last executing test programs: 1m33.292842137s ago: executing program 2 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 1m33.002917253s ago: executing program 2 (id=1145): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 1m32.863845057s ago: executing program 2 (id=1149): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) 1m32.684432337s ago: executing program 2 (id=1150): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 1m32.471003545s ago: executing program 2 (id=1154): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x24020400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, 0xffffffffffffffff, 0x12, 0x0, 0x4000}, 0x10) 1m31.655697492s ago: executing program 2 (id=1164): r0 = syz_io_uring_setup(0x2d76, &(0x7f0000000ac0)={0x0, 0xfb8b, 0x0, 0x1, 0x8a}, &(0x7f00000002c0)=0x0, &(0x7f0000000f80)=0x0, &(0x7f0000000fc0)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000300)=@ublk_stop_dev_sqe={0x2e, 0x3b, 0x0, 0xffffffffffffffff, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x7}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 1m31.103993096s ago: executing program 32 (id=1164): r0 = syz_io_uring_setup(0x2d76, &(0x7f0000000ac0)={0x0, 0xfb8b, 0x0, 0x1, 0x8a}, &(0x7f00000002c0)=0x0, &(0x7f0000000f80)=0x0, &(0x7f0000000fc0)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000300)=@ublk_stop_dev_sqe={0x2e, 0x3b, 0x0, 0xffffffffffffffff, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x7}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 2.888679615s ago: executing program 1 (id=2437): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000011c0)={[{@user_xattr}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@block_validity}, {@noauto_da_alloc}, {@barrier}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 2.253552168s ago: executing program 1 (id=2446): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x12) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.080275614s ago: executing program 3 (id=2449): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xecc7, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = socket$phonet(0x23, 0x2, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x8, 0x0, r4, 0x0, 0x0}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.791960425s ago: executing program 3 (id=2452): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000500)="1b54beef", 0x4}, {&(0x7f0000002b40)="fb1add96eb", 0x5}], 0x2, 0x0, 0x0, 0x20000800}], 0x1, 0x4054) 1.72184276s ago: executing program 3 (id=2454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) write$P9_RSTATu(r0, &(0x7f0000000180)={0x68, 0x7d, 0x1, {{0x0, 0x53, 0x7, 0x7ff, {0x0, 0x2, 0x2}, 0x850000, 0x4, 0xffff0001, 0x7, 0x8, 'debugfs\x00', 0x8, 'debugfs\x00', 0x8, 'debugfs\x00', 0x8, 'debugfs\x00'}, 0x0, '', 0x0, 0x0, 0xffffffffffffffff}}, 0x68) 1.671783058s ago: executing program 4 (id=2455): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r0, &(0x7f0000000f40)={0x0, ""/255}, 0x107, 0x0, 0x0) 1.647791766s ago: executing program 1 (id=2456): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[], 0x878) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001180)={0x0, 0xfffffffffffffffa, 0x0, 0x1}) 1.556488586s ago: executing program 4 (id=2458): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x89) mkdirat(r0, &(0x7f00000005c0)='./config/target/core/file0\x00', 0x0) 1.472055356s ago: executing program 0 (id=2459): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = timerfd_create(0x1, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.419944013s ago: executing program 3 (id=2460): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='jY\r\x00\x00CQ\x00\x8cQ \xa1\x1aw\xd8\xb5@\xe1Q\\\x91P\x11\xd2?##\xbe\x83\xcd\xd5S\x80\x8aS\x0f\xf24\xaeZ\x10\xb9\xa8\xd0t\xd6\x15\xd6d AE\xc1\x17\b\x0e0\xe5\xc3z\x03\xf3Z\xb3\x0f\xd5\xa5\xec\xc0\x17\n\n]\xe6x\xaekA\xd1\xea$\xeeXi\x86\x1b\xca\x8c\xf9\xf7\xf9?\xa4b\xbf\xbb\xf1i\xbf\xa3\x13v\xa5\xc3K\xca\x85\xc4\'h\'\xc8\xe1\xe34\xcd\xa9\xe8\xe5,\xd2,\x1a\x11?\xde\x11\x13\x1a\xc7\xe5)^\x9b[p\x0e(\xc3\x8f*%I\x9aQ\xeb\xd9u\x1a\xca\xd2\xef\x96\xb5\x9b\xba\xb3\xb1\x91Z\x9f$\x95\xca\xbe\xbb\x1f\x9c/\x9d\x92\x17{\xd8\xdb\xdc\x05i\x946N\x0e\x7f\x8f\xac\bo\xfc\xa1\b\xa6\xd5\x99\xe8\xb7\xfa\xf7\xf1,\xa0\x0f\xd45\x8f\t\xe5\xac\xc9\x91*gp`Y\x8eN', &(0x7f0000000180)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?q\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\xd1{\xbb$OnS]\xd8\xc9\xab\xd2\x84\x19\x00\x00\x01\xfe\x19\xc1K\xa2\x17\xb3\x83.,\x00\x00\x00\x00\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) read(r0, 0x0, 0xfffffea1) 1.379642907s ago: executing program 4 (id=2461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f}, 0x20) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 1.309092757s ago: executing program 0 (id=2462): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) semop(r0, &(0x7f0000000180)=[{0x1, 0x7fff, 0x800}], 0x1) 1.132146149s ago: executing program 3 (id=2464): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x800) 1.112081396s ago: executing program 0 (id=2465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)="25ae84d5f4b8b24f39e3752aa3da23391c5db94676b616ac917535d26895bbc335d98fe2a8ab7403901607cbb1442e3bb54bf9e81ce3b18df758c807a94f60aa40b7a34929addf14bacac45621fa2f58f477dac518c67731f677b3bef4fd2c8f779ac6c5a5dafb1487bedb12779a27732bb93d04ae84d3f6f9923f514a7ee7be", 0x80) 1.110980394s ago: executing program 1 (id=2466): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x7, 0x23, 0xfffffffe, {}, {0x77359400}, {}, 0x2, @can={{}, 0x3, 0x2}}, 0x48}, 0x300, 0x0, 0x0, 0x4010000}, 0x20000000) 1.096662902s ago: executing program 4 (id=2467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df055b7426d8f06de49c68073ed1e7e0b6d62c1efa92e158"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 978.108595ms ago: executing program 5 (id=2468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x16, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, 0x0, 0xba, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 961.628439ms ago: executing program 4 (id=2469): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r0, 0x8925, 0x4000002000111a) 907.499367ms ago: executing program 0 (id=2470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500), &(0x7f0000000280)) 821.608934ms ago: executing program 1 (id=2471): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) 790.446475ms ago: executing program 5 (id=2472): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f00000003c0)) 662.65885ms ago: executing program 0 (id=2473): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) unshare(0x6020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a80)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4000000007fff, 0x0, 0x1}}, 0x40) 639.876094ms ago: executing program 5 (id=2474): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x500) 626.130534ms ago: executing program 3 (id=2475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 492.575141ms ago: executing program 4 (id=2476): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x1d, 0x4) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) 457.179628ms ago: executing program 5 (id=2477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0xff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000000), &(0x7f00000006c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 291.4553ms ago: executing program 0 (id=2478): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000300)=0xc21b) 127.160167ms ago: executing program 5 (id=2479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20) setresuid(0x0, 0xee01, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x3, 0x9, 0x3, 0x6}, 0x20) 101.061404ms ago: executing program 1 (id=2480): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33) 0s ago: executing program 5 (id=2481): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x89) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x15) kernel console output (not intermixed with test programs): nd tx timeout [ 32.279931][ T4909] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 32.280337][ T4909] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 10 with max blocks 1 with error 28 [ 32.280354][ T4909] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.280354][ T4909] [ 32.280368][ T4909] EXT4-fs (loop4): Total free blocks count 0 [ 32.280376][ T4909] EXT4-fs (loop4): Free/Dirty block details [ 32.280388][ T4909] EXT4-fs (loop4): free_blocks=2415919504 [ 32.280399][ T4909] EXT4-fs (loop4): dirty_blocks=16 [ 32.280406][ T4909] EXT4-fs (loop4): Block reservation details [ 32.280413][ T4909] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 32.296492][ T4909] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 32.306858][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.306893][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.342805][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.348545][ T4709] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 32.349163][ T50] Bluetooth: hci4: command tx timeout [ 32.349363][ T50] Bluetooth: hci3: command tx timeout [ 32.349451][ T50] Bluetooth: hci2: command tx timeout [ 32.424272][ T4928] netlink: 'syz.3.16': attribute type 39 has an invalid length. [ 32.429635][ T4924] Illegal XDP return value 4294967274 on prog (id 1) dev N/A, expect packet loss! [ 32.505531][ T4935] loop0: detected capacity change from 0 to 1024 [ 32.512147][ T4935] ======================================================= [ 32.512147][ T4935] WARNING: The mand mount option has been deprecated and [ 32.512147][ T4935] and is ignored by this kernel. Remove the mand [ 32.512147][ T4935] option from the mount to silence this warning. [ 32.512147][ T4935] ======================================================= [ 32.535891][ T4935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.647279][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 32.740626][ T4960] process 'syz.0.31' launched './file1' with NULL argv: empty string added [ 32.763326][ T4964] capability: warning: `syz.0.32' uses deprecated v2 capabilities in a way that may be insecure [ 32.876447][ T4978] loop0: detected capacity change from 0 to 128 [ 32.878783][ T4978] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.885653][ T4978] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.953710][ T4983] sctp: [Deprecated]: syz.0.41 (pid 4983) Use of int in maxseg socket option. [ 32.953710][ T4983] Use struct sctp_assoc_value instead [ 33.527855][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 33.741848][ T5032] loop2: detected capacity change from 0 to 256 [ 33.745339][ T5032] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.749514][ T5032] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.905020][ T5045] loop0: detected capacity change from 0 to 128 [ 33.918161][ T5045] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.998393][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.001728][ T5054] bond1: Removing last ns target with arp_interval on [ 34.009615][ T5059] loop1: detected capacity change from 0 to 512 [ 34.027844][ T5054] Zero length message leads to an empty skb [ 34.051887][ T5059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.119938][ T5070] tps6598x 0-0003: probe with driver tps6598x failed with error -22 [ 34.120140][ T5072] Injecting memory failure for pfn 0x120e20 at process virtual address 0x20000000 [ 34.127430][ T5070] i2c i2c-0: new_device: Instantiated device tps25750 at 0x03 [ 34.139542][ T5072] Memory failure: 0x120e20: Sending SIGBUS to syz.3.81:5072 due to hardware memory corruption [ 34.142996][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.145392][ T5072] Memory failure: 0x120e20: recovery action for dirty LRU page: Recovered [ 34.181947][ T5074] i2c i2c-0: delete_device: Can't parse I2C address [ 34.232782][ T5082] loop2: detected capacity change from 0 to 1024 [ 34.233180][ T5082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.268473][ T5082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.315539][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 34.346247][ T50] Bluetooth: hci0: command tx timeout [ 34.346319][ T4711] Bluetooth: hci1: command tx timeout [ 34.384381][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.417067][ T50] Bluetooth: hci3: command tx timeout [ 34.417102][ T50] Bluetooth: hci4: command tx timeout [ 34.417171][ T4711] Bluetooth: hci2: command tx timeout [ 34.606891][ T5125] loop2: detected capacity change from 0 to 256 [ 34.757041][ T5132] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 34.765947][ T5132] EXT4-fs (loop1): 1 truncate cleaned up [ 34.767738][ T5132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.778370][ T5132] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.109: invalid indirect mapped block 2185560079 (level 0) [ 34.779116][ T5132] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.109: invalid indirect mapped block 65535 (level 2) [ 34.779644][ T5132] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.109: Invalid inode table block 0 in block_group 0 [ 34.780403][ T5132] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 34.780551][ T5132] EXT4-fs error (device loop1): ext4_splice_branch:479: inode #13: comm syz.1.109: mark_inode_dirty error [ 34.780928][ T5132] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.109: bg 0: block 46: invalid block bitmap [ 34.781178][ T5132] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 34.781447][ T5132] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.109: Invalid inode table block 0 in block_group 0 [ 34.782199][ T5132] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 34.782371][ T5132] EXT4-fs error (device loop1): ext4_truncate:4691: inode #13: comm syz.1.109: mark_inode_dirty error [ 34.844805][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.974978][ T5144] netlink: 'syz.1.113': attribute type 12 has an invalid length. [ 34.975011][ T5144] netlink: 'syz.1.113': attribute type 29 has an invalid length. [ 34.975034][ T5144] netlink: 148 bytes leftover after parsing attributes in process `syz.1.113'. [ 35.399491][ T5172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.487491][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.523694][ T5185] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.608786][ T4714] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.760981][ T5215] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 35.763589][ T5215] nvme 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 