last executing test programs: 7.55822538s ago: executing program 3 (id=473): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) clock_gettime(0x0, &(0x7f0000002180)) 7.036550037s ago: executing program 3 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6755150d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.679998975s ago: executing program 1 (id=481): unshare(0x64000600) 3.989668198s ago: executing program 3 (id=483): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f0000000bc0)={[{@errors_remount}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 3.937804449s ago: executing program 1 (id=484): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r0, r1+10000000}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200006, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1) 3.717838917s ago: executing program 2 (id=486): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) clock_gettime(0x0, &(0x7f0000002180)) 3.524686193s ago: executing program 3 (id=487): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffc000/0x4000)=nil, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 3.415770527s ago: executing program 1 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x4) 3.269156712s ago: executing program 2 (id=490): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 3.202732124s ago: executing program 1 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6755150d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.948849402s ago: executing program 3 (id=492): syz_emit_ethernet(0x52, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @mss={0x2, 0x4, 0x2}]}}}}}}}}, 0x0) 2.696895971s ago: executing program 2 (id=493): sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="001425bd7000ffdbdf25030000001400cc"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.626736763s ago: executing program 3 (id=494): unshare(0x64000600) 2.398795991s ago: executing program 0 (id=496): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef) 874.431431ms ago: executing program 1 (id=497): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r0, r1+10000000}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200006, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1) 796.454853ms ago: executing program 0 (id=498): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x3, 0x54c, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 796.309264ms ago: executing program 2 (id=499): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) clock_gettime(0x0, 0x0) 503.592354ms ago: executing program 0 (id=500): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 456.278765ms ago: executing program 2 (id=501): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 302.78085ms ago: executing program 0 (id=502): r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) 254.023282ms ago: executing program 1 (id=503): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x3800c957}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 204.644494ms ago: executing program 0 (id=504): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), 0x0}) 66.687718ms ago: executing program 0 (id=505): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800744, &(0x7f0000000300)={[{@data_err_ignore}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nobh}, {@errors_remount}, {@nodiscard}, {@grpid}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 0s ago: executing program 2 (id=506): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. [ 72.527832][ T5756] cgroup: Unknown subsys name 'net' [ 72.661554][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.056724][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.461197][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.486859][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.497275][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.505391][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.506042][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.521484][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.525127][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.529622][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.537115][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.552270][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.560507][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.567947][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.576262][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.584623][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.586127][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.591835][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.605965][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.607148][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.621161][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.621399][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.635655][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.643459][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.650841][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.658372][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.052210][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 76.105654][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 76.150380][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.245177][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 76.301931][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.309170][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.316937][ T5768] bridge_slave_0: entered allmulticast mode [ 76.323665][ T5768] bridge_slave_0: entered promiscuous mode [ 76.340493][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.347684][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.354947][ T5767] bridge_slave_0: entered allmulticast mode [ 76.361607][ T5767] bridge_slave_0: entered promiscuous mode [ 76.385177][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.392312][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.402276][ T5768] bridge_slave_1: entered allmulticast mode [ 76.409562][ T5768] bridge_slave_1: entered promiscuous mode [ 76.440571][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.447747][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.454954][ T5767] bridge_slave_1: entered allmulticast mode [ 76.461626][ T5767] bridge_slave_1: entered promiscuous mode [ 76.477416][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.484556][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.491896][ T5769] bridge_slave_0: entered allmulticast mode [ 76.499199][ T5769] bridge_slave_0: entered promiscuous mode [ 76.519639][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.544527][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.551810][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.559451][ T5769] bridge_slave_1: entered allmulticast mode [ 76.566307][ T5769] bridge_slave_1: entered promiscuous mode [ 76.575800][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.609279][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.631644][ T5768] team0: Port device team_slave_0 added [ 76.650197][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.670349][ T5768] team0: Port device team_slave_1 added [ 76.687645][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.695648][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.702815][ T5766] bridge_slave_0: entered allmulticast mode [ 76.709937][ T5766] bridge_slave_0: entered promiscuous mode [ 76.736388][ T5767] team0: Port device team_slave_0 added [ 76.744514][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.762033][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.769455][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.777084][ T5766] bridge_slave_1: entered allmulticast mode [ 76.784191][ T5766] bridge_slave_1: entered promiscuous mode [ 76.793557][ T5767] team0: Port device team_slave_1 added [ 76.801500][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.811777][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.818783][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.845046][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.857607][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.864570][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.890532][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.926266][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.960312][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.981915][ T5769] team0: Port device team_slave_0 added [ 76.988697][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.996235][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.022371][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.062133][ T5769] team0: Port device team_slave_1 added [ 77.077255][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.084228][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.110250][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.137502][ T5766] team0: Port device team_slave_0 added [ 77.181113][ T5768] hsr_slave_0: entered promiscuous mode [ 77.188009][ T5768] hsr_slave_1: entered promiscuous mode [ 77.196270][ T5766] team0: Port device team_slave_1 added [ 77.227153][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.234142][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.265889][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.281790][ T5767] hsr_slave_0: entered promiscuous mode [ 77.292109][ T5767] hsr_slave_1: entered promiscuous mode [ 77.298663][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.307128][ T5767] Cannot create hsr debugfs directory [ 77.333518][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.340628][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.366770][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.407217][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.414199][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.440245][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.453626][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.460842][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.486786][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.552695][ T5769] hsr_slave_0: entered promiscuous mode [ 77.560610][ T5769] hsr_slave_1: entered promiscuous mode [ 77.567264][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.575045][ T5769] Cannot create hsr debugfs directory [ 77.635296][ T51] Bluetooth: hci0: command tx timeout [ 77.672451][ T5766] hsr_slave_0: entered promiscuous mode [ 77.679225][ T5766] hsr_slave_1: entered promiscuous mode [ 77.685702][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.693275][ T5766] Cannot create hsr debugfs directory [ 77.715389][ T51] Bluetooth: hci3: command tx timeout [ 77.715706][ T5771] Bluetooth: hci1: command tx timeout [ 77.721217][ T51] Bluetooth: hci2: command tx timeout [ 77.924673][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.959243][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.968461][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.989046][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.060979][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.071889][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.082821][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.110497][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.181580][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.208592][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.230427][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.253990][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.288488][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.300701][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.330691][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.348272][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.358242][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.409958][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.428699][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