last executing test programs: 4m2.536973658s ago: executing program 4 (id=34): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2a, 0x25bfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) 4m2.425546776s ago: executing program 4 (id=39): r0 = syz_io_uring_setup(0x28b5, &(0x7f0000000480)={0x0, 0xf6dd, 0xc0000, 0x0, 0x12}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000000c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0x82b, 0x0, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x100}}}, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4m2.203615764s ago: executing program 4 (id=44): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x3000000) 4m1.830101466s ago: executing program 4 (id=57): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3ctvVNUfAPDvvX3S/n62EBPFhZAYA4nS0gKGGBPp3hB8/AOVFkIolLQ1sUDCkOjSuHFh4sqF+F8oiTvjwq0L94aEGMNCDJExd3qnTKcz0+c8mPl8kqH31Xu+t/Tbc+6Zc+4E0LOOZv+kEYcj4kYSMVaxrz/ynUfXjnv01+2L2SuJYvHDP5O4fScpVJ4ryb+O5t/871gkv6YRh/o2l7u8evPq7MLC/FK+Prly7cbk8urNE1euzV6evzx/ffqt6bNnTp85O3Vy79dX5btvniRT3/9+Polz8TSPLbuu6uOG9lRyVvbRKK55XLk9+7me3eO5O8XfY+Xfk2eS6g10rEt53g5ExEsxFn0V/5tj8fn7bQ0OaKpiEuU6Cug5SZ38/3mm0V+G4abFA7RKuR1QvrevdR+8WdrkVgnQCg9n1jqk1nJ/ICLK+d+f950Nl/oGRh4lG/p5kojYW8/cmqyMX346/1n2ijr9cEBzFO6We7mr6/+klJvjMVxaG3mUbsz/QrGY5i2BbPsHuyy/un9e/kPrFO5GxMt5/T8Y287/NM/dcv5/vMvy5T8AAAAAAADsn/szEfFmrfF/6fr4n8Ea439GI+LcPpS/9ft/6YN8Iak6dHAfioee9nAm4p2a43/Xx/iO9+Vr/y+NB7iVXLqyMH8yIl6IiOMxMJStT1Wdt3KE8IkvDn1dr/zK8X/ZKyu/PBYwP9OD/qqJuHOzK7N7vW4g4uHdiFdK43+P5Fs2jv/J6v+kRv2f5feNbZZx6PV7F+rt2zr/gWYpfhtxrGb9/6y5nTR+PsdkqT0wWW4VbPbqrS9/qFd+df434RKBOrL6f6Rx/g8llc/rWd7Z+bOb9FOr/cV6+3fb/h9MPuqLik6AT2dXVpamIgaT9zZvn95ZzNCt8nw4Enm+ZPl//LXG/X/r7f+KPDwQEYVtlDe8xX7tf2ifLP/nGtf/4xvr/50vTN8b/7Fe+Re2Vf+fLtXpx/Mt+v+g0ubncWw3QdsSLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA859KI+F8k6cT6cppOTESMRsSLMZIuLC6vvHFp8ZPrc9m+iPEYSMuf9Du2tp6UP/9/vGJ9umr9VEQcjIiv+g6U1icuLi7MtfviAQAAAAAAAAAAAAAAAAAAoEOMlub8F4eq5/9n/uhrd3RA0/XnX+U79J7+XX9ncWhfAwFabvf5DzzHsnv+HeT/QDNjAdqgfv4/flIsaWk4QAtp/0Pv2mX+e7sAuoD6H3rVNvv0hpsdB9AO6n8AAAAAAOgqB4/c/y2JiMLbB0qvzGC+z2B/6G5puwMA2sYYXuhd/YvtjgBoF/f4QLK+9E/Nyf71R/8nzQkIAAAAAAAAAAAAANjk2GHz/6FXNZ7/b2w/dLMG8/9rJb/HBUAXqf/RH+p+6Hbu8YGtanvz/wEAAAAAAAAAAACgAwzfvDq7sDC/tLz6/C282xlh7GyhMNsRYexgoXgnovExT5tT+kBEdMoPYWk5i6ZVZZUfwdHGS27z3yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDdfwEAAP//+sobJQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 4m1.685891646s ago: executing program 4 (id=61): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 4m0.395792847s ago: executing program 4 (id=108): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 4m0.356492447s ago: executing program 32 (id=108): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 3m43.765674397s ago: executing program 5 (id=876): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2a, 0x25bfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) 3m43.721794394s ago: executing program 5 (id=878): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m43.292050338s ago: executing program 5 (id=881): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) sendmsg$inet(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="dc", 0x1}], 0x1}, 0x1) 3m43.184706482s ago: executing program 5 (id=883): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 3m43.008025433s ago: executing program 5 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/proxy_arp\x00', 0x1, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x80000001, 0x8, '9P2000.L'}, 0x15) 3m42.659546491s ago: executing program 5 (id=888): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xd, 0x1, @tid=0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x2003, 0x2, @thr={0x0, 0x0}}) 3m42.563318795s ago: executing program 33 (id=888): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xd, 0x1, @tid=0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x2003, 0x2, @thr={0x0, 0x0}}) 2m47.402383272s ago: executing program 6 (id=2478): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="332b191fd8358fe0", 0x8}], 0x1, 0x0, 0x0, 0x8800}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x68, 0x44090}}], 0x2, 0x1d3) 2m46.09330007s ago: executing program 6 (id=2494): syz_open_dev$rtc(&(0x7f0000002dc0), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x37c4, 0x8, 0x0, 0x40051}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m45.805683617s ago: executing program 6 (id=2497): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) r2 = dup3(r0, r1, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2m45.634462246s ago: executing program 6 (id=2502): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), &(0x7f0000001100)=@v3={0x3000000, [{0x4, 0x8}, {0x0, 0xfffffff7}]}, 0x18, 0x1) 2m45.275293494s ago: executing program 6 (id=2506): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2m44.372859768s ago: executing program 6 (id=2522): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1, &(0x7f00000022c0)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x20000000) 2m44.343870113s ago: executing program 1 (id=2533): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0xf0ff1f00000000) 2m43.97781711s ago: executing program 34 (id=2522): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1, &(0x7f00000022c0)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x20000000) 2m43.961695029s ago: executing program 1 (id=2527): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000002c0)={0x0, 0xfffffe7f, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "784ac6e49662317f889e916d60e4e6ab"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 2m43.654695451s ago: executing program 1 (id=2534): r0 = syz_io_uring_setup(0x141c, &(0x7f00000000c0)={0x0, 0xf9ee, 0x400, 0x3, 0x212}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r4 = openat$ublk_ctrl(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000500)=@ublk_get_features_sqe={0x2e, 0x0, 0x0, r4, 0x80207513, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000000400)}}) io_uring_enter(r0, 0x20, 0xd9db, 0x8, 0x0, 0x0) 2m43.367126505s ago: executing program 1 (id=2538): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), &(0x7f0000001100)=@v3={0x3000000, [{0x4, 0x8}, {0x0, 0xfffffff7}]}, 0x18, 0x1) 2m42.939531675s ago: executing program 1 (id=2543): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf256600000008000300", @ANYRES32=r2, @ANYBLOB="0800b700760000000800a00037f7ffff080026"], 0x3c}, 0x1, 0x0, 0x0, 0x40095}, 0x8040) 2m42.924385765s ago: executing program 0 (id=2544): rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r0 = gettid() setrlimit(0xb, &(0x7f0000000000)) tkill(r0, 0x2d) 2m42.848504686s ago: executing program 0 (id=2546): sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x0, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={0x0}) 2m42.4721399s ago: executing program 0 (id=2550): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 2m42.298577537s ago: executing program 0 (id=2553): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), &(0x7f0000001100)=@v3={0x3000000, [{0x4, 0x8}, {0x0, 0xfffffff7}]}, 0x18, 0x1) 2m41.791194086s ago: executing program 0 (id=2567): r0 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r1, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 2m40.74162725s ago: executing program 1 (id=2564): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TCFLSH(r0, 0x541b, 0xffefff1f00000000) 2m40.599330201s ago: executing program 0 (id=2566): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000a40)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x4, 0x6f7, 0x4, 0x8fff}) 2m40.109713516s ago: executing program 35 (id=2564): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TCFLSH(r0, 0x541b, 0xffefff1f00000000) 2m39.887694902s ago: executing program 36 (id=2566): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000a40)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x4, 0x6f7, 0x4, 0x8fff}) 9.222760081s ago: executing program 9 (id=3738): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x200020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7f, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 3.958629087s ago: executing program 8 (id=3742): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="20005e8008000708b3010000080005002e0000020800060000000000040001"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3.95624016s ago: executing program 9 (id=3745): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x50100, 0x104) io_setup(0x7, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)='\x00', 0x1, 0x600}]) 3.955466155s ago: executing program 7 (id=3746): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @loopback}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x2c) 3.479799069s ago: executing program 7 (id=3747): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf3625830f2dbccdf6a8698d0a881c51852e4451ab7d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) 3.439264376s ago: executing program 2 (id=3748): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x171d02, 0x0) unshare(0x22020400) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) 3.39739048s ago: executing program 3 (id=3749): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}) 3.38723302s ago: executing program 8 (id=3750): r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000640)='\n', 0x1}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) copy_file_range(r0, &(0x7f0000000080)=0x5, r0, 0x0, 0x5, 0x0) 2.926738084s ago: executing program 7 (id=3751): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2.879263313s ago: executing program 8 (id=3752): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x189000, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) 2.864564587s ago: executing program 2 (id=3753): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280), 0x9) 2.768607005s ago: executing program 3 (id=3754): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd83, &(0x7f0000000000)="0400") 2.705180737s ago: executing program 9 (id=3755): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.368622736s ago: executing program 7 (id=3756): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000}, 0x50) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18) 2.317073257s ago: executing program 2 (id=3757): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x15}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) 2.266412315s ago: executing program 8 (id=3758): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x121c088, &(0x7f0000000b00)=ANY=[], 0x4a, 0x2e0, &(0x7f0000000780)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d00000000720007000000ee000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev/planes/plane0\x00', 0x1ff) 2.256261855s ago: executing program 3 (id=3759): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.087401628s ago: executing program 9 (id=3760): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 1.632535635s ago: executing program 8 (id=3761): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002080)) 1.615890551s ago: executing program 9 (id=3762): syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xfffffffffffffffd) ioctl$TCSBRKP(r0, 0x5425, 0x80000000) 1.564515973s ago: executing program 7 (id=3763): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x571, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 1.298519979s ago: executing program 2 (id=3764): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl(r0, 0x3b92, &(0x7f0000000000)="10") 1.165301858s ago: executing program 3 (id=3765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r0, 0x0, 0x20040080) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x804) 746.708182ms ago: executing program 2 (id=3766): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) 741.865947ms ago: executing program 7 (id=3767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x1000, 0x4}}, 0x28) 630.188351ms ago: executing program 3 (id=3768): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 557.296394ms ago: executing program 9 (id=3769): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cf, &(0x7f0000000500)="$eJzs3c1rG2caAPBHUuzYjnfzscuSZGETyEL2g1j+YIm9u7DsaXcPgaWBXlpIXVtxU8uWseQ0Njk47S2HHkpLC6WH3vsX9NKcGgql55ZeSw8lpU1daAsFFY2kxB+S46aO5Hh+P5ho5h1lnveVeF7PvDOjCSC1Ttf+yUQMRsRHEXG4vrjxDafrL2t3r0/VpkxUqxe/yiTvqy0339r8f4ciYjUi+iLiif9EPJvZGre8vDI7WSwWFhvL+crcQr68vHLuytzkTGGmMD8yfn5iYnx4bHRi19p68+Xnb15493+973z30p3br7z/Xq1ag41169uxm+pN74mj68oORMQ/H0WwLsg12tPf7YrwUGrf328i4kyS/4cjl3ybQBpUq9Xqj9WD7VavVoF9K5vsA2eyQxFRn89mh4bq+/C/jYFssVSu/PVyaWl+ur6vfCR6spevFAvDjWOFI9GTqS2PJPP3l0c3LY9FJPvAr+b6k+WhqVJxurNdHbDJoU35/22unv9ASjjkh/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+kl/yH9JL/kF7b5X9vB+sBdNT/L1yoTdXm/e/TV5eXZktXz00XyrNDc0tTQ1OlxYWhmVJpJrlnZ+5B2yuWSgsjf4ula/lKoVzJl5dXLs2VluYrl5L7+i8VejrSKmAnjp669UkmIlb/3p9Mse5PvlyF/a1azUS370EGuiPX7Q4I6BpD/5BeP+MYv+2PhAGPtxY/0btBX+vif8XCIwkHdEC22xUAuubsCef/IK2M/0N6Gf+H9LKPDzzk+H88aPxf/wJ7l/F/SK/BNs//+tW6Z3cNR8SvI+LjXM/B5rO+gP0g+0Wmsf9/9vAfBzev7c18n5wi6I2IF968+Pq1yUplcaRW/vW98sobjfLRbtQf2KlmnjbzGABIr7W716eaUyfjfvnv+kUIW+MfaIxN9iXnEAbWMhuuVcjs0rULqzci4nir+JnG887rZz4G1nJb4h9rvGbqm0jqeyB5bnpn4p9YF/8P6+Kf/MWfCqTDrVr/M9wq/7JJTse9/NvY/wzu0rnN9v1f9l7/l2vT/53asKXVtjGee+vFz9vGvxFxsmX8Zry+JNbm+LW6nd1hG+88/eTv2q2rvl3fTqv4TbW5fGVuIV9eXjmX/I7cTGF+ZPz8xMT48NjoRD4Zo843R6q3+sfxD29v1/6BNvHr7f20ZftrZX/eYft/+P0HT53eJv6fzrT+/o8lr60///6I+MsO438z+tkz7dbV4k+3aX92m/i1srEdxi+/9l/3DgPAHlJeXpmdLBYLi2b2/kz/3qiGmTTMPKjnaH+8CTwe7id9t2sCAAAAAAAAAAAA7FQnLifudhsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaDnwIAAP//J4fYHQ==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x0, 0x4, 0x1000000000000}) 489.844546ms ago: executing program 8 (id=3770): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x4e44, 0x0) 160.658392ms ago: executing program 2 (id=3771): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000000000003801") 0s ago: executing program 3 (id=3772): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x2000009, @remote, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000680)="e2", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf03}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000180)="cb09", 0x2}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x2, 0x14) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f0000000200)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa7614a93ec085d1d3caf76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808fdd3b04603f0cd79529f6d4b86ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec33"}, &(0x7f0000000500)=0x90) kernel console output (not intermixed with test programs): [ T9481] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1881: bg 0: block 67: padding at end of block bitmap is not set [ 79.622318][ T9481] EXT4-fs (loop0): Remounting filesystem read-only [ 79.622377][ T9481] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 79.667906][ T9492] loop1: detected capacity change from 0 to 4096 [ 79.670328][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.686859][ T9492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.712771][ T9498] sch_fq: