last executing test programs: 1m43.267598428s ago: executing program 3 (id=172): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000500)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), &(0x7f0000001100)=@v3={0x3000000, [{0x4, 0x8}, {0x0, 0xfffffff7}]}, 0x18, 0x1) 1m43.103047782s ago: executing program 3 (id=177): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x80000000}) mlock2(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x0) 1m42.526080192s ago: executing program 3 (id=184): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x1001, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, 0x0) 1m42.493694152s ago: executing program 32 (id=184): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x1001, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, 0x0) 1m18.989978131s ago: executing program 1 (id=864): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='-,', 0x2) 1m18.950826807s ago: executing program 1 (id=868): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.923339574s ago: executing program 1 (id=870): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m16.970229983s ago: executing program 1 (id=955): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@resuid}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x5, 0x50c, &(0x7f0000001640)="$eJzs3U9sG1kZAPDPdpJN2izdXRDaXSS20iKVP2qcP0KbABLiBBwqISpxAamExA0lTh3FTmmiSqRw64EDAoGEOHDnwpULPVFVQpxBXDmhVlCCVFCRBnnsSZ3ETlya2Gzm95Ncz/i5/t5z8r08v3njCSC3Ljb/KURMRsQfIuJCa3f/Ey627naf3Flq3gqRJFf/Vkif19zPnpr9v/MRsRMR4xHx1S9GfKtwOG59a3t1sVqtbLT3y4219XJ9a/vyjbXFlcpK5ebM/HsLC/PTc7MLJ9bWez/8zr0rv/ny2K+e/uDRgx/97rfNak22yzrbcZJaTR+N1zseG4mIz51GsCEotdszMeyK8D9p/vw+GBHvpvl/IUrpT7M/z061ZsBpS5Ik+U/ySq/inQQ4s4rpGLhQnIqI1naxODXVGsN/KM4Vq7V641PXa5s3l1tj5dditHj9RrUy3f6s8FqMFpr7M+n28/3ZA/tzEekY+MeliXR/aqlWXR5sVwcccP5A/v+z1Mp/ICf6/8gPnDXyH/JL/kN+yX/IL/kP+SX/Ib/kP+SX/If8kv+QX535n53I9eqQ6gIM1lF//8cGWA9goL5y5UrzlmTnvy/f2tpcrd26vFypr06tbS5NLdU21qdWarWV9JydteNer1qrrc98OjZvlxuVeqNc39q+tlbbvNm4lp7Xf60yOpBWAf14/Z37fypExM5nJtJbdPzJl6twtiVJIYZ9DjIwHKVhd0DA0Dj0B/n1Ap/xe35JGPD+1uUreveMn+9Z9PlYP/aVdn/9EvUCTk/xqMJnDwdXEWDgLr3l+B/klfl/yC/z/5Bfx4zxDQ8gB46a/4/2tfy6OjT/38PTF6sPcPqOnP8HzrTJLtf/SpLke692XLtrOiI+EBF/LI2+kl3rCzgLin8ttMf/ly58bPJg6VjhX+kcwFhEfPfnV396e7HR2JhpPv73vccbP2s/PjuM+gO97Z/hy/I0y2MAIL92n9xZym6DjPv4C61FCIfjj7TnJsfTEcy53cK+tQqFE1q7sHM3It7sFr/Qvt5568jHud3SofhvtO8LrZdI6zuSXjd9MPHf6oj/0Y74b7/0uwL5cL/Z/0x3y79imtOxl3/7+5/JE1ofnfV/2ZrrzvhZ/1fq0f+902eMb//i+90O76aLvR/fjXi7a/+bxRtPYx2M36zbpT7jP/rG1z7cqyz5Zet1usXPNLfKjbX1cn1r+/KNrBbz7y0szE/PzS6U0znqcjZTfdhn3/z9g17xm+1v69H+Px9q/0S7Tp/os/3//sjDr188Iv7H3+3++/dGen/g/U+SvTp8ss/4/5j9yzd7lTXjL/d4/4vd4kdWGjHXZ/z6T77k3GEA+D9S39peXaxWKxtdNkZ7F9mwYWPQGyMxwKDH9Rw7g+mggFPzPOmHXRMAAAAAAAAAAACgX71W/94/weXEw24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZ8N8AAAD//6rz1eo=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 1m16.854667951s ago: executing program 1 (id=964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e22, 0x16cc, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 1m16.242251481s ago: executing program 1 (id=991): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000100)={[{@errors_remount}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$eJzs281vFOUfAPDvzLbw+/HWivgColbR2PjS0oLKwYtGEw+amOgBj7UtBFmooTUR0mg1Bo+GxLvxaOJf4EkvRj2ZeNW7ISHaC+hpzczOlO2yu7R06xb280kGnmfm2T7Pt888O8/MMw2gb41k/yQRuyLit4gYqmdXFxip/3dteXH67+XF6SRqtTf/TPJyV5cXp8ui5ed2FpnRNCL9NCkqWW3+/IXTU9Xq7LkiP75w5r3x+fMXnjl1Zurk7MnZs5PHjh09MvH8c5PPrj2YJGl7aHfW1gMfzh3c/+rbl16fPn7pnZ++yUrvKo43xrERaUN6JAv8r1quudzj3ahsC9ndkE4Gbl6GraESEVl3Debjfygqcb3zhuKVT3raOGBTZdem7e0PL9VaqbTcC9x2kuh1C4DeKC/02f1vuf1HU48t4cqL9Rugq8ni9LXl+lY/MrByLz+4ifeuIxFxfOmfL7MtuvgcAgCgne+y+c/TreZ/adzbUG5PsTY0HBF3RcTeiLg7IvZFxD0Redn7IuL+G2pIO9bfvDR04/wnvXzLwa1BNv97oVjbWj3/W2n3cKXI7c7jH0xOnKrOHi5+J6MxuD3LT3So4/uXf/283bHG+V+2ZfWXc8GiHZcHmh7QzUwtTOWT0i648nHEgYFW8ScrKwFJROyPiAPr+9F7ysSpJ78+2K7QzePvoM0603rUvop4Iuv/WrIUTfGXks7rk+P/i+rs4fHyrLjRz79cfKNd/RuKvwuy/t+x+vxvLjKcNK7Xzq+/jou/f9b2nuZWz/9tyVt5v2wr9n0wtbBwbiJiW/Janl+1f/L6Z8t8WT6Lf/RQ6/G/t/hMVs8DEZGdxA9GxEMR8XDR9kci4tGIONQh/h9feuzdW49/c2Xxz7T8/ls5/5v6f/2Jyukfvm1X/9r6/2ieGi325N9/N7HWBm7kdwcAAAC3izR/Bz5Jx1bSaTo2Vn+Hf1/sSKtz8wtPnZh7/+xM/V354RhMyyddQw3PQyeSpeIn1vOTxbPi8viR4rnxF5X/5/mx6bnqTI9jh363s834z/xR6XXrgE3XhXU04DbVPP47v7IB3Elc/6F/Gf/Qv4x/6F+txv9HTXlrAXBncv2H/mX8Q/8y/qF/Gf/Qlzbyd/0S/ZyIdEs0Y5MSQ1ujGT1M9PqbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//82merZ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x40000, 0xf8) 1m16.172375503s ago: executing program 33 (id=991): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000100)={[{@errors_remount}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x40000, 0xf8) 1m6.427349841s ago: executing program 5 (id=1218): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 1m6.366758255s ago: executing program 5 (id=1222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0c007d80fcff0000160000000600eb00"], 0x30}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840) 1m6.327720512s ago: executing program 5 (id=1224): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000c80)={0x1f, 0x1}, 0x6) setreuid(0xffffffffffffffff, 0xee01) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1m6.289622789s ago: executing program 5 (id=1226): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 1m6.255600741s ago: executing program 5 (id=1228): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f000001f540)) 1m5.902070843s ago: executing program 5 (id=1240): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1m5.900915237s ago: executing program 34 (id=1240): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 44.508989635s ago: executing program 0 (id=1809): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 44.367943419s ago: executing program 0 (id=1812): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="30783437f4", 0x5) 44.219085726s ago: executing program 0 (id=1816): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x485, &(0x7f0000001040)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 43.824343667s ago: executing program 0 (id=1826): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2000444, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 43.384850201s ago: executing program 0 (id=1838): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) 42.145829202s ago: executing program 0 (id=1862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x3c}}, 0x0) 41.870651032s ago: executing program 35 (id=1862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x3c}}, 0x0) 41.085575697s ago: executing program 6 (id=1880): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x8000011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000004900)={0x2020}, 0x2020) 40.882884736s ago: executing program 6 (id=1883): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 40.761081482s ago: executing program 6 (id=1885): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x2, &(0x7f0000000580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x600}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000440), 0x0, 0xd1a}]) 40.606582505s ago: executing program 6 (id=1888): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x95e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}, {@grpid}, {@oldalloc}]}, 0x3, 0x44d, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 40.328287076s ago: executing program 6 (id=1892): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 39.124541411s ago: executing program 6 (id=1914): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 38.921291352s ago: executing program 36 (id=1914): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 12.267916462s ago: executing program 9 (id=2218): r0 = syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x100009) waitid(0x1, r0, 0x0, 0x8, 0x0) waitid(0x1, r0, 0x0, 0x8, 0x0) 11.954978489s ago: executing program 9 (id=2223): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r0 = syz_io_uring_setup(0x2a37, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x19, 0x20000000, 0x0) 11.86529216s ago: executing program 9 (id=2225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040ee"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 11.735450647s ago: executing program 9 (id=2228): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2000444, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 11.506132797s ago: executing program 9 (id=2232): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)={'lowerdir'}, 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x2f) 9.969989951s ago: executing program 9 (id=2265): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000180)="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", 0x120}], 0x1}, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e200000080001000100000014000200"], 0x8c}}, 0x0) 9.808178972s ago: executing program 37 (id=2265): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000180)="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", 0x120}], 0x1}, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e200000080001000100000014000200"], 0x8c}}, 0x0) 8.468846684s ago: executing program 8 (id=2294): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x400ccc0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 8.201558072s ago: executing program 8 (id=2297): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c00018008000400", @ANYRES32=r0], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 7.832792902s ago: executing program 8 (id=2305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 6.957743968s ago: executing program 4 (id=2316): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) 6.877100986s ago: executing program 7 (id=2318): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000000000000000a"], 0x24}}, 0x0) 6.706058912s ago: executing program 7 (id=2319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4d2, @local}, 0x10) 6.438548611s ago: executing program 4 (id=2322): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') exit(0xfffffffffffffffd) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 6.206002954s ago: executing program 2 (id=2324): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r1, 0x1000}, &(0x7f0000000300)=0x8) 6.175664612s ago: executing program 2 (id=2325): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 6.110297232s ago: executing program 2 (id=2326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.98207334s ago: executing program 2 (id=2327): r0 = socket(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) 5.593011883s ago: executing program 7 (id=2328): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1030c1, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, &(0x7f00000004c0)={0x0, 0x83cc, 0x10, 0x1, 0x7f}, 0x0, 0x1, 0x0, 0x0) 5.518211866s ago: executing program 7 (id=2329): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) r0 = io_uring_setup(0x7109, &(0x7f0000000080)={0x0, 0xfaa2, 0x10, 0x3, 0x10a}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) close_range(r0, r0, 0x0) 5.10203562s ago: executing program 2 (id=2330): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8919, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 4.938056073s ago: executing program 8 (id=2331): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x4, 0x2, 0xe, 0x0, 0x68, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x36}, 0x40, 0x7831, 0xe3e1, 0xd00}}) 4.698678225s ago: executing program 4 (id=2332): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', 0x0, 0x0) 4.610112411s ago: executing program 7 (id=2333): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7e) 278.370946ms ago: executing program 8 (id=2334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)="306663353a313232373a4c180577b4d218b867666c64", 0x16) 278.231422ms ago: executing program 2 (id=2335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x4e44, 0x0) 278.161928ms ago: executing program 4 (id=2336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0fc5:1227:fo', 0xc) 272.393166ms ago: executing program 7 (id=2337): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r0 = socket$kcm(0x1e, 0x1, 0x0) listen(r0, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 170.538926ms ago: executing program 3 (id=2266): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 122.078073ms ago: executing program 8 (id=2338): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 121.923085ms ago: executing program 4 (id=2339): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/kcov\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 55.022711ms ago: executing program 4 (id=2340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 43.931325ms ago: executing program 3 (id=2341): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1/file0\x00', 0x1018e58, &(0x7f0000000000)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@auto_da_alloc}, {@jqfmt_vfsold}, {@dax_never}, {@usrjquota}]}, 0x1, 0x61d, &(0x7f0000001680)="$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") r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000ffdbdf25030000004c0001800d0001007564703a73797a310000000038000400"], 0x60}, 0x1, 0x0, 0x0, 0x20008898}, 0x80) 0s ago: executing program 3 (id=2342): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) kernel console output (not intermixed with test programs): . [ 69.324323][ T7618] Use struct sctp_assoc_value instead [ 69.352419][ T7624] loop2: detected capacity change from 0 to 1024 [ 69.354007][ T7624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.386284][ T7624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.427616][ T7624] EXT4-fs: Ignoring removed bh option [ 69.445872][ T7634] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 69.450049][ T7624] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 69.456035][ T7635] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.461357][ T7635] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 69.461876][ T7638] loop0: detected capacity change from 0 to 128 [ 69.464909][ T7638] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 69.478030][ T7638] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.530711][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.531647][ T4720] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.815058][ T7676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.815246][ T7676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.844760][ T7680] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1130'. [ 69.846779][ T7680] net_ratelimit: 3321 callbacks suppressed [ 69.848304][ T7680] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 69.881070][ T7673] block nbd0: server does not support multiple connections per device. [ 69.884006][ T7673] block nbd0: shutting down sockets [ 69.903219][ T7685] loop5: detected capacity change from 0 to 512 [ 69.909223][ T7685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.934213][ T7685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.007250][ T7696] loop4: detected capacity change from 0 to 1024 [ 70.014633][ T5290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.021355][ T7696] EXT4-fs: Ignoring removed orlov option [ 70.025356][ T7696] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.053566][ T7696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.124718][ T7707] loop0: detected capacity change from 0 to 512 [ 70.148455][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.155472][ T7707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.161840][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1141'. [ 70.169792][ T4722] Bluetooth: hci1: command tx timeout [ 70.248004][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.277370][ T7725] Bluetooth: MGMT ver 1.23 [ 70.278673][ T7725] Bluetooth: hci1: too big key_count value 4608 [ 70.328630][ T7729] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1149'. [ 70.355491][ T7733] netlink: 'syz.2.1150': attribute type 2 has an invalid length. [ 70.409388][ T7746] loop2: detected capacity change from 0 to 128 [ 70.411364][ T7746] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.417487][ T7745] vxcan0: tx address claim with dlc 0 [ 70.418986][ T7746] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.465284][ T7748] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1158'. [ 70.502584][ T7757] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.533266][ T7762] loop0: detected capacity change from 0 to 512 [ 70.594908][ T7762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.646973][ T30] audit: type=1326 audit(70.