35.815173][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 35.827979][ T5225] vlan2: entered allmulticast mode [ 35.828021][ T5225] macsec0: entered allmulticast mode [ 35.832295][ T5225] veth1_macvtap: entered allmulticast mode [ 35.833947][ T5225] batman_adv: batadv0: Adding interface: vlan2 [ 35.835062][ T5225] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.840745][ T5225] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 35.872792][ T5227] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.893659][ T5229] Injecting memory failure for pfn 0x120400 at process virtual address 0x20000000 [ 35.914365][ T5227] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200) [ 35.914407][ T5227] FAT-fs (loop4): Filesystem has been set read-only [ 35.931039][ T5229] Memory failure: 0x120400: Sending SIGBUS to syz.1.150:5229 due to hardware memory corruption [ 35.931112][ T5229] Memory failure: 0x120400: recovery action for dirty LRU page: Recovered [ 35.931151][ T5229] Injecting memory failure for pfn 0x104a00 at process virtual address 0x20200000 [ 35.934766][ T5229] Memory failure: 0x104a00: unhandlable page. [ 35.934780][ T5229] Memory failure: 0x104a00: recovery action for get hwpoison page: Ignored [ 36.085037][ T5247] rnbd_client L610: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 36.085202][ T5247] rtrs_client L2829: pathname cannot contain / and . [ 36.125633][ T5250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.169137][ T5258] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.169178][ T5258] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.184546][ T5258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 36.189835][ T5258] System zones: 1-12 [ 36.198700][ T5258] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.203607][ T5258] EXT4-fs (loop0): 1 truncate cleaned up [ 36.204707][ T5264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 36.204721][ T5264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'. [ 36.209213][ T5258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.256019][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.286140][ T5270] netlink: 32 bytes leftover after parsing attributes in process `syz.0.168'. [ 36.422961][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.426317][ T4712] Bluetooth: hci1: command tx timeout [ 36.427425][ T4712] Bluetooth: hci0: command tx timeout [ 36.489201][ T5286] EXT4-fs: inline encryption not supported [ 36.496844][ T4711] Bluetooth: hci2: command tx timeout [ 36.496887][ T4711] Bluetooth: hci4: command tx timeout [ 36.497253][ T4711] Bluetooth: hci3: command tx timeout [ 36.506245][ T5286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.510374][ T5286] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0023] [ 36.510433][ T5286] System zones: 0-5 [ 36.511252][ T5286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.571285][ T5298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.177'. [ 36.571327][ T5298] netlink: 'syz.0.177': attribute type 7 has an invalid length. [ 36.571350][ T5298] netlink: 'syz.0.177': attribute type 8 has an invalid length. [ 36.571363][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 36.588447][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.791138][ T5316] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 36.791167][ T5316] unable to read xattr id index table [ 37.055234][ T5328] set_capacity_and_notify: 9 callbacks suppressed [ 37.058839][ T5328] loop4: detected capacity change from 0 to 256 [ 37.316240][ T5342] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.204' resets device [ 37.374607][ T5348] loop0: detected capacity change from 0 to 512 [ 37.379376][ T5348] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.390669][ T5348] EXT4-fs (loop0): 1 truncate cleaned up [ 37.391155][ T5348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.486428][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.563642][ T5364] loop0: detected capacity change from 0 to 8192 [ 37.582369][ T5364] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.814662][ T5399] warning: `syz.1.231' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 37.995023][ T30] audit: type=1400 audit(37.960:2): lsm=SMACK fn=smack_file_lock action=denied subject="_" object="lowerdi" requested=l pid=5417 comm="syz.2.239" path="/53/file1" dev="tmpfs" ino=296 [ 38.096339][ T5430] __nla_validate_parse: 2 callbacks suppressed [ 38.097684][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 38.099281][ T5430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 38.308533][ T5455] netlink: 56 bytes leftover after parsing attributes in process `syz.2.259'. [ 38.464501][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 38.464538][ T5473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 38.464570][ T5473] netlink: 'syz.2.266': attribute type 20 has an invalid length. [ 38.498391][ T4712] Bluetooth: hci0: command tx timeout [ 38.498402][ T4711] Bluetooth: hci1: command tx timeout [ 38.579996][ T4712] Bluetooth: hci3: command tx timeout [ 38.580038][ T4712] Bluetooth: hci4: command tx timeout [ 38.580050][ T4711] Bluetooth: hci2: command tx timeout [ 38.619102][ T5492] rnbd_client L127: Can't parse path ip:127.0.0.1\ߐ?:bEz[۵>,: -22 [ 38.734988][ T5503] capability: warning: `syz.0.279' uses 32-bit capabilities (legacy support in use) [ 38.883659][ T5488] netlink: 'syz.3.272': attribute type 6 has an invalid length. [ 39.047655][ T5526] loop0: detected capacity change from 0 to 2048 [ 39.074214][ T5526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.095515][ T5535] netlink: 'syz.1.294': attribute type 3 has an invalid length. [ 39.115116][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.229867][ T5546] netlink: 236 bytes leftover after parsing attributes in process `syz.0.298'. [ 39.387442][ T5554] block2mtd: illegal erase size [ 39.546777][ T5567] block nbd2: not configured, cannot reconfigure [ 39.706423][ T5588] loop2: detected capacity change from 0 to 2048 [ 39.708502][ T5588] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 39.810449][ T5595] netlink: 148 bytes leftover after parsing attributes in process `syz.0.321'. [ 40.243276][ T5624] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 40.404235][ T5632] netlink: 68 bytes leftover after parsing attributes in process `syz.0.338'. [ 40.441193][ T5634] loop4: detected capacity change from 0 to 4096 [ 40.449336][ T5634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.481418][ T5634] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.340: corrupted inode contents [ 40.496597][ T5634] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.340: mark_inode_dirty error [ 40.499566][ T5634] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.340: corrupted inode contents [ 40.502418][ T5634] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.340: mark_inode_dirty error [ 40.512386][ T5634] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.340: corrupted inode contents [ 40.515229][ T5634] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.340: mark_inode_dirty error [ 40.517640][ T5634] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.340: corrupted inode contents [ 40.521201][ T5634] EXT4-fs error (device loop4): ext4_truncate:4691: inode #15: comm syz.4.340: mark_inode_dirty error [ 40.526132][ T5634] EXT4-fs error (device loop4) in ext4_setattr:6172: Corrupt filesystem [ 40.534507][ T5638] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.340: corrupted inode contents [ 40.574060][ T4709] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.579133][ T4709] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.579411][ T4709] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 40.582421][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.749254][ T5660] netlink: 48 bytes leftover after parsing attributes in process `syz.0.349'. [ 40.802243][ T5664] loop4: detected capacity change from 0 to 512 [ 40.805136][ T5664] EXT4-fs: Ignoring removed nobh option [ 40.807161][ T5664] EXT4-fs: Ignoring removed oldalloc option [ 40.809518][ T5664] EXT4-fs: old and new quota format mixing [ 41.093819][ T5702] netlink: 'syz.4.369': attribute type 6 has an invalid length. [ 41.119219][ T5704] netlink: 'syz.2.370': attribute type 14 has an invalid length. [ 41.173272][ T5714] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 41.173316][ T5714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 41.192816][ T5716] batadv_slave_1: entered promiscuous mode [ 41.197964][ T5715] batadv_slave_1: left promiscuous mode [ 41.221377][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.366741][ T5729] nbd: socks must be embedded in a SOCK_ITEM attr [ 41.367457][ T5729] block nbd0: shutting down sockets [ 41.425552][ T5739] loop4: detected capacity change from 0 to 512 [ 41.428651][ T5739] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.386: bad orphan inode 17 [ 41.428738][ T5739] loop4: lost filesystem error report for type 5 error -117 [ 41.429395][ T5739] ext4_test_bit(bit=16, block=4) = 1 [ 41.429404][ T5739] is_bad_inode(inode)=0 [ 41.429409][ T5739] NEXT_ORPHAN(inode)=0 [ 41.429413][ T5739] max_ino=32 [ 41.429416][ T5739] i_nlink=1 [ 41.429915][ T5739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.463280][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.493794][ T5744] loop0: detected capacity change from 0 to 256 [ 41.500978][ T5742] can0: slcan on ptm0. [ 41.567882][ T5741] can0 (unregistered): slcan off ptm0. [ 41.836634][ T4472] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.005690][ T4472] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.005783][ T4472] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 42.006671][ T4472] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 42.006687][ T4472] usb 1-1: can't read configurations, error -71 [ 42.173406][ T5816] loop2: detected capacity change from 0 to 128 [ 42.176856][ T5816] FAT-fs (loop2): invalid media value (0x00) [ 42.176901][ T5816] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 42.176914][ T5816] FAT-fs (loop2): Can't find a valid FAT filesystem [ 42.868710][ T5847] dyndbg: bad flag-op , at start of Gz[dJh [ 42.870374][ T5847] dyndbg: flags parse failed [ 43.004980][ T5858] Injecting memory failure for pfn 0x1204f2 at process virtual address 0x20945000 [ 43.008717][ T5858] Memory failure: 0x1204f2: recovery action for clean LRU page: Recovered [ 43.010441][ T5858] Injecting memory failure for pfn 0x1204f3 at process virtual address 0x20946000 [ 43.012766][ T5858] Memory failure: 0x1204f3: recovery action for clean LRU page: Recovered [ 43.014703][ T5858] Injecting memory failure for pfn 0x1204f4 at process virtual address 0x20947000 [ 43.016782][ T5858] Memory failure: 0x1204f4: recovery action for clean LRU page: Recovered [ 43.018562][ T5858] Injecting memory failure for pfn 0x1204f5 at process virtual address 0x20948000 [ 43.020611][ T5858] Memory failure: 0x1204f5: recovery action for clean LRU page: Recovered [ 43.112005][ T5863] loop4: detected capacity change from 0 to 256 [ 43.273335][ T5882] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 43.273551][ T5882] syzkaller1: linktype set to 826 [ 43.297831][ T5892] loop2: detected capacity change from 0 to 512 [ 43.298252][ T5892] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.328364][ T5892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.359594][ T5903] loop0: detected capacity change from 0 to 8 [ 43.371168][ T5903] SQUASHFS error: Failed to read block 0x260685: -5 [ 43.383320][ T5903] SQUASHFS error: Unable to read metadata cache entry [260685] [ 43.383373][ T5903] SQUASHFS error: Unable to read directory block [260685:0] [ 43.442024][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.484178][ T5916] loop2: detected capacity change from 0 to 8 [ 43.487322][ T5916] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 43.487343][ T5916] unable to read xattr id index table [ 43.546948][ T5918] __nla_validate_parse: 2 callbacks suppressed [ 43.546988][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 43.593685][ T30] audit: type=1400 audit(43.560:3): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=r pid=5921 comm="syz.0.470" name="file1" dev="tmpfs" ino=603 [ 43.621959][ T5926] loop4: detected capacity change from 0 to 7 [ 43.623256][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 43.628803][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.628921][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 43.633467][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.633515][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 43.638074][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.638129][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 43.642662][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.642715][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 43.650785][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.650838][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 43.654816][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.654872][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 43.672058][ T50] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 43.750854][ T5943] syz.2.480 uses obsolete (PF_INET,SOCK_PACKET) [ 43.803006][ T5948] loop1: detected capacity change from 0 to 2048 [ 43.810817][ T5951] loop2: detected capacity change from 0 to 512 [ 43.830784][ T5948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.840391][ T5951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.884037][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.924444][ T5962] loop1: detected capacity change from 0 to 2048 [ 43.938319][ T5962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.949907][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.962487][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.007748][ T5972] loop0: detected capacity change from 0 to 4096 [ 44.012482][ T5972] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 44.027303][ T5972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.078465][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.541064][ T6022] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.694793][ T6030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.699138][ T6030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.728575][ T6030] EXT4-fs: Ignoring removed bh option [ 44.760970][ T6030] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 44.778352][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.125024][ T6054] xt_hashlimit: size too large, truncated to 1048576 [ 45.220241][ T6060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.248223][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.282401][ T6063] netlink: 48 bytes leftover after parsing attributes in process `syz.2.526'. [ 45.282790][ T6063] netlink: 48 bytes leftover after parsing attributes in process `syz.2.526'. [ 45.402602][ T6075] netlink: 'syz.2.532': attribute type 11 has an invalid length. [ 45.402638][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 45.707838][ T50] Bluetooth: hci1: command tx timeout [ 45.802672][ T6120] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 45.807801][ T6120] EXT4-fs (loop4): 1 truncate cleaned up [ 45.808299][ T6120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.816792][ T6120] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.550: invalid indirect mapped block 2185560079 (level 0) [ 45.836391][ T6120] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.550: invalid indirect mapped block 65535 (level 2) [ 45.840570][ T6120] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.550: Invalid inode table block 0 in block_group 0 [ 45.840845][ T6120] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 45.840980][ T6120] EXT4-fs error (device loop4): ext4_splice_branch:479: inode #13: comm syz.4.550: mark_inode_dirty error [ 45.841306][ T6120] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.550: bg 0: block 46: invalid block bitmap [ 45.841466][ T6120] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.841672][ T6120] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.550: Invalid inode table block 0 in block_group 0 [ 45.841831][ T6120] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 45.841959][ T6120] EXT4-fs error (device loop4): ext4_truncate:4691: inode #13: comm syz.4.550: mark_inode_dirty error [ 45.898900][ T6126] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.552: bad orphan inode 15 [ 45.898945][ T6126] loop2: lost filesystem error report for type 5 error -117 [ 45.902429][ T6126] ext4_test_bit(bit=14, block=5) = 0 [ 45.902937][ T6126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.935620][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.963957][ T6134] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.964386][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.973949][ T6134] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.568: Invalid block bitmap block 0 in block_group 0 [ 45.973993][ T6134] loop0: lost filesystem error report for type 5 error -117 [ 45.976138][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 45.976150][ C1] EXT4-fs (loop0): initial error at time 45: ext4_read_block_bitmap_nowait:483 [ 45.976162][ C1] EXT4-fs (loop0): last error at time 45: ext4_read_block_bitmap_nowait:483 [ 45.988215][ T6134] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.988261][ T6134] loop0: lost filesystem error report for type 5 error -117 [ 45.990989][ T6134] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.568: attempt to clear invalid blocks 983261 len 1 [ 45.991037][ T6134] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.991389][ T6134] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.568: Invalid inode table block 0 in block_group 0 [ 45.991410][ T6134] loop0: lost filesystem error report for type 5 error -117 [ 45.992400][ T6134] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 45.992415][ T6134] loop0: lost filesystem error report for type 5 error -117 [ 45.992584][ T6134] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 45.992594][ T6134] loop0: lost filesystem error report for type 5 error -117 [ 45.992881][ T6134] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.568: Invalid inode table block 0 in block_group 0 [ 45.992897][ T6134] loop0: lost filesystem error report for type 5 error -117 [ 45.993026][ T6134] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 45.993036][ T6134] loop0: lost filesystem error report for type 5 error -117 [ 45.993139][ T6134] EXT4-fs error (device loop0): ext4_truncate:4691: inode #11: comm syz.0.568: mark_inode_dirty error [ 45.993150][ T6134] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.993260][ T6134] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 45.993268][ T6134] loop0: lost filesystem error report for type 5 error -117 [ 45.993377][ T6134] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.568: Invalid inode table block 0 in block_group 0 [ 45.993525][ T6134] EXT4-fs (loop0): 1 truncate cleaned up [ 45.993972][ T6134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.994594][ T6139] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 45.994606][ T6139] syzkaller1: group set to 0 [ 46.047410][ T6145] netlink: 'syz.2.558': attribute type 12 has an invalid length. [ 46.047449][ T6145] netlink: 'syz.2.558': attribute type 29 has an invalid length. [ 46.049644][ T6145] netlink: 148 bytes leftover after parsing attributes in process `syz.2.558'. [ 46.070473][ T6134] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.073797][ T6134] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (36455!=32276) [ 46.104868][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.465242][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 46.490034][ T6195] netlink: 'syz.1.587': attribute type 2 has an invalid length. [ 46.490066][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 46.694267][ T6219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.599'. [ 46.822414][ T6227] ftl_cs: FTL header not found. [ 46.835336][ T6227] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [6] [ 46.944786][ T6250] rnbd_client L610: Mapping device / on session s1, (access_mode: rw, nr_poll_queues: 0) [ 46.944837][ T6250] rnbd_client L1256: Session s1 not found, and path parameter not given [ 46.987781][ T6256] vhci_hcd: not connected 4 [ 47.137860][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 47.137946][ T6276] netlink: 39 bytes leftover after parsing attributes in process `syz.3.626'. [ 47.280501][ T6295] virtio-pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 47.532656][ T6334] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 47.532699][ T6334] nvme 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 47.882143][ T6368] set_capacity_and_notify: 6 callbacks suppressed [ 47.882177][ T6368] loop2: detected capacity change from 0 to 4096 [ 47.885726][ T6368] EXT4-fs: Ignoring removed orlov option [ 47.887951][ T6368] EXT4-fs (loop2): Test dummy encryption mode enabled [ 47.901622][ T6368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.909406][ T6377] sctp: [Deprecated]: syz.1.671 (pid 6377) Use of int in max_burst socket option. [ 47.909406][ T6377] Use struct sctp_assoc_value instead [ 47.933873][ T6368] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 47.940156][ T6368] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 47.952642][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.293233][ T6436] loop2: detected capacity change from 0 to 128 [ 48.308254][ T6436] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.352055][ T4721] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.412867][ T4794] IPVS: starting estimator thread 0... [ 48.486261][ T6467] loop1: detected capacity change from 0 to 1024 [ 48.497288][ T6455] IPVS: using max 47 ests per chain, 112800 per kthread [ 48.509082][ T6467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.537858][ T6467] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.703: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.542904][ T6467] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 48.545736][ T6467] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.545736][ T6467] [ 48.575571][ T40] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.583026][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 48.583061][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.583061][ T40] [ 48.592703][ T4714] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 48.602028][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.649127][ T1376] IPVS: stop unused estimator thread 0... [ 48.767094][ T6497] loop1: detected capacity change from 0 to 1024 [ 48.787519][ T6497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.831321][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.883743][ T6515] loop1: detected capacity change from 0 to 512 [ 48.885377][ T6515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.888198][ T6515] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 48.901778][ T6515] EXT4-fs (loop1): 1 truncate cleaned up [ 48.902310][ T6515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.958212][ T6521] __nla_validate_parse: 3 callbacks suppressed [ 48.958258][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 48.958275][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.724'. [ 48.958299][ T6521] netlink: 'syz.0.724': attribute type 20 has an invalid length. [ 49.024298][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.180034][ T6552] loop3: detected capacity change from 0 to 2048 [ 49.211787][ T6559] rnbd_client L610: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 49.212526][ T6552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.215821][ T6559] rtrs_client L2829: pathname cannot contain / and . [ 49.317928][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.418761][ T4711] block nbd0: Receive control failed (result -32) [ 49.457102][ T6583] netlink: 236 bytes leftover after parsing attributes in process `syz.3.749'. [ 49.505115][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 49.505160][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 49.511461][ T6585] gretap0: entered promiscuous mode [ 49.514616][ T6585] macvlan2: entered allmulticast mode [ 49.514662][ T6585] gretap0: entered allmulticast mode [ 50.028662][ T6600] loop4: detected capacity change from 0 to 4096 [ 50.031802][ T6600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.037692][ T6600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.264672][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.363511][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.766'. [ 50.472032][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 50.639227][ T6649] loop4: detected capacity change from 0 to 4096 [ 50.648669][ T6649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.695304][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.711197][ T6653] zswap: compressor z not available [ 50.749674][ T6663] dlm: non-version read from control device 4096 [ 50.758129][ T6665] sctp: [Deprecated]: syz.1.788 (pid 6665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.758129][ T6665] Use struct sctp_sack_info instead [ 50.927437][ T867] hid-generic 0005:0C45:0002.0001: unknown main item tag 0x0 [ 50.931533][ T867] hid-generic 0005:0C45:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 51.066517][ T6699] loop4: detected capacity change from 0 to 512 [ 51.072138][ T6699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.072186][ T6699] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.080786][ T6699] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 51.080833][ T6699] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 51.084410][ T6699] EXT4-fs (loop4): 1 truncate cleaned up [ 51.085445][ T6699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.088395][ T6704] loop1: detected capacity change from 0 to 128 [ 51.099844][ T6704] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.109593][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.155110][ T4714] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.178328][ T6711] EXT4-fs (loop2): Test dummy encryption mode enabled [ 51.183504][ T6711] EXT4-fs (loop2): 1 truncate cleaned up [ 51.200888][ T6711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.235592][ T39] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 465: padding at end of block bitmap is not set [ 51.243479][ T39] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.243511][ T39] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.243511][ T39] [ 51.243531][ T39] EXT4-fs (loop2): Total free blocks count 0 [ 51.243545][ T39] EXT4-fs (loop2): Free/Dirty block details [ 51.243559][ T39] EXT4-fs (loop2): free_blocks=0 [ 51.243582][ T39] EXT4-fs (loop2): dirty_blocks=4 [ 51.243594][ T39] EXT4-fs (loop2): Block reservation details [ 51.243604][ T39] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 51.258452][ T4721] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 51.266439][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.273670][ T6720] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.813: inode has both inline data and extents flags [ 51.273701][ T6720] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.273818][ T6720] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.813: couldn't read orphan inode 15 (err -117) [ 51.273835][ T6720] fserror_report: 1 callbacks suppressed [ 51.273844][ T6720] loop4: lost filesystem error report for type 5 error -117 [ 51.392511][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.820'. [ 51.521742][ T6753] Injecting memory failure for pfn 0x11e4bb at process virtual address 0x20036000 [ 51.528968][ T6753] Memory failure: 0x11e4bb: recovery action for clean LRU page: Recovered [ 51.529006][ T6753] Injecting memory failure for pfn 0x121580 at process virtual address 0x20037000 [ 51.533082][ T6753] Memory failure: 0x121580: recovery action for clean LRU page: Recovered [ 51.533125][ T6753] Injecting memory failure for pfn 0x11f203 at process virtual address 0x20038000 [ 51.535768][ T6753] Memory failure: 0x11f203: recovery action for clean LRU page: Recovered [ 51.535786][ T6753] Injecting memory failure for pfn 0x11ee37 at process virtual address 0x20039000 [ 51.535907][ T6753] Memory failure: 0x11ee37: recovery action for clean LRU page: Recovered [ 51.615688][ T6765] netlink: 124 bytes leftover after parsing attributes in process `syz.3.834'. [ 51.619654][ T6768] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 51.619654][ T6768] The task syz.1.828 (6768) triggered the difference, watch for misbehavior. [ 51.713843][ T6777] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.720062][ T6777] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.839: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.720106][ T6777] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 51.720840][ T6777] Quota error (device loop3): write_blk: dquota write