defrate 0 ignored. [ 79.726862][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.765400][ T10] atkbd serio3: keyboard reset failed on [ 79.923532][ T9528] tipc: Started in network mode [ 79.923569][ T9528] tipc: Node identity ac14140f, cluster identity 4711 [ 79.929596][ T9528] tipc: New replicast peer: 255.255.255.255 [ 79.931016][ T9528] tipc: Enabled bearer , priority 10 [ 79.987673][ T9536] binder: 9535:9536 ioctl c018620b 20000240 returned -14 [ 80.151970][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.232554][ T9567] __nla_validate_parse: 11 callbacks suppressed [ 80.232777][ T9567] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1908'. [ 80.271541][ T9577] loop2: detected capacity change from 0 to 512 [ 80.276094][ T9577] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.279637][ T9575] netlink: 'syz.1.1910': attribute type 2 has an invalid length. [ 80.282866][ T9577] EXT4-fs (loop2): 1 truncate cleaned up [ 80.296515][ T9579] tap0: tun_chr_ioctl cmd 1074025677 [ 80.296690][ T9579] tap0: linktype set to 768 [ 80.487294][ T9601] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1922'. [ 80.607652][ T9618] tap0: tun_chr_ioctl cmd 1074025677 [ 80.607828][ T9618] tap0: linktype set to 768 [ 80.630125][ T9624] loop6: detected capacity change from 0 to 512 [ 80.843350][ T9651] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1941'. [ 80.928274][ T9664] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 80.978479][ T9673] lo: entered promiscuous mode [ 80.978516][ T9673] lo: entered allmulticast mode [ 80.988219][ T9673] bond0: entered promiscuous mode [ 80.988258][ T9673] bond0: entered allmulticast mode [ 80.988672][ T9673] dummy0: entered promiscuous mode [ 80.988684][ T9673] dummy0: entered allmulticast mode [ 80.989283][ T9673] eql: entered promiscuous mode [ 80.989294][ T9673] eql: entered allmulticast mode [ 80.989420][ T9673] ifb0: entered promiscuous mode [ 80.989427][ T9673] ifb0: entered allmulticast mode [ 80.989594][ T9673] ifb1: entered promiscuous mode [ 80.989603][ T9673] ifb1: entered allmulticast mode [ 80.989772][ T9673] gve 0000:00:00.0 enp0s0: entered promiscuous mode [ 80.989783][ T9673] gve 0000:00:00.0 enp0s0: entered allmulticast mode [ 80.996735][ T9673] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 80.996768][ T9673] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 80.997088][ T9673] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 80.997103][ T9673] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 81.002841][ T9673] hwsim0: entered promiscuous mode [ 81.002859][ T9673] hwsim0: entered allmulticast mode [ 81.003275][ T9673] ieee802154 phy0 wpan0: entered promiscuous mode [ 81.003285][ T9673] ieee802154 phy0 wpan0: entered allmulticast mode [ 81.003408][ T9673] ieee802154 phy1 wpan1: entered promiscuous mode [ 81.003417][ T9673] ieee802154 phy1 wpan1: entered allmulticast mode [ 81.003560][ T9673] teql0: entered promiscuous mode [ 81.003568][ T9673] teql0: entered allmulticast mode [ 81.003577][ T9673] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 81.045677][ T4843] tipc: Node number set to 2886997007 [ 81.076433][ T9686] Injecting memory failure for pfn 0x121a85 at process virtual address 0x20001000 [ 81.082137][ T9684] tipc: Started in network mode [ 81.082199][ T9684] tipc: Node identity ac14140f, cluster identity 4711 [ 81.082299][ T9684] tipc: New replicast peer: 255.255.255.255 [ 81.082502][ T9684] tipc: Enabled bearer , priority 10 [ 81.101425][ T9686] Memory failure: 0x121a85: recovery action for clean LRU page: Recovered [ 81.101726][ T9686] Injecting memory failure for pfn 0x122e88 at process virtual address 0x20002000 [ 81.103003][ T9686] Memory failure: 0x122e88: recovery action for clean LRU page: Recovered [ 81.103139][ T9686] Injecting memory failure for pfn 0x11f6f4 at process virtual address 0x20003000 [ 81.103275][ T9686] Memory failure: 0x11f6f4: recovery action for clean LRU page: Recovered [ 81.238015][ T30] audit: type=1400 audit(81.220:14): lsm=SMACK fn=smack_inode_removexattr action=denied subject="_" object="lowerdir" requested=w pid=9701 comm="syz.6.1970" name="file1" dev="tmpfs" ino=1244 [ 81.293182][ T9707] loop3: detected capacity change from 0 to 4096 [ 81.395665][ T9722] tipc: Started in network mode [ 81.395708][ T9722] tipc: Node identity ac14140f, cluster identity 4711 [ 81.395803][ T9722] tipc: New replicast peer: 255.255.255.255 [ 81.395986][ T9722] tipc: Enabled bearer , priority 10 [ 81.659988][ T9747] loop2: detected capacity change from 0 to 4096 [ 81.737903][ T9757] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 81.770488][ T9769] loop6: detected capacity change from 0 to 512 [ 81.778110][ T9769] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.781765][ T9769] EXT4-fs (loop6): 1 truncate cleaned up [ 81.897432][ T9782] loop3: detected capacity change from 0 to 512 [ 81.900108][ T9785] bonding: no command found in bonding_masters - use +ifname or -ifname [ 81.902126][ T9782] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.905891][ T9782] EXT4-fs (loop3): 1 truncate cleaned up [ 81.989657][ T9791] loop6: detected capacity change from 0 to 1024 [ 82.012212][ T9791] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2009: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.025345][ T9791] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 82.025392][ T9791] EXT4-fs (loop6): This should not happen!! Data will be lost [ 82.025392][ T9791] [ 82.025944][ T9791] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2009: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.037093][ T9791] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2009: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.073695][ T7085] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.194963][ T7171] tipc: Node number set to 2886997007 [ 82.372416][ T9846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.406791][ T9852] netlink: 'syz.0.2037': attribute type 2 has an invalid length. [ 82.433010][ T9855] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 82.461392][ T9860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.514119][ T7171] tipc: Node number set to 2886997007 [ 82.570776][ T9874] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 82.590510][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 82.923122][ T9888] ip_tables: iptables: counters copy to user failed while replacing table [ 83.383010][ T30] audit: type=1400 audit(83.360:15): lsm=SMACK fn=smack_inode_removexattr action=denied subject="_" object="lowerdir" requested=w pid=9906 comm="syz.2.2064" name="file1" dev="tmpfs" ino=2174 [ 84.184056][ T9937] bonding: no command found in bonding_masters - use +ifname or -ifname [ 84.344069][ T30] audit: type=1400 audit(84.320:16): lsm=SMACK fn=smack_inode_removexattr action=denied subject="_" object="lowerdir" requested=w pid=9942 comm="syz.3.2077" name="file1" dev="tmpfs" ino=1179 [ 84.450949][ T9939] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.2076: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.455228][ T9939] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 84.458238][ T9939] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.458238][ T9939] [ 84.479296][ T9939] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.2076: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.509814][ T9939] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.2076: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.641326][ T4724] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 84.910829][ T9961] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 85.404596][ T9984] netlink: 'syz.2.2092': attribute type 2 has an invalid length. [ 85.778441][ T9996] Injecting memory failure for pfn 0x11fa30 at process virtual address 0x20001000 [ 85.858021][ T9996] Memory failure: 0x11fa30: recovery action for clean LRU page: Recovered [ 85.859994][ T9996] Injecting memory failure for pfn 0x136021 at process virtual address 0x20002000 [ 85.863164][ T9996] Memory failure: 0x136021: recovery action for clean LRU page: Recovered [ 85.867436][ T9996] Injecting memory failure for pfn 0x1368ce at process virtual address 0x20003000 [ 85.874481][ T9996] Memory failure: 0x1368ce: recovery action for clean LRU page: Recovered [ 86.385788][T10017] netdevsim netdevsim3: Firmware load for './file0/../file0/../file0' refused, path contains '..' component [ 86.395383][T10015] binder: 10014:10015 ioctl c018620b 20000240 returned -14 [ 87.101850][T10045] binder: 10044:10045 ioctl c018620b 20000240 returned -14 [ 87.363220][T10053] netdevsim netdevsim6: Firmware load for './file0/../file0/../file0' refused, path contains '..' component [ 87.459891][T10052] set_capacity_and_notify: 4 callbacks suppressed [ 87.462925][T10052] loop3: detected capacity change from 0 to 4096 [ 88.030464][T10071] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 88.272971][T10080] loop1: detected capacity change from 0 to 1024 [ 88.441807][T10080] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.2136: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.445716][T10080] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 88.445781][T10080] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.445781][T10080] [ 88.468980][T10080] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2136: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.469722][T10080] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2136: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.659807][ T4712] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 88.975059][T10103] bonding: no command found in bonding_masters - use +ifname or -ifname [ 89.577244][T10128] loop3: detected capacity change from 0 to 1024 [ 89.741584][T10128] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.2156: lblock 0 mapped to illegal pblock 0 (length 1) [ 89.749294][T10128] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 89.752014][T10128] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.752014][T10128] [ 89.763801][T10128] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.2156: lblock 0 mapped to illegal pblock 0 (length 1) [ 89.774995][T10128] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.2156: lblock 0 mapped to illegal pblock 0 (length 1) [ 89.878700][ T7042] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 90.776124][T10166] ip_tables: iptables: counters copy to user failed while replacing table [ 91.049774][T10178] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2181'. [ 91.260810][T10185] Format for deleting device is "id" (uint). [ 91.914150][ T7171] IPVS: starting estimator thread 0... [ 92.004386][T10211] IPVS: using max 11 ests per chain, 26400 per kthread [ 92.031360][T10215] Format for deleting device is "id" (uint). [ 92.638106][T10240] binder: 10239:10240 ERROR: BC_REGISTER_LOOPER called without request [ 92.639053][T10240] binder: 10239:10240 got transaction to invalid handle, 1 [ 92.639112][T10240] binder: 10239:10240 cannot find target node [ 92.639145][T10240] binder: 10239:10240 transaction async to 0:0 failed 1/29201/-22, code 0 size 0-0 line 3252 [ 92.842599][T10247] loop3: detected capacity change from 0 to 512 [ 92.910889][T10247] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2212: iget: bad i_size value: 38620345925642 [ 92.910963][T10247] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.913784][T10247] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2212: couldn't read orphan inode 15 (err -117) [ 92.913909][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 92.913940][ C1] EXT4-fs (loop3): initial error at time 92: ext4_orphan_get:1399: inode 15 [ 92.914009][ C1] EXT4-fs (loop3): last error at time 92: ext4_orphan_get:1399: inode 15 [ 92.914412][T10247] loop3: lost filesystem error report for type 5 error -117 [ 93.024377][T10253] Format for deleting device is "id" (uint). [ 93.291185][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2221'. [ 93.291253][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2221'. [ 93.291318][T10264] netlink: 'syz.6.2221': attribute type 18 has an invalid length. [ 93.857340][ T7171] IPVS: starting estimator thread 0... [ 93.964126][T10290] IPVS: using max 11 ests per chain, 26400 per kthread [ 94.115720][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 94.115791][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'. [ 94.116462][T10302] netlink: 'syz.2.2238': attribute type 18 has an invalid length. [ 94.119206][T10292] loop6: detected capacity change from 0 to 8192 [ 94.127778][T10292] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.442713][T10313] binder: 10312:10313 ERROR: BC_REGISTER_LOOPER called without request [ 94.451870][T10313] binder: 10312:10313 got transaction to invalid handle, 1 [ 94.453644][T10313] binder: 10312:10313 cannot find target node [ 94.456333][T10313] binder: 10312:10313 transaction async to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3252 [ 94.465619][T10310] tap0: tun_chr_ioctl cmd 1074025677 [ 94.466073][T10310] tap0: linktype set to 769 [ 94.854897][ T7171] IPVS: starting estimator thread 0... [ 94.954425][T10330] IPVS: using max 11 ests per chain, 26400 per kthread [ 95.369161][T10346] binder: 10344:10346 ERROR: BC_REGISTER_LOOPER called without request [ 95.369251][T10346] binder: 10344:10346 got transaction to invalid handle, 1 [ 95.369267][T10346] binder: 10344:10346 cannot find target node [ 95.369300][T10346] binder: 10344:10346 transaction async to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3252 [ 96.181506][T10380] loop6: detected capacity change from 0 to 512 [ 96.260870][T10380] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2273: iget: bad i_size value: 38620345925642 [ 96.260943][T10380] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.263926][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 96.263945][ C0] EXT4-fs (loop6): initial error at time 96: ext4_orphan_get:1399: inode 15 [ 96.263975][ C0] EXT4-fs (loop6): last error at time 96: ext4_orphan_get:1399: inode 15 [ 96.273418][T10380] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2273: couldn't read orphan inode 15 (err -117) [ 96.278924][T10380] loop6: lost filesystem error report for type 5 error -117 [ 96.282870][T10380] EXT4-fs mount: 30 callbacks suppressed [ 96.286052][T10380] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.446985][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.459514][T10391] loop0: detected capacity change from 0 to 8192 [ 96.476615][T10391] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.808838][T10401] tap0: tun_chr_ioctl cmd 1074025677 [ 96.809151][T10401] tap0: linktype set to 769 [ 97.640899][T10439] loop0: detected capacity change from 0 to 512 [ 97.667668][T10434] loop1: detected capacity change from 0 to 8192 [ 97.680723][T10434] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.756390][T10439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.801822][T10439] Bluetooth: MGMT ver 1.23 [ 97.897094][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.868561][T10490] loop2: detected capacity change from 0 to 512 [ 98.966797][T10490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.007512][T10496] loop3: detected capacity change from 0 to 512 [ 99.059375][T10496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.152694][T10496] EXT4-fs (loop3): shut down requested (2) [ 99.162576][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2326'. [ 99.162641][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2326'. [ 99.248286][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.270242][ T7042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.801972][T10525] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2344'. [ 99.915741][T10527] loop1: detected capacity change from 0 to 1024 [ 99.918329][T10527] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.941424][T10527] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.2335: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.941503][T10527] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 99.942704][T10527] Quota error (device loop1): write_blk: dquota write failed [ 99.942756][T10527] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 99.942824][T10527] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2335: Failed to acquire dquot type 0 [ 99.942841][T10527] loop1: lost filesystem error report for type 5 error -117 [ 99.952445][T10527] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.2335: Freeing blocks not in datazone - block = 0, count = 4096 [ 99.952510][T10527] loop1: lost filesystem error report for type 5 error -117 [ 99.953923][ C1] EXT4-fs (loop1): error count since last fsck: 3 [ 99.953944][ C1] EXT4-fs (loop1): initial error at time 99: ext4_map_blocks:833: inode 3: block 1 [ 99.953976][ C1] EXT4-fs (loop1): last error at time 99: ext4_free_blocks:6718 [ 99.958035][T10527] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.2335: Invalid inode bitmap blk 0 in block_group 0 [ 99.958058][T10527] loop1: lost filesystem error report for type 5 error -117 [ 99.970049][T10527] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 99.970117][T10527] loop1: lost filesystem error report for type 5 error -117 [ 99.994478][ T12] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.994974][ T12] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 100.005814][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 100.005894][T10527] EXT4-fs (loop1): 1 orphan inode deleted [ 100.005916][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 100.005947][ T12] loop1: lost filesystem error report for type 5 error -117 [ 100.008282][T10527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.092692][T10532] sctp: [Deprecated]: syz.0.2337 (pid 10532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.092692][T10532] Use struct sctp_sack_info instead [ 100.131996][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.330950][T10539] loop6: detected capacity change from 0 to 512 [ 100.378531][T10539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.434254][T10543] loop1: detected capacity change from 0 to 512 [ 100.463157][T10539] EXT4-fs (loop6): shut down requested (2) [ 100.538664][T10543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.693536][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.778907][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.151023][ T4388] kernel write not supported for file /626/net/netstat (pid: 4388 comm: kworker/0:3) [ 101.665424][T10579] loop1: detected capacity change from 0 to 512 [ 101.727192][T10579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.811543][T10587] loop6: detected capacity change from 0 to 256 [ 101.826502][T10579] EXT4-fs (loop1): shut down requested (2) [ 101.954405][T10587] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 102.030645][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.063669][T10591] sctp: [Deprecated]: syz.3.2364 (pid 10591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.063669][T10591] Use struct sctp_sack_info instead [ 102.120992][T10595] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.122461][T10595] vhci_hcd vhci_hcd.2: invalid port number 96 [ 102.123680][T10595] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 102.332449][ T4843] kernel write not supported for file /1014/net/netstat (pid: 4843 comm: kworker/1:8) [ 103.053339][T10627] loop1: detected capacity change from 0 to 512 [ 103.074155][T10627] EXT4-fs (loop1): Test dummy encryption mode enabled [ 103.109003][T10629] loop6: detected capacity change from 0 to 1024 [ 103.116241][T10627] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2381: inode has both inline data and extents flags [ 103.116307][T10627] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.119569][T10627] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2381: couldn't read orphan inode 15 (err -117) [ 103.119623][T10627] loop1: lost filesystem error report for type 5 error -117 [ 103.124037][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 103.124077][ C0] EXT4-fs (loop1): initial error at time 103: ext4_orphan_get:1399: inode 15 [ 103.124156][ C0] EXT4-fs (loop1): last error at time 103: ext4_orphan_get:1404 [ 103.138405][T10627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.177275][T10629] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.188247][T10629] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.2382: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.188319][T10629] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 103.188970][T10629] Quota error (device loop6): write_blk: dquota write failed [ 103.189001][T10629] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 103.189063][T10629] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2382: Failed to acquire dquot type 0 [ 103.189081][T10629] loop6: lost filesystem error report for type 5 error -117 [ 103.189603][T10629] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.2382: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.189622][T10629] loop6: lost filesystem error report for type 5 error -117 [ 103.190744][T10629] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.2382: Invalid inode bitmap blk 0 in block_group 0 [ 103.190765][T10629] loop6: lost filesystem error report for type 5 error -117 [ 103.190970][T10629] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 103.190986][T10629] loop6: lost filesystem error report for type 5 error -117 [ 103.191204][T10629] EXT4-fs (loop6): 1 orphan inode deleted [ 103.196561][T10629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.219090][ T895] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.222906][ T895] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 103.225692][ T895] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 103.303287][T10638] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 103.304996][T10638] vhci_hcd vhci_hcd.2: invalid port number 96 [ 103.306468][T10638] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 103.419615][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.531983][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.704083][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2387'. [ 104.028980][T10663] loop2: detected capacity change from 0 to 256 [ 104.102587][T10663] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 104.181534][T10667] loop0: detected capacity change from 0 to 256 [ 104.305558][T10673] ip_tables: iptables: counters copy to user failed while replacing table [ 104.441417][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2404'. [ 104.841634][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 105.128478][T10702] loop0: detected capacity change from 0 to 128 [ 105.273289][T10704] loop6: detected capacity change from 0 to 256 [ 105.537412][T10714] loop3: detected capacity change from 0 to 512 [ 105.561665][T10714] EXT4-fs (loop3): Test dummy encryption mode enabled [ 105.594382][T10714] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2418: inode has both inline data and extents flags [ 105.596475][T10714] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.596823][T10714] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2418: couldn't read orphan inode 15 (err -117) [ 105.596842][T10714] loop3: lost filesystem error report for type 5 error -117 [ 105.601115][T10714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.870941][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 105.873708][ T7042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.951317][T10729] loop6: detected capacity change from 0 to 512 [ 105.983825][T10729] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2425: inode has both inline data and extents flags [ 105.983948][T10729] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.988517][T10729] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2425: couldn't read orphan inode 15 (err -117) [ 105.988580][T10729] loop6: lost filesystem error report for type 5 error -117 [ 106.018867][T10729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.111116][T10735] loop3: detected capacity change from 0 to 512 [ 106.112488][T10735] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.190717][T10735] syz.3.2430: attempt to access beyond end of device [ 106.190717][T10735] loop3: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 106.200915][T10735] syz.3.2430: attempt to access beyond end of device [ 106.200915][T10735] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 106.220457][T10735] syz.3.2430: attempt to access beyond end of device [ 106.220457][T10735] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 106.234559][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.295737][T10741] loop1: detected capacity change from 0 to 256 [ 106.742281][T10752] loop3: detected capacity change from 0 to 1024 [ 106.758854][T10752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.795844][T10752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.226356][T10773] loop1: detected capacity change from 0 to 512 [ 107.232081][T10773] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.240992][ T7042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.321298][T10773] syz.1.2444: attempt to access beyond end of device [ 107.321298][T10773] loop1: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 107.322718][T10773] syz.1.2444: attempt to access beyond end of device [ 107.322718][T10773] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 107.336514][T10773] syz.1.2444: attempt to access beyond end of device [ 107.336514][T10773] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 107.756781][T10788] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.770231][T10788] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.827757][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 108.342480][T10808] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.480178][T10808] syz.6.2460: attempt to access beyond end of device [ 108.480178][T10808] loop6: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 108.490101][T10808] syz.6.2460: attempt to access beyond end of device [ 108.490101][T10808] loop6: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 108.493673][T10808] syz.6.2460: attempt to access beyond end of device [ 108.493673][T10808] loop6: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 108.736763][T10815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.804522][T10815] fs-verity (loop0, inode 16): Error -22 reading file data [ 108.804617][T10815] fs-verity (loop0, inode 16): Error -22 building Merkle tree [ 108.981494][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.158337][T10835] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 109.425198][T10850] set_capacity_and_notify: 3 callbacks suppressed [ 109.425660][T10850] loop2: detected capacity change from 0 to 512 [ 109.427055][T10850] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.561708][T10850] syz.2.2477: attempt to access beyond end of device [ 109.561708][T10850] loop2: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 110.202948][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 110.577135][T10883] loop1: detected capacity change from 0 to 2048 [ 110.701883][T10883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.797184][T10883] fs-verity (loop1, inode 16): Error -22 reading file data [ 110.797270][T10883] fs-verity (loop1, inode 16): Error -22 building Merkle tree [ 110.813657][T10895] loop0: detected capacity change from 0 to 512 [ 110.821759][T10895] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.901848][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.154515][T10905] loop6: detected capacity change from 0 to 512 [ 111.158381][T10905] EXT4-fs (loop6): Test dummy encryption mode enabled [ 111.158462][T10905] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 111.160471][T10903] loop3: detected capacity change from 0 to 128 [ 111.161778][T10903] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.162952][T10903] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.168286][T10905] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2502: bad orphan inode 131083 [ 111.168312][T10905] loop6: lost filesystem error report for type 5 error -117 [ 111.176518][T10905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.217293][T10905] overlayfs: upper fs needs to support d_type. [ 111.239517][T10905] evm: overlay not supported [ 111.366945][ T7085] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /340/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 111.700264][T10924] netlink: 'syz.3.2507': attribute type 1 has an invalid length. [ 112.087480][T10934] team0: entered allmulticast mode [ 112.088613][T10934] team_slave_0: entered allmulticast mode [ 112.090346][T10934] team_slave_1: entered allmulticast mode [ 112.092690][T10935] team0: left allmulticast mode [ 112.094867][T10935] team_slave_0: left allmulticast mode [ 112.096869][T10935] team_slave_1: left allmulticast mode [ 112.225993][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.448812][ T895] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.641154][ T895] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.823452][ T895] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.053622][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.056075][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.057780][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.060766][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.061148][ T895] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.068287][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.402784][T10984] loop1: detected capacity change from 0 to 512 [ 113.418550][T10984] EXT4-fs (loop1): Test dummy encryption mode enabled [ 113.418619][T10984] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.494274][T10984] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2538: bad orphan inode 131083 [ 113.495729][T10984] loop1: lost filesystem error report for type 5 error -117 [ 113.506427][T10984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.603402][T10984] overlayfs: upper fs needs to support