.436059][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.481424][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.488656][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.559759][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.596852][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.609586][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.631094][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.657337][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.664508][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.687129][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.694311][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.737812][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.767290][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.790722][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.832374][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.839897][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.865419][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.872596][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.896758][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.903884][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.938675][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.945829][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.060722][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.111376][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.193044][ T5767] veth0_vlan: entered promiscuous mode [ 79.219045][ T5767] veth1_vlan: entered promiscuous mode [ 79.297536][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.313485][ T5767] veth0_macvtap: entered promiscuous mode [ 79.343950][ T5767] veth1_macvtap: entered promiscuous mode [ 79.417329][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.458722][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.482764][ T5768] veth0_vlan: entered promiscuous mode [ 79.500261][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.510611][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.519866][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.529222][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.553733][ T5768] veth1_vlan: entered promiscuous mode [ 79.569591][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.630896][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.683397][ T5768] veth0_macvtap: entered promiscuous mode [ 79.700384][ T5769] veth0_vlan: entered promiscuous mode [ 79.717015][ T51] Bluetooth: hci0: command tx timeout [ 79.733542][ T5768] veth1_macvtap: entered promiscuous mode [ 79.770322][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.781463][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.792826][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.800385][ T5777] Bluetooth: hci3: command tx timeout [ 79.800503][ T51] Bluetooth: hci1: command tx timeout [ 79.806392][ T51] Bluetooth: hci2: command tx timeout [ 79.822887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.832475][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.840516][ T5769] veth1_vlan: entered promiscuous mode [ 79.870545][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.883230][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.897691][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.907871][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.916812][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.925955][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.934659][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.988252][ T5766] veth0_vlan: entered promiscuous mode [ 80.003321][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.011540][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.054013][ T5769] veth0_macvtap: entered promiscuous mode [ 80.066547][ T5766] veth1_vlan: entered promiscuous mode [ 80.093419][ T5769] veth1_macvtap: entered promiscuous mode [ 80.144569][ T5766] veth0_macvtap: entered promiscuous mode [ 80.158956][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.173730][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.196437][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.211932][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.222836][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.243984][ T5835] ======================================================= [ 80.243984][ T5835] WARNING: The mand mount option has been deprecated and [ 80.243984][ T5835] and is ignored by this kernel. Remove the mand [ 80.243984][ T5835] option from the mount to silence this warning. [ 80.243984][ T5835] ======================================================= [ 80.249678][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.296544][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.316743][ T5766] veth1_macvtap: entered promiscuous mode [ 80.342748][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.354144][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.369795][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.380826][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.397118][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.430357][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.442391][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.452533][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.463203][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.473438][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.484878][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.496650][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.505827][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.518619][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.527778][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.538042][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.550268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.566964][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.577349][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.589211][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.613448][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.628361][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.640454][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.651685][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.664624][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.706441][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.716429][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.727181][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.737089][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.805057][ T51] Bluetooth: hci0: command tx timeout [ 81.876084][ T51] Bluetooth: hci2: command tx timeout [ 81.881658][ T5777] Bluetooth: hci1: command tx timeout [ 81.881673][ T5771] Bluetooth: hci3: command tx timeout [ 82.379960][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.400079][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.423021][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.454520][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.490855][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.512479][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.515758][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.646134][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.667841][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.352507][ T5884] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 83.894929][ T5771] Bluetooth: hci0: command tx timeout [ 83.955276][ T5771] Bluetooth: hci3: command tx timeout [ 83.956125][ T5777] Bluetooth: hci1: command tx timeout [ 83.960796][ T5771] Bluetooth: hci2: command tx timeout [ 84.337638][ T5899] syz.2.19[5899]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.389906][ T5899] loop2: detected capacity change from 0 to 512 [ 84.487100][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.545686][ T5901] syzkaller0: entered promiscuous mode [ 84.551203][ T5901] syzkaller0: entered allmulticast mode [ 84.558752][ T5899] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.761092][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.927845][ T28] cfg80211: failed to load regulatory.db [ 87.763281][ T5952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.586218][ T6003] Zero length message leads to an empty skb [ 89.711827][ T6008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.860004][ T6012] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 92.110680][ T5990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.728880][ T6052] loop2: detected capacity change from 0 to 256 [ 92.780635][ T6051] syzkaller0: entered promiscuous mode [ 92.794999][ T6051] syzkaller0: entered allmulticast mode [ 94.115783][ T6083] loop0: detected capacity change from 0 to 2048 [ 94.206833][ T6083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.286155][ T6083] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.328243][ T6083] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 94.342566][ T6083] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.342566][ T6083] [ 94.352676][ T6083] EXT4-fs (loop0): Total free blocks count 0 [ 94.359797][ T6083] EXT4-fs (loop0): Free/Dirty block details [ 94.366494][ T6083] EXT4-fs (loop0): free_blocks=2415919104 [ 94.372300][ T6083] EXT4-fs (loop0): dirty_blocks=16 [ 94.377868][ T6083] EXT4-fs (loop0): Block reservation details [ 94.391457][ T6083] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 94.428024][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.499367][ T6101] syzkaller0: entered promiscuous mode [ 94.505064][ T6101] syzkaller0: entered allmulticast mode [ 95.954419][ T6056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.167838][ T6117] tmpfs: Bad value for 'mpol' [ 96.316555][ T27] audit: type=1326 audit(1781563883.444:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87c719ce59 code=0x0 [ 96.441520][ T27] audit: type=1326 audit(1781563883.554:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c719ce59 code=0x7ffc0000 [ 96.481133][ T27] audit: type=1326 audit(1781563883.554:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c719ce59 code=0x7ffc0000 [ 96.568333][ T27] audit: type=1326 audit(1781563883.554:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c719ce59 code=0x7ffc0000 [ 96.599065][ T27] audit: type=1326 audit(1781563883.554:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f87c719ce59 code=0x7ffc0000 [ 96.634517][ T27] audit: type=1326 audit(1781563883.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c719ce59 code=0x7ffc0000 [ 96.690257][ T27] audit: type=1326 audit(1781563883.614:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87c715d68e code=0x7ffc0000 [ 96.720006][ T27] audit: type=1326 audit(1781563883.614:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87c715d68e code=0x7ffc0000 [ 96.744462][ T27] audit: type=1326 audit(1781563883.614:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87c715d68e code=0x7ffc0000 [ 96.771493][ T27] audit: type=1326 audit(1781563883.614:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.78" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87c715d68e code=0x7ffc0000 [ 97.582102][ T6137] syzkaller0: entered promiscuous mode [ 97.602133][ T6137] syzkaller0: entered allmulticast mode [ 98.635469][ T6164] gtp0: entered promiscuous mode [ 98.640589][ T6164] gtp0: entered allmulticast mode [ 98.749414][ T6168] syz.0.87 uses obsolete (PF_INET,SOCK_PACKET) [ 98.898742][ T6170] syzkaller0: entered promiscuous mode [ 98.904261][ T6170] syzkaller0: entered allmulticast mode [ 100.740745][ T6148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.814074][ T6174] netlink: 'syz.0.89': attribute type 2 has an invalid length. [ 100.822287][ T6174] netlink: 224 bytes leftover after parsing attributes in process `syz.0.89'. [ 101.124162][ T6181] syzkaller0: entered promiscuous mode [ 101.130902][ T6181] syzkaller0: entered allmulticast mode [ 101.183642][ T6179] VFS: Mount too revealing [ 101.357630][ T6189] loop3: detected capacity change from 0 to 128 [ 101.393157][ T6188] VFS: Mount too revealing [ 101.450611][ T6189] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.493696][ T6194] loop2: detected capacity change from 0 to 256 [ 101.556401][ T6189] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.759530][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.916333][ T6196] syzkaller0: entered promiscuous mode [ 101.934929][ T6196] syzkaller0: entered allmulticast mode [ 104.503552][ T6221] syzkaller0: entered promiscuous mode [ 104.509298][ T6221] syzkaller0: entered allmulticast mode [ 104.687685][ T6227] loop1: detected capacity change from 0 to 128 [ 104.747091][ T6227] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.780660][ T6227] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.850613][ T6230] VFS: Mount too revealing [ 104.900523][ T6204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.989444][ T27] kauditd_printk_skb: 265 callbacks suppressed [ 104.989458][ T27] audit: type=1804 audit(1781563892.124:277): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.107" name="/newroot/19/file0/file1" dev="loop1" ino=12 res=1 errno=0 [ 105.024132][ T6239] tipc: Can't bind to reserved service type 0 [ 105.224495][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.287578][ T6243] syzkaller0: entered promiscuous mode [ 105.305088][ T6243] syzkaller0: entered allmulticast mode [ 107.418011][ T6269] syzkaller0: entered promiscuous mode [ 107.423509][ T6269] syzkaller0: entered allmulticast mode [ 107.589021][ T6283] VFS: Mount too revealing [ 107.901217][ T6303] loop3: detected capacity change from 0 to 128 [ 108.256127][ T6311] syzkaller0: entered promiscuous mode [ 108.273611][ T6311] syzkaller0: entered allmulticast mode [ 110.387212][ T6336] VFS: Mount too revealing [ 110.671117][ T6288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.854643][ T6355] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 111.862579][ T6355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.135'. [ 112.604688][ T6360] syzkaller0: entered promiscuous mode [ 112.610329][ T6360] syzkaller0: entered allmulticast mode [ 112.761491][ T6356] syzkaller0: entered promiscuous mode [ 112.785113][ T6356] syzkaller0: entered allmulticast mode [ 112.924284][ T6365] VFS: Mount too revealing [ 116.141542][ T6375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.720138][ T6397] syz.3.148 (6397) used greatest stack depth: 20816 bytes left [ 117.440123][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 117.578414][ T5814] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.648235][ T6409] syzkaller0: entered promiscuous mode [ 117.654010][ T6409] syzkaller0: entered allmulticast mode [ 117.774924][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 117.786894][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.816419][ T5814] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 117.846034][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.871486][ T5814] usb 3-1: Product: syz [ 117.884969][ T5814] usb 3-1: Manufacturer: syz [ 117.892131][ T5814] usb 3-1: SerialNumber: syz [ 117.920627][ T6416] loop0: detected capacity change from 0 to 512 [ 117.954677][ T6416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.080515][ T6416] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.289344][ T5814] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 122.474998][ T6416] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 122.475334][ T6416] EXT4-fs: failed to create workqueue [ 122.508593][ T6416] EXT4-fs (loop0): mount failed [ 122.541477][ T5814] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 122.627808][ T5814] usb 3-1: USB disconnect, device number 2 [ 122.883150][ T6434] syzkaller0: entered promiscuous mode [ 122.932862][ T6434] syzkaller0: entered allmulticast mode [ 123.666670][ T6445] syzkaller0: entered promiscuous mode [ 123.673940][ T6445] syzkaller0: entered allmulticast mode [ 126.674543][ T6469] loop2: detected capacity change from 0 to 256 [ 126.960925][ T6476] loop1: detected capacity change from 0 to 512 [ 126.998355][ T6476] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.011602][ T6476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.047221][ T6476] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.172: Invalid block bitmap block 0 in block_group 0 [ 127.066856][ T6476] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 127.107314][ T6476] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.172: attempt to clear invalid blocks 983261 len 1 [ 127.125475][ T6476] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.172: Invalid inode table block 0 in block_group 0 [ 127.141081][ T6476] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 127.152708][ T6476] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 127.190371][ T6476] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.172: Invalid inode table block 0 in block_group 0 [ 127.225904][ T6476] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 127.253138][ T6476] EXT4-fs error (device loop1): ext4_truncate:4301: inode #11: comm syz.1.172: mark_inode_dirty error [ 127.298859][ T6476] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 127.343104][ T6476] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.172: Invalid inode table block 0 in block_group 0 [ 127.409410][ T6476] EXT4-fs (loop1): 1 truncate cleaned up [ 127.533918][ T6476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.016984][ T6476] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.172: Invalid inode table block 0 in block_group 0 [ 128.067184][ T6476] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 128.113960][ T6488] syzkaller0: entered promiscuous mode [ 128.132491][ T6488] syzkaller0: entered allmulticast mode [ 128.189658][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.580815][ T6509] loop0: detected capacity change from 0 to 512 [ 128.654975][ T6509] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 