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.665581][ T7778] loop6: detected capacity change from 0 to 1024 [ 70.671567][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.673444][ T30] audit: type=1326 audit(70.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.673488][ T30] audit: type=1326 audit(70.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.673515][ T30] audit: type=1326 audit(70.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.673536][ T30] audit: type=1326 audit(70.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.673556][ T30] audit: type=1326 audit(70.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.673574][ T30] audit: type=1326 audit(70.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.673592][ T30] audit: type=1326 audit(70.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.673609][ T30] audit: type=1326 audit(70.640:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.690953][ T30] audit: type=1326 audit(70.670:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.1170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=103 compat=0 ip=0xffff9a5792a8 code=0x7ffc0000 [ 70.713603][ T7778] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.720904][ T7778] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.1171: lblock 0 mapped to illegal pblock 0 (length 6) [ 70.754464][ T7312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.785681][ T7790] EXT4-fs (loop5): Test dummy encryption mode enabled [ 70.791039][ T7790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.821789][ T5290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.823209][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 70.823264][ T7795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1177'. [ 70.983996][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 71.017513][ T7824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.023842][ T7824] EXT4-fs (loop2): 1 truncate cleaned up [ 71.025799][ T7824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.038843][ T7824] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #2: comm syz.2.1190: Directory hole found for htree leaf block 0 [ 71.039176][ T7824] EXT4-fs (loop2): Remounting filesystem read-only [ 71.084092][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.119295][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 71.243424][ T7851] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1203'. [ 71.243935][ T7851] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1203'. [ 71.274721][ T7853] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 71.274755][ T7853] FAT-fs (loop0): Filesystem has been set read-only [ 71.418507][ T7876] EXT4-fs: inline encryption not supported [ 71.421160][ T7876] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.431037][ T7876] EXT4-fs (loop5): 1 truncate cleaned up [ 71.431513][ T7876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.437685][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1215'. [ 71.482372][ T7882] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 71.484340][ T7882] FAT-fs (loop0): Filesystem has been set read-only [ 71.489044][ T5290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.078037][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.079557][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.081347][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.084041][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.085526][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.205652][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.206678][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.206780][ T7933] bridge_slave_0: entered allmulticast mode [ 72.207250][ T7933] bridge_slave_0: entered promiscuous mode [ 72.208790][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.208883][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.208949][ T7933] bridge_slave_1: entered allmulticast mode [ 72.209406][ T7933] bridge_slave_1: entered promiscuous mode [ 72.221233][ T7933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.225162][ T7933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.234509][ T7933] team0: Port device team_slave_0 added [ 72.236543][ T7933] team0: Port device team_slave_1 added [ 72.244697][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.246220][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.250479][ T7933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.251198][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.251206][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.251220][ T7933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.265143][ T7933] hsr_slave_0: entered promiscuous mode [ 72.266583][ T7933] hsr_slave_1: entered promiscuous mode [ 72.268038][ T7933] debugfs: 'hsr0' already exists in 'hsr' [ 72.269264][ T7933] Cannot create hsr debugfs directory [ 72.324381][ T7933] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 72.327465][ T7933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.329406][ T7933] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 72.332450][ T7933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.334243][ T7933] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 72.336677][ T7933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.338727][ T7933] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 72.343406][ T7933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.353434][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.353473][ T7933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.353561][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.353595][ T7933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.386312][ T7933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.391932][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.393518][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.398582][ T7933] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.408406][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.408452][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.408881][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.408903][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.428140][ T7933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.448891][ T7933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.471208][ T7933] veth0_vlan: entered promiscuous mode [ 72.478227][ T7933] veth1_vlan: entered promiscuous mode [ 72.494956][ T7933] veth0_macvtap: entered promiscuous mode [ 72.497670][ T7933] veth1_macvtap: entered promiscuous mode [ 72.503802][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.506561][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.551717][ T3650] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.551759][ T3650] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.551779][ T3650] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.563051][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.563082][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.586692][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.586727][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.589957][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.657504][ T8002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.698984][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.985664][ T8040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.004334][ T8040] EXT4-fs (loop7): shut down requested (2) [ 73.042339][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.046280][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.054614][ T8050] i2c i2c-0: new_device: Can't parse I2C address [ 73.129861][ T4722] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 73.196949][ T8066] set_capacity_and_notify: 9 callbacks suppressed [ 73.198422][ T8066] loop2: detected capacity change from 0 to 2048 [ 73.202037][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.204370][ T8066] EXT4-fs: Ignoring removed i_version option [ 73.236941][ T8066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.307599][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.309667][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.331326][ T8082] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 73.349536][ T8084] bond0: option arp_interval: invalid value (def) [ 73.349578][ T8084] bond0: option arp_interval: allowed values 0 - 2147483647 [ 73.404795][ T8078] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.457075][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.517298][ T8104] loop6: detected capacity change from 0 to 8192 [ 73.518225][ T8104] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.533229][ T8078] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.577186][ T8100] ipvlan2: entered allmulticast mode [ 73.578362][ T8100] macvlan1: entered allmulticast mode [ 73.579769][ T8100] veth1_vlan: entered allmulticast mode [ 73.582641][ T8100] batman_adv: batadv0: Adding interface: ipvlan2 [ 73.584164][ T8100] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.589049][ T8100] batman_adv: batadv0: Interface activated: ipvlan2 [ 73.631618][ T8078] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.726303][ T8078] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.757140][ T39] bridge_slave_1: left allmulticast mode [ 73.757174][ T39] bridge_slave_1: left promiscuous mode [ 73.757271][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.759573][ T39] bridge_slave_0: left allmulticast mode [ 73.759585][ T39] bridge_slave_0: left promiscuous mode [ 73.759646][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.773424][ T8128] loop7: detected capacity change from 0 to 4096 [ 73.775069][ T8128] EXT4-fs: inline encryption not supported [ 73.779813][ T8128] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.779844][ T8128] EXT4-fs (loop7): Test dummy encryption mode enabled [ 73.802969][ T8128] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 73.803040][ T8128] System zones: 0-5 [ 73.813045][ T8128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.877674][ T8137] loop6: detected capacity change from 0 to 128 [ 73.911276][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.923169][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.947825][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.972258][ T39] bond0 (unregistering): Released all slaves [ 73.986014][ T8138] veth0_to_bond: entered promiscuous mode [ 73.989916][ T8138] macsec1: entered promiscuous mode [ 73.990037][ T8138] macsec1: entered allmulticast mode [ 73.990046][ T8138] veth0_to_bond: entered allmulticast mode [ 74.156186][ T8159] loop0: detected capacity change from 0 to 256 [ 74.163217][ T39] batman_adv: batadv0: Removing interface: macvtap1 [ 74.170007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.170525][ T4716] Bluetooth: hci3: command tx timeout [ 74.171598][ T8159] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 74.171610][ T8159] FAT-fs (loop0): Filesystem has been set read-only [ 74.199886][ T783] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.226770][ T783] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.232443][ T783] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.234880][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.318754][ T8178] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 74.318851][ T8178] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 74.318942][ T8178] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 74.318975][ T8178] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 74.319016][ T8178] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 74.319046][ T8178] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 74.319085][ T8178] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 74.417832][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 74.481414][ T8200] loop0: detected capacity change from 0 to 2048 [ 74.521821][ T8200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.617615][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.625981][ T39] hsr_slave_0: left promiscuous mode [ 74.628412][ T39] hsr_slave_1: left promiscuous mode [ 74.628742][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.628755][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.629969][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.629981][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.698316][ T39] veth1_macvtap: left promiscuous mode [ 74.698368][ T39] veth0_macvtap: left promiscuous mode [ 74.698441][ T39] veth1_vlan: left