failed [ 51.720874][ T6777] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 51.720906][ T6777] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.839: Failed to acquire dquot type 0 [ 51.720919][ T6777] loop3: lost filesystem error report for type 5 error -117 [ 51.721360][ T6777] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.839: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.721376][ T6777] loop3: lost filesystem error report for type 5 error -117 [ 51.722351][ T6777] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.839: Invalid inode bitmap blk 0 in block_group 0 [ 51.722370][ T6777] loop3: lost filesystem error report for type 5 error -117 [ 51.722898][ T6777] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 51.722911][ T6777] loop3: lost filesystem error report for type 5 error -117 [ 51.723333][ T6777] EXT4-fs (loop3): 1 orphan inode deleted [ 51.748386][ T40] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.749519][ T40] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 51.749539][ T40] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 51.858973][ T6791] bond0: entered promiscuous mode [ 51.860033][ T6791] bond_slave_0: entered promiscuous mode [ 51.861397][ T6791] bond_slave_1: entered promiscuous mode [ 51.864328][ T6791] batadv0: entered promiscuous mode [ 51.869147][ T6791] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 51.872371][ T6791] bond0: left promiscuous mode [ 51.873368][ T6791] bond_slave_0: left promiscuous mode [ 51.874541][ T6791] bond_slave_1: left promiscuous mode [ 51.876073][ T6791] batadv0: left promiscuous mode [ 51.933251][ T6801] EXT4-fs (loop3): Test dummy encryption mode enabled [ 51.935040][ T6801] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.850: inode has both inline data and extents flags [ 51.935079][ T6801] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.935327][ T6801] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.850: couldn't read orphan inode 15 (err -117) [ 51.935349][ T6801] loop3: lost filesystem error report for type 5 error -117 [ 52.101033][ T6822] netlink: 'syz.4.860': attribute type 14 has an invalid length. [ 52.110807][ T6824] Cannot find set identified by id 0 to match [ 52.156732][ T6826] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 52.156922][ T6826] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.862: corrupted in-inode xattr: e_value size too large [ 52.156937][ T6826] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.157093][ T6826] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.862: couldn't read orphan inode 15 (err -117) [ 52.157106][ T6826] loop4: lost filesystem error report for type 5 error -117 [ 52.227393][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 52.293511][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 52.714618][ T6853] netlink: 'syz.1.874': attribute type 3 has an invalid length. [ 53.144998][ T6870] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 53.170995][ T6878] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 53.487752][ T6886] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 53.487838][ T6886] vhci_hcd vhci_hcd.2: invalid port number 96 [ 53.487852][ T6886] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 53.850496][ T6902] netlink: 'syz.2.897': attribute type 5 has an invalid length. [ 54.846756][ T6942] __nla_validate_parse: 2 callbacks suppressed [ 54.848882][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'. [ 56.276966][ T6990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.936'. [ 56.661187][ T7000] dyndbg: bad flag-op , at start of Gz[dJh [ 56.662704][ T7000] dyndbg: flags parse failed [ 56.782873][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 57.107204][ T7016] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 57.107263][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.949'. [ 57.724929][ T7042] batadv_slave_1: entered promiscuous mode [ 57.739808][ T7041] batadv_slave_1: left promiscuous mode [ 58.063558][ T7050] netlink: 'syz.3.967': attribute type 6 has an invalid length. [ 58.779145][ T7082] set_capacity_and_notify: 5 callbacks suppressed [ 58.781212][ T7082] loop1: detected capacity change from 0 to 512 [ 58.821889][ T7082] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.993: bad orphan inode 17 [ 58.824335][ T7082] loop1: lost filesystem error report for type 5 error -117 [ 58.826163][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 58.826208][ C1] EXT4-fs (loop1): initial error at time 58: ext4_orphan_get:1425 [ 58.826263][ C1] EXT4-fs (loop1): last error at time 58: ext4_orphan_get:1425 [ 58.833391][ T7082] ext4_test_bit(bit=16, block=4) = 1 [ 58.834649][ T7082] is_bad_inode(inode)=0 [ 58.837165][ T7082] NEXT_ORPHAN(inode)=0 [ 58.837225][ T7082] max_ino=32 [ 58.837254][ T7082] i_nlink=1 [ 59.151176][ T7100] loop2: detected capacity change from 0 to 256 [ 59.152975][ T7100] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.254945][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.511934][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.522952][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.795984][ T7122] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1000'. [ 60.310144][ T7133] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 60.313102][ T7133] syzkaller1: linktype set to 826 [ 60.424175][ T7137] can0: slcan on ptm0. [ 60.668331][ T7142] loop3: detected capacity change from 0 to 512 [ 60.682156][ T7142] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.682927][ T7136] can0 (unregistered): slcan off ptm0. [ 61.281587][ T7169] loop3: detected capacity change from 0 to 8 [ 61.405100][ T7175] loop4: detected capacity change from 0 to 7 [ 61.406682][ T7169] SQUASHFS error: Failed to read block 0x260685: -5 [ 61.407921][ T7169] SQUASHFS error: Unable to read metadata cache entry [260685] [ 61.409695][ T7169] SQUASHFS error: Unable to read directory block [260685:0] [ 61.432822][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 61.433401][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 61.433454][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.483153][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 61.483253][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.490680][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 61.490778][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.566478][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 61.566592][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.599139][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 61.599241][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.609772][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 61.609868][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 62.180760][ T26] atkbd serio1: keyboard reset failed on [ 63.159275][ T7239] bridge0: port 3(syz_tun) entered blocking state [ 63.170505][ T7239] bridge0: port 3(syz_tun) entered disabled state [ 63.170941][ T7239] syz_tun: entered allmulticast mode [ 63.227446][ T7239] syz_tun: entered promiscuous mode [ 63.228159][ T7239] bridge0: port 3(syz_tun) entered blocking state [ 63.228288][ T7239] bridge0: port 3(syz_tun) entered forwarding state [ 63.702095][ T7259] loop3: detected capacity change from 0 to 512 [ 63.976381][ T7259] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 46:freeing already freed block (bit 46); block bitmap corrupt. [ 64.502454][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.502567][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.510216][ T10] cfg80211: failed to load regulatory.db [ 64.561081][ T7287] loop4: detected capacity change from 0 to 256 [ 64.584392][ T7287] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.588191][ T7287] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.039522][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 65.474840][ T7323] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967286. macoff=82 [ 65.974420][ T7347] loop1: detected capacity change from 0 to 256 [ 66.045114][ T7347] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.063514][ T7347] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 66.065821][ T7347] FAT-fs (loop1): Filesystem has been set read-only [ 66.095894][ T7347] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 67.215893][ T7367] Bluetooth: MGMT ver 1.23 [ 67.956900][ T7397] loop1: detected capacity change from 0 to 512 [ 67.976271][ T7397] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 67.980655][ T7397] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.1118: invalid block [ 67.983003][ T7397] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 67.984460][ T7397] EXT4-fs (loop1): 1 truncate cleaned up [ 67.986463][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 67.986478][ C0] EXT4-fs (loop1): initial error at time 67: ext4_get_branch:178: inode 13: block 1024 [ 67.986512][ C0] EXT4-fs (loop1): last error at time 67: ext4_get_branch:178: inode 13: block 1024 [ 67.998031][ T7397] EXT4-fs mount: 14 callbacks suppressed [ 68.016656][ T7397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.064423][ T7402] loop3: detected capacity change from 0 to 4096 [ 68.065490][ T7402] EXT4-fs: inline encryption not supported [ 68.069814][ T7402] EXT4-fs (loop3): Test dummy encryption mode enabled [ 68.107958][ T7402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.248991][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.763027][ T7427] rnbd_client L610: Mapping device / on session s1, (access_mode: rw, nr_poll_queues: 0) [ 68.765108][ T7427] rnbd_client L1256: Session s1 not found, and path parameter not given [ 68.889975][ T7431] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1132'. [ 69.098148][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.355188][ T7449] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 69.434418][ T7452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1141'. [ 69.602344][ T7460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.995476][ T7475] loop4: detected capacity change from 0 to 256 [ 70.530176][ T7486] #! ./dev/kmsg [ 70.838344][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 70.847460][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1162'. [ 71.035317][ T1260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.285979][ T1260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.467879][ T1260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.759761][ T1260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.838131][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.841427][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.843762][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.855000][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.865729][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.148289][ T1260] bridge_slave_1: left promiscuous mode [ 72.148977][ T1260] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.170610][ T1260] bridge_slave_0: left allmulticast mode [ 72.170683][ T1260] bridge_slave_0: left promiscuous mode [ 72.175610][ T1260] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.931033][ T1260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.964872][ T1260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.999672][ T1260] bond0 (unregistering): Released all slaves [ 73.018098][ T1260] bond1 (unregistering): Released all slaves [ 73.936518][ T50] Bluetooth: hci3: command tx timeout [ 74.498816][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 74.574667][ T1260] hsr_slave_0: left promiscuous mode [ 74.607163][ T1260] hsr_slave_1: left promiscuous mode [ 74.626865][ T1260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.626945][ T1260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.633447][ T1260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.634920][ T1260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.641016][ T7614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1207'. [ 74.669644][ T1260] veth1_macvtap: left promiscuous mode [ 74.670898][ T1260] veth0_macvtap: left promiscuous mode [ 74.672574][ T1260] veth1_vlan: left promiscuous mode [ 74.673750][ T1260] veth0_vlan: left promiscuous mode [ 75.062767][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.067269][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.099027][ T1260] team0 (unregistering): Port device team_slave_1 removed [ 75.129343][ T1260] team0 (unregistering): Port device team_slave_0 removed [ 75.384736][ T7610] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 75.385041][ T7610] syzkaller0: linktype set to 0 [ 75.643835][ T7628] loop3: detected capacity change from 0 to 128 [ 76.016517][ T50] Bluetooth: hci3: command tx timeout [ 76.080386][ T7645] bpf: Bad value for 'gid' [ 76.579787][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 76.591500][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.591608][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.591965][ T7519] bridge_slave_0: entered allmulticast mode [ 76.595192][ T7519] bridge_slave_0: entered promiscuous mode [ 76.631333][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.631425][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.631697][ T7519] bridge_slave_1: entered allmulticast mode [ 76.664634][ T7519] bridge_slave_1: entered promiscuous mode [ 76.980926][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'. [ 77.000043][ T7519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.029126][ T7519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.198129][ T7519] team0: Port device team_slave_0 added [ 77.200891][ T7519] team0: Port device team_slave_1 added [ 77.566294][ T7702] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 77.651286][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.651341][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.651383][ T7519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.656273][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.656286][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.656300][ T7519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.968508][ T7519] hsr_slave_0: entered promiscuous mode [ 77.969717][ T7519] hsr_slave_1: entered promiscuous mode [ 77.970480][ T7519] debugfs: 'hsr0' already exists in 'hsr' [ 77.970501][ T7519] Cannot create hsr debugfs directory [ 78.106593][ T50] Bluetooth: hci3: command tx timeout [ 78.145334][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 78.163759][ T7720] loop3: detected