d_type. [ 113.712887][ T895] bridge_slave_0: left allmulticast mode [ 113.712952][ T895] bridge_slave_0: left promiscuous mode [ 113.713157][ T895] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.752003][ T4712] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /519/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 114.515863][T11019] loop0: detected capacity change from 0 to 512 [ 114.517768][T11019] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.517809][T11019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.537164][T11019] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2553: bad orphan inode 131083 [ 114.537244][T11019] loop0: lost filesystem error report for type 5 error -117 [ 114.540596][T11019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.627203][T11019] overlayfs: upper fs needs to support d_type. [ 114.703801][ T7056] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /342/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 114.915676][ T895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.974586][ T895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.018261][ T895] bond0 (unregistering): (slave bond1): Releasing backup interface [ 115.110667][T11034] loop3: detected capacity change from 0 to 256 [ 115.124206][ T4722] Bluetooth: hci4: command tx timeout [ 115.140233][ T895] bond0 (unregistering): Released all slaves [ 115.237652][ T895] bond1 (unregistering): Released all slaves [ 115.865796][ T895] tipc: Disabling bearer [ 115.866164][ T895] tipc: Left network mode [ 115.877485][ T8482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.978417][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.555223][ T895] hsr_slave_0: left promiscuous mode [ 116.556545][ T895] hsr_slave_1: left promiscuous mode [ 116.557241][ T895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.557259][ T895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.559094][ T895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.559113][ T895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.564105][ T895] batman_adv: batadv0: Removing interface: vlan0 [ 116.597917][ T895] veth1_macvtap: left allmulticast mode [ 116.597994][ T895] veth1_macvtap: left promiscuous mode [ 116.598048][ T895] veth0_macvtap: left promiscuous mode [ 116.787643][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.792746][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.794605][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.797008][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.798991][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.185130][T11075] hugetlbfs: syz.3.2573 (11075): Using mlock ulimits for SHM_HUGETLB is obsolete [ 117.185689][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.190675][ T4719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.192988][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.196255][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.198680][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.204774][ T4722] Bluetooth: hci4: command tx timeout [ 117.306185][ T895] team0 (unregistering): Port device team_slave_1 removed [ 117.324347][ T895] team0 (unregistering): Port device team_slave_0 removed [ 117.611231][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8 [ 118.558662][ T895] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.686313][ T895] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.694215][T10963] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.694423][T10963] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.694689][T10963] bridge_slave_0: entered allmulticast mode [ 118.697753][T10963] bridge_slave_0: entered promiscuous mode [ 118.719605][T10963] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.719827][T10963] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.720081][T10963] bridge_slave_1: entered allmulticast mode [ 118.722164][T10963] bridge_slave_1: entered promiscuous mode [ 118.769790][ T4404] 8021q: adding VLAN 0 to HW filter on device eth9 [ 118.781519][ T895] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.800693][T10963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.811419][T10963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.873179][T10963] team0: Port device team_slave_0 added [ 118.885274][ T4722] Bluetooth: hci0: command tx timeout [ 118.893623][T10963] team0: Port device team_slave_1 added [ 118.934024][ T895] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.013566][T10963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.013623][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.014488][T10963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.017458][T10963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.017486][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.017517][T10963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.081818][T10963] hsr_slave_0: entered promiscuous mode [ 119.083062][T10963] hsr_slave_1: entered promiscuous mode [ 119.295397][ T4722] Bluetooth: hci2: command tx timeout [ 119.296098][ T4722] Bluetooth: hci4: command tx timeout [ 119.460483][ T895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.539501][ T4404] 8021q: adding VLAN 0 to HW filter on device eth10 [ 119.595824][T11060] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.597428][T11060] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.598343][T11060] bridge_slave_0: entered allmulticast mode [ 119.600522][T11060] bridge_slave_0: entered promiscuous mode [ 119.603099][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.603175][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.603540][T11072] bridge_slave_0: entered allmulticast mode [ 119.609065][T11072] bridge_slave_0: entered promiscuous mode [ 119.613059][T11060] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.614776][T11060] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.616397][T11060] bridge_slave_1: entered allmulticast mode [ 119.621840][T11060] bridge_slave_1: entered promiscuous mode [ 119.649726][T11072] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.649823][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.650061][T11072] bridge_slave_1: entered allmulticast mode [ 119.652228][T11072] bridge_slave_1: entered promiscuous mode [ 119.690535][ T895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.717529][T11060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.723586][T11060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.731779][T11072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.772404][T11072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.833286][ T895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.850427][T11072] team0: Port device team_slave_0 added [ 119.857118][T11060] team0: Port device team_slave_0 added [ 119.858551][T10963] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 119.864813][T10963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.866874][T10963] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 119.872051][T10963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.876116][T11072] team0: Port device team_slave_1 added [ 119.908213][T11060] team0: Port device team_slave_1 added [ 119.923012][T10963] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 119.930905][T10963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.933591][T10963] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 119.938541][T10963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.941221][T11072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.941273][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.941326][T11072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.966096][T11060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.967513][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.972423][T11060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.982177][T11072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.982231][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.982276][T11072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.002536][ T895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.020697][T11060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.020748][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.020796][T11060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.142879][T11072] hsr_slave_0: entered promiscuous mode [ 120.145778][T11072] hsr_slave_1: entered promiscuous mode [ 120.146590][T11072] debugfs: 'hsr0' already exists in 'hsr' [ 120.146612][T11072] Cannot create hsr debugfs directory [ 120.221956][T11060] hsr_slave_0: entered promiscuous mode [ 120.230714][T11060] hsr_slave_1: entered promiscuous mode [ 120.232344][T11060] debugfs: 'hsr0' already exists in 'hsr' [ 120.232366][T11060] Cannot create hsr debugfs directory [ 120.420229][ T4404] 8021q: adding VLAN 0 to HW filter on device eth11 [ 120.461594][ T895] bridge_slave_0: left allmulticast mode [ 120.461650][ T895] bridge_slave_0: left promiscuous mode [ 120.462093][ T895] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.481376][ T895] bridge_slave_0: left allmulticast mode [ 120.481434][ T895] bridge_slave_0: left promiscuous mode [ 120.481626][ T895] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.768726][ T895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.795548][ T895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.849541][ T895] bond0 (unregistering): (slave bond1): Releasing backup interface [ 120.865102][ T895] bond0 (unregistering): Released all slaves [ 120.875913][ T895] bond1 (unregistering): Released all slaves [ 120.964272][ T4719] Bluetooth: hci0: command tx timeout [ 121.069507][ T895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.108958][ T895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.128715][ T895] bond0 (unregistering): (slave bond1): Releasing backup interface [ 121.158189][ T895] bond0 (unregistering): Released all slaves [ 121.168611][ T895] bond1 (unregistering): Released all slaves [ 121.375930][ T4719] Bluetooth: hci4: command tx timeout [ 121.376014][ T4719] Bluetooth: hci2: command tx timeout [ 121.582811][T10963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.689493][T10963] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.692650][T11072] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 121.701263][T11072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.729729][T11072] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 121.735038][T11072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.777749][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.777848][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.785673][ T3864] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.785756][ T3864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.803179][T11072] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 121.814381][T11072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.868254][T11072] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 121.873226][T11072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.948171][ T4404] 8021q: adding VLAN 0 to HW filter on device eth12 [ 122.044833][T11060] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 122.050477][T11060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.054716][T11060] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 122.061393][T11060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.110749][T11060] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 122.114853][T11060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.121049][T10963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.187178][T11060] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 122.191534][T11060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.303454][ T895] hsr_slave_0: left promiscuous mode [ 122.306621][ T895] hsr_slave_1: left promiscuous mode [ 122.307326][ T895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.307347][ T895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.308610][ T895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.308628][ T895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.309678][ T895] batman_adv: batadv0: Removing interface: vlan2 [ 122.320329][ T895] hsr_slave_0: left promiscuous mode [ 122.321426][ T895] hsr_slave_1: left promiscuous mode [ 122.322106][ T895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.322125][ T895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.323195][ T895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.323214][ T895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.354258][ T895] veth1_macvtap: left allmulticast mode [ 122.355380][ T895] veth1_macvtap: left promiscuous mode [ 122.356609][ T895] veth0_macvtap: left promiscuous mode [ 122.357734][ T895] veth1_vlan: left promiscuous mode [ 122.358813][ T895] veth0_vlan: left promiscuous mode [ 122.368908][ T895] veth1_macvtap: left promiscuous mode [ 122.374115][ T895] veth0_macvtap: left promiscuous mode [ 122.913474][ T895] team0 (unregistering): Port device team_slave_1 removed [ 122.933258][ T895] team0 (unregistering): Port device team_slave_0 removed [ 123.044353][ T4722] Bluetooth: hci0: command tx timeout [ 123.316509][ T895] team0 (unregistering): Port device team_slave_1 removed [ 123.340470][ T895] team0 (unregistering): Port device team_slave_0 removed [ 123.446545][ T4722] Bluetooth: hci2: command tx timeout [ 123.569714][ T4404] 8021q: adding VLAN 0 to HW filter on device eth13 [ 123.656893][T11072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.739878][T11072] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.746334][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.746414][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.791048][ T1485] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.791149][ T1485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.925978][T11060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.972544][T11060] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.991574][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.991667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.019420][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.019516][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.082493][T11060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.091805][T11060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.291910][ T895] IPVS: stop unused estimator thread 0... [ 124.342248][T10963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.596303][T11072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.794338][T10963] veth0_vlan: entered promiscuous mode [ 124.809939][T11060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.826320][T10963] veth1_vlan: entered promiscuous mode [ 124.876121][T10963] veth0_macvtap: entered promiscuous mode [ 124.889037][T10963] veth1_macvtap: entered promiscuous mode [ 124.918264][T10963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.932017][T10963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.943675][ T4404] 8021q: adding VLAN 0 to HW filter on device eth14 [ 124.954170][ T1485] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.954287][ T1485] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.954367][ T1485] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.954435][ T1485] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.111774][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.111827][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.125022][ T4722] Bluetooth: hci0: command tx timeout [ 125.252468][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.252536][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.263776][T11072] veth0_vlan: entered promiscuous mode [ 125.362510][T11060] veth0_vlan: entered promiscuous mode [ 125.380577][T11072] veth1_vlan: entered promiscuous mode [ 125.418841][T11060] veth1_vlan: entered promiscuous mode [ 125.524543][ T4722] Bluetooth: hci2: command tx timeout [ 125.598416][T11072] veth0_macvtap: entered promiscuous mode [ 125.626774][T11060] veth0_macvtap: entered promiscuous mode [ 125.641161][T11072] veth1_macvtap: entered promiscuous mode [ 125.643471][T11291] netlink: 'syz.7.2525': attribute type 1 has an invalid length. [ 125.676950][T11060] veth1_macvtap: entered promiscuous mode [ 125.699158][ T4404] 8021q: adding VLAN 0 to HW filter on device eth15 [ 125.782688][T11072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.815049][T11060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.820115][T11060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.829652][T11072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.895193][ T1485] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.895542][ T1485] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.895629][ T1485] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.895669][ T1485] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.935025][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935130][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.055717][ T1485] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.079659][ T39] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.082171][ T39] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.098299][ T39] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.199362][ T3864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.199420][ T3864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.282356][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.282415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.291585][ T1485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.291641][ T1485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.382958][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.383007][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.469633][T11312] loop3: detected capacity change from 0 to 1024 [ 126.475004][T11312] EXT4-fs: Ignoring removed oldalloc option [ 126.476201][T11312] EXT4-fs: Ignoring removed orlov option [ 126.549811][T11312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.670443][ T30] audit: type=1326 audit(126.650:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.2.2588" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd5792a8 code=0x7fc00000 [ 126.805518][T11312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2583: bg 0: block 112: padding at end of block bitmap is not set [ 126.855534][T11312] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 126.855611][T11312] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.855611][T11312] [ 126.855631][T11312] EXT4-fs (loop3): Total free blocks count 0 [ 126.855645][T11312] EXT4-fs (loop3): Free/Dirty block details [ 126.855676][T11312] EXT4-fs (loop3): free_blocks=0 [ 126.855701][T11312] EXT4-fs (loop3): dirty_blocks=32 [ 126.855714][T11312] EXT4-fs (loop3): Block reservation details [ 126.855726][T11312] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 127.002534][T11334] bridge0: port 3(syz_tun) entered blocking state [ 127.003512][T11334] bridge0: port 3(syz_tun) entered disabled state [ 127.007781][T11334] syz_tun: entered allmulticast mode [ 127.012283][T11334] syz_tun: entered promiscuous mode [ 127.022456][T11334] bridge0: port 3(syz_tun) entered blocking state [ 127.022590][T11334] bridge0: port 3(syz_tun) entered forwarding state [ 127.215298][ T7042] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 127.255061][ T7042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.362401][T11343] loop7: detected capacity change from 0 to 256 [ 127.464772][T11343] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 127.464830][T11343] FAT-fs (loop7): Filesystem has been set read-only [ 127.625006][ T4404] 8021q: adding VLAN 0 to HW filter on device eth16 [ 128.107851][T11364] loop3: detected capacity change from 0 to 2048 [ 128.168210][T11364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.170822][T11371] loop2: detected capacity change from 0 to 1024 [ 128.171792][T11371] EXT4-fs: Ignoring removed oldalloc option [ 128.171847][T11371] EXT4-fs: Ignoring removed orlov option [ 128.231766][T11371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.280679][T11364] EXT4-fs error (device loop3): empty_inline_dir:1778: inode #12: block 9: comm syz.3.2602: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 128.296804][T11364] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 128.481778][T11371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2604: bg 0: block 112: padding at end of block bitmap is not set [ 128.493670][T11371] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 128.493738][T11371] EXT4-fs (loop2): This should not happen!! Data will be lost [ 128.493738][T11371] [ 128.493786][T11371] EXT4-fs (loop2): Total free blocks count 0 [ 128.493799][T11371] EXT4-fs (loop2): Free/Dirty block details [ 128.493816][T11371] EXT4-fs (loop2): free_blocks=0 [ 128.494051][T11371] EXT4-fs (loop2): dirty_blocks=32 [ 128.494064][T11371] EXT4-fs (loop2): Block reservation details [ 128.494076][T11371] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 128.817454][ T4724] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 128.824837][ T7042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.839313][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.049073][T11396] loop2: detected capacity change from 0 to 256 [ 129.150196][T11398] loop9: detected capacity change from 0 to 1024 [ 129.158665][T11398] EXT4-fs: Ignoring removed oldalloc option [ 129.161120][T11398] EXT4-fs: Ignoring removed orlov option [ 129.165365][ T4404] 8021q: adding VLAN 0 to HW filter on device eth17 [ 129.167255][T11396] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 129.167315][T11396] FAT-fs (loop2): Filesystem has been set read-only [ 129.237498][T11398] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.495335][T11398] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2621: bg 0: block 112: padding at end of block bitmap is not set [ 129.541218][T11398] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 129.544750][T11398] EXT4-fs (loop9): This should not happen!! Data will be lost [ 129.544750][T11398] [ 129.546673][T11398] EXT4-fs (loop9): Total free blocks count 0 [ 129.547941][T11398] EXT4-fs (loop9): Free/Dirty block details [ 129.549103][T11398] EXT4-fs (loop9): free_blocks=0 [ 129.551049][T11398] EXT4-fs (loop9): dirty_blocks=32 [ 129.552056][T11398] EXT4-fs (loop9): Block reservation details [ 129.553438][T11398] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 129.837928][T11072] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 129.841323][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.020636][T11426] loop8: detected capacity change from 0 to 2048 [ 130.086930][T11426] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.295298][T11426] EXT4-fs error (device loop8): empty_inline_dir:1778: inode #12: block 9: comm syz.8.2618: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 130.326474][T11426] EXT4-fs warning (device loop8): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 130.437670][ T4404] 8021q: adding VLAN 0 to HW filter on device eth18 [ 130.469145][T11060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.027138][T11461] loop8: detected capacity change from 0 to 1024 [ 131.031539][T11461] EXT4-fs: Ignoring removed oldalloc option [ 131.040832][T11461] EXT4-fs: Ignoring removed orlov option [ 131.110037][T11461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.336291][T11461] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2630: bg 0: block 112: padding at end of block bitmap is not set [ 131.381278][T11461] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 131.381348][T11461] EXT4-fs (loop8): This should not happen!! Data will be lost [ 131.381348][T11461] [ 131.381394][T11461] EXT4-fs (loop8): Total free blocks count 0 [ 131.381409][T11461] EXT4-fs (loop8): Free/Dirty block details [ 131.381426][T11461] EXT4-fs (loop8): free_blocks=0 [ 131.381443][T11461] EXT4-fs (loop8): dirty_blocks=32 [ 131.381455][T11461] EXT4-fs (loop8): Block reservation details [ 131.381467][T11461] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 131.603549][T11480] bridge0: port 2(syz_tun) entered blocking state [ 131.603658][T11480] bridge0: port 2(syz_tun) entered disabled state [ 131.604269][T11480] syz_tun: entered allmulticast mode [ 131.606539][T11480] syz_tun: entered promiscuous mode [ 131.606982][T11480] bridge0: port 2(syz_tun) entered blocking state [ 131.607060][T11480] bridge0: port 2(syz_tun) entered forwarding state [ 131.787917][T11060] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 131.796641][T11060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.112520][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2640'. [ 132.112599][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2640'. [ 132.234829][T11499] loop9: detected capacity change from 0 to 2048 [ 132.278103][T11499] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.293261][ T4404] 8021q: adding VLAN 0 to HW filter on device eth19 [ 132.402294][T11499] EXT4-fs error (device loop9): empty_inline_dir:1778: inode #12: block 9: comm syz.9.2638: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 132.415326][T11499] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 132.484140][ T30] audit: type=1326 audit(132.460:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11483 comm="syz.7.2636" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f3792a8 code=0x7fc00000 [ 132.600100][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.133815][T11525] bridge0: port 3(syz_tun) entered blocking state [ 133.137579][T11525] bridge0: port 3(syz_tun) entered disabled state [ 133.139175][T11525] syz_tun: entered allmulticast mode [ 133.200710][T11525] syz_tun: entered promiscuous mode [ 133.201214][T11525] bridge0: port 3(syz_tun) entered blocking state [ 133.201264][T11525] bridge0: port 3(syz_tun) entered forwarding state [ 134.072359][T11554] loop2: detected capacity change from 0 to 2048 [ 134.133626][T11554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.201838][T11554] EXT4-fs error (device loop2): empty_inline_dir:1778: inode #12: block 9: comm syz.2.2660: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 134.209418][T11554] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 134.398789][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.744152][ T30] audit: type=1326 audit(134.720:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.8.2659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7fc00000 [ 135.219511][T11585] loop2: detected capacity change from 0 to 512 [ 135.220460][T11585] EXT4-fs: inline encryption not supported [ 135.236379][T11585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.249799][T11585] EXT4-fs (loop2): 1 truncate cleaned up [ 135.252237][T11585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.377195][T11592] xt_hashlimit: size too large, truncated to 1048576 [ 135.559544][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.640296][T11599] loop3: detected capacity change from 0 to 2048 [ 135.710130][T11599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.727402][T11601] loop7: detected capacity change from 0 to 2048 [ 135.790159][T11601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.847913][T11609] block2mtd: Using custom MTD label '' for dev %+mσTHޗϔnDLd6784W [ 135.848847][T11609] block2mtd: error: cannot open device %+mσTHޗϔnDLd6784W [ 135.988440][ T7042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.990063][T11601] EXT4-fs error (device loop7): empty_inline_dir:1778: inode #12: block 9: comm syz.7.2674: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 135.998250][T11601] EXT4-fs warning (device loop7): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 136.179862][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.218181][ T30] audit: type=1326 audit(136.200:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11619 comm="syz.9.2681" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff989792a8 code=0x0 [ 137.024314][T11650] Bluetooth: MGMT ver 1.23 [ 137.024419][T11650] Bluetooth: hci0: unsupported parameter 5135 [ 137.024433][T11650] Bluetooth: hci0: unsupported parameter 8192 [ 137.024445][T11650] Bluetooth: hci0: unsupported parameter 5135 [ 137.024455][T11650] Bluetooth: hci0: unsupported parameter 8192 [ 137.136588][T11653] rnbd_client L610: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 137.137147][T11653] rtrs_client L2829: pathname cannot contain / and . [ 137.313129][T11663] loop8: detected capacity change from 0 to 128 [ 137.365780][T11663] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 137.365897][T11663] System zones: 1-3, 19-19, 35-36 [ 137.368736][T11663] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.599927][T11060] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.831648][T11686] loop2: detected capacity change from 0 to 256 [ 137.858096][T11686] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 137.867168][T11686] FAT-fs (loop2): Filesystem has been set read-only [ 138.602253][T11714] loop3: detected capacity change from 0 to 128 [ 138.899903][T11714] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.998852][T11714] Invalid ELF header magic: != ELF [ 139.008390][T11730] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 139.576670][ T7042] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.755500][T11757] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.13565952.0), cmd(5) [ 139.781676][T11759] block nbd2: not configured, cannot reconfigure [ 140.834516][T11803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2751'. [ 140.834589][T11803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2751'. [ 141.345918][T11819] loop2: detected capacity change from 0 to 128 [ 141.374071][T11819] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 141.589500][T11826] Injecting memory failure for pfn 0x1362d4 at process virtual address 0x20001000 [ 141.608784][T11826] Memory failure: 0x1362d4: Sending SIGBUS to syz.9.2759:11826 due to hardware memory corruption [ 