception [ 130.431700][T13456] SMP: stopping secondary CPUs [ 130.432483][T13456] Kernel Offset: disabled [ 130.433197][T13456] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 130.434325][T13456] Memory Limit: none [ 130.750634][T13456] Rebooting in 86400 seconds..