last executing test programs: 1m20.568311412s ago: executing program 2 (id=2844): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0xc014, &(0x7f0000000000)=ANY=[], 0x9, 0x21c, &(0x7f00000002c0)="$eJzsVb9rFEEU/mZvNpvTEwN2th4mjSa3AbG2Mb1WVh6XNQb3/JE90TsCnjZpFMR/IiD+CYIWivYWIqJNLBS0iFglyMmbeTM3x+26OTit5oPlffN+znu7M3s1u5VFAH7vbrYwBwWBGj4KAQlgXmjd3oyWP1kOGF+lXjdY/5TlF5ZZt/fuoaa9a800TTay7t9JBAGMmzgfcqLGVedePDqmNc+OFoYpckkXk47p7YNRH4HyTaepkOU+0yadim5u3PR4RBPl+XAs3ISv6U1eKOu0cJhTIPtHJnCuosj0qwa4mm9T3GpI0wzzhyDERN96DqEEigDWtF9DYaeGfHiiK+f6VDi8itGxlBI6df/vey4mdBcpEkwUnoHfR3b+foAfAgjxfnezRdrLfIuReVU/5kioKFq8cnyOS6APiAoGKinlkew7D2Cx0765mHV7p9bbzbVkLbkex8tnlt4c5iM6uAesp8mSUNvQ4QERCQs6p1XHTl/a56G9DwdCbc3ciggdtU1pLueFE45LFQictowc5n1p60esu521cREnMQvgTp/MMQ+oDsomcYVaW4FAhRcN6W4IewgwqwynWzfS1S0ICBO2DWlzNHYQ2kW8g0/POU2yfNa2v8WyznKF5fawnoJ5neafJFWG77xa6AMzuNvsdDbUz0sz0tmhal08ZysHXNX8DU2xeoQD4tBBHT08PDw8PDw8/hH+BAAA///OuTMg") fsopen(0x0, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x133042, 0x19) 1m20.460602825s ago: executing program 2 (id=2850): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf256600000008000300", @ANYRES32=r2, @ANYBLOB="0800b700760000000800a00037f7ffff080026"], 0x3c}, 0x1, 0x0, 0x0, 0x40095}, 0x8040) 1m20.394737387s ago: executing program 2 (id=2854): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c200000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1m20.317786578s ago: executing program 2 (id=2857): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) 1m20.111167715s ago: executing program 2 (id=2866): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1m19.62753994s ago: executing program 2 (id=2890): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 1m19.539672533s ago: executing program 32 (id=2890): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 1.536596273s ago: executing program 5 (id=5711): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x64, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 1.49459193s ago: executing program 5 (id=5713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c0081"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.444618695s ago: executing program 5 (id=5715): prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x1, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x68, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x1d72, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 615.031965ms ago: executing program 5 (id=5761): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002280)=@delchain={0x284, 0x65, 0x600, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x258, 0x2, [@TCA_BPF_ACT={0x254, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xe4, 0x0, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0xfffffffffffffffd, 0x5, 0x400}, 0x2000000000a}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1000006, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x90, 0x8, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x970, 0xa, 0xd, 0x5}]}]}, {0x5a, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f6730fefc56e41d34689a03e36a9ebcf8d93f9251a03dc831c59470500ca906c3dcb99adb55bc5f0ff1361"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 560.287835ms ago: executing program 5 (id=5764): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 x00000000ffffffff0000', 0x37) 507.712873ms ago: executing program 5 (id=5767): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') exit(0x9c13) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$uinput_user_dev(r0, 0x0, 0x0) 359.781196ms ago: executing program 4 (id=5778): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)='\f', 0x1}], 0xe0, &(0x7f0000001480)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x7f}}], 0x20, 0x4048811}, 0x0) 351.713167ms ago: executing program 3 (id=5780): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x13a322) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0xc2602, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000001002, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061b74df2cfc06c89f3d9a234b30c50997d3bef409ff2176fe7bfe55cd4aa4243202e6cb9af2e70c7f3f800f2f7b6aa54cc50a1fcaed1e831fa79a", "6752ad3300", [0x5, 0x200]}}) sendfile(r0, r0, 0x0, 0xf84c) 264.756778ms ago: executing program 0 (id=5781): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0xfffffffd}}, 0x50) 264.417197ms ago: executing program 4 (id=5782): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000340)) 255.026937ms ago: executing program 3 (id=5783): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@minixdf}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable_val={'init_itable', 0x3d, 0x200}}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x23, 0x44d, &(0x7f0000000480)="$eJzs28tvG0UYAPBv7SR9k1CVRx9AoCDKK2nSUnpAQiCQOICEBIdyDElalboNaoJEq4oWhMoRVeLEBXFE4i/gBBcEnJC4wh1VqlAvLZyM1t5NbMd2HnXsUP9+0jozu2PPfN6d9exONoC+NZq+JBE7I+KPiBiuZusLjFb/3L55afqfm5emkyiX3/47qZS7dfPSdF40f9+OPDMQUfgsif1N6p2/cPHMVKk0ez7Ljy+c/WB8/sLF506fnTo1e2r23OTx40ePTLxwbPL5jsSZxnVr38dzB/a+/u61N6dPXHvvl++SPP6GODpktN3GJ8rlDlfXW7tq0slADxvCmhSr3TQGK/1/OIqxtPOG47VPe9o4YEOVy+Xy/a03XykDd7Gkcg4ovxS9bgjQZfkPfXr9my9dGnpsCjderl4ApXHfzpbqloEoZGUGG65vO2k0Ik5c+ffrdImNuQ8BAFDnh3T882yz8V8hau8L3ZPNoYxExL0RsTsijkXEnoi4L6JS9oGIeHCN9TdOkiwf/xSuryuwVUrHfy9mc1v147989BcjxSy3qxL/YHLydGn2cPadHIrBLWl+ok0dP776+xetttWO/9IlrT8fC2btuD6wpf49M1MLU3cSc60bn0TsG2gWf7I4E5BExN6I2LfOOk4//e2BVttWjr+NDswzlb+JeLK6/69EQ/y5pP385PjWKM0eHs+PiuV+/e3qW63qv6P4OyDd/9ubHv+L8Y8ktfO182v59K+eSl+v/vl5y2ua9R7/Q8k7des+mlpYOD8RMZS8UW107frJhnKTS+XT+A8dbN7/d8fSN7E/ItKD+KGIeDgiHsna/mhEPBYRB9t8Cz+/8vj7649/Y6Xxz6xp/y8lhqJxTfNE8cxP39dVOrL04avb/0crqUPZmtWc/1bTrrUezQAAAPB/VYiInZEUxhbThcLYWPV/+PfE9kJpbn7hmZNzH56bqT4jMBKDhfxO13DN/dCJ7J5Lnp9syB/J7ht/WdxWyY9Nz5Vmeh089LkdLfp/6q9ir1sHbDjPa0H/0v+hf+n/0L/0f+hfTfr/tl60A+i+Zr//l1d+29aNaAvQXQ3937Qf9BHX/9C/1tP/nTPg7tC2Lw91rx1AV81vi5UfkpeQWJaIwqZoxiZKXN4czehQotdnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74LwAA//8cB+YG") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 254.477509ms ago: executing program 4 (id=5784): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r1}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) 250.382852ms ago: executing program 0 (id=5785): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0) 239.009888ms ago: executing program 1 (id=5786): bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000280)) 221.03787ms ago: executing program 1 (id=5787): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 201.660954ms ago: executing program 4 (id=5788): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x10, 0x1213, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) truncate(&(0x7f0000000000)='./file1\x00', 0x20a5a) 181.121409ms ago: executing program 0 (id=5789): r0 = fanotify_init(0x4, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x61, 0x40001002, r1, 0x0) fanotify_mark(r0, 0x61, 0x40000028, r1, 0x0) 180.555652ms ago: executing program 1 (id=5790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 173.860084ms ago: executing program 3 (id=5791): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c0000002100", 0x6}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 131.088265ms ago: executing program 3 (id=5792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 123.797595ms ago: executing program 0 (id=5793): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 119.510719ms ago: executing program 1 (id=5794): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001080)={[{@utf8}, {@shortname_win95}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}, {@rodir}, {@rodir}, {@shortname_win95}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 72.741504ms ago: executing program 3 (id=5795): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xa4bf}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000400)={{r0}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) 60.201626ms ago: executing program 0 (id=5796): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x2000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 53.833131ms ago: executing program 3 (id=5797): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000000f240)=ANY=[@ANYBLOB="3400000013000100000000000000000807000000", @ANYRES32=r1, @ANYBLOB="000000200001000014001a80100005800c000a"], 0x34}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) 46.577513ms ago: executing program 4 (id=5798): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x2000c804, &(0x7f0000001100)={0xa, 0x4e22, 0x4, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10102, 0x0) 753.353µs ago: executing program 1 (id=5799): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) unshare(0x40600) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x2) copy_file_range(r0, &(0x7f0000000000)=0x3ff, r0, 0x0, 0x6, 0x0) 480.56µs ago: executing program 4 (id=5800): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) 321.973µs ago: executing program 0 (id=5801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20004800) 0s ago: executing program 1 (id=5802): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='!*on_existent_event:mod:', 0x18) kernel console output (not intermixed with test programs): for pfn 0x14c603 at process virtual address 0x20003000 [ 163.850688][T10808] tap0: tun_chr_ioctl cmd 1074025677 [ 163.850847][T10808] tap0: linktype set to 805 [ 163.863244][T10786] Memory failure: 0x14c603: recovery action for dirty LRU page: Recovered [ 163.934321][T10817] loop2: detected capacity change from 0 to 512 [ 163.938477][T10817] EXT4-fs (loop2): bad geometry: block count 16776960 exceeds size of device (256 blocks) [ 163.978204][T10822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2660'. [ 164.306438][T10861] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.307402][T10861] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.375566][T10861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.382242][T10861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.401871][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2685'. [ 164.542332][T10861] hsr0: left allmulticast mode [ 164.542364][T10861] hsr_slave_0: left allmulticast mode [ 164.542654][T10861] hsr_slave_1: left allmulticast mode [ 164.557506][T10877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.587336][T10877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.639166][ T40] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.639380][ T40] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.639400][ T40] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.639416][ T40] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.731545][T10901] i2c i2c-0: delete_device: Can't find device in list [ 164.935585][T10922] loop3: detected capacity change from 0 to 512 [ 164.950374][T10922] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2708: bad orphan inode 17 [ 164.950413][T10922] fserror_report: 10 callbacks suppressed [ 164.950430][T10922] loop3: lost filesystem error report for type 5 error -117 [ 164.950524][T10922] ext4_test_bit(bit=16, block=4) = 1 [ 164.950532][T10922] is_bad_inode(inode)=0 [ 164.950537][T10922] NEXT_ORPHAN(inode)=0 [ 164.950543][T10922] max_ino=32 [ 164.950547][T10922] i_nlink=1 [ 164.951029][T10922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.987927][ T50] Bluetooth: hci3: unexpected event for opcode 0x203b [ 165.017644][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.056463][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2713'. [ 165.056508][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 165.073781][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2713'. [ 165.075576][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 165.230075][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 165.364115][T10976] bridge_slave_1: left allmulticast mode [ 165.365282][T10976] bridge_slave_1: left promiscuous mode [ 165.366364][T10976] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.965182][T10976] net_ratelimit: 3 callbacks suppressed [ 165.965220][T10976] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 166.267249][T10996] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2741'. [ 166.418755][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2752'. [ 166.770123][T11063] loop8: detected capacity change from 0 to 1 [ 166.772178][T11063] Dev loop8: unable to read RDB block 1 [ 166.772502][T11063] loop8: unable to read partition table [ 166.772598][T11063] loop8: partition table beyond EOD, truncated [ 166.772611][T11063] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 166.878042][T11077] loop1: detected capacity change from 0 to 2048 [ 166.879913][T11077] EXT4-fs: Ignoring removed oldalloc option [ 166.893958][T11077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.957937][T11085] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 166.966095][T11085] EXT4-fs (loop1): Remounting filesystem read-only [ 166.967975][T11085] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 167.110435][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.281962][T11123] netlink: 'syz.1.2800': attribute type 7 has an invalid length. [ 167.282452][T11123] netlink: 'syz.1.2800': attribute type 8 has an invalid length. [ 167.309101][T11126] loop1: detected capacity change from 0 to 256 [ 167.314572][T11126] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.473307][T11142] loop1: detected capacity change from 0 to 256 [ 172.704641][T11176] loop3: detected capacity change from 0 to 256 [ 172.708810][ T50] Bluetooth: hci2: ISO packet too small [ 172.728275][T11176] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 172.728321][T11176] FAT-fs (loop3): Filesystem has been set read-only [ 172.735848][T11176] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 172.738156][T11175] __nla_validate_parse: 7 callbacks suppressed [ 172.738195][T11175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2827'. [ 173.087947][T11219] loop2: detected capacity change from 0 to 8 [ 173.095032][T11218] Invalid ELF header magic: != ELF [ 173.204168][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 173.215000][T11233] loop1: detected capacity change from 0 to 256 [ 173.218133][T11233] FAT-fs (loop1): Directory bread(block 1285) failed [ 173.222892][T11233] FAT-fs (loop1): Directory bread(block 1286) failed [ 173.222945][T11233] FAT-fs (loop1): Directory