promiscuous mode [ 74.698485][ T39] veth0_vlan: left promiscuous mode [ 74.707669][ T8214] WARNING! power/level is deprecated; use power/control instead [ 74.962741][ T4716] block nbd0: Receive control failed (result -32) [ 75.147803][ T8248] loop2: detected capacity change from 0 to 512 [ 75.177197][ T8248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.215657][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.275240][ T8255] hugetlbfs: syz.7.1360 (8255): Using mlock ulimits for SHM_HUGETLB is obsolete [ 75.337366][ T39] team0 (unregistering): Port device team_slave_1 removed [ 75.345519][ T39] team0 (unregistering): Port device team_slave_0 removed [ 75.405676][ T8267] loop7: detected capacity change from 0 to 1024 [ 75.428269][ T8267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.441052][ T8267] EXT4-fs (loop7): shut down requested (2) [ 75.462916][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.526307][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 75.530201][ T8276] gtp0: entered allmulticast mode [ 75.593207][ T8289] loop7: detected capacity change from 0 to 512 [ 75.597935][ T8289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.626033][ T8293] __nla_validate_parse: 3 callbacks suppressed [ 75.627055][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1375'. [ 75.671490][ T8289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.683376][ T8289] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1374: bg 0: block 217: padding at end of block bitmap is not set [ 75.686728][ T8289] EXT4-fs (loop7): Remounting filesystem read-only [ 75.715990][ T8301] loop6: detected capacity change from 0 to 512 [ 75.731135][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.733151][ T1335] __quota_error: 5 callbacks suppressed [ 75.733169][ T1335] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 75.733191][ T1335] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 75.765897][ T8301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.850459][ T7312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.971063][ T8336] net_ratelimit: 5 callbacks suppressed [ 75.971107][ T8336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.971213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.971282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.971359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.971443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.971528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.971610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.971681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.971753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.971832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.002948][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 76.249853][ T4716] Bluetooth: hci3: command tx timeout [ 77.041901][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 77.125171][ T8379] tap0: tun_chr_ioctl cmd 35111 [ 77.278363][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 77.643215][ T8414] Injecting memory failure for pfn 0x135329 at process virtual address 0x20001000 [ 77.712373][ T8414] Memory failure: 0x135329: recovery action for clean LRU page: Recovered [ 77.714089][ T8414] Injecting memory failure for pfn 0x1212b8 at process virtual address 0x20002000 [ 77.748260][ T8414] Memory failure: 0x1212b8: recovery action for clean LRU page: Recovered [ 77.748300][ T8414] Injecting memory failure for pfn 0x13fefc at process virtual address 0x20003000 [ 77.763580][ T8414] Memory failure: 0x13fefc: recovery action for clean LRU page: Recovered [ 78.060542][ T8434] vhci_hcd vhci_hcd.2: invalid port number 96 [ 78.062250][ T8434] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 78.291448][ T8449] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1432'. [ 78.330412][ T4716] Bluetooth: hci3: command tx timeout [ 78.874214][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 79.009785][ T8492] tap0: tun_chr_ioctl cmd 1074025677 [ 79.009921][ T8492] tap0: linktype set to 768 [ 79.742374][ T8537] tps6598x 0-0003: probe with driver tps6598x failed with error -22 [ 79.756871][ T8537] i2c i2c-0: new_device: Instantiated device tps25750 at 0x03 [ 80.218685][ T8573] Injecting memory failure for pfn 0x136600 at process virtual address 0x20000000 [ 80.256652][ T8575] set_capacity_and_notify: 1 callbacks suppressed [ 80.261659][ T8575] loop0: detected capacity change from 0 to 512 [ 80.266417][ T8575] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.270550][ T8575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 80.272258][ T8575] System zones: 1-12 [ 80.278993][ T8575] EXT4-fs (loop0): 1 truncate cleaned up [ 80.281861][ T8575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.313573][ T8573] Memory failure: 0x136600: Sending SIGBUS to syz.4.1480:8573 due to hardware memory corruption [ 80.313651][ T8573] Memory failure: 0x136600: recovery action for dirty LRU page: Recovered [ 80.368808][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.419872][ T4716] Bluetooth: hci3: command tx timeout [ 80.730261][ T8598] loop2: detected capacity change from 0 to 512 [ 80.830945][ T8598] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1491: inode has both inline data and extents flags [ 80.830977][ T8598] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.831332][ T8598] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1491: couldn't read orphan inode 15 (err -117) [ 80.831361][ T8598] loop2: lost filesystem error report for type 5 error -117 [ 80.832111][ T8598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.926960][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.979715][ C1] net_ratelimit: 84425 callbacks suppressed [ 80.979752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.982722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.982804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.982892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.982963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.983045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.983119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.983186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.983260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.983331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.021679][ T8621] loop2: detected capacity change from 0 to 128 [ 81.030721][ T8621] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.054185][ T8626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.054343][ T8626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.101745][ T8621] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop2' because it doesn't have stable inode numbers [ 81.185480][ T5469] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.308136][ T8641] bond1: Removing last ns target with arp_interval on [ 81.355375][ T8650] loop2: detected capacity change from 0 to 512 [ 81.391115][ T8646] input: syz1 as /devices/virtual/input/input3 [ 81.396102][ T8649] loop0: detected capacity change from 0 to 8192 [ 81.406447][ T8650] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.407785][ T8650] EXT4-fs (loop2): 1 truncate cleaned up [ 81.408238][ T8650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.421626][ T8649] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.478862][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.910824][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 81.934546][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 82.002215][ T8692] loop2: detected capacity change from 0 to 128 [ 82.037409][ T8695] bridge0: port 3(batadv1) entered blocking state [ 82.038390][ T8695] bridge0: port 3(batadv1) entered disabled state [ 82.038484][ T8695] batadv1: entered allmulticast mode [ 82.039582][ T8692] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.041425][ T8695] batadv1: entered promiscuous mode [ 82.080789][ T8698] loop4: detected capacity change from 0 to 512 [ 82.091954][ T8698] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 82.093352][ T8698] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 82.093453][ T8698] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.095237][ T8698] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1526: bg 0: block 361: padding at end of block bitmap is not set [ 82.095263][ T8698] loop4: lost filesystem error report for type 5 error -117 [ 82.095807][ T8698] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 82.095828][ T8698] loop4: lost filesystem error report for type 5 error -117 [ 82.095907][ T8698] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.1526: attempt to clear invalid blocks 33619980 len 1 [ 82.095926][ T8698] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.096631][ T8698] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1526: invalid indirect mapped block 1811939328 (level 0) [ 82.096657][ T8698] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.096747][ T8698] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1526: invalid indirect mapped block 2185560079 (level 1) [ 82.096764][ T8698] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.097125][ T8698] EXT4-fs (loop4): 1 truncate cleaned up [ 82.097595][ T8698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 82.120499][ T5469] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.186751][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 82.540012][ T8186] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 82.540046][ T8186] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 82.848334][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.848634][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.878523][ T8740] netlink: 'syz.0.1541': attribute type 2 has an invalid length. [ 83.074904][ T8752] fuse: Bad value for 'fd' [ 83.664696][ T8773] Bluetooth: MGMT ver 1.23 [ 84.180700][ T8809] loop0: detected capacity change from 0 to 128 [ 84.254270][ T8812] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 84.271680][ T8809] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.366062][ T4720] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.394966][ T8823] sctp: [Deprecated]: syz.6.1571 (pid 8823) Use of int in max_burst socket option. [ 84.394966][ T8823] Use struct sctp_assoc_value instead [ 84.651395][ T8842] loop4: detected capacity change from 0 to 1024 [ 84.651777][ T8842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.697594][ T30] audit: type=1326 audit(84.670:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.697633][ T30] audit: type=1326 audit(84.670:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.697665][ T30] audit: type=1326 audit(84.670:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.697685][ T30] audit: type=1326 audit(84.670:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.697704][ T30] audit: type=1326 audit(84.670:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.697722][ T30] audit: type=1326 audit(84.670:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.697743][ T30] audit: type=1326 audit(84.670:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.697760][ T30] audit: type=1326 audit(84.670:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.716703][ T8851] loop7: detected capacity change from 0 to 1024 [ 84.757564][ T8842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.759320][ T30] audit: type=1326 audit(84.730:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.759359][ T30] audit: type=1326 audit(84.730:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.6.1582" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff843792a8 code=0x7ffc0000 [ 84.799033][ T8851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.843917][ T8842] EXT4-fs: Ignoring removed bh option [ 84.849102][ T8851] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.1583: lblock 0 mapped to illegal pblock 0 (length 6) [ 84.886322][ T8842] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 84.922749][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.947310][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.237261][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1592'. [ 85.237339][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1592'. [ 85.333633][ T8883] can0: slcan on pty32. [ 85.423315][ T8882] can0 (unregistered): slcan off pty32. [ 85.502955][ T8897] set_capacity_and_notify: 1 callbacks suppressed [ 85.513088][ T8897] loop7: detected capacity change from 0 to 512 [ 85.565360][ T8897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.579336][ T8903] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1607'. [ 85.588458][ T8903] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1607'. [ 85.700619][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.989118][ T8931] loop4: detected capacity change from 0 to 256 [ 85.990566][ C1] net_ratelimit: 81996 callbacks suppressed [ 85.990578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.990630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.990681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.990731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.990782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.990832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.990893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.990952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.991007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.991059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.032137][ T8931] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 86.033954][ T8931] FAT-fs (loop4): Filesystem has been set read-only [ 86.086401][ T8943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1622'. [ 86.088199][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1622'. [ 86.131189][ T8935] loop6: detected capacity change from 0 to 512 [ 86.169330][ T8935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.184580][ T8935] Bluetooth: MGMT ver 1.23 [ 86.228068][ T7312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.129671][ T9010] sctp: [Deprecated]: syz.4.1651 (pid 9010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.129671][ T9010] Use struct sctp_sack_info instead [ 87.532737][ T9032] loop7: detected capacity change from 0 to 256 [ 87.543284][ T9034] bond0: option arp_interval: invalid value (def) [ 87.543327][ T9034] bond0: option arp_interval: allowed values 0 - 2147483647 [ 87.732163][ T9048] loop7: detected capacity change from 0 to 128 [ 88.165947][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1682'. [ 