141.611480][T11826] Memory failure: 0x1362d4: recovery action for dirty LRU page: Recovered [ 141.616372][T11826] Injecting memory failure for pfn 0x219070 at process virtual address 0x20002000 [ 141.618537][T11826] Memory failure: 0x219070: Sending SIGBUS to syz.9.2759:11826 due to hardware memory corruption [ 141.620910][T11826] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 141.655727][ T4724] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.810605][T11882] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2782'. [ 142.812821][T11881] netlink: 'syz.8.2781': attribute type 5 has an invalid length. [ 143.601100][T11916] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 143.601302][T11916] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 143.601481][T11916] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 143.601583][T11916] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 143.601776][T11916] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 143.601875][T11916] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 143.602022][T11916] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 143.602107][T11916] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 143.602242][T11916] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 143.602333][T11916] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 143.832023][T11922] tps6598x 0-0003: probe with driver tps6598x failed with error -22 [ 143.832725][T11922] i2c i2c-0: new_device: Instantiated device tps25750 at 0x03 [ 143.858996][T11920] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2798'. [ 144.089129][T11929] loop9: detected capacity change from 0 to 4096 [ 144.103423][T11929] EXT4-fs (loop9): Test dummy encryption mode enabled [ 144.119092][T11929] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.124927][T11932] loop2: detected capacity change from 0 to 1024 [ 144.163690][T11932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.233353][T11932] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.2807: lblock 3 mapped to illegal pblock 3 (length 3) [ 144.271374][T11932] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 144.271451][T11932] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.271451][T11932] [ 144.278608][T11932] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.2807: lblock 8 mapped to illegal pblock 8 (length 5) [ 144.298226][T11932] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 144.298301][T11932] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.298301][T11932] [ 144.342131][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.390753][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2810'. [ 144.393632][T11949] netlink: 'syz.8.2810': attribute type 21 has an invalid length. [ 144.519187][ T3864] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 144.521237][ T3864] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 144.521259][ T3864] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.521259][ T3864] [ 144.521277][ T3864] EXT4-fs (loop2): Total free blocks count 0 [ 144.521289][ T3864] EXT4-fs (loop2): Free/Dirty block details [ 144.521320][ T3864] EXT4-fs (loop2): free_blocks=0 [ 144.523622][ T4724] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 145.008848][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2820'. [ 145.010683][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2820'. [ 145.013517][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2820'. [ 145.058989][T11977] netlink: 'syz.9.2822': attribute type 1 has an invalid length. [ 145.377249][T11989] loop7: detected capacity change from 0 to 512 [ 145.377528][T11984] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.394028][T11989] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 145.439376][T11989] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2827: invalid indirect mapped block 4294967295 (level 0) [ 145.439468][T11989] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.442850][T11989] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2827: invalid indirect mapped block 4294967295 (level 1) [ 145.442945][T11989] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.444113][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 145.444130][ C0] EXT4-fs (loop7): initial error at time 145: ext4_free_branches:1023: inode 16 [ 145.444156][ C0] EXT4-fs (loop7): last error at time 145: ext4_free_branches:1023: inode 16 [ 145.450869][T11989] EXT4-fs (loop7): 1 orphan inode deleted [ 145.450887][T11989] EXT4-fs (loop7): 1 truncate cleaned up [ 145.453279][T11989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.472291][T11985] Soft offlining pfn 0x219070 at process virtual address 0x20000000 [ 145.472352][T11985] Soft offline: 0x219070: page already poisoned [ 145.472687][T11985] Soft offlining pfn 0x136dc6 at process virtual address 0x20001000 [ 145.498572][T11985] Soft offlining pfn 0x219070 at process virtual address 0x20002000 [ 145.498642][T11985] Soft offline: 0x219070: page already poisoned [ 145.671566][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.872692][T12011] loop8: detected capacity change from 0 to 512 [ 145.873639][T12011] EXT4-fs: inline encryption not supported [ 145.898801][T12011] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 145.924807][T12011] EXT4-fs (loop8): 1 truncate cleaned up [ 145.927253][T12011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.206197][T11060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.271302][T12030] loop2: detected capacity change from 0 to 256 [ 146.294589][T12030] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.723681][T12051] loop3: detected capacity change from 0 to 128 [ 147.012111][T12066] loop8: detected capacity change from 0 to 256 [ 149.236136][T12163] loop2: detected capacity change from 0 to 128 [ 150.374729][T12208] i2c i2c-0: new_device: Can't parse I2C address [ 151.044555][T12232] erspan0: entered promiscuous mode [ 151.053320][T12235] loop8: detected capacity change from 0 to 256 [ 151.313334][T12241] loop2: detected capacity change from 0 to 2048 [ 151.442413][T12241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.592043][T12253] net_ratelimit: 2 callbacks suppressed [ 151.592108][T12253] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 151.651221][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.054188][T12272] loop2: detected capacity change from 0 to 512 [ 152.092369][T12272] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 152.092481][T12272] System zones: 0-2, 18-18, 34-34 [ 152.103048][T12272] EXT4-fs (loop2): 1 orphan inode deleted [ 152.117318][T12272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.155383][T12276] input: syz0 as /devices/virtual/input/input16 [ 152.266851][T12283] loop7: detected capacity change from 0 to 128 [ 152.309567][T12283] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.514797][T12283] fscrypt (loop7, inode 12): Direct key flag not allowed with different contents and filenames modes [ 152.641211][T10963] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.762064][T12301] capability: warning: `syz.7.2933' uses 32-bit capabilities (legacy support in use) [ 153.181224][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.455676][T12323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2934'. [ 153.455741][T12323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2934'. [ 153.944219][T12339] loop9: detected capacity change from 0 to 512 [ 153.949589][T12339] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 153.989803][T12339] EXT4-fs (loop9): 1 truncate cleaned up [ 153.992236][T12339] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.319360][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.359519][ T30] audit: type=1807 audit(154.340:21): UNKNOWN=? res=0 [ 154.361043][ T30] audit: type=1802 audit(154.340:22): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.3.2952" res=0 errno=0 [ 154.365997][T12356] ima: policy update failed [ 154.367806][ T30] audit: type=1802 audit(154.350:23): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.2952" res=0 errno=0 [ 155.595763][T12409] netlink: 752 bytes leftover after parsing attributes in process `syz.3.2971'. [ 155.755473][T12415] loop9: detected capacity change from 0 to 512 [ 155.819464][T12415] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.832761][T12420] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2974'. [ 156.193090][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.369562][T12442] loop8: detected capacity change from 0 to 256 [ 156.534557][T12442] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 156.534636][T12442] FAT-fs (loop8): Filesystem has been set read-only [ 157.947892][T12499] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 157.949928][T12499] overlayfs: conflicting lowerdir path [ 158.564653][ T30] audit: type=1400 audit(158.540:24): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=12511 comm="syz.3.3004" opid=12511 ocomm="syz.3.3004" [ 158.684522][T12515] loop7: detected capacity change from 0 to 1024 [ 158.727122][ T4719] Bluetooth: hci3: command 0x0406 tx timeout [ 158.741767][T12515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.821433][T12515] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.3005: Freeing blocks not in datazone - block = 0, count = 16 [ 158.909224][T12525] loop9: detected capacity change from 0 to 1024 [ 158.930019][T12525] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 159.068548][T12525] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm syz.9.3007: lblock 0 mapped to illegal pblock 0 (length 1) [ 159.077247][T12525] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 159.077332][T12525] EXT4-fs (loop9): This should not happen!! Data will be lost [ 159.077332][T12525] [ 159.111165][T12534] misc userio: Can't change port type on an already running userio instance [ 159.219999][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.226199][ T3864] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 159.240630][ T3864] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 159.240692][ T3864] EXT4-fs (loop9): This should not happen!! Data will be lost [ 159.240692][ T3864] [ 159.250346][T11072] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 159.265431][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.710918][T12554] netlink: 'syz.7.3015': attribute type 2 has an invalid length. [ 159.713603][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3015'. [ 160.059734][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3021'. [ 160.255821][ T4807] atkbd serio5: keyboard reset failed on [ 160.832300][T12590] bond1: option ad_user_port_key: invalid value (65535) [ 160.834339][T12590] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 160.841157][T12590] bond1 (unregistering): Released all slaves [ 160.981380][T12595] input: syz1 as /devices/virtual/input/input20 [ 161.572968][T12621] rnbd_client L127: Can't parse path ip:127.0.0.1\ߐ?:bEz[۵>,: -22 [ 161.785257][T12626] loop3: detected capacity change from 0 to 512 [ 161.788938][T12626] EXT4-fs (loop3): Test dummy encryption mode enabled [ 161.796718][T12626] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.3048: inode has both inline data and extents flags [ 161.796778][T12626] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.797071][T12626] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3048: couldn't read orphan inode 15 (err -117) [ 161.797091][T12626] loop3: lost filesystem error report for type 5 error -117 [ 161.799768][T12626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.889046][ T7042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.913392][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3049'. [ 161.917978][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3049'. [ 161.918069][T12630] netlink: 'syz.9.3049': attribute type 15 has an invalid length. [ 161.918087][T12630] netlink: 'syz.9.3049': attribute type 18 has an invalid length. [ 162.245544][T12642] loop7: detected capacity change from 0 to 512 [ 162.345833][T12642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.681685][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.807586][T12663] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3062'. [ 162.925086][T12667] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3065'. [ 162.925158][T12667] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3065'. [ 163.227737][T12674] hub 1-0:1.0: USB hub found [ 163.229170][T12674] hub 1-0:1.0: 1 port detected [ 163.631441][T12688] loop2: detected capacity change from 0 to 4096 [ 163.661882][T12688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.791003][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3080'. [ 163.832166][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.052501][T12705] ima: rule for LSM 'u' is undefined [ 164.053240][T12702] ima: policy update completed [ 164.056179][ T30] audit: type=1807 audit(165.025:25): action=measure func=FILE_CHECK obj_type=u res=1 [ 164.056262][ T30] audit: type=1802 audit(165.025:26): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.8.3083" res=1 errno=0 [ 164.270753][T12711] Injecting memory failure for pfn 0x13769d at process virtual address 0x20000000 [ 164.306203][T12711] Memory failure: 0x13769d: Sending SIGBUS to syz.9.3085:12711 due to hardware memory corruption [ 164.306341][T12711] Memory failure: 0x13769d: recovery action for dirty LRU page: Recovered [ 164.320078][ T30] audit: type=1326 audit(165.295:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12713 comm="syz.8.3087" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 164.325857][ T30] audit: type=1326 audit(165.305:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12713 comm="syz.8.3087" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 164.337315][ T30] audit: type=1326 audit(165.305:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12713 comm="syz.8.3087" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 164.341519][ T30] audit: type=1326 audit(165.315:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12713 comm="syz.8.3087" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 164.346063][ T30] audit: type=1326 audit(165.325:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12713 comm="syz.8.3087" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 164.351391][ T30] audit: type=1326 audit(165.325:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12713 comm="syz.8.3087" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffa9f792a8 code=0x7ffc0000 [ 164.358391][ T30] audit: type=1326 audit(165.335:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12713 comm="syz.8.3087" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa9f78fa0 code=0x7ffc0000 [ 164.362702][ T30] audit: type=1326 audit(165.335:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12713 comm="syz.8.3087" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa9f78fa0 code=0x7ffc0000 [ 165.132930][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3101'. [ 165.276358][T12748] loop3: detected capacity change from 0 to 1024 [ 