bread(block 1287) failed [ 173.223020][T11233] FAT-fs (loop1): Directory bread(block 1288) failed [ 173.234507][T11233] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 173.325318][T11243] loop2: detected capacity change from 0 to 512 [ 173.374517][T11243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.418237][T11255] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2860'. [ 173.505147][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.507849][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.510583][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.512950][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.515855][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.518334][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.522967][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.527274][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.539100][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.547445][ T4692] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 173.733318][ T6947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.813657][T11298] bridge0: port 3(vlan2) entered blocking state [ 173.813754][T11298] bridge0: port 3(vlan2) entered disabled state [ 173.813821][T11298] vlan2: entered allmulticast mode [ 173.813830][T11298] bridge0: entered allmulticast mode [ 173.815339][T11298] vlan2: left allmulticast mode [ 173.815349][T11298] bridge0: left allmulticast mode [ 174.050093][ T15] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.090691][T11321] netlink: 'syz.0.2893': attribute type 39 has an invalid length. [ 174.124236][ T4696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.125793][ T4696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.127465][ T4696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.129698][ T4696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.132118][ T4696] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.151787][ T15] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.269825][ T15] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.372180][ T15] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.426052][T11324] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.429168][T11324] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.430622][T11324] bridge_slave_0: entered allmulticast mode [ 174.433596][T11324] bridge_slave_0: entered promiscuous mode [ 174.438712][T11324] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.438754][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.439725][T11324] bridge_slave_1: entered allmulticast mode [ 174.444108][T11324] bridge_slave_1: entered promiscuous mode [ 174.465113][T11324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.466054][T11324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.499986][T11324] team0: Port device team_slave_0 added [ 174.502869][T11324] team0: Port device team_slave_1 added [ 174.555294][T11324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.556839][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.562533][T11324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.565516][T11324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.567205][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.570769][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2899'. [ 174.574847][T11324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.601540][ T15] bridge_slave_1: left allmulticast mode [ 174.601602][ T15] bridge_slave_1: left promiscuous mode [ 174.602283][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.610325][ T15] bridge_slave_0: left allmulticast mode [ 174.610364][ T15] bridge_slave_0: left promiscuous mode [ 174.610442][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.742756][T11356] loop1: detected capacity change from 0 to 8192 [ 174.802962][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.833371][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.840482][T11364] Injecting memory failure for pfn 0x1207e0 at process virtual address 0x20000000 [ 174.844236][T11364] Memory failure: 0x1207e0: Sending SIGBUS to syz.3.2902:11364 due to hardware memory corruption [ 174.844300][T11364] Memory failure: 0x1207e0: recovery action for dirty LRU page: Recovered [ 174.844325][T11364] Injecting memory failure for pfn 0x219260 at process virtual address 0x20001000 [ 174.844344][T11364] Memory failure: 0x219260: Sending SIGBUS to syz.3.2902:11364 due to hardware memory corruption [ 174.844354][T11364] Memory failure: 0x219260: recovery action for already poisoned page: Failed [ 174.857422][ T15] bond0 (unregistering): Released all slaves [ 174.885423][T11324] hsr_slave_0: entered promiscuous mode [ 174.887770][T11324] hsr_slave_1: entered promiscuous mode [ 174.890485][T11324] debugfs: 'hsr0' already exists in 'hsr' [ 174.891665][T11324] Cannot create hsr debugfs directory [ 174.991377][ T15] IPVS: stopping master sync thread 6390 ... [ 175.135030][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 175.151413][T11324] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.158364][T11324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.162413][T11324] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.165034][T11324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.166775][T11324] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.169956][T11324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.196272][T11324] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.200013][T11324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.279532][ T15] hsr_slave_0: left promiscuous mode [ 175.283305][ T15] hsr_slave_1: left promiscuous mode [ 175.283609][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.283639][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.287737][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.289660][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.305762][ T15] veth1_macvtap: left promiscuous mode [ 175.305826][ T15] veth0_macvtap: left promiscuous mode [ 175.305900][ T15] veth1_vlan: left promiscuous mode [ 175.305958][ T15] veth0_vlan: left promiscuous mode [ 175.478339][T11422] netlink: 'syz.3.2916': attribute type 40 has an invalid length. [ 175.486502][ T30] kauditd_printk_skb: 515 callbacks suppressed [ 175.487666][ T30] audit: type=1326 audit(431.446:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.493569][ T30] audit: type=1326 audit(431.446:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.498018][ T30] audit: type=1326 audit(431.446:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.505779][ T30] audit: type=1326 audit(431.446:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.510377][ T30] audit: type=1326 audit(431.446:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.514380][ T30] audit: type=1326 audit(431.446:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.518361][ T30] audit: type=1326 audit(431.446:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.519070][ T30] audit: type=1326 audit(431.446:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.531950][ T15] team0 (unregistering): Port device team_slave_1 removed [ 175.535927][ T15] team0 (unregistering): Port device team_slave_0 removed [ 175.601657][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 175.603712][ T30] audit: type=1326 audit(431.566:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.603741][ T30] audit: type=1326 audit(431.566:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11423 comm="syz.0.2915" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f781a8 code=0x7ffc0000 [ 175.640678][T11324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.644237][T11324] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.680493][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.680542][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.688538][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.688583][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.700854][T11324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.702929][T11324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.969958][T11461] block2mtd: illegal erase size [ 176.036029][T11324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.104137][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 176.189315][ T50] Bluetooth: hci2: command tx timeout [ 176.236378][T11324] veth0_vlan: entered promiscuous mode [ 176.247430][T11324] veth1_vlan: entered promiscuous mode [ 176.275469][T11324] veth0_macvtap: entered promiscuous mode [ 176.278131][T11324] veth1_macvtap: entered promiscuous mode [ 176.291818][T11324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.294467][T11324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.301330][ T3180] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.301382][ T3180] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.389367][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.389404][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.395654][T11511] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 176.399012][ T3267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.399164][ T3267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.430350][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.430383][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.582392][T11529] loop3: detected capacity change from 0 to 512 [ 176.622785][T11529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.631559][T11529] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 176.642452][T11537] netlink: 'syz.0.2948': attribute type 5 has an invalid length. [ 176.645091][T11529] EXT4-fs (loop3): 1 truncate cleaned up [ 176.652414][T11529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.655957][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2948'. [ 176.710116][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 176.893968][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.130271][T11571] loop5: detected capacity change from 0 to 256 [ 177.252911][T11587] loop4: detected capacity change from 0 to 8 [ 177.253701][T11587] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 177.253710][T11587] unable to read xattr id index table [ 177.326336][T11592] loop3: detected capacity change from 0 to 1024 [ 177.349380][T11592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.363196][T11592] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2969: bg 0: block 112: padding at end of block bitmap is not set [ 177.373458][T11592] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.2969: Freeing blocks not in datazone - block = 0, count = 16 [ 177.427820][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.512594][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2977'. [ 178.241809][T11675] loop4: detected capacity change from 0 to 128 [ 178.269239][ T50] Bluetooth: hci2: command tx timeout [ 178.274930][T11675] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.305819][T11675] fscrypt (loop4, inode 12): Unsupported encryption flags (0x7b) [ 178.334446][ T4687] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.396092][T11687] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3012'. [ 178.545746][T11699] ipvlan3: entered promiscuous mode [ 178.551626][T11699] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 178.637907][T11711] binder: 11710:11711 cannot find target node [ 178.641546][T11711] binder: 11710:11711 transaction async to 0:0 failed 3/29189/-22, code 0 size 0-0 line 3252 [ 178.657672][T11715] loop4: detected capacity change from 0 to 256 [ 178.783825][T11725] loop4: detected capacity change from 0 to 1024 [ 178.806419][T11725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.834909][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.972196][T11741] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3035'. [ 179.165121][T11760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3043'. [ 179.167351][ T3086] bond0: (slave bond_slave_0): interface is now down [ 179.167387][ T3086] bond0: (slave bond_slave_1): interface is now down [ 179.193087][T11764] tipc: Started in network mode [ 179.194266][T11764] tipc: Node identity ac14140f, cluster identity 4711 [ 179.195940][T11764] tipc: New replicast peer: 255.255.255.255 [ 179.197680][T11764] tipc: Enabled bearer , priority 10 [ 179.301846][ T3086] bond0: (slave bond_slave_0): interface is now down [ 179.301888][ T3086] bond0: (slave bond_slave_1): interface is now down [ 179.303828][ T3086] bond0: now running without any active interface! [ 179.407030][T11785] loop4: detected capacity change from 0 to 128 [ 179.408728][T11785] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.453274][T11790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3058'. [ 179.505483][T11794] loop4: detected capacity change from 0 to 256 [ 179.624374][T11810] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 179.750869][T11826] tap0: tun_chr_ioctl cmd 35111 [ 179.826930][T11835] bridge: RTM_NEWNEIGH with invalid ether address [ 179.901578][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 179.934778][T11843] n: the hash_elasticity option has been deprecated and is always 16 [ 179.934816][T11843] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 179.990472][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 179.990533][T11843] n: the hash_elasticity option has been deprecated and is always 16 [ 179.990558][T11843] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 180.217814][T11869] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.318955][ T9] tipc: Node number set to 2886997007 [ 180.349291][ T50] Bluetooth: hci2: command tx timeout [ 180.791278][T11913] loop1: detected capacity change from 0 to 512 [ 180.795163][T11913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.807607][T11913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.992938][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.045514][T11918] loop1: detected capacity change from 0 to 1024 [ 181.062311][T11918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.162768][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.202843][T11928] loop3: detected capacity change from 0 to 512 [ 181.205908][T11928] EXT4-fs: inline encryption not supported [ 181.207150][T11928] EXT4-fs: Ignoring removed i_version option [ 181.254312][T11928] EXT4-fs (loop3): 1 orphan inode deleted [ 181.257388][T11928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.286421][T11928] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.3121: Directory hole found for htree leaf block 0 [ 181.288741][T11941] loop1: detected capacity change from 0 to 256 [ 181.290919][T11941] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.303441][T11941] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.348473][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.431910][T11952] loop3: detected capacity change from 0 to 1024 [ 181.474471][T11952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.504005][T11960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.531194][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.538751][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.834739][T12012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.870376][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.950229][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.127760][T12050] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 182.131216][T12050] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 182.248004][T12069] overlayfs: upper fs does not support file handles, falling back to index=off. [ 182.284931][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 182.297736][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 182.359176][T12080] pi3usb30532 0-0005: Error reading config register -5 [ 182.359371][T12080] pi3usb30532 0-0005: probe with driver pi3usb30532 failed with error -5 [ 182.359638][T12080] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 182.429086][ T50] Bluetooth: hci2: command tx timeout [ 182.460287][T12092] bond1 (unregistering): Released all slaves [ 182.483874][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 182.490360][T12105] overlayfs: upper fs does not support file handles, falling back to index=off. [ 182.563961][T12115] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x05 (-16) [ 182.591318][T12112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.629931][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.390229][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.390274][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.702022][T12149] set_capacity_and_notify: 3 callbacks suppressed [ 187.709085][T12149] loop5: detected capacity change from 0 to 256 [ 187.714876][T12135] loop4: detected capacity change from 0 to 4096 [ 187.726912][T12135] EXT4-fs: inline encryption not supported [ 187.738560][T12135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.738600][T12135] EXT4-fs (loop4): Test dummy encryption mode enabled [ 187.742146][T12135] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 187.742180][T12135] System zones: 0-5 [ 187.746393][T12135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.772501][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.797619][T12161] loop1: detected capacity change from 0 to 2048 [ 187.886345][T12161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.941810][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.980475][T12185] loop3: detected capacity change from 0 to 8192 [ 187.987005][T12185] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.101079][T12205] loop4: detected capacity change from 0 to 256 [ 188.110729][T12205] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 188.113852][T12205] FAT-fs (loop4): Filesystem has been set read-only [ 188.152176][T12210] loop5: detected capacity change from 0 to 128 [ 188.178763][T12210] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.239275][T12210] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.405455][T12255] device-mapper: ioctl: name not supplied when creating device [ 188.657398][T12285] loop3: detected capacity change from 0 to 256 [ 188.693309][T12285] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 188.693345][T12285] FAT-fs (loop3): Filesystem has been set read-only [ 188.734380][T12296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.735597][T12296] bond0: (slave bond1): Enslaving as an active interface with an up link [ 188.881431][T12317] loop1: detected capacity change from 0 to 512 [ 188.881877][T12317] EXT4-fs: Ignoring removed i_version option [ 188.882445][T12317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.903819][T12317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.008075][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.086475][T12330] loop1: detected capacity change from 0 to 2048 [ 189.103259][T12330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.157097][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.274739][T12356] netlink: 'syz.0.3293': attribute type 1 has an invalid length. [ 189.280066][T12356] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3293'. [ 189.655008][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3304'. [ 189.675876][ T30] audit: type=1400 audit(445.626:553): lsm=SMACK fn=smack_inode_setxattr action=denied subject="_" object="l" requested=w pid=12380 comm="syz.5.3305" name="file0" dev="tmpfs" ino=425 [ 189.757731][T12391] loop5: detected capacity change from 0 to 512 [ 189.777029][T12391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.844654][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.061056][ T30] audit: type=1400 audit(446.026:554): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=12408 comm="syz.5.3317" name="83" dev="tmpfs" ino=453 [ 190.149876][T12419] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 190.149922][T12419] overlayfs: conflicting lowerdir path [ 190.764202][T12496] overlayfs: workdir and upperdir must reside under the same mount [ 191.197698][T12533] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 191.252938][T12540] netlink: 'syz.1.3372': attribute type 12 has an invalid length. [ 191.252975][T12540] netlink: 'syz.1.3372': attribute type 29 has an invalid length. [ 191.253000][T12540] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3372'. [ 191.393009][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3382'. [ 191.482578][T12567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.494911][T12567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.551112][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.712350][T12589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3397'. [ 191.992325][ T1075] kernel write not supported for file /fb0 (pid: 1075 comm: kworker/0:2) [ 192.064380][T12632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3415'. [ 192.064863][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 192.064876][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 192.068000][T12634] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 192.263190][T12648] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.918857][ T50] Bluetooth: hci2: command tx timeout [ 193.328079][T12699] binder: 12698:12699 ioctl c018620b 20000240 returned -14 [ 193.431386][T12711] set_capacity_and_notify: 1 callbacks suppressed [ 193.431423][T12711] loop1: detected capacity change from 0 to 2048 [ 193.431778][T12711] EXT4-fs: Ignoring removed oldalloc option [ 193.442995][T12711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.460448][T12711] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #12: comm syz.1.3453: corrupted in-inode xattr: e_name out of bounds [ 193.470140][T12711] EXT4-fs (loop1): Remounting filesystem read-only [ 193.471765][T12720] loop5: detected capacity change from 0 to 2048 [ 193.498676][T12720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.506406][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.575523][T12720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.636491][T12740] loop1: detected capacity change from 0 to 128 [ 193.647370][T12740] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 193.647408][T12740] FAT-fs (loop1): Filesystem has been set read-only [ 193.684969][T12746] loop3: detected capacity change from 0 to 1024 [ 193.685381][T12746] EXT4-fs: Ignoring removed bh option [ 193.693946][T12746] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 193.713217][T12746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.825542][T12768] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3478'. [ 193.830274][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.850597][T12772] autofs4:pid:12772:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937d) [ 193.853331][T12772] autofs4:pid:12772:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937d) [ 193.876560][T12774] loop4: detected capacity change from 0 to 8 [ 193.902661][T12776] netlink: 'syz.3.3479': attribute type 2 has an invalid length. [ 193.907915][T12774] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 194.025396][T12789] bond2: entered promiscuous mode [ 194.025603][T12789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.274157][T12830] loop5: detected capacity change from 0 to 2048 [ 194.274514][T12830] EXT4-fs: Ignoring removed i_version option [ 194.291122][T12830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.320889][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3511'. [ 194.320936][T12837] netlink: 'syz.1.3511': attribute type 25 has an invalid length. [ 194.320947][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'. [ 194.334939][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.426867][T12851] netlink: 'syz.4.3517': attribute type 11 has an invalid length. [ 194.428341][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3517'. [ 194.430478][T12851] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 194.480760][T12858] binder: 12857:12858 ioctl 40046205 0 returned -22 [ 194.481130][T12858] binder: 12857:12858 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 194.481215][T12858] binder: 12858 RLIMIT_NICE not set [ 194.496686][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3522'. [ 194.514211][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3523'. [ 194.532337][T12867] binder: 12857:12867 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 194.532374][T12867] binder: 12867 RLIMIT_NICE not set [ 194.602921][T12878] loop8: detected capacity change from 0 to 7 [ 194.603901][ C0] blk_print_req_error: 25 callbacks suppressed [ 194.603914][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.603948][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604036][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.604056][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604113][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.604132][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604197][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.604215][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604341][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.604359][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604418][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.604436][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604491][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.604509][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604530][T12878] ldm_validate_partition_table(): Disk read failed. [ 194.604570][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.604588][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604641][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.604659][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604711][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.604729][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 194.604804][T12878] Dev loop8: unable to read RDB block 0 [ 194.605018][T12878] loop8: unable to read partition table [ 194.605075][T12878] loop8: partition table beyond EOD, truncated [ 194.605084][T12878] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 194.731076][T12891] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3535'. [ 194.879758][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3546'. [ 194.942791][T12923] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3551'. [ 195.136953][ T30] audit: type=1400 audit(451.096:555): lsm=SMACK fn=smack_inode_set_acl action=denied subject="_" object="lowerdir" requested=w pid=12953 comm="syz.0.3566" name="file1" dev="tmpfs" ino=3754 [ 195.196245][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3570'. [ 195.340034][T12978] virt_wifi0: entered promiscuous mode [ 195.343389][T12978] batman_adv: batadv0: Adding interface: virt_wifi0 [ 195.344777][T12978] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.350274][T12978] batman_adv: batadv0: Interface activated: virt_wifi0 [ 195.662389][T13009] Injecting memory failure for pfn 0x135ab1 at process virtual address 0x20036000 [ 195.666557][T13009] Memory failure: 0x135ab1: recovery action for clean LRU page: Recovered [ 195.668481][T13009] Injecting memory failure for pfn 0x135ab0 at process virtual address 0x20037000 [ 195.670626][T13009] Memory failure: 0x135ab0: recovery action for clean LRU page: Recovered [ 195.673353][T13009] Injecting memory failure for pfn 0x135f53 at process virtual address 0x20038000 [ 195.673516][T13009] Memory failure: 0x135f53: recovery action for clean LRU page: Recovered [ 195.673533][T13009] Injecting memory failure for pfn 0x135f52 at process virtual address 0x20039000 [ 195.673583][T13009] Memory failure: 0x135f52: recovery action for clean LRU page: Recovered [ 195.725552][T13011] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.892683][T13023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3597'. [ 195.914005][T13025] virt_wifi0: entered promiscuous mode [ 195.916227][T13025] batman_adv: batadv0: Adding interface: virt_wifi0 [ 195.916262][T13025] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.916278][T13025] batman_adv: batadv0: Interface activated: virt_wifi0 [ 196.335172][T13080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 196.457382][T13093] netlink: 'syz.3.3627': attribute type 16 has an invalid length. [ 196.457422][T13093] netlink: 'syz.3.3627': attribute type 17 has an invalid length. [ 196.496368][T13093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.497294][T13093] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.507169][T13093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.527279][T13099] Injecting memory failure for pfn 0x1206d5 at process virtual address 