88.454155][ T9088] rnbd_client L127: Can't parse path ip:: -22 [ 88.621746][ T9099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1695'. [ 88.627017][ T9098] loop6: detected capacity change from 0 to 512 [ 88.628865][ T9101] loop7: detected capacity change from 0 to 128 [ 88.634941][ T9098] EXT4-fs: Ignoring removed oldalloc option [ 88.636534][ T9098] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 88.648635][ T9099] bridge0: port 3(syz_tun) entered disabled state [ 88.648969][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.649376][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.701276][ T9098] EXT4-fs (loop6): 1 truncate cleaned up [ 88.714824][ T9098] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1692: invalid indirect mapped block 4294901760 (level 0) [ 88.718269][ T9098] EXT4-fs (loop6): Remounting filesystem read-only [ 88.895514][ T9113] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1700'. [ 89.020484][ T9119] loop4: detected capacity change from 0 to 512 [ 89.027224][ T9119] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.239189][ T9132] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1708'. [ 89.239230][ T9132] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1708'. [ 89.306873][ T9134] loop6: detected capacity change from 0 to 512 [ 89.313919][ T9134] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.340492][ T9134] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1710: corrupted xattr block 33: invalid header [ 89.349641][ T9134] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1710: corrupted xattr block 33: invalid header [ 89.354976][ T9134] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1710: corrupted xattr block 33: invalid header [ 89.441477][ T9144] Direct I/O collision with buffered writes! File: /file1 Comm: syz.6.1710 [ 89.636430][ T8185] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 89.640726][ T8185] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 89.640758][ T8185] EXT4-fs (loop6): This should not happen!! Data will be lost [ 89.640758][ T8185] [ 89.640779][ T8185] EXT4-fs (loop6): Total free blocks count 0 [ 89.640792][ T8185] EXT4-fs (loop6): Free/Dirty block details [ 89.640805][ T8185] EXT4-fs (loop6): free_blocks=65280 [ 89.640817][ T8185] EXT4-fs (loop6): dirty_blocks=31 [ 89.640827][ T8185] EXT4-fs (loop6): Block reservation details [ 89.640836][ T8185] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 89.690148][ T7312] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 89.885322][ T9169] loop6: detected capacity change from 0 to 512 [ 89.898051][ T9169] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.1718: bad orphan inode 15 [ 89.898086][ T9169] loop6: lost filesystem error report for type 5 error -117 [ 89.899974][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 89.899988][ C1] EXT4-fs (loop6): initial error at time 89: ext4_orphan_get:1425 [ 89.900001][ C1] EXT4-fs (loop6): last error at time 89: ext4_orphan_get:1425 [ 89.905417][ T9169] ext4_test_bit(bit=14, block=5) = 0 [ 89.933516][ T9169] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 90.270695][ T9197] netlink: 'syz.6.1730': attribute type 2 has an invalid length. [ 90.718860][ T9228] vhci_hcd vhci_hcd.2: invalid port number 96 [ 90.718903][ T9228] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 90.842685][ T9233] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 90.842828][ T9233] syzkaller1: linktype set to 826 [ 90.999750][ C0] net_ratelimit: 86840 callbacks suppressed [ 90.999794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.999866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.999943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.000008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.000075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.000136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.000200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.000264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.000333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.000396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.068206][ T9251] loop0: detected capacity change from 0 to 512 [ 91.076175][ T9251] EXT4-fs: Ignoring removed nobh option [ 91.112104][ T9251] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #3: comm syz.0.1762: corrupted inode contents [ 91.112144][ T9251] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 91.115129][ T9251] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #3: comm syz.0.1762: mark_inode_dirty error [ 91.115173][ T9251] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 91.119724][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 91.119756][ C1] EXT4-fs (loop0): initial error at time 347: ext4_do_update_inode:5742: inode 3 [ 91.119798][ C1] EXT4-fs (loop0): last error at time 347: ext4_dirty_inode:6639: inode 3 [ 91.128337][ T9251] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #3: comm syz.0.1762: corrupted inode contents [ 91.128367][ T9251] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 91.132328][ T9251] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.1762: mark_inode_dirty error [ 91.189865][ T9251] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 91.190260][ T9251] __quota_error: 5 callbacks suppressed [ 91.190279][ T9251] Quota error (device loop0): write_blk: dquota write failed [ 91.190345][ T9251] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 91.190371][ T9251] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1762: Failed to acquire dquot type 0 [ 91.190387][ T9251] loop0: lost filesystem error report for type 5 error -117 [ 91.202772][ T9251] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1762: corrupted inode contents [ 91.207425][ T9251] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 91.208061][ T9251] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.1762: mark_inode_dirty error [ 91.214151][ T9251] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 91.214843][ T9251] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1762: corrupted inode contents [ 91.214882][ T9251] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 91.219237][ T9251] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1762: mark_inode_dirty error [ 91.219270][ T9251] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 91.223465][ T9251] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1762: corrupted inode contents [ 91.228765][ T9251] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 91.232072][ T9251] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 91.232103][ T9251] loop0: lost filesystem error report for type 5 error -117 [ 91.234132][ T9251] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1762: corrupted inode contents [ 91.234151][ T9251] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 91.236072][ T9251] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.1762: mark_inode_dirty error [ 91.240228][ T9251] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 91.240247][ T9251] loop0: lost filesystem error report for type 5 error -117 [ 91.267372][ T9251] EXT4-fs (loop0): 1 truncate cleaned up [ 91.350180][ T9251] EXT4-fs (loop0): shut down requested (1) [ 91.367075][ T9263] loop7: detected capacity change from 0 to 128 [ 91.605771][ T9272] binder: 9269:9272 ioctl c018620c 20000000 returned -1 [ 92.107279][ T9299] netlink: 'syz.6.1784': attribute type 3 has an invalid length. [ 92.291384][ T9305] netlink: 'syz.0.1786': attribute type 12 has an invalid length. [ 92.298580][ T9305] netlink: 'syz.0.1786': attribute type 29 has an invalid length. [ 92.298629][ T9305] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1786'. [ 92.317581][ T9307] i2c i2c-0: new_device: Missing parameters [ 92.422500][ T9313] loop0: detected capacity change from 0 to 512 [ 92.481304][ T9313] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1792: corrupted xattr block 33: invalid header [ 92.484384][ T9313] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1792: corrupted xattr block 33: invalid header [ 92.487750][ T9313] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1792: corrupted xattr block 33: invalid header [ 92.580992][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1794'. [ 92.581034][ T9323] netlink: 'syz.4.1794': attribute type 7 has an invalid length. [ 92.581057][ T9323] netlink: 'syz.4.1794': attribute type 8 has an invalid length. [ 92.581069][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1794'. [ 92.617929][ T9323] gretap0: entered promiscuous mode [ 92.677615][ T9323] gretap0: left promiscuous mode [ 93.069950][ T30] audit: type=1400 audit(349.037:34): lsm=SMACK fn=smack_inode_get_acl action=denied subject="_" object="lowerdir" requested=r pid=9343 comm="syz.2.1800" name="file0" dev="tmpfs" ino=1835 [ 93.223175][ T9356] usbcore.quirks: string doesn't fit in 127 chars. [ 93.358482][ T9357] loop7: detected capacity change from 0 to 8 [ 93.483543][ T9357] SQUASHFS error: Failed to read block 0x6e6: -5 [ 93.483582][ T9357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 93.483606][ T9357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 93.643647][ T9380] i2c i2c-0: delete_device: Extra parameters [ 93.778501][ T9391] loop0: detected capacity change from 0 to 512 [ 93.898496][ T9402] loop7: detected capacity change from 0 to 512 [ 93.902121][ T9402] EXT4-fs: Ignoring removed oldalloc option [ 93.908887][ T9402] EXT4-fs: Ignoring removed i_version option [ 93.963784][ T9391] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1816: inode has both inline data and extents flags [ 93.969555][ T9402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.969722][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 93.969743][ C0] EXT4-fs (loop0): initial error at time 349: ext4_orphan_get:1399: inode 15 [ 93.969787][ C0] EXT4-fs (loop0): last error at time 349: ext4_orphan_get:1399: inode 15 [ 93.975436][ T9391] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1816: couldn't read orphan inode 15 (err -117) [ 93.975466][ T9391] loop0: lost filesystem error report for type 5 error -117 [ 93.999244][ T9402] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1821: invalid indirect mapped block 4294967295 (level 1) [ 94.000845][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 94.000859][ C0] EXT4-fs (loop7): initial error at time 349: ext4_free_branches:1023: inode 11 [ 94.000884][ C0] EXT4-fs (loop7): last error at time 349: ext4_free_branches:1023: inode 11 [ 94.017196][ T9402] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1821: invalid indirect mapped block 4294967295 (level 1) [ 94.020503][ T9402] EXT4-fs (loop7): 2 truncates cleaned up [ 94.088535][ T9395] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1819'. [ 94.207696][ T9420] loop0: detected capacity change from 0 to 512 [ 94.249593][ T9420] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1826: bg 0: block 5: invalid block bitmap [ 94.249630][ T9420] loop0: lost filesystem error report for type 5 error -117 [ 94.259726][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 94.259761][ C0] EXT4-fs (loop0): initial error at time 350: ext4_validate_block_bitmap:432 [ 94.259793][ C0] EXT4-fs (loop0): last error at time 350: ext4_validate_block_bitmap:432 [ 94.271765][ T9420] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 94.279923][ T9420] loop0: lost filesystem error report for type 5 error -117 [ 94.296829][ T9420] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1826: invalid indirect mapped block 3 (level 2) [ 94.333521][ T9420] EXT4-fs (loop0): 1 orphan inode deleted [ 94.341752][ T9420] EXT4-fs (loop0): 1 truncate cleaned up [ 94.473994][ T9420] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 94.523348][ T4720] EXT4-fs error (device loop0): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 94.534656][ T4720] EXT4-fs error (device loop0): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 94.795979][ T9459] loop6: detected capacity change from 0 to 512 [ 94.994333][ T6641] syz_tun (unregistering): left allmulticast mode [ 94.996727][ T6641] syz_tun (unregistering): left promiscuous mode [ 95.000118][ T6641] bridge0: port 3(syz_tun) entered disabled state [ 95.035178][ T9474] loop2: detected capacity change from 0 to 128 [ 95.039134][ T9474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 95.042010][ T9474] System zones: 1-3, 19-19, 35-36 [ 95.458754][ T9504] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1855'. [ 96.009733][ C1] net_ratelimit: 88859 callbacks suppressed [ 96.009776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.009835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.009894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.009946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.009995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.010042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.010090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.010136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.010183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.010228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.084782][ T9533] Injecting memory failure for pfn 0x13bc71 at process virtual address 0x20945000 [ 96.088506][ T9533] Memory failure: 0x13bc71: recovery action for clean LRU page: Recovered [ 96.090974][ T9533] Injecting memory failure for pfn 0x13bcf8 at process virtual address 0x20946000 [ 96.094520][ T9533] Memory failure: 0x13bcf8: recovery action for clean LRU page: Recovered [ 96.096255][ T9533] Injecting memory failure for pfn 0x13bc70 at process virtual address 0x20947000 [ 96.098339][ T9533] Memory failure: 0x13bc70: recovery action for clean LRU page: Recovered [ 96.098351][ T9533] Injecting memory failure for pfn 0x13bd76 at process virtual address 0x20948000 [ 96.098392][ T9533] Memory failure: 0x13bd76: recovery action for clean LRU page: Recovered [ 96.172002][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.175188][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.177635][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.179349][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.182629][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.321262][ T9547] loop2: detected capacity change from 0 to 8192 [ 96.403749][ T9547] loop2: p1 p2 p4[EZD] [ 96.406345][ T9547] loop2: p4 start 201326592 is beyond EOD, truncated [ 96.498098][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.503117][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.504821][ T9536] bridge_slave_0: entered allmulticast mode [ 96.506950][ T9536] bridge_slave_0: entered promiscuous mode [ 96.511186][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.514309][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.516051][ T9536] bridge_slave_1: entered allmulticast mode [ 96.518888][ T9536] bridge_slave_1: entered promiscuous mode [ 96.555815][ T9536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.560967][ T9536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.588657][ T9536] team0: Port device team_slave_0 added [ 96.608112][ T9536] team0: Port device team_slave_1 added [ 96.638430][ T9570] serio: Serial port ttynull [ 96.658484][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.658510][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.658536][ T9536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.659150][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.659164][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.659184][ T9536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.726564][ T9536] hsr_slave_0: entered promiscuous mode [ 96.726934][ T9536] hsr_slave_1: entered promiscuous mode [ 96.727153][ T9536] debugfs: 'hsr0' already exists in 'hsr' [ 96.727169][ T9536] Cannot create hsr debugfs directory [ 96.931504][ T9536] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 96.946787][ T9536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.948714][ T9536] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 96.953854][ T9536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.954191][ T9536] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 96.960175][ T9536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.963638][ T9536] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 96.970845][ T9536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.053527][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.053580][ T9536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.053679][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.053721][ T9536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.107823][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.115136][ T9595] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 97.133795][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.159067][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.194550][ T9536] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.203831][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.203877][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.220233][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.220274][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.265555][ T9536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.317721][ T9605] loop6: detected capacity change from 0 to 512 [ 97.319316][ T9605] EXT4-fs: Ignoring removed oldalloc option [ 97.321145][ T9605] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 97.327946][ T9605] EXT4-fs (loop6): 1 orphan inode deleted [ 97.327974][ T9605] EXT4-fs (loop6): 1 truncate cleaned up [ 97.415039][ T9612] loop2: detected capacity change from 0 to 512 [ 97.418669][ T9612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.423093][ T9612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 97.423149][ T9612] System zones: 1-12 [ 97.426883][ T9612] EXT4-fs (loop2): 1 truncate cleaned up [ 97.468071][ T9605] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 97.477607][ T9614] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 97.487400][ T9605] EXT4-fs (loop6): Remounting filesystem read-only [ 97.487547][ T9605] overlayfs: failed to verify upper root origin [ 97.488328][ T9614] overlayfs: cleanup of 'bus/work' failed (-30) [ 97.488352][ T9614] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 97.498680][ T9536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.571164][ T9536] veth0_vlan: entered promiscuous mode [ 97.572883][ T9536] veth1_vlan: entered promiscuous mode [ 97.620676][ T9536] veth0_macvtap: entered promiscuous mode [ 97.622933][ T9536] veth1_macvtap: entered promiscuous mode [ 97.638837][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.654399][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.717733][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.719625][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.721157][ T8186] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.721354][ T8186] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.721730][ T8186] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.721752][ T8186] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.740562][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.742222][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.929832][ T4716] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 97.945840][ T9646] loop7: detected capacity change from 0 to 128 [ 98.042929][ T9649] loop7: detected capacity change from 0 to 512 [ 98.045793][ T9649] EXT4-fs: Ignoring removed bh option [ 98.051185][ T9649] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 98.054021][ T9649] EXT4-fs (loop7): 1 truncate cleaned up [ 98.250285][ T4716] Bluetooth: hci5: command tx timeout [ 98.291002][ T9660] loop4: detected capacity change from 0 to 1024 [ 98.291343][ T9660] EXT4-fs: Ignoring removed oldalloc option [ 98.293953][ T9660] EXT4-fs: Ignoring removed orlov option [ 98.328853][ T9660] EXT4-fs mount: 29 callbacks suppressed [ 98.328898][ T9660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.373565][ T9660] EXT4-fs error (device loop4): ext4_readdir:265: inode #12: block 80: comm syz.4.1904: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 98.419631][ T4708] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /371/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 98.436544][ T4708] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /371/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 98.443181][ T4708] EXT4-fs error (device loop4): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 98.454251][ T4708] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /371/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 98.460123][ T4708] EXT4-fs error (device loop4): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 98.464426][ T4708] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /371/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 98.470247][ T4708] EXT4-fs error (device loop4): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 98.476907][ T4708] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /371/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 98.488476][ T4708] EXT4-fs error (device loop4): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 98.707116][ T9676] loop8: detected capacity change from 0 to 4096 [ 98.711076][ T9676] EXT4-fs: Ignoring removed orlov option [ 98.728323][ T9676] EXT4-fs (loop8): Test dummy encryption mode enabled [ 98.752530][ T9676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.756283][ T7312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.879273][ T9536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.964271][ T1335] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.137570][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.140835][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.142661][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.150197][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.152184][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.217457][ T9704] loop2: detected capacity change from 0 to 1024 [ 99.221814][ T9704] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.228743][ T9704] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 99.228876][ T9704] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.233989][ T9704] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1921: Invalid inode table block 0 in block_group 0 [ 99.234024][ T9704] loop2: lost filesystem error report for type 5 error -117 [ 99.239720][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 99.239751][ C0] EXT4-fs (loop2): initial error at time 355: __ext4_get_inode_loc:4886 [ 99.239783][ C0] EXT4-fs (loop2): last error at time 355: __ext4_get_inode_loc:4886 [ 99.240247][ T9704] EXT4-fs (loop2): Remounting filesystem read-only [ 99.240277][ T9704] Quota error (device loop2): write_blk: dquota write failed [ 99.240324][ T9704] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 99.240386][ T9704] EXT4-fs (loop2): 1 truncate cleaned up [ 99.256952][ T9704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.358292][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.360231][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.360337][ T9692] bridge_slave_0: entered allmulticast mode [ 99.364525][ T9692] bridge_slave_0: entered promiscuous mode [ 99.367858][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.369179][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.371430][ T9692] bridge_slave_1: entered allmulticast mode [ 99.373040][ T9692] bridge_slave_1: entered promiscuous mode [ 99.389464][ T9692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.393836][ T9692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.407335][ T9692] team0: Port device team_slave_0 added [ 99.410589][ T9692] team0: Port device team_slave_1 added [ 99.805790][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.157176][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.157203][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.157231][ T9692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.157869][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.157888][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.157907][ T9692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.218382][ T9692] hsr_slave_0: entered promiscuous mode [ 100.220367][ T9692] hsr_slave_1: entered promiscuous mode [ 100.221926][ T9692] debugfs: 'hsr0' already exists in 'hsr' [ 100.223489][ T9692] Cannot create hsr debugfs directory [ 100.399898][ T50] Bluetooth: hci5: command tx timeout [ 100.783457][ T9735] loop7: detected capacity change from 0 to 512 [ 100.788378][ T9735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 100.788427][ T9735] System zones: 1-12 [ 100.797221][ T9735] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #12: comm syz.7.1932: missing EA_INODE flag [ 100.797246][ T9735] fserror_report: 5 callbacks suppressed [ 100.797258][ T9735] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 100.800549][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 100.800564][ C0] EXT4-fs (loop7): initial error at time 356: ext4_xattr_inode_iget:441: inode 12 [ 100.800581][ C0] EXT4-fs (loop7): last error at time 356: ext4_xattr_inode_iget:441: inode 12 [ 100.812561][ T9735] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1932: error while reading EA inode 12 err=-117 [ 100.812597][ T9735] loop7: lost filesystem error report for type 5 error -117 [ 100.815249][ T9735] EXT4-fs (loop7): 1 orphan inode deleted [ 100.815751][ T9735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.902345][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.019735][ C1] net_ratelimit: 105632 callbacks suppressed [ 101.019782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.019838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.019890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.019945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.020227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.020275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.020320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.020368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.020412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.020459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.210286][ T50] Bluetooth: hci1: command tx timeout [ 101.281896][ T4820] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec [ 101.519124][ T1335] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.695608][ T9692] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 101.700614][ T9692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.702337][ T9692] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 101.709652][ T9692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.711727][ T9692] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 101.717337][ T9692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.719990][ T9692] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 101.723713][ T9692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.851844][ T9756] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1941'. [ 101.862162][ T9763] loop8: detected capacity change from 0 to 4096 [ 101.892826][ T9763] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.981245][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.985731][ T9692] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.016520][ T9536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.030238][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.030279][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.040239][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.040278][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.088741][ T9692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.091762][ T9692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.155932][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.238484][ T9692] veth0_vlan: entered promiscuous mode [ 102.252738][ T9692] veth1_vlan: entered promiscuous mode [ 102.304307][ T9692] veth0_macvtap: entered promiscuous mode [ 102.335470][ T7263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.422187][ T9805] loop2: detected capacity change from 0 to 128 [ 102.434811][ T1335] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.482102][ T9805] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.515072][ T9692] veth1_macvtap: entered promiscuous mode [ 102.568687][ T5469] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.581912][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.586648][ T9814] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1957'. [ 102.634618][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.637562][ T4716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.639476][ T4716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.642241][ T4716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.644981][ T4716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.671683][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.819844][ T8186] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.819970][ T8186] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.819998][ T8186] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.820019][ T8186] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.884269][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.884296][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.975118][ T8186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.986952][ T8186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.117028][ T9847] loop8: detected capacity change from 0 to 2048 [ 103.129517][ T9848] loop7: detected capacity change from 0 to 512 [ 103.134957][ T9847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.161661][ T9848] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1966: iget: bad i_size value: 38620345925642 [ 103.161696][ T9848] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.164613][ T9848] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1966: couldn't read orphan inode 15 (err -117) [ 103.164650][ T9848] loop7: lost filesystem error report for type 5 error -117 [ 103.169355][ T9848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.201910][ T9847] fs-verity (loop8, inode 16): Error -22 reading file data [ 103.201956][ T9847] fs-verity (loop8, inode 16): Error -22 building Merkle tree [ 103.252301][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.265227][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.265370][ T9816] bridge_slave_0: entered allmulticast mode [ 103.270252][ T9816] bridge_slave_0: entered promiscuous mode [ 103.290447][ T50] Bluetooth: hci1: command tx timeout [ 103.305000][ T9536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.322858][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.387799][ T1335] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.393308][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.393381][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.393489][ T9816] bridge_slave_1: entered allmulticast mode [ 103.398448][ T9816] bridge_slave_1: entered promiscuous mode [ 103.450896][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.451939][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.458020][ T9816] team0: Port device team_slave_0 added [ 103.458788][ T9816] team0: Port device team_slave_1 added [ 103.510045][ T9862] Format for deleting device is "id" (uint). [ 103.537207][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.538597][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.545721][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.552070][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.553702][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.558352][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.609583][ T9816] hsr_slave_0: entered promiscuous mode [ 103.613149][ T9816] hsr_slave_1: entered promiscuous mode [ 103.617888][ T9816] debugfs: 'hsr0' already exists in 'hsr' [ 103.619274][ T9816] Cannot create hsr debugfs directory [ 103.819511][ T9869] sctp: [Deprecated]: syz.9.1916 (pid 9869) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.819511][ T9869] Use struct sctp_sack_info instead [ 104.330711][ T50] Bluetooth: hci5: command tx timeout [ 104.649795][ T50] Bluetooth: hci0: command tx timeout [ 104.781384][ T9816] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.013835][ T1335] bridge_slave_1: left allmulticast mode [ 105.013876][ T1335] bridge_slave_1: left promiscuous mode [ 105.013977][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.028722][ T9896] Injecting memory failure for pfn 0x135689 at process virtual address 0x20289000 [ 105.041667][ T1335] bridge_slave_0: left allmulticast mode [ 105.041695][ T1335] bridge_slave_0: left promiscuous mode [ 105.041779][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.054096][ T9896] Memory failure: 0x135689: unhandlable page. [ 105.054132][ T9896] Memory failure: 0x135689: recovery action for get hwpoison page: Ignored [ 105.183403][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1990'. [ 105.314820][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.366289][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.369967][ T50] Bluetooth: hci1: command tx timeout [ 105.386687][ T1335] bond0 (unregistering): Released all slaves [ 105.394801][ T1335] bond1 (unregistering): Released all slaves [ 105.438368][ T9922] loop9: detected capacity change from 0 to 512 [ 105.443566][ T9922] EXT4-fs (loop9): Test dummy encryption mode enabled [ 105.493498][ T9922] EXT4-fs (loop9): 1 truncate cleaned up [ 105.494026][ T9922] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.518433][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12 [ 105.608304][ T8186] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 465: padding at end of block bitmap is not set [ 105.616525][ T8186] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 105.616553][ T8186] EXT4-fs (loop9): This should not happen!! Data will be lost [ 105.616553][ T8186] [ 105.616568][ T8186] EXT4-fs (loop9): Total free blocks count 0 [ 105.616582][ T8186] EXT4-fs (loop9): Free/Dirty block details [ 105.616597][ T8186] EXT4-fs (loop9): free_blocks=0 [ 105.616609][ T8186] EXT4-fs (loop9): dirty_blocks=4 [ 105.616620][ T8186] EXT4-fs (loop9): Block reservation details [ 105.616630][ T8186] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 105.627976][ T9692] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 105.628686][ T9692] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.716237][ T9816] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.773512][ T9942] loop9: detected capacity change from 0 to 128 [ 105.778823][ T9942] EXT4-fs: Ignoring removed nobh option [ 105.783740][ T9942] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.866529][ T9692] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.029714][ C1] net_ratelimit: 104080 callbacks suppressed [ 106.029760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.029822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.029913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.029982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.030044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.030110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.030168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.030228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.030291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.030343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.096986][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14 [ 106.112422][ T9958] netlink: 'syz.9.2000': attribute type 2 has an invalid length. [ 106.508914][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13 [ 106.730225][ T4716] Bluetooth: hci0: command tx timeout [ 106.774106][ T9991] rnbd_client L127: Can't parse path ip:: -22 [ 106.786777][ T9816] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.808236][ T9985] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2003'. [ 106.808292][ T9985] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2003'. [ 107.029091][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15 [ 107.096761][T10011] bond1 (unregistering): Released all slaves [ 107.234094][T10021] loop9: detected capacity change from 0 to 256 [ 107.349457][ T9816] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.450051][ T50] Bluetooth: hci1: command tx timeout [ 107.604577][T10042] netlink: 'syz.9.2021': attribute type 3 has an invalid length. [ 108.285378][ T9816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.290893][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.292789][ T9816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.297444][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.299297][ T9816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.302450][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.305027][ T9816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.310192][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.347008][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.355584][ T9816] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.358713][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.358756][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.373614][ T9816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.375606][ T9816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.380747][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.380783][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.403462][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.424612][ T9816] veth0_vlan: entered promiscuous mode [ 108.428329][ T9816] veth1_vlan: entered promiscuous mode [ 108.436807][ T9816] veth0_macvtap: entered promiscuous mode [ 108.439159][ T9816] veth1_macvtap: entered promiscuous mode [ 108.445904][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.454000][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.516140][ T8185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.517788][ T8185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.520001][ T4848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.520043][ T4848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.520078][ T4848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.520106][ T4848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.538620][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.538646][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.784486][ T1335] hsr_slave_0: left promiscuous mode [ 108.787613][ T1335] hsr_slave_1: left promiscuous mode [ 108.789054][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.791148][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.794180][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.795702][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.806808][ T1335] veth1_macvtap: left promiscuous mode [ 108.807945][ T1335] veth0_macvtap: left promiscuous mode [ 108.938738][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 108.944939][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 111.039753][ C1] net_ratelimit: 105086 callbacks suppressed [ 111.039795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.039860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.039928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.039993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.040057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.040386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.040440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.040487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.040537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.040582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.658490][ T1335] bridge_slave_1: left allmulticast mode [ 111.659572][ T1335] bridge_slave_1: left promiscuous mode [ 111.661283][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.667098][ T1335] bridge_slave_0: left allmulticast mode [ 111.668140][ T1335] bridge_slave_0: left promiscuous mode [ 111.669362][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.764450][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.778849][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.789406][ T1335] bond0 (unregistering): Released all slaves [ 112.805395][T10091] loop4: detected capacity change from 0 to 512 [ 112.846605][T10091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.870883][T10091] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2032: corrupted xattr block 33: invalid header [ 112.881123][T10091] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2032: corrupted xattr block 33: invalid header [ 112.883882][T10091] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2032: corrupted xattr block 33: invalid header [ 112.943501][T10091] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2032: corrupted xattr block 33: invalid header [ 113.045758][T10104] loop2: detected capacity change from 0 to 512 [ 113.079946][T10104] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.191792][ T40] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 113.192599][ T40] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 113.192623][ T40] EXT4-fs (loop4): This should not happen!! Data will be lost [ 113.192623][ T40] [ 113.192637][ T40] EXT4-fs (loop4): Total free blocks count 0 [ 113.192650][ T40] EXT4-fs (loop4): Free/Dirty block details [ 113.192663][ T40] EXT4-fs (loop4): free_blocks=65280 [ 113.192675][ T40] EXT4-fs (loop4): dirty_blocks=8 [ 113.192686][ T40] EXT4-fs (loop4): Block reservation details [ 113.192695][ T40] EXT4-fs (loop4): i_reserved_data_blocks=8 [ 113.228408][ T9816] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 113.254753][ T9816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.291004][T10114] loop9: detected capacity change from 0 to 2048 [ 113.423747][T10114] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.606831][ T9692] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.843793][T10146] netlink: 'syz.8.2055': attribute type 2 has an invalid length. [ 114.074447][ T1335] hsr_slave_0: left promiscuous mode [ 114.077913][ T1335] hsr_slave_1: left promiscuous mode [ 114.078218][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.078238][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.085888][T10172] loop9: detected capacity change from 0 to 256 [ 114.092510][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.092537][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.118884][ T1335] veth1_macvtap: left promiscuous mode [ 114.118932][ T1335] veth0_macvtap: left promiscuous mode [ 114.118997][ T1335] veth1_vlan: left promiscuous mode [ 114.119042][ T1335] veth0_vlan: left promiscuous mode [ 114.477861][T10196] loop8: detected capacity change from 0 to 512 [ 114.485414][T10196] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2076: inode has both inline data and extents flags [ 114.488514][T10196] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.489091][T10196] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2076: couldn't read orphan inode 15 (err -117) [ 114.491311][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 114.491322][ C0] EXT4-fs (loop8): initial error at time 370: ext4_orphan_get:1399: inode 15 [ 114.491338][ C0] EXT4-fs (loop8): last error at time 370: ext4_orphan_get:1399: inode 15 [ 114.500553][T10196] loop8: lost filesystem error report for type 5 error -117 [ 