capacity change from 0 to 4096 [ 78.176986][ T7720] EXT4-fs: inline encryption not supported [ 78.190772][ T7724] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1243'. [ 78.200211][ T7720] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.211129][ T7720] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0023] [ 78.211267][ T7720] System zones: 0-5 [ 78.222423][ T7720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.393496][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.606840][ T7738] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1248'. [ 78.793307][ T7519] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.821801][ T7519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.824013][ T7519] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.875143][ T7519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.889350][ T7519] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.911005][ T7519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.924593][ T7519] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.958840][ T7519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.235712][ T7771] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 79.235789][ T7771] nvme 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 79.288293][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 79.295942][ T7519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.335363][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 79.373699][ T7519] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.407333][ T1260] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.407427][ T1260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.436480][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.436566][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.551870][ T7519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.769106][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 79.808855][ T30] audit: type=1400 audit(79.780:4): lsm=SMACK fn=smack_file_lock action=denied subject="_" object="lowerdi" requested=l pid=7794 comm="syz.0.1263" path="/290/file1" dev="tmpfs" ino=1555 [ 80.090968][ T7811] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1267'. [ 80.186658][ T50] Bluetooth: hci3: command tx timeout [ 80.409211][ T7816] netlink: 'syz.4.1269': attribute type 6 has an invalid length. [ 80.680851][ T7519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.935491][ T7846] dlm: non-version read from control device 4096 [ 81.122675][ T7852] zswap: compressor z not available [ 81.240196][ T7519] veth0_vlan: entered promiscuous mode [ 81.478540][ T7519] veth1_vlan: entered promiscuous mode [ 81.578929][ T7519] veth0_macvtap: entered promiscuous mode [ 81.667972][ T7519] veth1_macvtap: entered promiscuous mode [ 81.691248][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.739467][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.779763][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.783306][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.927678][ T7875] loop3: detected capacity change from 0 to 128 [ 81.948338][ T1376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.956801][ T1376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.991041][ T7875] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.083880][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.083914][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.117639][ T4724] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.148525][ T1376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.148574][ T1376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.328045][ T4472] hid-generic 0005:0C45:0002.0002: unknown main item tag 0x0 [ 82.345765][ T4472] hid-generic 0005:0C45:0002.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 83.527095][ T7933] netlink: 'syz.1.1311': attribute type 14 has an invalid length. [ 83.911082][ T7947] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1321'. [ 84.281457][ T7960] i2c i2c-0: Failed to register i2c client tps25750 at 0x03 (-16) [ 86.021661][ T8014] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 86.578327][ T8038] loop1: detected capacity change from 0 to 512 [ 86.651264][ T8038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.796925][ T8047] bond0: entered promiscuous mode [ 86.797134][ T8047] bond_slave_0: entered promiscuous mode [ 86.798128][ T8047] bond_slave_1: entered promiscuous mode [ 86.801305][ T8047] batadv0: entered promiscuous mode [ 86.803863][ T8047] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 86.827169][ T8047] bond0: left promiscuous mode [ 86.827264][ T8047] bond_slave_0: left promiscuous mode [ 86.827465][ T8047] bond_slave_1: left promiscuous mode [ 86.843476][ T8047] batadv0: left promiscuous mode [ 86.920063][ T8038] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 16: block 46:freeing already freed block (bit 46); block bitmap corrupt. [ 87.154440][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.226929][ T8052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1367'. [ 87.619972][ T8064] loop5: detected capacity change from 0 to 1024 [ 87.627451][ T8064] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.679531][ T8064] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.1372: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.679599][ T8064] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.685351][ T8064] Quota error (device loop5): write_blk: dquota write failed [ 87.685429][ T8064] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 87.685532][ T8064] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1372: Failed to acquire dquot type 0 [ 87.685565][ T8064] loop5: lost filesystem error report for type 5 error -117 [ 87.686336][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 87.686369][ C0] EXT4-fs (loop5): initial error at time 87: ext4_map_blocks:833: inode 3: block 1 [ 87.686454][ C0] EXT4-fs (loop5): last error at time 87: ext4_acquire_dquot:7041 [ 87.711471][ T8064] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.1372: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.711542][ T8064] loop5: lost filesystem error report for type 5 error -117 [ 87.720008][ T8064] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.1372: Invalid inode bitmap blk 0 in block_group 0 [ 87.720080][ T8064] loop5: lost filesystem error report for type 5 error -117 [ 87.720437][ T8064] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 87.720453][ T8064] loop5: lost filesystem error report for type 5 error -117 [ 87.720712][ T8064] EXT4-fs (loop5): 1 orphan inode deleted [ 87.722916][ T8064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.736906][ T39] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.738403][ T39] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 87.738441][ T39] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 87.928549][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.303830][ T8087] i2c i2c-0: delete_device: Extra parameters [ 88.437145][ T8092] tun0: tun_chr_ioctl cmd 1074025681 [ 89.285335][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 89.285414][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 89.285431][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1402'. [ 89.854540][ T8144] ip_tables: iptables: counters copy to user failed while replacing table [ 91.098961][ T8184] rnbd_client L213: map_device: Parameters missing [ 91.447547][ T8181] overlayfs: failed to resolve './file0': -2 [ 93.469652][ T8247] loop3: detected capacity change from 0 to 8192 [ 93.499869][ T8247] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.409876][ T8284] loop3: detected capacity change from 0 to 512 [ 94.527744][ T8284] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1460: couldn't read orphan inode 26 (err -116) [ 94.527806][ T8284] loop3: lost filesystem error report for type 5 error -116 [ 94.531946][ T8284] EXT4-fs (loop3): Remounting filesystem read-only [ 94.556247][ T8284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.600381][ T8284] EXT4-fs (loop3): shut down requested (0) [ 94.829991][ T8303] #! ./dev/kmsg [ 94.893702][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.304214][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1472'. [ 95.712942][ T8333] loop3: detected capacity change from 0 to 2048 [ 95.760123][ T8333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.835956][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.883968][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.153635][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.154478][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.258097][ T8362] sctp: [Deprecated]: syz.0.1482 (pid 8362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.258097][ T8362] Use struct sctp_sack_info instead [ 96.442427][ T40] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 96.443877][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1024 with error 28 [ 96.443899][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 96.443899][ T40] [ 96.443914][ T40] EXT4-fs (loop3): Total free blocks count 0 [ 96.443939][ T40] EXT4-fs (loop3): Free/Dirty block details [ 96.443955][ T40] EXT4-fs (loop3): free_blocks=4096 [ 96.443971][ T40] EXT4-fs (loop3): dirty_blocks=1024 [ 96.443983][ T40] EXT4-fs (loop3): Block reservation details [ 96.443993][ T40] EXT4-fs (loop3): i_reserved_data_blocks=64 [ 96.473941][ T4724] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 96.482442][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.909499][ T8377] loop4: detected capacity change from 0 to 4096 [ 96.910507][ T8377] EXT4-fs: inline encryption not supported [ 96.914337][ T8377] EXT4-fs (loop4): Test dummy encryption mode enabled [ 96.945202][ T8377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.977890][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 96.977989][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 96.978846][ T4711] Bluetooth: hci3: hardware error 0x00 [ 97.232758][ T8389] loop5: detected capacity change from 0 to 2048 [ 97.286029][ T8389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.469822][ T8389] fs-verity (loop5, inode 16): Error -22 reading file data [ 97.469909][ T8389] fs-verity (loop5, inode 16): Error -22 building Merkle tree [ 97.515875][ T8393] WARNING! power/level is deprecated; use power/control instead [ 97.644463][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.945917][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.029508][ T8398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.079722][ T8405] loop5: detected capacity change from 0 to 256 [ 98.121117][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1500'. [ 98.122780][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1500'. [ 98.287296][ T8411] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 98.544303][ T8419] loop5: detected capacity change from 0 to 2048 [ 98.599727][ T8419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.755157][ T8419] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1506: bg 0: block 345: padding at end of block bitmap is not set [ 98.759916][ T8419] fs-verity (loop5, inode 13): Error -28 writing Merkle tree block 0 [ 98.760012][ T8419] fs-verity (loop5, inode 13): Error -28 building Merkle tree [ 98.967338][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.971939][ T8437] loop4: detected capacity change from 0 to 8 [ 99.213279][ T8441] can0: slcan on pty26. [ 99.229570][ T4711] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 99.386785][ T8440] can0 (unregistered): slcan off pty26. [ 99.829441][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.830139][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.909221][ T8462] loop5: detected capacity change from 0 to 1024 [ 99.941999][ T8462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.978584][ T8468] Bluetooth: MGMT ver 1.23 [ 100.552512][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.610967][ T8484] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 100.611031][ T8484] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1537'. [ 100.950673][ T8497] loop4: detected capacity change from 0 to 512 [ 100.975612][ T8497] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.991731][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.992447][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.999351][ T8497] EXT4-fs (loop4): 1 truncate cleaned up [ 101.004006][ T8497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.028754][ T8497] EXT4-fs (loop4): shut down requested (2) [ 101.179960][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.229711][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.234655][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.525662][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1552'. [ 101.615227][ T8522] usb_storage.quirks: string doesn't fit in 127 chars. [ 101.801240][ T8526] loop5: detected capacity change from 0 to 128 [ 101.868219][ T8526] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.012838][ T8526] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.105232][ T8536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1559'. [ 102.206823][ T30] audit: type=1400 audit(102.180:5): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="lowerdir" requested=r pid=8542 comm="syz.5.1563" path="/49/file0" dev="tmpfs" ino=276 [ 102.585193][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1567'. [ 102.672806][ T8557] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1569'. [ 102.673975][ T8557] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1569'. [ 102.787359][ T8562] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1572'. [ 103.175677][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1577'. [ 103.474127][ T8589] netlink: 'syz.3.1585': attribute type 8 has an invalid length. [ 103.702002][ T8596] loop1: detected capacity change from 0 to 8 [ 103.728218][ T8596] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 103.731287][ T8596] unable to read xattr id index table [ 104.998294][ T8625] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 105.652704][ T8652] tc_dump_action: action bad kind [ 105.925153][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 106.038337][ T8669] loop5: detected capacity change from 0 to 512 [ 106.095480][ T8669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.200371][ T8669] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 16: block 46:freeing already freed block (bit 46); block