0x20000000 [ 196.550414][T13099] Memory failure: 0x1206d5: Sending SIGBUS to syz.0.3632:13099 due to hardware memory corruption [ 196.550481][T13099] Memory failure: 0x1206d5: recovery action for dirty LRU page: Recovered [ 196.550505][T13099] Injecting memory failure for pfn 0x219260 at process virtual address 0x20001000 [ 196.550523][T13099] Memory failure: 0x219260: Sending SIGBUS to syz.0.3632:13099 due to hardware memory corruption [ 196.550533][T13099] Memory failure: 0x219260: recovery action for already poisoned page: Failed [ 196.573566][T13093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.574428][T13093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.577512][T13093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.578157][T13093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.578668][T13093] hsr0: left promiscuous mode [ 196.583410][T13093] veth1_vlan: left promiscuous mode [ 196.583931][T13093] veth0_vlan: left promiscuous mode [ 196.584573][T13093] veth0_vlan: entered promiscuous mode [ 196.585076][T13093] veth1_vlan: entered promiscuous mode [ 196.587319][T13093] veth1_macvtap: left promiscuous mode [ 196.588497][T13093] veth0_macvtap: left promiscuous mode [ 196.592506][T13093] veth0_macvtap: entered promiscuous mode [ 196.592938][T13093] veth1_macvtap: entered promiscuous mode [ 196.598086][T13093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.599918][T13093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.600414][T13093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.601146][T13093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.605430][T13093] A link change request failed with some changes committed already. Interface pim6reg0 may have been left with an inconsistent configuration, please check. [ 196.609344][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.609390][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.650167][ T3180] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.650208][ T3180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.650287][ T3180] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.650301][ T3180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.650383][ T3180] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.650394][ T3180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.650449][ T3180] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.650459][ T3180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.795174][T13114] loop1: detected capacity change from 0 to 4096 [ 196.816775][T13114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.850914][T13114] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 196.869652][T13124] netlink: 'syz.3.3644': attribute type 1 has an invalid length. [ 196.874305][T13125] loop4: detected capacity change from 0 to 4096 [ 196.881408][T13125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.890947][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.898213][T13125] EXT4-fs error (device loop4): ext4_get_first_dir_block:3548: inode #12: comm syz.4.3643: directory missing '.' [ 196.934935][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.996245][T13134] netlink: 'syz.1.3656': attribute type 16 has an invalid length. [ 196.997849][T13134] netlink: 'syz.1.3656': attribute type 17 has an invalid length. [ 197.001791][T13134] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.042431][T13142] random: crng reseeded on system resumption [ 197.228759][T13162] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 197.396728][T13169] netlink: 'syz.5.3664': attribute type 16 has an invalid length. [ 197.406093][T13169] netlink: 'syz.5.3664': attribute type 17 has an invalid length. [ 197.408431][T13169] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.496579][T13185] random: crng reseeded on system resumption [ 197.504218][T13187] loop5: detected capacity change from 0 to 256 [ 197.711817][T13204] zswap: compressor z not available [ 197.763043][T13201] netlink: 'syz.4.3681': attribute type 16 has an invalid length. [ 197.766743][T13201] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.082967][T13241] can0: slcan on ptm0. [ 198.803193][T13246] virt_wifi0: entered promiscuous mode [ 198.810535][T13240] can0 (unregistered): slcan off ptm0. [ 198.811522][T13246] virt_wifi0: entered allmulticast mode [ 198.816526][T13246] macsec1: left promiscuous mode [ 198.816610][T13246] macsec1: left allmulticast mode [ 198.816627][T13246] virt_wifi0: left allmulticast mode [ 198.817392][T13246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.833479][T13261] loop5: detected capacity change from 0 to 512 [ 198.882955][T13261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.977174][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.978710][T13274] loop1: detected capacity change from 0 to 512 [ 199.006484][T13274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.025640][T13274] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3707: corrupted xattr block 33: invalid header [ 199.028816][T13274] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3707: corrupted xattr block 33: invalid header [ 199.032565][T13274] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3707: corrupted xattr block 33: invalid header [ 199.121462][T13293] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 199.138783][T13274] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3707: corrupted xattr block 33: invalid header [ 199.144773][T13274] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 199.149665][T13274] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 199.152228][T13274] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.152228][T13274] [ 199.154001][T13274] EXT4-fs (loop1): Total free blocks count 0 [ 199.155492][T13274] EXT4-fs (loop1): Free/Dirty block details [ 199.156627][T13274] EXT4-fs (loop1): free_blocks=65280 [ 199.157593][T13274] EXT4-fs (loop1): dirty_blocks=31 [ 199.158486][T13274] EXT4-fs (loop1): Block reservation details [ 199.160860][T13274] EXT4-fs (loop1): i_reserved_data_blocks=31 [ 199.169287][T13274] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 199.190323][ T4686] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 199.253953][T13308] loop7: detected capacity change from 0 to 7 [ 199.265962][T13308] Dev loop7: unable to read RDB block 7 [ 199.266009][T13308] loop7: unable to read partition table [ 199.266075][T13308] loop7: partition table beyond EOD, truncated [ 199.266086][T13308] loop_reread_partitions: partition scan of loop7 (SjV %`ր) failed (rc=-5) [ 199.461406][ T50] Bluetooth: hci3: unexpected cc 0x200b length: 2 > 1 [ 199.461453][ T50] Bluetooth: hci3: unexpected event for opcode 0x200b [ 199.511809][T13344] loop3: detected capacity change from 0 to 512 [ 199.540906][T13344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.546503][T13344] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 18: comm syz.3.3729: lblock 23 mapped to illegal pblock 18 (length 1) [ 199.567304][T13344] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.3729: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 199.577264][T13344] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 12: comm syz.3.3729: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 199.581459][T13344] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.3729: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 199.609792][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.701479][T13365] loop4: detected capacity change from 0 to 256 [ 199.818568][T13376] loop1: detected capacity change from 0 to 512 [ 199.831463][T13376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.850517][T13376] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.3744: lblock 23 mapped to illegal pblock 18 (length 1) [ 199.854368][T13376] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.3744: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 199.858674][T13376] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 12: comm syz.1.3744: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 199.864781][T13376] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz.1.3744: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 199.900934][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.926689][T13387] loop4: detected capacity change from 0 to 256 [ 199.941544][T13387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 199.941579][T13387] FAT-fs (loop4): Filesystem has been set read-only [ 199.942796][T13387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 199.942820][T13387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 199.942987][T13387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 199.943009][T13387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 200.124370][T13407] __nla_validate_parse: 2 callbacks suppressed [ 200.125729][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3766'. [ 200.169488][T13414] loop5: detected capacity change from 0 to 512 [ 200.180878][T13414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.195877][T13414] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 18: comm syz.5.3758: lblock 23 mapped to illegal pblock 18 (length 1) [ 200.201500][T13419] loop1: detected capacity change from 0 to 512 [ 200.202798][T13414] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.3758: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 200.207557][T13414] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 12: comm syz.5.3758: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 200.214230][T13414] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.3758: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 200.251618][T13419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.256817][T13419] EXT4-fs (loop1): shut down requested (1) [ 200.288566][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.297416][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.434545][T13447] loop3: detected capacity change from 0 to 1024 [ 200.438403][T13447] EXT4-fs: Invalid want_extra_isize 2 [ 200.527723][T13460] tap0: tun_chr_ioctl cmd 1074025677 [ 200.529495][T13460] tap0: linktype set to 773 [ 200.551111][T13465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3779'. [ 200.693574][T13483] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3787'. [ 200.771651][T13491] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 200.771687][T13491] FAT-fs (loop3): Filesystem has been set read-only [ 200.797630][T13496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.828739][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3795'. [ 200.842113][T13496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.887547][T13507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.890870][T13507] EXT4-fs (loop3): 1 truncate cleaned up [ 200.891560][T13507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.946001][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.957489][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.984440][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3803'. [ 200.992014][T13513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.013086][T13513] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3802: corrupted xattr block 33: invalid header [ 201.013351][T13513] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3802: corrupted xattr block 33: invalid header [ 201.014627][T13513] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3802: corrupted xattr block 33: invalid header [ 201.085552][T13513] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3802: corrupted xattr block 33: invalid header [ 201.090182][T13513] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 201.090286][T13513] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 201.090304][T13513] EXT4-fs (loop3): This should not happen!! Data will be lost [ 201.090304][T13513] [ 201.090317][T13513] EXT4-fs (loop3): Total free blocks count 0 [ 201.090329][T13513] EXT4-fs (loop3): Free/Dirty block details [ 201.090341][T13513] EXT4-fs (loop3): free_blocks=65280 [ 201.090355][T13513] EXT4-fs (loop3): dirty_blocks=31 [ 201.090366][T13513] EXT4-fs (loop3): Block reservation details [ 201.090376][T13513] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 201.105692][T13513] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 201.141197][ T4688] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 201.190527][ T40] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.190586][ T40] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.190627][ T40] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.190646][ T40] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.306184][T13548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.330226][T13548] EXT4-fs (loop5): shut down requested (1) [ 201.361445][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.394050][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3821'. [ 201.553750][T13580] tap0: tun_chr_ioctl cmd 1074025677 [ 201.553983][T13580] tap0: linktype set to 773 [ 201.714403][T13597] block nbd3: not configured, cannot reconfigure [ 201.931348][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3847'. [ 202.113358][ T3267] wlan1: Trigger new scan to find an IBSS to join [ 202.402642][T13676] xt_hashlimit: size too large, truncated to 1048576 [ 202.423846][T13685] validate_nla: 3 callbacks suppressed [ 202.425859][T13685] netlink: 'syz.1.3881': attribute type 12 has an invalid length. [ 202.425903][T13685] netlink: 'syz.1.3881': attribute type 29 has an invalid length. [ 202.425924][T13685] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3881'. [ 202.570425][T13708] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3892'. [ 202.570457][T13708] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 202.594155][T13713] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3893'. [ 207.068492][ T3267] wlan1: Trigger new scan to find an IBSS to join [ 207.654869][T13734] xt_hashlimit: size too large, truncated to 1048576 [ 207.733972][T13747] netlink: 'syz.3.3910': attribute type 12 has an invalid length. [ 207.735485][T13747] netlink: 'syz.3.3910': attribute type 29 has an invalid length. [ 207.736949][T13747] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3910'. [ 208.068425][ T3086] wlan1: Creating new IBSS network, BSSID 86:91:d1:87:75:b3 [ 