114.517516][T10196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.545461][T10196] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 880048229 > max in inode 18 [ 114.840968][ T9536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.995283][T10214] loop4: detected capacity change from 0 to 512 [ 115.017598][T10214] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2085: iget: bad i_size value: 38620345925642 [ 115.017643][T10214] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.020134][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 115.020150][ C0] EXT4-fs (loop4): initial error at time 626: ext4_orphan_get:1399: inode 15 [ 115.020168][ C0] EXT4-fs (loop4): last error at time 626: ext4_orphan_get:1399: inode 15 [ 115.027749][T10214] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2085: couldn't read orphan inode 15 (err -117) [ 115.027794][T10214] loop4: lost filesystem error report for type 5 error -117 [ 115.031055][T10214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.091959][ T39] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 115.094681][ T39] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 115.094714][ T39] EXT4-fs (loop4): This should not happen!! Data will be lost [ 115.094714][ T39] [ 115.094730][ T39] EXT4-fs (loop4): Total free blocks count 0 [ 115.094745][ T39] EXT4-fs (loop4): Free/Dirty block details [ 115.094758][ T39] EXT4-fs (loop4): free_blocks=0 [ 115.094770][ T39] EXT4-fs (loop4): dirty_blocks=1 [ 115.094780][ T39] EXT4-fs (loop4): Block reservation details [ 115.094790][ T39] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 115.117241][ T9816] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 115.118598][ T9816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.267785][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 115.287723][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 115.449128][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2063'. [ 115.462990][T10164] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.610291][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2096'. [ 116.049728][ C1] net_ratelimit: 104810 callbacks suppressed [ 116.049775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.049838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.050705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.050767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.050819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.050871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.050929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.050986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.051035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.051084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.105801][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 116.311031][T10262] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2106'. [ 117.073512][T10316] erspan0: entered promiscuous mode [ 117.218817][T10328] netlink: 'syz.9.2135': attribute type 1 has an invalid length. [ 117.425659][T10339] loop2: detected capacity change from 0 to 4096 [ 117.428622][T10339] EXT4-fs: inline encryption not supported [ 117.432048][T10339] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.433733][T10339] EXT4-fs (loop2): Test dummy encryption mode enabled [ 117.495359][T10339] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002] [ 117.495412][T10339] System zones: 0-5 [ 117.512084][T10339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.569115][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.059750][ C1] net_ratelimit: 107033 callbacks suppressed [ 121.059795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.059861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.059919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.059977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.060024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.060074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.060120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.060177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.060225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.060272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.690122][T10410] binder: 10409:10410 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 122.691815][T10410] binder: 10409:10410 ioctl c0306201 200001c0 returned -22 [ 122.761433][T10417] pimreg: tun_chr_ioctl cmd 2147767507 [ 122.952327][ T4805] hid-generic 0005:07C0:0008.0002: item fetching failed at offset 0/1 [ 122.957042][ T4805] hid-generic 0005:07C0:0008.0002: probe with driver hid-generic failed with error -22 [ 123.142888][T10440] loop7: detected capacity change from 0 to 512 [ 123.170374][T10440] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.190814][T10440] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2162: Invalid block bitmap block 0 in block_group 0 [ 123.190851][T10440] loop7: lost filesystem error report for type 5 error -117 [ 123.193628][T10440] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 123.193662][T10440] loop7: lost filesystem error report for type 5 error -117 [ 123.199721][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 123.199753][ C0] EXT4-fs (loop7): initial error at time 635: ext4_read_block_bitmap_nowait:483 [ 123.199785][ C0] EXT4-fs (loop7): last error at time 635: ext4_mb_clear_bb:6679 [ 123.209658][T10440] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.2162: attempt to clear invalid blocks 983261 len 1 [ 123.225837][T10440] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.234269][T10440] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2162: Invalid inode table block 0 in block_group 0 [ 123.234303][T10440] loop7: lost filesystem error report for type 5 error -117 [ 123.243341][T10440] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 123.243379][T10440] loop7: lost filesystem error report for type 5 error -117 [ 123.246439][T10440] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 123.246463][T10440] loop7: lost filesystem error report for type 5 error -117 [ 123.250280][T10440] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2162: Invalid inode table block 0 in block_group 0 [ 123.250315][T10440] loop7: lost filesystem error report for type 5 error -117 [ 123.256274][T10440] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 123.256312][T10440] loop7: lost filesystem error report for type 5 error -117 [ 123.259627][T10440] EXT4-fs error (device loop7): ext4_truncate:4691: inode #11: comm syz.7.2162: mark_inode_dirty error [ 123.259658][T10440] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.267043][T10440] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 123.267069][T10440] loop7: lost filesystem error report for type 5 error -117 [ 123.276722][T10440] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2162: Invalid inode table block 0 in block_group 0 [ 123.276763][T10440] loop7: lost filesystem error report for type 5 error -117 [ 123.277856][T10440] EXT4-fs (loop7): 1 truncate cleaned up [ 123.279454][T10440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.486405][T10440] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 123.493256][T10440] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (36455!=32276) [ 123.535029][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.797777][T10474] loop9: detected capacity change from 0 to 512 [ 123.805785][T10474] EXT4-fs: Ignoring removed orlov option [ 123.809994][T10474] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 123.833918][T10474] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 123.839716][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 123.839743][ C0] EXT4-fs (loop9): initial error at time 635: ext4_mb_generate_buddy:1317 [ 123.839773][ C0] EXT4-fs (loop9): last error at time 635: ext4_mb_generate_buddy:1317 [ 123.859966][T10474] EXT4-fs (loop9): 1 truncate cleaned up [ 123.865087][T10474] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.876955][T10474] EXT4-fs (loop9): shut down requested (2) [ 123.897355][ T9692] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.073619][T10478] loop9: detected capacity change from 0 to 8192 [ 124.120604][T10478] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.497977][T10499] loop7: detected capacity change from 0 to 512 [ 124.509850][T10499] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 124.550748][T10499] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2188: Invalid block bitmap block 0 in block_group 0 [ 124.553706][T10499] loop7: lost filesystem error report for type 5 error -117 [ 124.554151][T10499] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 124.557440][T10499] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.2188: attempt to clear invalid blocks 983261 len 1 [ 124.560080][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 124.560094][ C0] EXT4-fs (loop7): initial error at time 636: ext4_read_block_bitmap_nowait:483 [ 124.560113][ C0] EXT4-fs (loop7): last error at time 636: ext4_mb_clear_bb:6679 [ 124.583206][T10499] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 124.583474][T10499] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2188: Invalid inode table block 0 in block_group 0 [ 124.585367][T10499] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 124.594283][T10499] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 124.597882][T10499] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2188: Invalid inode table block 0 in block_group 0 [ 124.600368][T10499] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 124.602289][T10499] EXT4-fs error (device loop7): ext4_truncate:4691: inode #11: comm syz.7.2188: mark_inode_dirty error [ 124.602312][T10499] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 124.604759][T10499] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 124.608654][T10499] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2188: Invalid inode table block 0 in block_group 0 [ 124.611589][T10499] EXT4-fs (loop7): 1 truncate cleaned up [ 124.612072][T10499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.725143][T10499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.844202][ T10] IPVS: starting estimator thread 0... [ 124.929889][T10513] IPVS: using max 59 ests per chain, 141600 per kthread [ 125.205040][T10543] loop4: detected capacity change from 0 to 512 [ 125.267263][T10543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.339357][ T9816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.388595][T10556] loop8: detected capacity change from 0 to 1024 [ 125.401778][T10556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.575965][T10556] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 125.721465][ T9536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.883457][T10573] sctp: [Deprecated]: syz.8.2217 (pid 10573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.883457][T10573] Use struct sctp_sack_info instead [ 125.933888][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933929][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.069725][ C1] net_ratelimit: 105790 callbacks suppressed [ 126.069765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.069845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.069903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.069959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.070009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.070058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.070105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.070155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.070201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.070255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.129174][T10582] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2225'. [ 126.192084][ T50] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 126.236784][T10589] loop9: detected capacity change from 0 to 512 [ 126.253916][T10589] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2228: bg 0: block 5: invalid block bitmap [ 126.256694][T10589] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 126.259721][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 126.259750][ C0] EXT4-fs (loop9): initial error at time 638: ext4_validate_block_bitmap:432 [ 126.259791][ C0] EXT4-fs (loop9): last error at time 638: ext4_mb_clear_bb:6679 [ 126.265627][T10589] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2228: invalid indirect mapped block 3 (level 2) [ 126.265663][T10589] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.268575][T10589] EXT4-fs (loop9): 1 orphan inode deleted [ 126.268598][T10589] EXT4-fs (loop9): 1 truncate cleaned up [ 126.269064][T10589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.349153][T10594] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2230'. [ 126.351287][T10594] netlink: 'syz.7.2230': attribute type 7 has an invalid length. [ 126.355112][T10594] netlink: 'syz.7.2230': attribute type 8 has an invalid length. [ 126.355150][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2230'. [ 126.361451][T10594] gretap0: entered promiscuous mode [ 126.382255][T10594] gretap0: left promiscuous mode [ 126.384951][T10589] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 126.402705][ T9692] EXT4-fs error (device loop9): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 126.408005][ T9692] EXT4-fs error (device loop9): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 126.614553][T10606] loop2: detected capacity change from 0 to 512 [ 126.621820][T10606] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2236: inode has both inline data and extents flags [ 126.624951][T10606] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.625556][T10606] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2236: couldn't read orphan inode 15 (err -117) [ 126.629731][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 126.629755][ C0] EXT4-fs (loop2): initial error at time 638: ext4_orphan_get:1399: inode 15 [ 126.629793][ C0] EXT4-fs (loop2): last error at time 638: ext4_orphan_get:1404 [ 126.635152][T10606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.710789][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.852438][T10617] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x42 [ 126.911066][T10619] RDS: rds_bind could not find a transport for ::8000:20:0:0, load rds_tcp or rds_rdma? [ 127.063551][T10630] netlink: 'syz.2.2248': attribute type 3 has an invalid length. [ 127.151136][T10635] loop2: detected