165.300664][T12748] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 165.303213][T12748] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 165.336320][T12748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.978389][T12748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.203179][T12778] loop8: detected capacity change from 0 to 256 [ 166.346708][T12780] netlink: 'syz.2.3118': attribute type 1 has an invalid length. [ 166.346774][T12780] nbd: error processing sock list [ 166.348225][T12780] block nbd0: shutting down sockets [ 166.443288][T12782] loop7: detected capacity change from 0 to 2048 [ 166.488899][T12782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.772968][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.790567][T12791] loop2: detected capacity change from 0 to 512 [ 166.835756][T12791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.868069][T12791] EXT4-fs (loop2): 1 truncate cleaned up [ 166.870480][T12791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.951542][T12796] loop8: detected capacity change from 0 to 4096 [ 166.954456][T12796] EXT4-fs: Ignoring removed orlov option [ 166.964672][T12796] EXT4-fs (loop8): Test dummy encryption mode enabled [ 166.979929][T12796] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.127115][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.177382][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3126'. [ 167.219809][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3127'. [ 167.267057][T11060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.502811][T12807] loop7: detected capacity change from 0 to 1024 [ 167.549843][T12807] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.554998][T12805] psci: CPU1 killed (polled 0 ms) [ 167.722798][T12807] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.3129: lblock 3 mapped to illegal pblock 3 (length 3) [ 167.726582][T12807] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 167.729308][T12807] EXT4-fs (loop7): This should not happen!! Data will be lost [ 167.729308][T12807] [ 167.809196][T12807] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm syz.7.3129: lblock 8 mapped to illegal pblock 8 (length 5) [ 167.820949][T12807] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 167.821020][T12807] EXT4-fs (loop7): This should not happen!! Data will be lost [ 167.821020][T12807] [ 168.042253][ T1311] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 168.061417][ T1311] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 168.064542][ T1311] EXT4-fs (loop7): This should not happen!! Data will be lost [ 168.064542][ T1311] [ 168.066984][ T1311] EXT4-fs (loop7): Total free blocks count 0 [ 168.068395][ T1311] EXT4-fs (loop7): Free/Dirty block details [ 168.069895][ T1311] EXT4-fs (loop7): free_blocks=0 [ 168.093551][T10963] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 168.601444][T12818] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 169.272523][T12828] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3137'. [ 169.403666][T12831] tap0: tun_chr_ioctl cmd 1074025681 [ 171.105596][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 171.105669][ T30] audit: type=1400 audit(172.085:40): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=r pid=12852 comm="syz.8.3149" name="file1" dev="tmpfs" ino=645 [ 171.871992][T12861] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 171.885308][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3154'. [ 171.899505][T12861] bond1 (unregistering): Released all slaves [ 172.817759][T12875] vxcan0: tx address claim with dest, not broadcast [ 173.307367][T12886] netlink: 428 bytes leftover after parsing attributes in process `syz.9.3163'. [ 173.310667][T12886] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3163'. [ 173.399411][T12890] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3164'. [ 175.122912][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3178'. [ 175.418030][T12921] warning: `syz.3.3189' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.438567][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3179'. [ 175.440251][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3179'. [ 175.442342][T12922] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3179'. [ 175.641866][T12926] loop2: detected capacity change from 0 to 512 [ 175.668098][T12926] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.668156][T12926] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 175.740577][T12926] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.742463][T12926] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3181: bad orphan inode 15 [ 175.742523][T12926] loop2: lost filesystem error report for type 5 error -117 [ 175.743948][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 175.743982][ C0] EXT4-fs (loop2): initial error at time 176: ext4_orphan_get:1425 [ 175.744031][ C0] EXT4-fs (loop2): last error at time 176: ext4_orphan_get:1425 [ 175.751548][T12926] ext4_test_bit(bit=14, block=18) = 1 [ 175.751596][T12926] is_bad_inode(inode)=0 [ 175.751618][T12926] NEXT_ORPHAN(inode)=1023 [ 175.751640][T12926] max_ino=32 [ 175.751659][T12926] i_nlink=0 [ 175.759507][T12926] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.3181: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 175.759574][T12926] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.763395][T12926] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 175.770545][T12926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.906361][T12926] EXT4-fs (loop2): shut down requested (0) [ 176.008594][ T4719] Bluetooth: hci1: command 0x0406 tx timeout [ 176.297403][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.317413][T12928] loop9: detected capacity change from 0 to 8192 [ 176.574322][T12939] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3186'. [ 176.576155][T12939] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3186'. [ 176.676046][T12943] netlink: 'syz.8.3188': attribute type 11 has an invalid length. [ 176.677745][T12943] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 176.985240][T12945] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 178.016049][T12967] loop3: detected capacity change from 0 to 256 [ 178.215946][T12970] __nla_validate_parse: 1 callbacks suppressed [ 178.225209][T12970] netlink: 316 bytes leftover after parsing attributes in process `syz.9.3200'. [ 179.437114][T12985] loop3: detected capacity change from 0 to 256 [ 179.561254][T12988] loop2: detected capacity change from 0 to 128 [ 179.632529][T12988] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.945108][T12988] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 180.220514][ T4724] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.253463][T12999] netlink: 'syz.7.3213': attribute type 12 has an invalid length. [ 180.417105][T13002] loop8: detected capacity change from 0 to 128 [ 180.458828][T13002] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 180.917325][T11060] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.413772][T13035] loop8: detected capacity change from 0 to 1024 [ 182.495721][T13035] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.657958][T13035] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.3240: lblock 3 mapped to illegal pblock 3 (length 3) [ 182.713770][T13035] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 182.714843][T13035] EXT4-fs (loop8): This should not happen!! Data will be lost [ 182.714843][T13035] [ 182.825496][T13035] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 8: comm syz.8.3240: lblock 8 mapped to illegal pblock 8 (length 5) [ 182.829522][T13035] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 182.829586][T13035] EXT4-fs (loop8): This should not happen!! Data will be lost [ 182.829586][T13035] [ 182.990354][T13048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3234'. [ 183.081757][ T3864] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 183.089381][ T3864] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 183.092389][ T3864] EXT4-fs (loop8): This should not happen!! Data will be lost [ 183.092389][ T3864] [ 183.097624][ T3864] EXT4-fs (loop8): Total free blocks count 0 [ 183.099003][ T3864] EXT4-fs (loop8): Free/Dirty block details [ 183.100519][ T3864] EXT4-fs (loop8): free_blocks=0 [ 183.118971][T11060] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 185.028970][T13088] loop8: detected capacity change from 0 to 128 [ 187.395646][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.395746][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.649386][T13129] input: syz0 as /devices/virtual/input/input21 [ 188.003397][T13136] loop7: detected capacity change from 0 to 512 [ 188.086351][T13136] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 188.086456][T13136] System zones: 0-2, 18-18, 34-34 [ 188.137469][T13136] EXT4-fs (loop7): 1 orphan inode deleted [ 188.139809][T13136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.709391][T13148] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 188.711076][T13148] syzkaller1: linktype set to 826 [ 188.915039][T13153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3278'. [ 189.349147][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.362185][ T4722] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 190.966528][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'. [ 191.560582][T13201] loop9: detected capacity change from 0 to 128 [ 191.628918][T13201] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.109833][ T1311] maxtcpc 0-0020: error -EIO: Failed to read TCPC_POWER_STATUS [ 192.113493][ T1311] maxtcpc 0-0020: probe with driver maxtcpc failed with error -5 [ 192.143071][T13210] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x20 [ 192.318544][T13215] loop7: detected capacity change from 0 to 256 [ 192.738122][T11072] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.023745][T13224] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3311'. [ 193.023814][T13224] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3311'. [ 194.741564][T13250] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 196.351458][T13262] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3324'. [ 196.351536][T13262] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3324'. [ 196.690752][T13265] netlink: 'syz.2.3327': attribute type 11 has an invalid length. [ 196.690818][T13265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3327'. [ 196.690919][T13265] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 196.693541][ T3864] bond0: (slave bond1): link status definitely down, disabling slave [ 200.485906][T13307] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3342'. [ 200.487979][T13307] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3342'. [ 200.731604][T13311] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3343'. [ 201.727060][T13327] loop8: detected capacity change from 0 to 512 [ 201.830750][T13327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.909029][T13324] hub 1-0:1.0: USB hub found [ 201.910451][T13324] hub 1-0:1.0: 1 port detected [ 202.474349][T13339] bonding: no command found in bonding_masters - use +ifname or -ifname [ 202.717814][T11060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.629685][T13370] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3367'. [ 204.640731][T13370] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3367'. [ 205.294497][T13382] loop8: detected capacity change from 0 to 512 [ 205.337667][T13381] bond0: entered promiscuous mode [ 205.338957][T13381] bond_slave_0: entered promiscuous mode [ 205.340736][T13381] bond_slave_1: entered promiscuous mode [ 205.379831][T13381] bond0: left promiscuous mode [ 205.380151][T13382] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.3371: corrupted xattr block 95: invalid header [ 205.380203][T13382] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.385844][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 205.385864][ C0] EXT4-fs (loop8): initial error at time 206: ext4_expand_extra_isize_ea:2810: inode 11 [ 205.385895][ C0] EXT4-fs (loop8): last error at time 206: ext4_expand_extra_isize_ea:2810: inode 11 [ 205.394318][T13382] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3371: bg 0: block 7: invalid block bitmap [ 205.394370][T13382] loop8: lost filesystem error report for type 5 error -117 [ 205.404298][T13381] bond_slave_0: left promiscuous mode [ 205.404533][T13381] bond_slave_1: left promiscuous mode [ 205.409818][T13382] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 205.409871][T13382] loop8: lost filesystem error report for type 5 error -117 [ 205.412394][T13382] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.3371: corrupted xattr block 95: invalid header [ 205.412452][T13382] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.420522][T13382] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 205.420646][T13382] EXT4-fs (loop8): 1 orphan inode deleted [ 205.422996][T13382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.602380][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3374'. [ 205.674269][T13387] netlink: 'syz.7.3374': attribute type 3 has an invalid length. [ 205.674327][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3374'. [ 206.257430][T11060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.788968][T13405] loop9: detected capacity change from 0 to 128 [ 206.847201][T13405] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.053516][T13405] fscrypt (loop9, inode 12): Mutually exclusive encryption flags (0x15) [ 207.287508][T13412] loop3: detected capacity change from 0 to 512 [ 207.400259][T13412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.403600][T11072] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.617883][T13412] EXT4-fs warning (device loop3): ext4_group_extend:1861: can't shrink FS - resize aborted [ 207.895861][ T7042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.262480][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3391'. [ 208.486788][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3394'. [ 208.488399][ T3864] bond0: (slave bond_slave_0): interface is now down [ 208.488451][ T3864] bond0: (slave bond_slave_1): interface is now down [ 208.491047][ T3864] bond0: now running without any active interface! [ 208.845458][T13437] loop8: detected capacity change from 0 to 512 [ 208.847963][T13437] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 209.084145][T13443] loop2: detected capacity change from 0 to 256 [ 210.634805][T13471] loop9: detected capacity change from 0 to 512 [ 210.691203][T13463] loop3: detected capacity change from 0 to 8192 [ 210.707273][T13471] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.784645][T13463] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.200929][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.648575][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3433'. [ 213.650514][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3433'. [ 213.653014][T13521] netlink: 'syz.9.3433': attribute type 18 has an invalid length. [ 214.155272][T13530] binder: 