208.104624][T13783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3926'. [ 208.137687][T13785] set_capacity_and_notify: 7 callbacks suppressed [ 208.138008][T13785] loop5: detected capacity change from 0 to 4096 [ 208.149232][T13785] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 208.155310][T13785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.171567][T13785] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3927'. [ 208.173650][T13785] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3927'. [ 208.192579][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.582340][T13823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3943'. [ 208.584254][T13823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3943'. [ 208.756853][T13851] loop5: detected capacity change from 0 to 512 [ 208.771018][T13851] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.3957: inode has both inline data and extents flags [ 208.771062][T13851] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.773873][T13851] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3957: couldn't read orphan inode 15 (err -117) [ 208.773909][T13851] loop5: lost filesystem error report for type 5 error -117 [ 208.778133][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 208.778152][ C1] EXT4-fs (loop5): initial error at time 976: ext4_orphan_get:1399: inode 15 [ 208.778168][ C1] EXT4-fs (loop5): last error at time 976: ext4_orphan_get:1404 [ 208.798544][T13851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.837380][T13851] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 208.858657][T13851] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 208.863751][T13859] erspan0: entered promiscuous mode [ 208.891359][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.040841][T13889] gtp0: entered allmulticast mode [ 209.041642][T13889] team0: Device gtp0 is of different type [ 209.137441][T13905] netlink: 'syz.4.3982': attribute type 2 has an invalid length. [ 209.263709][T13915] Injecting memory failure for pfn 0x13503b at process virtual address 0x20a07000 [ 209.272972][T13915] Memory failure: 0x13503b: Sending SIGBUS to syz.0.3985:13915 due to hardware memory corruption [ 209.273045][T13915] Memory failure: 0x13503b: recovery action for dirty LRU page: Recovered [ 209.596917][T13945] loop5: detected capacity change from 0 to 1024 [ 209.605868][T13945] EXT4-fs: inline encryption not supported [ 209.612456][T13945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.633293][T13945] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.4001: lblock 0 mapped to illegal pblock 0 (length 1) [ 209.689825][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.038840][T13993] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4023'. [ 210.040018][ T30] audit: type=1400 audit(978.007:556): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=w pid=13995 comm="syz.0.4024" name="file1" dev="tmpfs" ino=4161 [ 210.285272][T14042] loop1: detected capacity change from 0 to 512 [ 210.286045][T14042] EXT4-fs (loop1): bad s_min_extra_isize: 65535 [ 210.351946][T14047] loop5: detected capacity change from 0 to 8 [ 210.352702][T14047] SQUASHFS error: Failed to read block 0x62: -5 [ 210.352740][T14047] squashfs image failed sanity check [ 210.594003][T14078] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.704826][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4067'. [ 210.726180][T14090] loop1: detected capacity change from 0 to 256 [ 210.762641][T14096] Injecting memory failure for pfn 0x219260 at process virtual address 0x20289000 [ 210.764434][T14096] Memory failure: 0x219260: Sending SIGBUS to syz.3.4071:14096 due to hardware memory corruption [ 210.766746][T14090] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 210.766759][T14090] FAT-fs (loop1): Filesystem has been set read-only [ 210.774102][T14096] Memory failure: 0x219260: recovery action for already poisoned page: Failed [ 210.902383][T14113] sock: sock_set_timeout: `syz.0.4079' (pid 14113) tries to set negative timeout [ 211.079397][T14144] loop5: detected capacity change from 0 to 256 [ 211.116400][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4096'. [ 211.484521][T14187] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 211.536051][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'. [ 211.682003][T14211] loop5: detected capacity change from 0 to 256 [ 211.855055][T14225] Injecting memory failure for pfn 0x135833 at process virtual address 0x20000000 [ 211.859819][T14225] Memory failure: 0x135833: Sending SIGBUS to syz.4.4134:14225 due to hardware memory corruption [ 211.862061][T14225] Memory failure: 0x135833: recovery action for dirty LRU page: Recovered [ 211.865750][T14225] Injecting memory failure for pfn 0x219260 at process virtual address 0x20001000 [ 211.865805][T14225] Memory failure: 0x219260: Sending SIGBUS to syz.4.4134:14225 due to hardware memory corruption [ 211.865825][T14225] Memory failure: 0x219260: recovery action for already poisoned page: Failed [ 212.175689][T14260] loop3: detected capacity change from 0 to 512 [ 212.180700][T14260] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.195111][T14260] EXT4-fs (loop3): 1 truncate cleaned up [ 212.195576][T14260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.207125][T14260] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.4150: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 212.219236][T14260] EXT4-fs (loop3): Remounting filesystem read-only [ 212.229936][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.314669][T14278] overlayfs: failed to clone upperpath [ 212.374312][T14286] ip6gre1: entered promiscuous mode [ 212.374352][T14286] ip6gre1: entered allmulticast mode [ 212.389726][T14292] 9p: Bad value for 'rfdno' [ 212.494506][T14307] netlink: 'syz.0.4171': attribute type 2 has an invalid length. [ 212.989503][ T3044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.989630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.034607][T14381] __nla_validate_parse: 2 callbacks suppressed [ 213.034648][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4206'. [ 213.034667][T14381] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4206'. [ 213.093675][T14391] C: renamed from veth1_to_team (while UP) [ 213.097706][T14391] netlink: 'syz.5.4210': attribute type 8 has an invalid length. [ 213.099761][T14391] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 213.134226][T14395] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 213.149723][ T866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.222412][T14406] loop1: detected capacity change from 0 to 4096 [ 213.225197][T14406] EXT4-fs (loop1): Test dummy encryption mode enabled [ 213.225432][T14406] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 213.225450][T14406] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237) [ 213.225496][T14406] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 213.225759][T14406] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.4218: Invalid inode table block 0 in block_group 0 [ 213.225773][T14406] loop1: lost filesystem error report for type 5 error -117 [ 213.225961][T14406] EXT4-fs (loop1): Remounting filesystem read-only [ 213.225994][T14406] EXT4-fs (loop1): get root inode failed [ 213.226000][T14406] EXT4-fs (loop1): mount failed [ 213.307430][T14412] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 213.474333][T14431] loop3: detected capacity change from 0 to 256 [ 213.495707][T14431] FAT-fs (loop3): unable to read block(4095) for building NFS inode [ 213.760378][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4236'. [ 213.760443][T14450] macvlan0: entered promiscuous mode [ 213.760830][T14450] netlink: 'syz.4.4236': attribute type 1 has an invalid length. [ 213.760842][T14450] netlink: 'syz.4.4236': attribute type 2 has an invalid length. [ 213.760853][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4236'. [ 213.972359][T14477] loop5: detected capacity change from 0 to 256 [ 214.081400][T14490] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4255'. [ 214.081439][T14490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4255'. [ 214.116596][T14497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4258'. [ 214.187676][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.257768][T14520] Injecting memory failure for pfn 0x138e1f at process virtual address 0x20001000 [ 214.261753][T14520] Memory failure: 0x138e1f: keeping poisoned page in swap cache [ 214.262604][T14520] Memory failure: 0x138e1f: Sending SIGBUS to syz.4.4269:14520 due to hardware memory corruption [ 214.262646][T14520] Memory failure: 0x138e1f: recovery action for dirty swapcache page: Delayed [ 214.262670][T14520] Injecting memory failure for pfn 0x219260 at process virtual address 0x20002000 [ 214.262690][T14520] Memory failure: 0x219260: Sending SIGBUS to syz.4.4269:14520 due to hardware memory corruption [ 214.262701][T14520] Memory failure: 0x219260: recovery action for already poisoned page: Failed [ 214.409005][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4283'. [ 214.704226][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4303'. [ 215.228099][ T4473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.558686][T13100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.627548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.268568][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.907294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.307179][ T4473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.656185][T14618] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4316'. [ 217.735874][T14629] sctp: [Deprecated]: syz.4.4320 (pid 14629) Use of int in max_burst socket option. [ 217.735874][T14629] Use struct sctp_assoc_value instead [ 218.207025][T14697] __nla_validate_parse: 1 callbacks suppressed [ 218.207277][T14697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4352'. [ 218.347149][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.446910][ T30] audit: type=1326 audit(986.408:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14609 comm="syz.0.4312" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f781a8 code=0x7fc00000 [ 218.528169][T14733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4370'. [ 218.582971][T14745] loop5: detected capacity change from 0 to 512 [ 218.598737][T14745] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4377: corrupted in-inode xattr: invalid ea_ino [ 218.603063][T14745] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.603639][T14745] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4377: couldn't read orphan inode 15 (err -117) [ 218.607530][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 218.607549][ C1] EXT4-fs (loop5): initial error at time 986: ext4_iget_extra_inode:5180: inode 15 [ 218.607569][ C1] EXT4-fs (loop5): last error at time 986: ext4_iget_extra_inode:5180: inode 15 [ 218.616210][T14745] loop5: lost filesystem error report for type 5 error -117 [ 218.618507][T14745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.627980][T14751] netlink: 316 bytes leftover after parsing attributes in process `syz.3.4378'. [ 218.642269][T14745] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #2: comm syz.5.4377: directory missing '.' [ 218.665147][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.744081][T14764] loop9: detected capacity change from 0 to 524287997 [ 218.747951][ T15] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.748054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.852809][T14782] netlink: 'syz.4.4392': attribute type 10 has an invalid length. [ 218.865942][T14782] team0: Port device dummy0 added [ 219.110567][T14813] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4406'. [ 219.170758][T14820] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4409'. [ 219.387076][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.396414][T14841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4419'. [ 219.560044][T14856] netlink: 'syz.0.4427': attribute type 1 has an invalid length. [ 219.567708][T14858] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4426'. [ 219.570768][T14858] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4426'. [ 219.735456][T14876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4436'. [ 219.743191][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 219.880747][T14896] netlink: 'syz.3.4445': attribute type 5 has an invalid length. [ 220.155682][ T4696] Bluetooth: hci4: unexpected event for opcode 0x0c38 [ 220.305111][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 220.426786][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.510234][T14975] Injecting memory failure for pfn 0x219260 at process virtual address 0x20289000 [ 220.512178][T14975] Memory failure: 0x219260: Sending SIGBUS to syz.0.4491:14975 due to hardware memory corruption [ 220.514414][T14975] Memory failure: 0x219260: recovery action for already poisoned page: Failed [ 220.788911][T15009] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x42 [ 220.935434][T15026] netlink: 'syz.5.4505': attribute type 2 has an invalid length. [ 220.965362][T15029] Injecting memory failure for pfn 0x1384ef at process virtual address 0x20a07000 [ 220.976491][T15029] Memory failure: 0x1384ef: Sending SIGBUS to syz.1.4501:15029 due to hardware memory corruption [ 220.978294][T15029] Memory failure: 0x1384ef: recovery action for dirty LRU page: Recovered [ 221.096481][T15041] gtp0: entered allmulticast mode [ 221.097391][T15041] team0: Device gtp0 is of different type [ 221.307942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.308046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.466713][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.521250][T15084] erspan0: entered promiscuous mode [ 221.634588][T15093] loop3: detected capacity change from 0 to 512 [ 221.643430][T15093] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.4537: inode has both inline data and extents flags [ 221.646292][T15093] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.646459][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 221.646483][ C1] EXT4-fs (loop3): initial error at time 989: ext4_orphan_get:1399: inode 15 [ 221.646520][ C1] EXT4-fs (loop3): last error at time 989: ext4_orphan_get:1399: inode 15 [ 