bitmap corrupt. [ 106.431843][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.750726][ T8693] loop3: detected capacity change from 0 to 512 [ 106.789415][ T8693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.975921][ T8703] i2c i2c-0: delete_device: Extra parameters [ 107.090582][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.220139][ T8711] loop1: detected capacity change from 0 to 8 [ 107.225146][ T8711] squashfs image failed sanity check [ 107.317452][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'. [ 107.473042][ T8721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.484269][ T8721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.953773][ T8736] netlink: 'syz.3.1653': attribute type 12 has an invalid length. [ 108.497029][ T8751] tipc: Started in network mode [ 108.497097][ T8751] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 108.804002][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.966486][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 108.968400][ T26] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.971794][ T26] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 108.971863][ T26] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.971909][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.971936][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.971962][ T26] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.972000][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.234212][ T26] usb 1-1: GET_CAPABILITIES returned 0 [ 109.236637][ T26] usbtmc 1-1:16.0: can't read capabilities [ 109.519849][ T24] usb 1-1: USB disconnect, device number 4 [ 110.146996][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1671'. [ 110.147063][ T8804] bond0: option miimon: invalid value (18446744073709551615) [ 110.147106][ T8804] bond0: option miimon: allowed values 0 - 2147483647 [ 110.520727][ T8816] ip_tables: iptables: counters copy to user failed while replacing table [ 111.319360][ T8845] netlink: 'syz.3.1688': attribute type 12 has an invalid length. [ 111.319424][ T8845] netlink: 'syz.3.1688': attribute type 29 has an invalid length. [ 111.319438][ T8845] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1688'. [ 111.319456][ T8845] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 111.319468][ T8845] netlink: 'syz.3.1688': attribute type 2 has an invalid length. [ 111.747447][ T4809] IPVS: starting estimator thread 0... [ 111.750931][ T8859] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 111.844408][ T8861] IPVS: using max 11 ests per chain, 26400 per kthread [ 112.054650][ T8871] loop5: detected capacity change from 0 to 8 [ 112.123490][ T8871] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 112.919963][ T8904] C: renamed from veth1_to_team (while UP) [ 112.922802][ T8903] loop4: detected capacity change from 0 to 1024 [ 112.939763][ T8904] netlink: 'syz.5.1712': attribute type 2 has an invalid length. [ 112.941248][ T8904] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1712'. [ 112.943091][ T8904] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 112.988502][ T8903] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 112.988623][ T8903] System zones: 0-1, 3-12 [ 112.993662][ T8903] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.129925][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 113.981714][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1730'. [ 115.199762][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1754'. [ 115.199830][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1754'. [ 115.326070][ T9001] loop5: detected capacity change from 0 to 512 [ 115.389308][ T9001] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1758: couldn't read orphan inode 26 (err -116) [ 115.392059][ T9001] loop5: lost filesystem error report for type 5 error -116 [ 115.396166][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 115.396214][ C1] EXT4-fs (loop5): initial error at time 371: ext4_orphan_get:1404 [ 115.396268][ C1] EXT4-fs (loop5): last error at time 371: ext4_orphan_get:1404 [ 115.401896][ T9001] EXT4-fs (loop5): Remounting filesystem read-only [ 115.461859][ T9001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.532730][ T9001] EXT4-fs (loop5): shut down requested (0) [ 115.733988][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.072561][ T9029] netlink: 'syz.3.1771': attribute type 11 has an invalid length. [ 116.072634][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 116.251418][ T9037] loop4: detected capacity change from 0 to 128 [ 116.287598][ T9037] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.525213][ T4709] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.884661][ T9060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1786'. [ 116.977026][ T9063] loop4: detected capacity change from 0 to 512 [ 117.039165][ T9063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.224967][ T9070] loop3: detected capacity change from 0 to 2048 [ 117.271042][ T9070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.375407][ T9070] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.462762][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.652604][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 117.652681][ T9085] netlink: 'syz.4.1793': attribute type 20 has an invalid length. [ 117.653187][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 117.672619][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.672894][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.686267][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.686348][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.894322][ T9093] loop4: detected capacity change from 0 to 1024 [ 117.898328][ T9093] EXT4-fs: Ignoring removed oldalloc option [ 117.899651][ T9093] EXT4-fs: Ignoring removed orlov option [ 117.900920][ T9093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.964610][ T9093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.106299][ T9101] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1801'. [ 118.245420][ T9104] loop1: detected capacity change from 0 to 8 [ 118.251418][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.424261][ T13] maxtcpc 0-0020: error -EIO: Failed to read TCPC_POWER_STATUS [ 118.425387][ T13] maxtcpc 0-0020: probe with driver maxtcpc failed with error -5 [ 118.446680][ T9112] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x20 [ 118.536625][ T4886] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.609848][ T9117] loop1: detected capacity change from 0 to 512 [ 118.687646][ T4886] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.690857][ T4886] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 118.690939][ T4886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.690954][ T4886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.690967][ T4886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.690993][ T4886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.705138][ T9117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.813060][ T4886] usb 1-1: config 0 descriptor?? [ 118.826496][ T4711] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 118.826623][ T4711] Bluetooth: hci0: Injecting HCI hardware error event [ 118.828138][ T4711] Bluetooth: hci0: hardware error 0x00 [ 118.972557][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.028268][ T9134] netlink: 'syz.5.1814': attribute type 14 has an invalid length. [ 119.278390][ T4886] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x7 [ 119.278452][ T4886] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x3 [ 119.317152][ T4886] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 119.329527][ T9141] loop3: detected capacity change from 0 to 512 [ 119.331561][ T9141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.343869][ T9141] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 119.359648][ T9146] loop4: detected capacity change from 0 to 512 [ 119.362883][ T9146] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.372191][ T9141] EXT4-fs (loop3): 1 truncate cleaned up [ 119.374711][ T9141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.379429][ T9146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 119.379557][ T9146] System zones: 1-12 [ 119.398714][ T9146] EXT4-fs (loop4): 1 truncate cleaned up [ 119.403923][ T9146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.459713][ T4886] usb 1-1: USB disconnect, device number 5 [ 119.471269][ T9146] EXT4-fs (loop4): shut down requested (1) [ 119.529017][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.845531][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.908757][ T9163] loop5: detected capacity change from 0 to 512 [ 119.909806][ T9163] EXT4-fs: Ignoring removed oldalloc option [ 119.915306][ T9163] EXT4-fs (loop5): Test dummy encryption mode enabled [ 119.960506][ T9163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.007643][ T9163] EXT4-fs error (device loop5): ext4_readdir:225: inode #12: comm syz.5.1826: path (unknown): directory fails checksum at offset 0 [ 120.054949][ T9161] fido_id[9161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 120.084142][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.356262][ T9177] serio: Serial port ttynull [ 120.370300][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 120.517541][ T24] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 120.521170][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 120.521247][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.585670][ T24] usb 1-1: config 0 descriptor?? [ 120.861876][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 120.864864][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 120.897508][ T24] usb 1-1: USB disconnect, device number 6 [ 121.067926][ T4711] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 121.079287][ T9205] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1844'. [ 121.303252][ T9213] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 121.773978][ T39] tipc: Subscription rejected, illegal request [ 122.065451][ T9240] loop4: detected capacity change from 0 to 256 [ 122.475984][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.482584][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.593577][ T9256] loop3: detected capacity change from 0 to 1024 [ 122.594558][ T9256] EXT4-fs: Ignoring removed oldalloc option [ 122.601890][ T9256] EXT4-fs: Ignoring removed orlov option [ 122.603474][ T9256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.643819][ T9256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.895017][ T9271] tipc: Started in network mode [ 122.897327][ T9271] tipc: Node identity ac14140f, cluster identity 4711 [ 122.903697][ T9271] tipc: New replicast peer: 255.255.255.255 [ 122.904304][ T9271] tipc: Enabled bearer , priority 10 [ 122.934128][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.017444][ T26] tipc: Node number set to 2886997007 [ 124.172823][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1893'. [ 124.180439][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1893'. [ 124.207277][ T9324] loop1: detected capacity change from 0 to 128 [ 124.230179][ T9324] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.235259][ T9323] loop4: detected capacity change from 0 to 128 [ 124.244376][ T9323] EXT4-fs (loop4): Test dummy encryption mode enabled [ 124.258429][ T9323] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.289955][ T9324] fscrypt (loop1, inode 12): Unsupported encryption flags (0x10) [ 124.436716][ T4714] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.499641][ T9323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.542228][ T9335] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1904'. [ 124.542300][ T9335] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1904'. [ 124.605093][ T9336] A link change request failed with some changes committed already. Interface enp0s0 may have been left with an inconsistent configuration, please check. [ 125.246878][ T9362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1915'. [ 125.590454][ T9375] loop4: detected capacity change from 0 to 512 [ 125.626417][ T9375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.650032][ T9375] EXT4-fs (loop4): 1 truncate cleaned up [ 125.652441][ T9375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.937779][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.937885][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.151438][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.156729][ T9391] Injecting memory failure for pfn 0x11e58e at process virtual address 0x20000000 [ 126.188809][ T9391] Memory failure: 0x11e58e: Sending SIGBUS to syz.0.1928:9391 due to hardware memory corruption [ 126.188945][ T9391] Memory failure: 0x11e58e: recovery action for dirty LRU page: Recovered [ 126.189004][ T9391] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 126.189060][ T9391] Memory failure: 0x219070: unhandlable page. [ 126.189072][ T9391] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 126.532504][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1933'. [ 126.638262][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.668680][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.749539][ T9404] loop3: detected capacity change from 0 to 512 [ 126.750603][ T9404] EXT4-fs: Ignoring removed nobh option [ 126.795456][ T9412] Injecting memory failure for pfn 0x120068 at process virtual address 0x20945000 [ 126.800533][ T9404] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 126.803290][ T9404] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1934: attempt to clear invalid blocks 1 len 1 [ 126.803364][ T9404] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 126.806288][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 126.806334][ C0] EXT4-fs (loop3): initial error at time 382: ext4_clear_blocks:876: inode 13 [ 126.806399][ C0] EXT4-fs (loop3): last error at time 382: ext4_clear_blocks:876: inode 13 [ 126.809318][ T9404] EXT4-fs (loop3): Remounting filesystem read-only [ 126.810460][ T9404] EXT4-fs (loop3): 1 truncate cleaned up [ 126.812804][ T9404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.826549][ T9412] Memory failure: 0x120068: recovery action for clean LRU page: Recovered [ 126.828433][ T9412] Injecting memory failure for pfn 0x120069 at process virtual address 0x20946000 [ 126.835316][ T9412] Memory failure: 0x120069: recovery action for clean LRU page: Recovered [ 126.846340][ T9412] Injecting memory