13528:13530 got transaction to invalid handle, 1 [ 214.156812][T13530] binder: 13528:13530 cannot find target node [ 214.159178][T13530] binder: 13528:13530 transaction async to 0:0 failed 4/29201/-22, code 0 size 0-0 line 3252 [ 215.230718][T13551] Injecting memory failure for pfn 0x136970 at process virtual address 0x20000000 [ 215.339296][T13551] Memory failure: 0x136970: Sending SIGBUS to syz.3.3445:13551 due to hardware memory corruption [ 215.341464][T13551] Memory failure: 0x136970: recovery action for dirty LRU page: Recovered [ 215.343284][T13551] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 215.345596][T13551] Memory failure: 0x219070: Sending SIGBUS to syz.3.3445:13551 due to hardware memory corruption [ 215.347874][T13551] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 215.730395][T13557] loop8: detected capacity change from 0 to 128 [ 215.852873][T13557] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.465153][T11060] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.499055][T13577] loop3: detected capacity change from 0 to 2048 [ 217.670489][T13577] loop3: p1 < > p4 [ 217.670489][T13577] p4: [ 217.696119][T13577] loop3: p4 size 722688 extends beyond EOD, truncated [ 217.775600][T13581] loop9: detected capacity change from 0 to 512 [ 217.784937][T13581] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 217.813701][T13581] EXT4-fs (loop9): 1 truncate cleaned up [ 217.842067][T13581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.961325][T13581] EXT4-fs error (device loop9): ext4_append:79: inode #2: comm syz.9.3457: Logical block already allocated [ 217.977629][T13581] EXT4-fs (loop9): Remounting filesystem read-only [ 218.195556][ T4346] loop3: p1 < > p4 [ 218.195556][ T4346] p4: [ 218.210304][ T4346] loop3: p4 size 722688 extends beyond EOD, truncated [ 218.347725][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.450809][T13572] Injecting memory failure for pfn 0x136286 at process virtual address 0x20276000 [ 218.522031][T13572] Memory failure: 0x136286: Sending SIGBUS to syz.8.3452:13572 due to hardware memory corruption [ 218.529565][T13572] Memory failure: 0x136286: recovery action for dirty LRU page: Recovered [ 218.531362][T13572] Injecting memory failure for pfn 0x136287 at process virtual address 0x20277000 [ 218.554626][T13572] Memory failure: 0x136287: Sending SIGBUS to syz.8.3452:13572 due to hardware memory corruption [ 218.557106][T13572] Memory failure: 0x136287: recovery action for dirty LRU page: Recovered [ 218.641565][T13586] loop3: detected capacity change from 0 to 512 [ 218.927107][T13592] binder: 13591:13592 ioctl c018620b 0 returned -14 [ 220.662716][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3472'. [ 222.879534][T13651] loop3: detected capacity change from 0 to 1024 [ 222.946770][T13651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 223.430810][ T39] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 3) [ 223.441061][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 223.443484][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 223.443484][ T39] [ 223.453802][ T39] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 223.459057][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 223.461880][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 223.461880][ T39] [ 223.464254][ T39] EXT4-fs (loop3): Total free blocks count 0 [ 223.465659][ T39] EXT4-fs (loop3): Free/Dirty block details [ 223.467139][ T39] EXT4-fs (loop3): free_blocks=0 [ 223.468467][ T39] EXT4-fs (loop3): dirty_blocks=32 [ 223.478081][ T39] EXT4-fs (loop3): Block reservation details [ 223.480874][ T7042] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 223.491316][T13664] veth0: entered promiscuous mode [ 223.498274][T13662] veth0: left promiscuous mode [ 225.096454][T13688] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 230.104299][T13759] netlink: 'syz.2.3535': attribute type 1 has an invalid length. [ 230.104360][T13759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3535'. [ 230.268661][T13761] pi3usb30532 0-0005: Error reading config register -5 [ 230.281373][T13744] syz.3.3529 (13744): drop_caches: 2 [ 230.283140][T13761] pi3usb30532 0-0005: probe with driver pi3usb30532 failed with error -5 [ 230.286425][T13761] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 231.779789][T13784] loop9: detected capacity change from 0 to 2048 [ 231.855365][T13784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.370755][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.487543][T13819] block nbd3: shutting down sockets [ 235.503315][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3569'. [ 235.528427][ T4719] Bluetooth: hci4: command 0x0406 tx timeout [ 238.174671][T13868] ip_tables: iptables: counters copy to user failed while replacing table [ 239.165074][T13884] binder: 13883:13884 ioctl c0046209 200000000000000 returned -22 [ 239.283473][T13886] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3593'. [ 239.370495][T13888] loop7: detected capacity change from 0 to 256 [ 239.397019][T13888] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.618850][T13895] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 239.621484][T13895] FAT-fs (loop7): Filesystem has been set read-only [ 239.623609][T13895] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 239.639175][T13895] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 239.803760][T13899] loop8: detected capacity change from 0 to 512 [ 239.890671][T13899] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.373605][T11060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.467033][T13909] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 240.644310][ T4719] Bluetooth: hci0: command 0x0406 tx timeout [ 241.414515][T13921] loop8: detected capacity change from 0 to 256 [ 241.429295][T13921] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.550568][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.552672][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.559961][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.562494][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.583569][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.586410][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.588741][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.604815][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.604998][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 241.605130][T13921] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 248.060792][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3618'. [ 248.506348][T13950] loop2: detected capacity change from 0 to 128 [ 248.817104][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.817201][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.265400][ T9] kernel write not supported for file /fb0 (pid: 9 comm: kworker/0:0) [ 250.517851][T13988] MPI: mpi too large (32776 bits) [ 250.959424][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3642'. [ 251.317373][T14003] sch_fq: defrate 2 ignored. [ 258.011906][T14034] loop7: detected capacity change from 0 to 4096 [ 258.046987][T14034] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 258.067911][T14034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.259417][T14034] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3660'. [ 258.259484][T14034] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3660'. [ 258.385511][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3664'. [ 258.604674][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.683098][T14049] can0: slcan on pty38. [ 259.058624][T14047] can0 (unregistered): slcan off pty38. [ 259.567696][T14065] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 259.794212][T14072] device-mapper: ioctl: name not supplied when creating device [ 260.752131][T14087] loop7: detected capacity change from 0 to 1024 [ 260.762013][T14087] EXT4-fs: inline encryption not supported [ 260.763239][T14087] EXT4-fs: Ignoring removed bh option [ 260.782806][T14090] loop8: detected capacity change from 0 to 1024 [ 260.785319][T14087] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 260.810130][T14087] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.868538][T14090] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.331342][T11060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.387152][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.427394][T14119] loop9: detected capacity change from 0 to 2048 [ 262.476618][T14119] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.052274][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.359396][T14141] loop2: detected capacity change from 0 to 512 [ 263.360364][T14141] EXT4-fs: Ignoring removed nobh option [ 263.446344][T14141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.672797][T14141] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 263.980089][ T4724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.134711][T14158] loop9: detected capacity change from 0 to 512 [ 264.187826][T14158] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.289671][T14160] loop7: detected capacity change from 0 to 128 [ 264.299090][T14160] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.329561][T14160] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.828063][T11072] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.038986][T14170] vxcan1: tx address claim with dest, not broadcast [ 265.721307][T14182] loop7: detected capacity change from 0 to 512 [ 265.726502][T14182] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 265.762585][T14182] EXT4-fs (loop7): 1 truncate cleaned up [ 265.774838][T14182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.216197][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.682637][T14203] dyndbg: bad flag-op , at start of Gz[dJh [ 266.686395][T14203] dyndbg: flags parse failed [ 267.274598][T14210] rnbd_client L127: Can't parse path ip:: -22 [ 273.510447][ T30] audit: type=1326 audit(274.485:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 273.523216][ T30] audit: type=1326 audit(274.495:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 273.554134][T14232] loop9: detected capacity change from 0 to 8192 [ 273.574185][ T30] audit: type=1326 audit(274.545:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 273.574292][ T30] audit: type=1326 audit(274.545:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 273.574365][ T30] audit: type=1326 audit(274.545:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 273.574416][ T30] audit: type=1326 audit(274.545:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 273.574471][ T30] audit: type=1326 audit(274.545:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 273.574524][ T30] audit: type=1326 audit(274.545:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 273.623216][ T30] audit: type=1326 audit(274.585:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 273.631575][ T30] audit: type=1326 audit(274.585:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14239 comm="syz.3.3749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd792a8 code=0x7ffc0000 [ 274.211759][T14251] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd83 [ 274.682680][T14260] loop8: detected capacity change from 0 to 256 [ 275.512166][T14273] loop7: detected capacity change from 0 to 1024 [ 275.610838][T14273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.193623][T10963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.525537][T14294] nvme nvme0: resetting controller [ 276.534634][T14293] loop9: detected capacity change from 0 to 512 [ 276.589424][T14293] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.645428][ T3864] nvme 0000:00:02.0: enabling device (0000 -> 0002) [ 276.761365][ T3864] nvme nvme0: Disabling device after reset failure: -19 [ 276.808259][ T4401] Unable to handle kernel paging request at virtual address dfff800000000000 [ 276.808330][ T4401] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 276.808371][ T4401] Mem abort info: [ 276.808391][ T4401] ESR = 0x0000000096000005 [ 276.808412][ T4401] EC = 0x25: DABT (current EL), IL = 32 bits [ 276.808434][ T4401] SET = 0, FnV = 0 [ 276.808453][ T4401] EA = 0, S1PTW = 0 [ 276.808472][ T4401] FSC = 0x05: level 1 translation fault [ 276.808491][ T4401] Data abort info: [ 276.808508][ T4401] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 276.808527][ T4401] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 276.808547][ T4401] GCS = 0, Overlay = 0, DirtyBit = 0 [ 276.808567][ T4401] [dfff800000000000] address between user and kernel address ranges [ 276.808667][ T4401] Internal error: Oops: 0000000096000005 [#1] SMP [ 276.822336][ T4401] Modules linked in: [ 276.822995][ T4401] CPU: 0 UID: 0 PID: 4401 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT [ 276.824876][ T4401] Tainted: [L]=SOFTLOCKUP [ 276.825645][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 276.827356][ T4401] Workqueue: kblockd blk_mq_run_work_fn [ 276.828271][ T4401] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 276.829547][ T4401] pc : __blk_mq_alloc_driver_tag+0x118/0x554 [ 276.830498][ T4401] lr : __blk_mq_alloc_driver_tag+0xbc/0x554 [ 276.831465][ T4401] sp : ffff800098d17780 [ 276.832172][ T4401] x29: ffff800098d17780 x28: ffff0000c8a5d800 x27: ffff0000c8a5d800 [ 276.833482][ T4401] x26: 0000000000000000 x25: 1fffe000190dba82 x24: dfff800000000000 [ 276.834828][ T4401] x23: ffff0000c8047200 x22: 0000000000000004 x21: 00000000ffffffff [ 276.836168][ T4401] x20: ffff0000c86dd400 x19: ffff0000c86dd410 x18: 00000000ffffffff [ 276.837498][ T4401] x17: ffff80008a7d6000 x16: 0000000000000004 x15: ffff80008a35fda0 [ 276.838833][ T4401] x14: ffff80008a5d5e28 x13: 0000000000000002 x12: 0000000000000000 [ 276.840206][ T4401] x11: 0000000000000000 x10: ffff7000131a2f12 x9 : 0000000000000000 [ 276.841537][ T4401] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 6c3e2d7874636826 [ 276.842881][ T4401] x5 : ffff0000d77808db x4 : 0000000000000000 x3 : ffff8000817944e8 [ 276.844267][ T4401] x2 : 0000000000000000 x1 : ffff0000c7260000 x0 : 0000000000000000 [ 276.845677][ T4401] Call trace: [ 276.846283][ T4401] __blk_mq_alloc_driver_tag+0x118/0x554 (P) [ 276.847324][ T4401] blk_mq_dispatch_rq_list+0x298/0x13a8 [ 276.848335][ T4401] __blk_mq_sched_dispatch_requests+0x250/0x10e8 [ 276.849502][ T4401] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 276.850487][ T4401] blk_mq_run_work_fn+0x214/0x2e4 [ 276.851325][ T4401] process_scheduled_works+0x788/0x10b8 [ 276.852235][ T4401] worker_thread+0x798/0xbd0 [ 276.853004][ T4401] kthread+0x304/0x3d4 [ 276.853670][ T4401] ret_from_fork+0x10/0x20 [ 276.854477][ T4401] Code: 35001b08 910012d6 b94002b5 d343fec8 (38f86908) [ 276.855694][ T4401] ---[ end trace 0000000000000000 ]--- [ 277.161467][ T4401] Kernel panic - not syncing: Oops: Fatal exception [ 277.162594][ T4401] Kernel Offset: disabled [ 277.163308][ T4401] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 277.164474][ T4401] Memory Limit: none [ 277.449647][ T4401] Rebooting in 86400 seconds..