221.656091][T15093] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4537: couldn't read orphan inode 15 (err -117) [ 221.659055][T15093] loop3: lost filesystem error report for type 5 error -117 [ 221.663654][T15093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.860228][T15093] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 221.862580][T15093] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.923277][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.361629][T15175] loop3: detected capacity change from 0 to 256 [ 222.507587][ T4473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.521011][T15193] sock: sock_set_timeout: `syz.5.4586' (pid 15193) tries to set negative timeout [ 222.799367][T15237] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 223.048624][T15266] loop3: detected capacity change from 0 to 2048 [ 223.092686][T15266] Alternate GPT is invalid, using primary GPT. [ 223.092766][T15266] loop3: p1 p2 p3 [ 223.092777][T15266] loop3: partition table partially beyond EOD, truncated [ 223.126410][T15266] Injecting memory failure for pfn 0x133ace at process virtual address 0x20000000 [ 223.129784][T15266] Memory failure: 0x133ace: Sending SIGBUS to syz.3.4630:15266 due to hardware memory corruption [ 223.129862][T15266] Memory failure: 0x133ace: recovery action for dirty LRU page: Recovered [ 223.129888][T15266] Injecting memory failure for pfn 0x219260 at process virtual address 0x20001000 [ 223.129913][T15266] Memory failure: 0x219260: Sending SIGBUS to syz.3.4630:15266 due to hardware memory corruption [ 223.129924][T15266] Memory failure: 0x219260: recovery action for already poisoned page: Failed [ 223.202403][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.284035][T15275] __nla_validate_parse: 6 callbacks suppressed [ 223.285338][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4620'. [ 223.372215][T14767] udevd[14767]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 223.381469][T14774] udevd[14774]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 223.398815][T13726] udevd[13726]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 223.423790][T15286] loop1: detected capacity change from 0 to 256 [ 223.462518][T14767] udevd[14767]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 223.465232][T14774] udevd[14774]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 223.471901][T13726] udevd[13726]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 223.576340][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4646'. [ 223.642035][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4638'. [ 224.208633][T15366] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 224.254685][T15377] loop3: detected capacity change from 0 to 1024 [ 224.285157][T15377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 224.305577][T15388] overlayfs: failed to clone lowerpath [ 224.330383][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 224.349510][T15395] ip6gre1: entered promiscuous mode [ 224.350575][T15395] ip6gre1: entered allmulticast mode [ 224.575499][T15428] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4693'. [ 224.578325][T15429] netlink: 'syz.4.4694': attribute type 2 has an invalid length. [ 224.594477][ T4473] net_ratelimit: 8 callbacks suppressed [ 224.594523][ T4473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.636785][T15434] sock: sock_set_timeout: `syz.1.4697' (pid 15434) tries to set negative timeout [ 224.929024][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4721'. [ 225.152680][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.222362][T15525] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 225.332071][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.468037][T15571] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 225.518108][T15581] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 225.591753][T15586] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 225.628585][ T4473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.928437][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4783'. [ 225.936139][T15625] macvlan0: entered promiscuous mode [ 225.936582][T15625] netlink: 'syz.3.4783': attribute type 1 has an invalid length. [ 225.936601][T15625] netlink: 'syz.3.4783': attribute type 2 has an invalid length. [ 225.936622][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4783'. [ 226.015086][T15636] loop1: detected capacity change from 0 to 256 [ 226.041025][T15635] loop3: detected capacity change from 0 to 1024 [ 226.044241][T15635] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.047845][T15635] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 226.047992][T15635] EXT4-fs (loop3): orphan cleanup on readonly fs [ 226.051953][T15635] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.4789: Freeing blocks not in datazone - block = 0, count = 4096 [ 226.051991][T15635] loop3: lost filesystem error report for type 5 error -117 [ 226.054831][T15635] EXT4-fs (loop3): 1 orphan inode deleted [ 226.056502][T15635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.060528][T15639] Dead loop on virtual device ipvlan0 (net 40), fix it urgently! [ 226.096594][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.195365][T15652] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 226.426131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.455161][T15673] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4808'. [ 226.455206][T15673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4808'. [ 226.457616][T15675] Injecting memory failure for pfn 0x14ee1f at process virtual address 0x20a07000 [ 226.462806][T15675] Memory failure: 0x14ee1f: Sending SIGBUS to syz.4.4805:15675 due to hardware memory corruption [ 226.463824][T15675] Memory failure: 0x14ee1f: recovery action for dirty LRU page: Recovered [ 226.521073][T15677] loop3: detected capacity change from 0 to 256 [ 226.586004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.586105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.666140][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.222604][T15706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4822'. [ 227.385623][T15720] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 229.626116][ T3044] net_ratelimit: 26 callbacks suppressed [ 229.626141][ T3180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.626163][ T3044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.626279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.785754][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.826015][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.905796][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.865417][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.652089][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4847'. [ 232.686739][T15768] team0: entered allmulticast mode [ 232.686775][T15768] team_slave_0: entered allmulticast mode [ 232.686806][T15768] team_slave_1: entered allmulticast mode [ 232.695904][T15768] team0: left allmulticast mode [ 232.695940][T15768] team_slave_0: left allmulticast mode [ 232.695976][T15768] team_slave_1: left allmulticast mode [ 232.906053][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.058805][T15826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.059009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.077023][T15828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4880'. [ 233.141052][ T30] audit: type=1807 audit(1001.100:558): UNKNOWN= res=0 [ 233.142626][ T30] audit: type=1802 audit(1001.100:559): pid=15840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.5.4886" res=0 errno=0 [ 233.147259][T15839] ima: policy update failed [ 233.149282][ T30] audit: type=1802 audit(1001.110:560): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.5.4886" res=0 errno=0 [ 233.360060][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4905'. [ 233.667703][T15923] loop3: detected capacity change from 0 to 512 [ 233.674572][T15923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.682585][T15923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.718689][T15923] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.933488][T15965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4946'. [ 233.995557][T15969] loop3: detected capacity change from 0 to 4096 [ 234.007513][T15969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.017386][T15976] loop1: detected capacity change from 0 to 128 [ 234.027019][T15976] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.031040][T15976] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08) [ 234.046933][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4949'. [ 234.070196][ T4686] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.074177][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.272379][T16013] loop1: detected capacity change from 0 to 512 [ 234.287235][T16013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 234.287298][T16013] System zones: 1-12 [ 234.290101][T16013] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.4963: missing EA_INODE flag [ 234.290128][T16013] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 234.294909][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 234.294940][ C0] EXT4-fs (loop1): initial error at time 1002: ext4_xattr_inode_iget:441: inode 12 [ 234.294976][ C0] EXT4-fs (loop1): last error at time 1002: ext4_xattr_inode_iget:441: inode 12 [ 234.305474][T16013] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.4963: error while reading EA inode 12 err=-117 [ 234.305513][T16013] loop1: lost filesystem error report for type 5 error -117 [ 234.308118][T16013] EXT4-fs (loop1): 1 orphan inode deleted [ 234.308593][T16013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.327407][T16013] fscrypt (loop1, inode 15): Unsupported log2_data_unit_size in encryption policy: 133 [ 234.368186][T16026] loop5: detected capacity change from 0 to 512 [ 234.371095][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.371365][T16026] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 234.380583][T16026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 234.380714][T16026] EXT4-fs (loop5): orphan cleanup on readonly fs [ 234.383930][T16026] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4968: bg 0: block 361: padding at end of block bitmap is not set [ 234.383960][T16026] loop5: lost filesystem error report for type 5 error -117 [ 234.387388][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 234.387404][ C1] EXT4-fs (loop5): initial error at time 1002: ext4_validate_block_bitmap:441 [ 234.387416][ C1] EXT4-fs (loop5): last error at time 1002: ext4_validate_block_bitmap:441 [ 234.405665][T16026] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 234.405702][T16026] loop5: lost filesystem error report for type 5 error -117 [ 234.412201][T16026] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.4968: attempt to clear invalid blocks 33619980 len 1 [ 234.412244][T16026] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 234.418404][T16026] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4968: invalid indirect mapped block 1811939328 (level 0) [ 234.423550][T16026] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 234.432159][T16026] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4968: invalid indirect mapped block 2185560079 (level 1) [ 234.432203][T16026] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 234.432450][T16026] EXT4-fs (loop5): 1 truncate cleaned up [ 234.443095][T16029] loop1: detected capacity change from 0 to 4096 [ 234.443475][T16029] EXT4-fs: inline encryption not supported [ 234.444376][T16026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 234.453198][T16029] EXT4-fs (loop1): Test dummy encryption mode enabled [ 234.456900][T16029] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 234.456954][T16029] System zones: 0-5 [ 234.479009][T16029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.488256][T16029] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4972: corrupted xattr block 256: invalid header [ 234.491752][T16029] EXT4-fs (loop1): Remounting filesystem read-only [ 234.510978][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 234.530948][T16029] EXT4-fs (loop1): shut down requested (0) [ 234.597922][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.745934][ T40] net_ratelimit: 1 callbacks suppressed [ 234.745977][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.746064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.746715][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.985150][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.331174][ T4696] Bluetooth: hci2: link tx timeout [ 235.331386][ T4696] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 235.612437][T16107] fq: likely mono tstamp with tstamp_type 0 [ 235.739340][T16130] bridge0: port 2(syz_tun) entered blocking state [ 235.741273][T16130] bridge0: port 2(syz_tun) entered disabled state [ 235.742696][T16130] syz_tun: entered allmulticast mode [ 235.756636][T16130] syz_tun: entered promiscuous mode [ 235.758087][T16130] bridge0: port 2(syz_tun) entered blocking state [ 235.758179][T16130] bridge0: port 2(syz_tun) entered forwarding state [ 235.765112][T16130] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 235.849410][T16147] loop1: detected capacity change from 0 to 8192 [ 235.861691][T16148] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5027'. [ 236.026324][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.110853][T16180] loop1: detected capacity change from 0 to 8192 [ 236.112050][T16180] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.114062][T16180] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 236.119891][T16180] FAT-fs (loop1): Filesystem has been set read-only [ 236.136433][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5049'. [ 236.136481][T16191] netlink: 'syz.5.5049': attribute type 21 has an invalid length. [ 236.179313][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5050'. [ 236.271462][T16212] loop5: detected capacity change from 0 to 512 [ 236.278853][T16212] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.5058: bad orphan inode 15 [ 236.281001][T16212] loop5: lost filesystem error report for type 5 error -117 [ 236.281170][T16212] ext4_test_bit(bit=14, block=5) = 0 [ 