failure for pfn 0x12006a at process virtual address 0x20947000 [ 126.874993][ T9412] Memory failure: 0x12006a: recovery action for clean LRU page: Recovered [ 126.875068][ T9412] Injecting memory failure for pfn 0x12006b at process virtual address 0x20948000 [ 126.959911][ T9412] Memory failure: 0x12006b: recovery action for clean LRU page: Recovered [ 127.053294][ T9414] tc_dump_action: action bad kind [ 127.261351][ T9420] Injecting memory failure for pfn 0x1204c6 at process virtual address 0x20036000 [ 127.276476][ T9420] Memory failure: 0x1204c6: recovery action for clean LRU page: Recovered [ 127.278171][ T9420] Injecting memory failure for pfn 0x120c53 at process virtual address 0x20037000 [ 127.280556][ T9420] Memory failure: 0x120c53: recovery action for clean LRU page: Recovered [ 127.282384][ T9420] Injecting memory failure for pfn 0x120c52 at process virtual address 0x20038000 [ 127.284426][ T9420] Memory failure: 0x120c52: recovery action for clean LRU page: Recovered [ 127.286059][ T9420] Injecting memory failure for pfn 0x12291f at process virtual address 0x20039000 [ 127.288329][ T9420] Memory failure: 0x12291f: recovery action for clean LRU page: Recovered [ 127.489195][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.603329][ T9426] usb_storage.quirks: string doesn't fit in 127 chars. [ 128.239764][ T9446] loop3: detected capacity change from 0 to 2048 [ 128.333019][ T9446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.468734][ T9453] loop5: detected capacity change from 0 to 512 [ 128.512150][ T9453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.527943][ T9453] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1954: iget: bad i_size value: 38620345925642 [ 128.528008][ T9453] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.529375][ T9453] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1954: couldn't read orphan inode 15 (err -117) [ 128.529401][ T9453] loop5: lost filesystem error report for type 5 error -117 [ 128.550944][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.553130][ T9453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.783531][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.805667][ T9461] loop3: detected capacity change from 0 to 512 [ 128.837825][ T9461] EXT4-fs: Ignoring removed orlov option [ 128.837895][ T9461] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.873147][ T9461] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1956: corrupted in-inode xattr: e_value size too large [ 128.873228][ T9461] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.876629][ T9461] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1956: couldn't read orphan inode 15 (err -117) [ 128.876693][ T9461] loop3: lost filesystem error report for type 5 error -117 [ 128.914602][ T9461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.174045][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.194511][ T9475] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 129.271483][ T9477] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 129.339476][ T9477] bond1 (unregistering): Released all slaves [ 129.397093][ T9484] loop3: detected capacity change from 0 to 512 [ 129.410958][ T9484] EXT4-fs: inline encryption not supported [ 129.415785][ T9484] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.439731][ T9484] EXT4-fs (loop3): 1 truncate cleaned up [ 129.467475][ T9484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.710303][ T9494] loop4: detected capacity change from 0 to 512 [ 129.760635][ T9494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.798807][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.139724][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.582024][ T9522] loop3: detected capacity change from 0 to 1024 [ 130.594181][ T9522] EXT4-fs: inline encryption not supported [ 130.599150][ T9522] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 130.599315][ T9522] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 130.605051][ T9522] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 130.605401][ T9522] EXT4-fs (loop3): orphan cleanup on readonly fs [ 130.614186][ T9522] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.1983: Bad quota inum: 9, type: 2 [ 130.614258][ T9522] loop3: lost filesystem error report for type 5 error -117 [ 130.616649][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 130.616666][ C1] EXT4-fs (loop3): initial error at time 386: ext4_quota_enable:7228 [ 130.616688][ C1] EXT4-fs (loop3): last error at time 386: ext4_quota_enable:7228 [ 130.617116][ T9522] EXT4-fs (loop3): Remounting filesystem read-only [ 130.617136][ T9522] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 130.617535][ T9522] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 130.619951][ T9522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.730606][ T9522] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1983'. [ 130.851596][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.103005][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1990'. [ 132.064084][ T4886] hid-generic 0000:FFFFFFFE:0800.0004: unknown main item tag 0x0 [ 132.064156][ T4886] hid-generic 0000:FFFFFFFE:0800.0004: unknown main item tag 0x0 [ 132.081458][ T9573] loop1: detected capacity change from 0 to 8 [ 132.084060][ T4886] hid-generic 0000:FFFFFFFE:0800.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 132.432423][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 132.714001][ T9593] loop5: detected capacity change from 0 to 1024 [ 132.784689][ T9593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.865287][ T9604] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 132.896529][ T9593] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.905398][ T9593] EXT4-fs (loop5): Remounting filesystem read-only [ 133.111420][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.487987][ T9611] fido_id[9611]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.648750][ T9631] loop1: detected capacity change from 0 to 512 [ 133.705567][ T9631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.912152][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.143868][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2036'. [ 134.143944][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2036'. [ 134.351378][ T9658] loop3: detected capacity change from 0 to 256 [ 134.509055][ T9666] loop4: detected capacity change from 0 to 512 [ 134.519510][ T9666] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.432224][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 136.043227][ T9706] loop4: detected capacity change from 0 to 4096 [ 136.057056][ T9706] EXT4-fs (loop4): Test dummy encryption mode enabled [ 136.061562][ T9706] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 136.063383][ T9706] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237) [ 136.065310][ T9706] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 136.096590][ T9706] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.2065: Invalid inode table block 0 in block_group 0 [ 136.096658][ T9706] loop4: lost filesystem error report for type 5 error -117 [ 136.100344][ T9706] EXT4-fs (loop4): Remounting filesystem read-only [ 136.100471][ T9706] EXT4-fs (loop4): get root inode failed [ 136.100481][ T9706] EXT4-fs (loop4): mount failed [ 136.106492][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 136.106550][ C0] EXT4-fs (loop4): initial error at time 392: __ext4_get_inode_loc:4886 [ 136.106596][ C0] EXT4-fs (loop4): last error at time 392: __ext4_get_inode_loc:4886 [ 136.133117][ T9713] loop5: detected capacity change from 0 to 2048 [ 136.192091][ T9716] < [ 136.239190][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2069'. [ 136.335425][ T9713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.445028][ T9713] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 136.447884][ T9713] EXT4-fs (loop5): Remounting filesystem read-only [ 136.618091][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.771968][ T9726] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 137.384695][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2086'. [ 137.711168][ T9762] loop3: detected capacity change from 0 to 4096 [ 137.714428][ T9762] EXT4-fs (loop3): Test dummy encryption mode enabled [ 137.734433][ T9762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.050073][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.217318][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'. [ 138.217482][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'. [ 138.311400][ T9792] Injecting memory failure for pfn 0x11d51b at process virtual address 0x20001000 [ 138.326626][ T9792] Memory failure: 0x11d51b: recovery action for clean LRU page: Recovered [ 138.328488][ T9792] Injecting memory failure for pfn 0x12150b at process virtual address 0x20002000 [ 138.330654][ T9792] Memory failure: 0x12150b: recovery action for clean LRU page: Recovered [ 138.336899][ T9792] Injecting memory failure for pfn 0x120cbc at process virtual address 0x20003000 [ 138.349307][ T9792] Memory failure: 0x120cbc: recovery action for clean LRU page: Recovered [ 139.232661][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.557005][ T9840] loop4: detected capacity change from 0 to 512 [ 139.570214][ T9840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.659051][ T9840] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2125: bg 0: block 306: padding at end of block bitmap is not set [ 139.751423][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.015479][ T9857] trusted_key: encrypted_key: key user:syz not found [ 140.789451][ T9887] loop3: detected capacity change from 0 to 128 [ 141.306644][ T4712] Bluetooth: hci5: command 0x1003 tx timeout [ 141.306675][ T4711] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 141.560058][ T9915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2159'. [ 141.811769][ T9924] loop4: detected capacity change from 0 to 128 [ 141.838753][ T9924] FAT-fs (loop4): bogus number of reserved sectors [ 141.838817][ T9924] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 141.838846][ T9924] FAT-fs (loop4): Can't find a valid FAT filesystem [ 141.892158][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2168'. [ 141.918403][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2168'. [ 141.979734][ T9932] loop3: detected capacity change from 0 to 512 [ 141.984912][ T9932] EXT4-fs (loop3): Test dummy encryption mode enabled [ 141.997026][ T9932] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2169: inode has both inline data and extents flags [ 141.999748][ T9932] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.000190][ T9932] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2169: couldn't read orphan inode 15 (err -117) [ 142.003968][ T9932] loop3: lost filesystem error report for type 5 error -117 [ 142.018394][ T9932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.279009][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.425165][ T9945] stusb160x 0-0048: Failed to allocate register map:-22 [ 142.425390][ T9945] stusb160x 0-0048: probe with driver stusb160x failed with error -22 [ 142.439178][ T9945] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x48 [ 142.715396][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'. [ 142.717611][ T9961] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2182'. [ 143.097628][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 143.097714][ T9964] macvlan0: entered promiscuous mode [ 143.097859][ T9964] netlink: 'syz.1.2184': attribute type 1 has an invalid length. [ 143.097872][ T9964] netlink: 'syz.1.2184': attribute type 2 has an invalid length. [ 143.097884][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 144.014774][ T9995] loop4: detected capacity change from 0 to 256 [ 144.529650][T10016] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2207'. [ 144.529715][T10016] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2207'. [ 145.249822][T10045] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2218'. [ 145.349885][T10049] loop3: detected capacity change from 0 to 512 [ 145.353217][T10049] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.443380][T10049] syz.3.2222: attempt to access beyond end of device [ 145.443380][T10049] loop3: rw=0, sector=17179852706, nr_sectors = 16 limit=512 [ 146.492659][T10084] loop4: detected capacity change from 0 to 1024 [ 146.566814][T10084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 146.638344][T10084] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.2239: lblock 0 mapped to illegal pblock 0 (length 1) [ 146.648099][T10084] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 146.650386][T10084] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.650386][T10084] [ 146.689441][T10084] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.2239: lblock 0 mapped to illegal pblock 0 (length 1) [ 146.701829][T10084] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.2239: lblock 0 mapped to illegal pblock 0 (length 1) [ 146.819308][ T4709] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 146.822767][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.902819][T10100] loop3: detected capacity change from 0 to 2048 [ 146.962852][T10100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.170772][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.736511][T10131] misc userio: Can't change port type on an already running userio instance [ 147.981022][T10139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2262'. [ 148.229219][T10147] bridge0: port 3(batadv1) entered blocking state [ 148.232830][T10147] bridge0: port 3(batadv1) entered disabled state [ 148.233076][T10147] batadv1: entered allmulticast mode [ 148.235313][T10147] batadv1: entered promiscuous mode [ 148.531371][T10156] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2271'. [ 148.663047][T10160] loop3: detected capacity change from 0 to 1024 [ 148.664090][T10160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.716422][ T39] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 148.716470][ T39] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 148.728410][T10160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.736384][ T26] atkbd serio4: keyboard reset failed on [ 148.759670][T10162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2273'. [ 149.066650][ T30] audit: type=1326 audit(405.032:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.071106][ T30] audit: type=1326 