capacity change from 0 to 512 [ 127.197849][T10635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.329392][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.363432][T10642] Injecting memory failure for pfn 0x13c165 at process virtual address 0x20945000 [ 127.379253][T10642] Memory failure: 0x13c165: recovery action for clean LRU page: Recovered [ 127.379308][T10642] Injecting memory failure for pfn 0x11feba at process virtual address 0x20946000 [ 127.385868][T10642] Memory failure: 0x11feba: recovery action for clean LRU page: Recovered [ 127.387518][T10642] Injecting memory failure for pfn 0x1206d2 at process virtual address 0x20947000 [ 127.390377][T10642] Memory failure: 0x1206d2: recovery action for clean LRU page: Recovered [ 127.392186][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2252'. [ 127.393993][T10642] Injecting memory failure for pfn 0x12167d at process virtual address 0x20948000 [ 127.396634][T10642] Memory failure: 0x12167d: recovery action for clean LRU page: Recovered [ 127.471061][T10648] loop8: detected capacity change from 0 to 512 [ 127.492882][T10648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.512215][T10648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.547713][ T50] Bluetooth: Unexpected continuation frame (len 48) [ 127.693882][T10661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.696882][T10661] EXT4-fs (loop4): 1 truncate cleaned up [ 127.697346][T10661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.834904][ T9816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.864314][ T9692] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.114283][ T39] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.334452][ T9536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.438468][ T4716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.444064][ T4716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.446577][ T4716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.450187][ T4716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.450535][ T4716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.493936][T10693] set_capacity_and_notify: 2 callbacks suppressed [ 128.493975][T10693] loop2: detected capacity change from 0 to 4096 [ 128.501884][T10693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.581651][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.602262][T10701] bonding: no command found in bonding_masters - use +ifname or -ifname [ 128.738079][ T39] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.047508][T10680] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.054200][T10680] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.056070][T10680] bridge_slave_0: entered allmulticast mode [ 129.077417][T10680] bridge_slave_0: entered promiscuous mode [ 129.083180][T10680] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.084617][T10680] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.084732][T10680] bridge_slave_1: entered allmulticast mode [ 129.088999][T10680] bridge_slave_1: entered promiscuous mode [ 129.112300][T10734] loop8: detected capacity change from 0 to 512 [ 129.123747][T10734] EXT4-fs (loop8): Test dummy encryption mode enabled [ 129.139942][T10734] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2284: inode has both inline data and extents flags [ 129.139980][T10734] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.140189][T10734] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2284: couldn't read orphan inode 15 (err -117) [ 129.140209][T10734] fserror_report: 11 callbacks suppressed [ 129.140220][T10734] loop8: lost filesystem error report for type 5 error -117 [ 129.140742][T10734] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.168682][T10680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.175004][T10680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.188209][T10680] team0: Port device team_slave_0 added [ 129.218976][T10680] team0: Port device team_slave_1 added [ 129.278603][ T9536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.374852][ T39] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.423244][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2288'. [ 129.493940][T10680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.493970][T10680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.493998][T10680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.494592][T10680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.494605][T10680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.494625][T10680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.547379][T10680] hsr_slave_0: entered promiscuous mode [ 129.552040][T10680] hsr_slave_1: entered promiscuous mode [ 129.782444][T10761] loop2: detected capacity change from 0 to 512 [ 129.796344][T10761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.888848][T10759] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2298: bg 0: block 67: padding at end of block bitmap is not set [ 129.893043][T10759] EXT4-fs (loop2): Remounting filesystem read-only [ 129.894703][T10759] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 129.941556][T10776] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.033292][ T5469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.137191][ T39] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.153128][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2305'. [ 130.285727][ T30] audit: type=1400 audit(642.258:35): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=x pid=10801 comm="syz.7.2306" name="file1" dev="tmpfs" ino=1085 [ 130.571357][ T50] Bluetooth: hci1: command tx timeout [ 130.747816][ T868] kernel write not supported for file /443/net/netstat (pid: 868 comm: kworker/0:2) [ 131.060813][ T39] bridge_slave_1: left allmulticast mode [ 131.060850][ T39] bridge_slave_1: left promiscuous mode [ 131.060957][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.069403][ T39] bridge_slave_0: left allmulticast mode [ 131.069428][ T39] bridge_slave_0: left promiscuous mode [ 131.069518][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.079718][ C1] net_ratelimit: 103486 callbacks suppressed [ 131.079756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.079817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.079878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.079945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.080011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.080086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.080139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.080193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.080241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.080289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.373206][ T50] block nbd1: Receive control failed (result -32) [ 131.375776][ T4716] block nbd1: Receive control failed (result -32) [ 131.537629][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 131.608133][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.857512][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.993639][ T39] bond0 (unregistering): Released all slaves [ 132.649839][ T4716] Bluetooth: hci1: command tx timeout [ 133.783791][T10680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.786792][T10680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.789092][T10680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.793520][T10680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.795591][T10680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.798263][T10680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.802085][T10680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 133.807024][T10680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.835483][T10680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.843749][T10680] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.847194][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.847243][ T8185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.855356][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.855395][ T8185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.888337][T10680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.905782][T10680] veth0_vlan: entered promiscuous mode [ 133.909383][T10680] veth1_vlan: entered promiscuous mode [ 133.919454][T10680] veth0_macvtap: entered promiscuous mode [ 133.926794][T10680] veth1_macvtap: entered promiscuous mode [ 133.933927][T10680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.937856][T10680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.020356][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.023205][ T1335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.024973][ T1335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.026949][ T1335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.033589][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.033617][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.049320][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.049352][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.396012][ T39] hsr_slave_0: left promiscuous mode [ 134.399122][ T39] hsr_slave_1: left promiscuous mode [ 134.401980][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.403561][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.406021][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.407586][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.419110][ T39] veth1_macvtap: left promiscuous mode [ 134.422358][ T39] veth0_macvtap: left promiscuous mode [ 134.423412][ T39] veth1_vlan: left promiscuous mode [ 134.424583][ T39] veth0_vlan: left promiscuous mode [ 134.585710][ T39] team0 (unregistering): Port device team_slave_1 removed [ 134.598045][ T39] team0 (unregistering): Port device team_slave_0 removed [ 134.729889][ T4716] Bluetooth: hci1: command tx timeout [ 136.089870][ C1] net_ratelimit: 106191 callbacks suppressed [ 136.089920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.089987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.090040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.090088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.090137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.090182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.090230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.090275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.090322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.090367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.810445][ T4716] Bluetooth: hci1: command tx timeout [ 137.709075][T10959] nvme nvme0: resetting controller [ 137.792674][ T1335] nvme0n1: I/O Cmd(0x2) @ LBA 616, 472 blocks, I/O Error (sct 0x3 / sc 0x71) [ 137.792749][ T1335] I/O error, dev nvme0n1, sector 616 op 0x0:(READ) flags 0x80700 phys_seg 59 prio class 2 [ 137.793617][ T1335] nvme 0000:00:02.0: enabling device (0000 -> 0002) [ 137.825427][ T1335] nvme nvme0: Disabling device after reset failure: -19 [ 137.887192][T10968] loop3: detected capacity change from 0 to 1024 [ 137.893233][T10968] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2341'. [ 137.895138][T10968] tipc: Invalid UDP bearer configuration [ 137.895362][T10968] tipc: Enabling of bearer rejected, failed to enable media [ 137.930144][ T1335] Unable to handle kernel paging request at virtual address dfff800000000031 [ 137.930284][ T1335] KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f] [ 137.930380][ T1335] Mem abort info: [ 137.930470][ T1335] ESR = 0x0000000096000005 [ 137.930572][ T1335] EC = 0x25: DABT (current EL), IL = 32 bits [ 137.930656][ T1335] SET = 0, FnV = 0 [ 137.930738][ T1335] EA = 0, S1PTW = 0 [ 137.930821][ T1335] FSC = 0x05: level 1 translation fault [ 137.930943][ T1335] Data abort info: [ 137.931055][ T1335] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 137.931150][ T1335] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 137.931266][ T1335] GCS = 0, Overlay = 0, DirtyBit = 0 [ 137.931371][ T1335] [dfff800000000031] address between user and kernel address ranges [ 137.931612][ T1335] Internal error: Oops: 0000000096000005 [#1] SMP [ 137.944784][ T1335] Modules linked in: [ 137.945464][ T1335] CPU: 0 UID: 0 PID: 1335 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT [ 137.947289][ T1335] Tainted: [L]=SOFTLOCKUP [ 137.948004][ T1335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 137.949800][ T1335] Workqueue: nvme-reset-wq nvme_reset_work [ 137.950788][ T1335] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 137.952076][ T1335] pc : blk_mq_complete_request_remote+0xc4/0x858 [ 137.953191][ T1335] lr : blk_mq_complete_request_remote+0x88/0x858 [ 137.954268][ T1335] sp : ffff800095d37900 [ 137.954998][ T1335] x29: ffff800095d37980 x28: ffff800095d37900 x27: dfff800000000000 [ 137.956404][ T1335] x26: 0000000000000000 x25: ffff0000c691226a x24: dfff800000000000 [ 137.957808][ T1335] x23: ffff700012ba6f20 x22: 1fffe0001924a324 x21: 1fffe00018d22448 [ 137.959145][ T1335] x20: 000000000000018e x19: ffff0000c9251800 x18: 1fffe00034bb7428 [ 137.960511][ T1335] x17: ffff80008a7d6000 x16: 0000000000000008 x15: ffff80008a35fda0 [ 137.961891][ T1335] x14: ffff80008a5d5e28 x13: 0000000000000001 x12: 0000000000000000 [ 137.963262][ T1335] x11: ffff80008a5d5e28 x10: ffff8000884bb5d7 x9 : 1fffe0001924a302 [ 137.964664][ T1335] x8 : 0000000000000031 x7 : 0000000000000000 x6 : 0000000000000000 [ 137.965979][ T1335] x5 : 0000000000000020 x4 : 0000000000000008 x3 : ffff80008281f228 [ 137.967298][ T1335] x2 : 0000000000000000 x1 : ffff0000c6499d40 x0 : 0000000000000000 [ 137.968664][ T1335] Call trace: [ 137.969228][ T1335] blk_mq_complete_request_remote+0xc4/0x858 (P) [ 137.970298][ T1335] nvme_poll_cq+0x4ec/0x106c [ 137.971065][ T1335] nvme_dev_disable+0x384/0x540 [ 137.971875][ T1335] nvme_reset_work+0x510/0x69c [ 137.972661][ T1335] process_scheduled_works+0x788/0x10b8 [ 137.973606][ T1335] worker_thread+0x798/0xbd0 [ 137.974410][ T1335] kthread+0x304/0x3d4 [ 137.975099][ T1335] ret_from_fork+0x10/0x20 [ 137.975907][ T1335] Code: 97d02797 f9400288 91063914 d343fe88 (38f86908) [ 137.977129][ T1335] ---[ end trace 0000000000000000 ]--- [ 138.296834][ T1335] Kernel panic - not syncing: Oops: Fatal exception [ 138.297995][ T1335] SMP: stopping secondary CPUs [ 138.298852][ T1335] Kernel Offset: disabled [ 138.299592][ T1335] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 138.300716][ T1335] Memory Limit: none [ 138.614976][ T1335] Rebooting in 86400 seconds..