236.283986][T16212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.288415][T16212] EXT4-fs error (device loop5): __ext4_new_inode:1081: comm syz.5.5058: reserved inode found cleared - inode=1 [ 236.292278][T16212] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 236.327090][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.399243][T16226] loop1: detected capacity change from 0 to 128 [ 236.418971][T16226] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.473985][ T4686] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.556503][T16238] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.5069: iget: bad extended attribute block 1 [ 236.558990][T16238] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 236.560137][T16238] EXT4-fs (loop5): Remounting filesystem read-only [ 236.560709][T16238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.572155][T16238] EXT4-fs (loop5): shut down requested (2) [ 236.603060][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.818473][T16263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5081'. [ 236.882860][T16270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.884093][T16270] batman_adv: batadv0: Adding interface: netdevsim0 [ 236.884107][T16270] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.884195][T16270] batman_adv: batadv0: Interface activated: netdevsim0 [ 237.052864][ T4696] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 237.064962][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.300441][T16317] overlayfs: upper fs does not support tmpfile. [ 237.326585][T16321] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.330389][T16321] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.384640][ T4696] Bluetooth: hci2: command 0x0406 tx timeout [ 237.420206][ T4479] kernel write not supported for file /959/net/netstat (pid: 4479 comm: kworker/1:4) [ 237.684762][T16367] pim6reg: entered allmulticast mode [ 237.687283][T16366] pim6reg: left allmulticast mode [ 237.787850][T16381] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.5135: corrupted xattr block 95: invalid header [ 237.787904][T16381] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 237.788168][T16381] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5135: bg 0: block 7: invalid block bitmap [ 237.788183][T16381] loop1: lost filesystem error report for type 5 error -117 [ 237.788699][T16381] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 237.788716][T16381] loop1: lost filesystem error report for type 5 error -117 [ 237.793386][T16381] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.5135: corrupted xattr block 95: invalid header [ 237.793413][T16381] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 237.793589][T16381] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 237.793622][T16381] EXT4-fs (loop1): 1 orphan inode deleted [ 237.794069][T16381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.840826][ T30] audit: type=1400 audit(1005.800:561): lsm=SMACK fn=smack_inode_rmdir action=denied subject="_" object="lowerdir" requested=w pid=16385 comm="syz.4.5136" name="file0" dev="tmpfs" ino=5470 [ 237.842968][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.878836][T16392] CUSE: unknown device info "" [ 237.878867][T16392] CUSE: unknown device info "" [ 237.878895][T16392] CUSE: unknown device info "w" [ 237.878906][T16392] CUSE: unknown device info "" [ 237.878916][T16392] CUSE: unknown device info "" [ 237.878926][T16392] CUSE: unknown device info "" [ 237.878936][T16392] CUSE: unknown device info "" [ 237.878944][T16392] CUSE: unknown device info "" [ 237.878952][T16392] CUSE: DEVNAME unspecified [ 238.089029][ T4773] IPVS: starting estimator thread 0... [ 238.108292][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.140592][ T50] Bluetooth: hci0: Zero size dump init pkt [ 238.174961][T16429] IPVS: using max 59 ests per chain, 141600 per kthread [ 238.271005][ T30] audit: type=1400 audit(1006.230:562): lsm=SMACK fn=smack_file_lock action=denied subject="_" object="lowerdi" requested=l pid=16453 comm="syz.3.5160" path="/1042/file1" dev="tmpfs" ino=5445 [ 238.314869][T16458] EXT4-fs (loop3): Test dummy encryption mode enabled [ 238.339839][T16458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.369138][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5166'. [ 238.472827][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.498206][T16485] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5169'. [ 238.500384][T16485] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5169'. [ 238.557400][T16490] tap0: tun_chr_ioctl cmd 1074025698 [ 238.683454][T16506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.696361][T16506] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.5183: corrupted inode contents [ 238.707845][T16506] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz.3.5183: mark_inode_dirty error [ 238.708159][T16506] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.5183: corrupted inode contents [ 238.708304][T16506] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.5183: mark_inode_dirty error [ 238.709135][T16506] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.5183: corrupted inode contents [ 238.736053][T16520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5189'. [ 238.736095][T16520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5189'. [ 238.745976][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.792981][T16531] set_capacity_and_notify: 8 callbacks suppressed [ 238.794465][T16531] loop3: detected capacity change from 0 to 1024 [ 238.795989][T16531] EXT4-fs: Ignoring removed bh option [ 238.807961][T16531] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 238.820647][T16531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.879997][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.919908][T16554] netlink: 'syz.3.5203': attribute type 12 has an invalid length. [ 238.919944][T16554] netlink: 'syz.3.5203': attribute type 29 has an invalid length. [ 238.919954][T16554] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5203'. [ 238.919966][T16554] netlink: 'syz.3.5203': attribute type 1 has an invalid length. [ 238.919974][T16554] netlink: 'syz.3.5203': attribute type 2 has an invalid length. [ 239.146754][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.155626][T16581] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5218'. [ 239.155663][T16581] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5218'. [ 239.418287][T16617] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.13565952.0), cmd(5) [ 239.511999][T16634] loop5: detected capacity change from 0 to 1024 [ 239.514105][T16634] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 239.523305][T16634] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.5245: lblock 1 mapped to illegal pblock 1 (length 1) [ 239.523347][T16634] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 239.526149][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 239.526164][ C1] EXT4-fs (loop5): initial error at time 1007: ext4_map_blocks:833: inode 3: block 1 [ 239.526185][ C1] EXT4-fs (loop5): last error at time 1007: ext4_map_blocks:833: inode 3: block 1 [ 239.532841][T16634] Quota error (device loop5): write_blk: dquota write failed [ 239.532886][T16634] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 239.532928][T16634] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.5245: Failed to acquire dquot type 0 [ 239.532948][T16634] loop5: lost filesystem error report for type 5 error -117 [ 239.539455][T16634] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.5245: Freeing blocks not in datazone - block = 0, count = 4096 [ 239.539493][T16634] loop5: lost filesystem error report for type 5 error -117 [ 239.543609][T16634] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.5245: Invalid inode bitmap blk 0 in block_group 0 [ 239.543639][T16634] loop5: lost filesystem error report for type 5 error -117 [ 239.547226][T16634] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 239.547259][T16634] loop5: lost filesystem error report for type 5 error -117 [ 239.550281][T16634] EXT4-fs (loop5): 1 orphan inode deleted [ 239.550795][T16634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.556619][ T3044] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 239.558529][ T3044] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 239.558555][ T3044] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0 [ 239.571865][T16641] sctp: [Deprecated]: syz.0.5246 (pid 16641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.571865][T16641] Use struct sctp_sack_info instead [ 239.589464][T16637] loop3: detected capacity change from 0 to 2048 [ 239.601723][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.612885][T16637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.628367][T16637] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.5244: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 239.643525][T16637] EXT4-fs (loop3): Remounting filesystem read-only [ 239.675189][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.733619][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5256'. [ 239.881940][T16682] tap0: tun_chr_ioctl cmd 2148553947 [ 239.898058][T16687] loop3: detected capacity change from 0 to 512 [ 239.898395][T16687] EXT4-fs: Ignoring removed bh option [ 239.907106][T16687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.945872][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.021995][T16708] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5278'. [ 240.184671][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.253079][T16745] macvlan0: left promiscuous mode [ 240.259344][T16745] netlink: 'syz.4.5296': attribute type 1 has an invalid length. [ 240.266211][T16745] netlink: 'syz.4.5296': attribute type 2 has an invalid length. [ 240.346490][T16766] loop1: detected capacity change from 0 to 256 [ 240.505133][ T3267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.505247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.505339][ T3267] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 240.696513][T16829] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03 [ 241.012929][T16885] fuse: Bad value for 'fd' [ 241.225826][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.441174][T16961] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 241.475279][T16966] loop5: detected capacity change from 0 to 128 [ 241.530548][ T30] audit: type=1400 audit(1009.491:563): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=wx pid=16967 comm="syz.5.5388" name="file0" dev="tmpfs" ino=2611 [ 241.839306][T17021] binder: 17020:17021 ioctl c018620b 0 returned -14 [ 242.039652][T17058] loop3: detected capacity change from 0 to 512 [ 242.040027][T17058] EXT4-fs: Ignoring removed oldalloc option [ 242.040064][T17058] EXT4-fs: Ignoring removed i_version option [ 242.044888][T17058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.051725][T17058] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5429: invalid indirect mapped block 4294967295 (level 1) [ 242.056507][T17058] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.057194][T17058] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5429: invalid indirect mapped block 4294967295 (level 1) [ 242.063976][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 242.064003][ C1] EXT4-fs (loop3): initial error at time 1010: ext4_free_branches:1023: inode 11 [ 242.064039][ C1] EXT4-fs (loop3): last error at time 1010: ext4_free_branches:1023: inode 11 [ 242.064094][T17058] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.069079][T17058] EXT4-fs (loop3): 2 truncates cleaned up [ 242.069566][T17058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.088109][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.114270][T17069] loop1: detected capacity change from 0 to 512 [ 242.123791][T17069] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.5434: inode has both inline data and extents flags [ 242.126673][T17069] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.127246][T17069] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.5434: couldn't read orphan inode 15 (err -117) [ 242.131521][T17069] loop1: lost filesystem error report for type 5 error -117 [ 242.133343][T17069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.176879][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.189652][T17074] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 242.223213][T17080] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 242.265408][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.425409][ T4696] Bluetooth: hci4: unexpected event for opcode 0x202d [ 242.557055][T17139] netlink: 'syz.0.5466': attribute type 3 has an invalid length. [ 242.597503][T17148] loop1: detected capacity change from 0 to 512 [ 242.600619][T17148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 242.605418][T17148] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.5469: invalid indirect mapped block 32768 (level 2) [ 242.605455][T17148] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 242.605661][T17148] EXT4-fs (loop1): Remounting filesystem read-only [ 242.605775][T17148] EXT4-fs (loop1): 1 orphan inode deleted [ 242.605782][T17148] EXT4-fs (loop1): 1 truncate cleaned up [ 242.615830][T17148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.823908][ T4696] Bluetooth: hci2: command 0x0406 tx timeout [ 243.304038][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.345511][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.347178][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.384157][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.273727][ T3180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.273837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.433556][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.464274][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.632615][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.643007][T17155] loop5: detected capacity change from 0 to 4096 [ 247.681526][T17155] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 247.681560][T17155] EXT4-fs (loop5): Test dummy encryption mode enabled [ 247.695629][T17155] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c019, mo2=0003] [ 247.695695][T17155] System zones: 0-5 [ 