audit(405.032:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.075668][ T30] audit: type=1326 audit(405.032:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.081035][ T30] audit: type=1326 audit(405.032:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.085402][ T30] audit: type=1326 audit(405.032:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.090523][ T30] audit: type=1326 audit(405.032:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.095143][ T30] audit: type=1326 audit(405.032:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.099944][ T30] audit: type=1326 audit(405.032:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.104296][ T30] audit: type=1326 audit(405.032:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.108976][ T30] audit: type=1326 audit(405.032:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.0.2278" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb792a8 code=0x7ffc0000 [ 149.178052][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.290182][T10178] bond0: option slaves: invalid value (-veth0) [ 149.566665][T10182] loop3: detected capacity change from 0 to 4096 [ 149.566735][T10189] loop4: detected capacity change from 0 to 128 [ 149.580019][T10189] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 149.590982][T10182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.629780][T10189] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.757886][ T4709] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.826739][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.830706][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.830827][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.830903][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.830977][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.831049][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.831121][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.831193][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.831268][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.831347][T10200] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.926386][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2289'. [ 149.926642][T10202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.299439][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.461083][T10202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.940145][T10219] tap0: tun_chr_ioctl cmd 1074025677 [ 150.943476][T10219] tap0: linktype set to 804 [ 151.655511][T10247] geneve2: entered promiscuous mode [ 151.657568][T10247] geneve2: entered allmulticast mode [ 152.280095][T10273] loop4: detected capacity change from 0 to 128 [ 152.307599][T10273] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 152.307672][T10273] FAT-fs (loop4): Filesystem has been set read-only [ 152.980852][T10290] loop3: detected capacity change from 0 to 8192 [ 153.105919][T10290] loop3: p1 p2 p4[EZD] [ 153.122839][T10290] loop3: p4 start 201326592 is beyond EOD, truncated [ 153.616341][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 153.629042][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 153.799974][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 153.846471][ T4716] udevd[4716]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 153.924337][T10321] Injecting memory failure for pfn 0x13a10f at process virtual address 0x20f0f000 [ 154.001298][T10325] netlink: 'syz.1.2348': attribute type 12 has an invalid length. [ 154.112003][T10321] Memory failure: 0x13a10f: recovery action for dirty LRU page: Recovered [ 155.320279][T10374] loop1: detected capacity change from 0 to 512 [ 155.335160][T10374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.392854][T10374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.510402][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.662265][T10389] loop1: detected capacity change from 0 to 512 [ 155.710674][T10389] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2374: iget: bad i_size value: 38620345925642 [ 155.710748][T10389] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.722341][T10389] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2374: couldn't read orphan inode 15 (err -117) [ 155.722417][T10389] loop1: lost filesystem error report for type 5 error -117 [ 155.725882][T10389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.802479][T10389] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2374: bg 0: block 5: invalid block bitmap [ 155.813143][T10389] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 155.817606][T10389] overlayfs: failed to verify upper root origin [ 156.032361][T10405] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2382'. [ 156.044510][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.133535][T10407] binder: 10406:10407 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 156.135133][T10407] binder: 10406:10407 ioctl c0306201 200001c0 returned -22 [ 156.228450][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2383'. [ 156.653686][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.662689][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.279871][T10442] loop5: detected capacity change from 0 to 1024 [ 157.290681][T10442] EXT4-fs: Ignoring removed oldalloc option [ 157.293267][T10442] EXT4-fs: Ignoring removed orlov option [ 157.314829][T10442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 157.326457][T10442] System zones: 0-1, 3-12 [ 157.340534][T10442] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.594771][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 157.795181][T10452] ima: policy update failed [ 157.795602][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 157.795643][ T30] audit: type=1807 audit(413.742:17): action=measure uid>+ res=0 [ 157.795707][ T30] audit: type=1802 audit(413.752:18): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.5.2403" res=0 errno=0 [ 157.795761][ T30] audit: type=1802 audit(413.752:19): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.5.2403" res=0 errno=0 [ 157.843639][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2407'. [ 158.521107][T10484] loop4: detected capacity change from 0 to 128 [ 158.608725][T10484] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.603161][ T4709] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.825887][T10523] loop1: detected capacity change from 0 to 1024 [ 159.870247][T10523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.276854][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.508990][T10549] loop5: detected capacity change from 0 to 1024 [ 160.524002][T10549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.631721][T10549] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2447: corrupted xattr block 84: invalid header [ 160.637684][T10549] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2447: corrupted xattr block 84: invalid header [ 160.641327][T10549] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2447: corrupted xattr block 84: invalid header [ 160.656568][T10549] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2447: corrupted xattr block 84: invalid header [ 160.687671][T10549] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.2447: Freeing blocks not in datazone - block = 0, count = 16 [ 160.877257][ T40] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 160.881837][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 160.884653][ T40] EXT4-fs (loop5): This should not happen!! Data will be lost [ 160.884653][ T40] [ 160.886972][ T40] EXT4-fs (loop5): Total free blocks count 0 [ 160.888177][ T40] EXT4-fs (loop5): Free/Dirty block details [ 160.889338][ T40] EXT4-fs (loop5): free_blocks=16 [ 160.889388][ T40] EXT4-fs (loop5): dirty_blocks=16 [ 160.889414][ T40] EXT4-fs (loop5): Block reservation details [ 160.889439][ T40] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 160.895169][ T7519] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 160.918390][ T7519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.050682][T10572] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 161.103734][T10574] loop1: detected capacity change from 0 to 1024 [ 161.167843][T10574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.274478][T10574] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.2456: lblock 0 mapped to illegal pblock 0 (length 3) [ 161.275522][T10574] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 161.275547][T10574] EXT4-fs (loop1): This should not happen!! Data will be lost [ 161.275547][T10574] [ 161.314097][T10583] usb usb9: usbfs: process 10583 (syz.4.2461) did not claim interface 3 before use [ 161.331703][T10589] loop5: detected capacity change from 0 to 256 [ 161.415620][ T4714] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 161.437648][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.507178][T10634] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 162.513637][ T1376] rtrs_client L2023: : CM error (CM event: address error, err: -ENODEV) [ 162.513699][ T1376] ================================================================== [ 162.513709][ T1376] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 162.513729][ T1376] Read of size 255 at addr 0000000000000000 by task kworker/u8:7/1376 [ 162.513737][ T1376] [ 162.513744][ T1376] CPU: 0 UID: 0 PID: 1376 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT [ 162.513756][ T1376] Tainted: [L]=SOFTLOCKUP [ 162.513760][ T1376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 162.513766][ T1376] Workqueue: ib_addr process_one_req [ 162.513782][ T1376] Call trace: [ 162.513786][ T1376] show_stack+0x2c/0x3c (C) [ 162.513803][ T1376] __dump_stack+0x30/0x40 [ 162.513816][ T1376] dump_stack_lvl+0xd8/0x12c [ 162.513830][ T1376] print_report+0x58/0x84 [ 162.513841][ T1376] kasan_report+0x8c/0xc4 [ 162.513854][ T1376] kasan_check_range+0x17c/0x1ac [ 162.513867][ T1376] __asan_memcpy+0x3c/0x84 [ 162.513880][ T1376] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 162.513892][ T1376] __traceiter_rtrs_rdma_error_recovery+0x74/0xc8 [ 162.513903][ T1376] rtrs_rdma_error_recovery+0x2d4/0x400 [ 162.513917][ T1376] rtrs_clt_rdma_cm_handler+0x498/0x1a18 [ 162.513930][ T1376] cma_cm_event_handler+0xbc/0x4c8 [ 162.513943][ T1376] addr_handler+0x210/0x3c4 [ 162.513955][ T1376] process_one_req+0x26c/0x440 [ 162.513968][ T1376] process_scheduled_works+0x788/0x10b8 [ 162.513981][ T1376] worker_thread+0x798/0xbd0 [ 162.513993][ T1376] kthread+0x304/0x3d4 [ 162.514004][ T1376] ret_from_fork+0x10/0x20 [ 162.514015][ T1376] ================================================================== [ 162.514045][ T1376] Disabling lock debugging due to kernel taint [ 162.552048][T10634] rtrs_client L2641: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 162.554280][T10634] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 162.554336][T10634] Mem abort info: [ 162.554358][T10634] ESR = 0x0000000096000006 [ 162.554381][T10634] EC = 0x25: DABT (current EL), IL = 32 bits [ 162.554402][T10634] SET = 0, FnV = 0 [ 162.554422][T10634] EA = 0, S1PTW = 0 [ 162.554440][T10634] FSC = 0x06: level 2 translation fault [ 162.554459][T10634] Data abort info: [ 162.554477][T10634] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 162.554495][T10634] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 162.554515][T10634] GCS = 0, Overlay = 0, DirtyBit = 0 [ 162.554534][T10634] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000122d6f000 [ 162.554554][T10634] [0000000000000000] pgd=080000010a503403, p4d=080000010a503403, pud=0800000130617403, pmd=0000000000000000 [ 162.554644][T10634] Internal error: Oops: 0000000096000006 [#1] SMP [ 162.568525][T10634] Modules linked in: [ 162.569207][T10634] CPU: 1 UID: 0 PID: 10634 Comm: syz.1.2480 Tainted: G B L syzkaller #0 PREEMPT [ 162.571062][T10634] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 162.572097][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 162.573770][T10634] pstate: a3400005 (NzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 162.575106][T10634] pc : __pi_memcpy_generic+0x110/0x22c [ 162.576063][T10634] lr : __asan_memcpy+0x68/0x84 [ 162.576921][T10634] sp : ffff800093fc6f30 [ 162.577620][T10634] x29: ffff800093fc6f30 x28: 1fffe00018e20c01 x27: 0000000000000000 [ 162.578996][T10634] x26: ffff800093fc6f80 x25: 1fffe00019101751 x24: dfff800000000000 [ 162.580355][T10634] x23: ffff7000127f8df0 x22: ffff8000845810b8 x21: ffff0000ce326838 [ 162.581706][T10634] x20: 0000000000000000 x19: 00000000000000ff x18: 1fffe00034bbbe28 [ 162.583044][T10634] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000 [ 162.584497][T10634] x14: ffff0000ce326838 x13: 0000000000000007 x12: 0000000000000000 [ 162.585900][T10634] x11: ffff600019c64d27 x10: 0000000000000000 x9 : dfff800000000000 [ 162.587323][T10634] x8 : 0000000000000001 x7 : 0000000000000000 x6 : 7461705f746c6326 [ 162.588712][T10634] x5 : ffff0000ce326937 x4 : 00000000000000ff x3 : ffff8000845810b8 [ 162.590030][T10634] x2 : 00000000000000ff x1 : 0000000000000000 x0 : ffff0000ce326838 [ 162.591417][T10634] Call trace: [ 162.591926][T10634] __pi_memcpy_generic+0x110/0x22c (P) [ 162.592881][T10634] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 162.594121][T10634] __traceiter_rtrs_clt_close_conns+0x74/0xc8 [ 162.595107][T10634] rtrs_clt_close_conns+0x2f0/0x40c [ 162.596008][T10634] rtrs_clt_open+0xa6c/0xd54 [ 162.596776][T10634] rnbd_clt_map_device+0xcb8/0x1f64 [ 162.597713][T10634] rnbd_clt_map_device_store+0x900/0xad8 [ 162.598759][T10634] dev_attr_store+0x6c/0x90 [ 162.599515][T10634] sysfs_kf_write+0xe0/0x108 [ 162.600305][T10634] kernfs_fop_write_iter+0x260/0x3b8 [ 162.601185][T10634] vfs_write+0x51c/0xa0c [ 162.601885][T10634] ksys_write+0x12c/0x228 [ 162.602623][T10634] __arm64_sys_write+0x84/0x98 [ 162.603417][T10634] invoke_syscall+0x98/0x244 [ 162.604190][T10634] el0_svc_common+0x19c/0x23c [ 162.604980][T10634] do_el0_svc+0x4c/0x5c [ 162.605659][T10634] el0_svc+0x64/0x260 [ 162.606321][T10634] el0t_64_sync_handler+0x44/0x104 [ 162.607150][T10634] el0t_64_sync+0x198/0x19c [ 162.607910][T10634] Code: cb01000e b4fffc2e eb0201df 540004a3 (a940342c) [ 162.609024][T10634] ---[ end trace 0000000000000000 ]--- [ 162.793854][T10634] Kernel panic - not syncing: Oops: Fatal exception [ 162.795039][T10634] SMP: stopping secondary CPUs [ 162.795824][T10634] Kernel Offset: disabled [ 162.796530][T10634] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 162.797708][T10634] Memory Limit: none [ 162.960994][T10634] Rebooting in 86400 seconds..