247.705089][T17155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.755445][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.503631][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.638846][T17294] __nla_validate_parse: 11 callbacks suppressed [ 248.638898][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5531'. [ 248.826713][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.826772][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.904864][T17326] loop3: detected capacity change from 0 to 256 [ 248.943911][T17332] loop5: detected capacity change from 0 to 128 [ 248.959817][T17332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 248.959876][T17332] System zones: 1-3, 19-19, 35-36 [ 248.960465][T17332] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 249.006194][T17339] netlink: 'syz.3.5546': attribute type 10 has an invalid length. [ 249.044804][T17339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.057575][T17339] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 249.164985][T11324] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.210834][T17358] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5556'. [ 249.295438][T17370] sctp: [Deprecated]: syz.1.5559 (pid 17370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.295438][T17370] Use struct sctp_sack_info instead [ 249.361504][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5564'. [ 249.362019][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5564'. [ 249.546181][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.689324][T17428] dummy_hcd dummy_hcd.0: remove, state 4 [ 249.689378][T17428] usb usb1: USB disconnect, device number 1 [ 249.699484][T17429] loop3: detected capacity change from 0 to 1024 [ 249.702750][T17428] dummy_hcd dummy_hcd.0: stopped [ 249.702779][T17428] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 249.728820][T17429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 249.741089][T17431] /dev/nullb0: Can't open blockdev [ 249.788321][T17443] loop5: detected capacity change from 0 to 128 [ 249.800635][T17443] EXT4-fs (loop5): Test dummy encryption mode enabled [ 249.807583][T17443] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.818364][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.856399][T17443] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 249.861870][T17443] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 249.889509][T11324] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.969954][T17466] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5601'. [ 250.112102][ T3086] wlan1: Trigger new scan to find an IBSS to join [ 250.136799][T17482] netlink: 'syz.3.5609': attribute type 12 has an invalid length. [ 250.138566][T17482] netlink: 'syz.3.5609': attribute type 29 has an invalid length. [ 250.140099][T17482] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5609'. [ 250.291741][T17501] tap0: tun_chr_ioctl cmd 1074025677 [ 250.292132][T17501] tap0: linktype set to 778 [ 250.458492][T17516] loop1: detected capacity change from 0 to 4096 [ 250.484137][T17516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.583932][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.596516][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.728944][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5639'. [ 251.005176][T17584] fuse: Bad value for 'fd' [ 251.127725][T17597] tap0: tun_chr_ioctl cmd 1074025672 [ 251.127755][T17597] tap0: ignored: set checksum disabled [ 251.224961][T17604] loop3: detected capacity change from 0 to 512 [ 251.239434][T17604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.256596][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.287375][T17610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5666'. [ 251.410716][T17614] loop3: detected capacity change from 0 to 512 [ 251.413451][T17614] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 251.418649][T17614] EXT4-fs (loop3): 1 truncate cleaned up [ 251.419147][T17614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.442072][T17614] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6455: inode #12: comm syz.3.5668: bad extra_isize 62 (inode size 256) [ 251.451886][T17614] EXT4-fs (loop3): Remounting filesystem read-only [ 251.462928][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.590415][T17636] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 251.633508][ T4473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.828604][T17670] loop1: detected capacity change from 0 to 256 [ 252.006973][T17693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.007223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.034998][ T3180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.035120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.106905][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5713'. [ 252.109000][T17705] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5713'. [ 252.147406][T17709] loop3: detected capacity change from 0 to 4096 [ 252.152630][T17709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.165963][T17709] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.5712: corrupted inode contents [ 252.166175][T17709] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.5712: mark_inode_dirty error [ 252.166690][T17709] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.5712: corrupted inode contents [ 252.166840][T17709] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.5712: mark_inode_dirty error [ 252.166991][T17709] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.5712: corrupted inode contents [ 252.167133][T17709] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.5712: mark_inode_dirty error [ 252.167275][T17709] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.5712: corrupted inode contents [ 252.167416][T17709] EXT4-fs error (device loop3): ext4_truncate:4691: inode #15: comm syz.3.5712: mark_inode_dirty error [ 252.167555][T17709] EXT4-fs error (device loop3) in ext4_setattr:6172: Corrupt filesystem [ 252.172106][T17709] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.5712: corrupted inode contents [ 252.189718][ T4688] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.192156][ T4688] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.194077][ T4688] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 252.207448][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.272033][T17723] 9p: Bad value for 'rfdno' [ 252.365678][T17736] netlink: 'syz.4.5726': attribute type 6 has an invalid length. [ 252.664645][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.744972][ T30] audit: type=1326 audit(1021.713:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17772 comm="syz.4.5744" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff859781a8 code=0x7ffc0000 [ 252.745024][ T30] audit: type=1326 audit(1021.713:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17772 comm="syz.4.5744" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff859781a8 code=0x7ffc0000 [ 252.745235][ T30] audit: type=1326 audit(1021.713:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17772 comm="syz.4.5744" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff859781a8 code=0x7ffc0000 [ 252.745299][ T30] audit: type=1326 audit(1021.713:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17772 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff859781a8 code=0x7ffc0000 [ 252.745325][ T30] audit: type=1326 audit(1021.713:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17772 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff859781a8 code=0x7ffc0000 [ 252.745428][ T30] audit: type=1326 audit(1021.713:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17772 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff859781a8 code=0x7ffc0000 [ 252.745507][ T30] audit: type=1326 audit(1021.713:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17772 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff859781a8 code=0x7ffc0000 [ 252.745552][ T30] audit: type=1326 audit(1021.713:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17772 comm=FF exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff859781a8 code=0x7ffc0000 [ 252.781598][T17777] loop1: detected capacity change from 0 to 256 [ 252.967321][ T9] kernel read not supported for file /media0 (pid: 9 comm: kworker/0:0) [ 253.111554][ T30] audit: type=1326 audit(1022.073:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17724 comm="syz.3.5721" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa19781a8 code=0x7fc00000 [ 253.215607][T17836] sch_fq: defrate 0 ignored. [ 253.242843][T17840] gtp2: entered allmulticast mode [ 253.276294][T17847] loop7: detected capacity change from 0 to 7 [ 253.278361][ C0] blk_print_req_error: 8 callbacks suppressed [ 253.278396][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.278425][ C0] buffer_io_error: 5 callbacks suppressed [ 253.278431][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.286088][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.286163][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.294637][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.294701][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.298354][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.298407][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.302000][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.302045][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.305766][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.305803][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.312563][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.312632][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.316239][T17847] ldm_validate_partition_table(): Disk read failed. [ 253.317569][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.317614][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.320902][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.320953][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.321201][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 253.321238][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.326364][T17847] Dev loop7: unable to read RDB block 0 [ 253.331076][T17847] loop7: unable to read partition table [ 253.331204][T17847] loop7: partition table beyond EOD, truncated [ 253.331241][T17847] loop_reread_partitions: partition scan of loop7 (Sj %`ր5) failed (rc=-5) [ 253.380779][T17859] loop3: detected capacity change from 0 to 512 [ 253.388986][T17859] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 253.400181][T17859] EXT4-fs (loop3): 1 truncate cleaned up [ 253.400687][T17859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.438500][ T4688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.518953][T17880] loop1: detected capacity change from 0 to 256 [ 253.537101][T17880] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 253.537135][T17880] FAT-fs (loop1): Filesystem has been set read-only [ 253.621599][T17890] Unable to handle kernel paging request at virtual address dfff800000000000 [ 253.624914][T17890] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 253.626541][T17890] Mem abort info: [ 253.627360][T17890] ESR = 0x0000000096000005 [ 253.628302][T17890] EC = 0x25: DABT (current EL), IL = 32 bits [ 253.629403][T17890] SET = 0, FnV = 0 [ 253.630157][T17890] EA = 0, S1PTW = 0 [ 253.630991][T17890] FSC = 0x05: level 1 translation fault [ 253.631994][T17890] Data abort info: [ 253.632664][T17890] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 253.633964][T17890] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 253.634976][T17890] GCS = 0, Overlay = 0, DirtyBit = 0 [ 253.635931][T17890] [dfff800000000000] address between user and kernel address ranges [ 253.637391][T17890] Internal error: Oops: 0000000096000005 [#1] SMP [ 253.638396][T17890] Modules linked in: [ 253.639001][T17890] CPU: 1 UID: 0 PID: 17890 Comm: syz.1.5802 Tainted: G L syzkaller #0 PREEMPT [ 253.640640][T17890] Tainted: [L]=SOFTLOCKUP [ 253.641347][T17890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 253.643041][T17890] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 253.644321][T17890] pc : strcmp+0x28/0xf0 [ 253.645015][T17890] lr : __ftrace_set_clr_event_nolock+0x6a0/0x940 [ 253.646091][T17890] sp : ffff8000949b7840 [ 253.646804][T17890] x29: ffff8000949b7870 x28: dfff800000000000 x27: 0000000000000000 [ 253.648169][T17890] x26: ffff800088d6e8b0 x25: ffff0000d6865500 x24: 00000000ffffffea [ 253.649564][T17890] x23: ffff800088d6e8b0 x22: 0000000000000000 x21: dfff800000000000 [ 253.650974][T17890] x20: ffff0000d6865518 x19: ffff0000ca928440 x18: 0000000000000000 [ 253.652323][T17890] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 253.653752][T17890] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 253.655045][T17890] x11: 0000000000000000 x10: dfff800000000000 x9 : ffff00010aac7301 [ 253.656321][T17890] x8 : 0000000000000000 x7 : ffff800080538ea0 x6 : 0000000000000000 [ 253.657680][T17890] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000806c6790 [ 253.658971][T17890] x2 : 0000000000000000 x1 : ffff00010aac7301 x0 : 0000000000000000 [ 253.660338][T17890] Call trace: [ 253.660865][T17890] strcmp+0x28/0xf0 (P) [ 253.661553][T17890] __ftrace_set_clr_event_nolock+0x6a0/0x940 [ 253.662530][T17890] __ftrace_set_clr_event+0xa8/0xec [ 253.663377][T17890] ftrace_set_clr_event+0x2a0/0x438 [ 253.664247][T17890] ftrace_event_write+0x1dc/0x28c [ 253.665084][T17890] vfs_write+0x2a4/0xa0c [ 253.665811][T17890] ksys_write+0x12c/0x228 [ 253.666581][T17890] __arm64_sys_write+0x84/0x98 [ 253.667382][T17890] invoke_syscall+0x98/0x244 [ 253.668145][T17890] el0_svc_common+0xec/0x23c [ 253.668916][T17890] do_el0_svc+0x4c/0x5c [ 253.669649][T17890] el0_svc+0x64/0x260 [ 253.670352][T17890] el0t_64_sync_handler+0x48/0x148 [ 253.671252][T17890] el0t_64_sync+0x198/0x19c [ 253.672073][T17890] Code: aa0103e9 f2fbffea d343fc0b 1200080c (38ea696b) [ 253.673274][T17890] ---[ end trace 0000000000000000 ]--- [ 253.856519][T17890] Kernel panic - not syncing: Oops: Fatal exception [ 253.857630][T17890] SMP: stopping secondary CPUs [ 253.858471][T17890] Kernel Offset: disabled [ 253.859241][T17890] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 253.860423][T17890] Memory Limit: none [ 254.050050][T17890] Rebooting in 86400 seconds..