128.683736][ T6509] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.184: bg 0: block 255: padding at end of block bitmap is not set [ 129.255608][ T6513] loop3: detected capacity change from 0 to 4096 [ 129.281393][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.430104][ T6509] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 129.454148][ T6513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.516021][ T27] audit: type=1800 audit(1781563916.644:278): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.181" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 129.539752][ T6509] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.184: invalid indirect mapped block 1 (level 1) [ 129.561535][ T6509] EXT4-fs (loop0): 1 truncate cleaned up [ 129.570777][ T6509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.646438][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 129.654209][ T5814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.701708][ T5814] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 129.722399][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.759386][ T5814] usb 2-1: Product: syz [ 129.788668][ T5814] usb 2-1: Manufacturer: syz [ 129.793350][ T5814] usb 2-1: SerialNumber: syz [ 129.814161][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.830468][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.890792][ T6516] loop2: detected capacity change from 0 to 1024 [ 129.946133][ T6516] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 129.995817][ T6516] JBD2: no valid journal superblock found [ 130.012417][ T6516] EXT4-fs (loop2): Could not load journal inode [ 130.066610][ T6516] netlink: 256 bytes leftover after parsing attributes in process `syz.2.185'. [ 130.122252][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.188'. [ 130.135270][ T6516] netlink: 56 bytes leftover after parsing attributes in process `syz.2.185'. [ 130.172837][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.188'. [ 130.566523][ T5814] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 130.775862][ T5814] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 131.484758][ C0] sched: RT throttling activated [ 131.495036][ T5814] usb 2-1: USB disconnect, device number 2 [ 131.558639][ T6528] syzkaller0: entered promiscuous mode [ 131.589199][ T6528] syzkaller0: entered allmulticast mode [ 131.655176][ T6529] syzkaller0: entered promiscuous mode [ 131.678906][ T6529] syzkaller0: entered allmulticast mode [ 132.150509][ T6538] loop3: detected capacity change from 0 to 256 [ 132.168893][ T6539] loop2: detected capacity change from 0 to 512 [ 132.222004][ T6539] EXT4-fs: Ignoring removed i_version option [ 132.274574][ T6539] EXT4-fs: Ignoring removed oldalloc option [ 132.390170][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.549608][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.826385][ T6555] syzkaller0: entered promiscuous mode [ 132.834173][ T6555] syzkaller0: entered allmulticast mode [ 132.941137][ T6558] loop3: detected capacity change from 0 to 2048 [ 132.998944][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.007314][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.039735][ T6558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.085289][ T6558] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.157201][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.244956][ T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.385985][ T6578] loop2: detected capacity change from 0 to 128 [ 133.454948][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 133.480048][ T787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.503719][ T787] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 133.534455][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.556284][ T787] usb 2-1: Product: syz [ 133.560503][ T787] usb 2-1: Manufacturer: syz [ 133.571940][ T6582] loop3: detected capacity change from 0 to 512 [ 133.586438][ T787] usb 2-1: SerialNumber: syz [ 133.606502][ T6582] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.649216][ T6584] syzkaller0: entered promiscuous mode [ 133.669438][ T6584] syzkaller0: entered allmulticast mode [ 133.715943][ T6582] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 133.757565][ T6582] Quota error (device loop3): write_blk: dquota write failed [ 133.778027][ T6582] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 133.788514][ T6582] Quota error (device loop3): write_blk: dquota write failed [ 133.796207][ T6582] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 133.806299][ T6582] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.212: Failed to acquire dquot type 1 [ 133.822988][ T6582] EXT4-fs (loop3): 1 truncate cleaned up [ 133.830363][ T6582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.015513][ T6582] EXT4-fs error (device loop3): __ext4_remount:6756: comm syz.3.212: Abort forced by user [ 134.040257][ T6582] EXT4-fs (loop3): Remounting filesystem read-only [ 134.087046][ T6582] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 134.295720][ T787] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 134.491101][ T787] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 135.219531][ T787] usb 2-1: USB disconnect, device number 3 [ 135.506643][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 135.748543][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bb6c800: rx timeout, send abort [ 136.249019][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bb6d800: rx timeout, send abort [ 136.257973][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bb6c800: abort rx timeout. Force session deactivation [ 136.300288][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.435300][ T6603] loop3: detected capacity change from 0 to 256 [ 136.653342][ T6609] netlink: 'syz.3.223': attribute type 4 has an invalid length. [ 136.707396][ T6611] syzkaller0: entered promiscuous mode [ 136.713007][ T6611] syzkaller0: entered allmulticast mode [ 136.721143][ T6609] netlink: 'syz.3.223': attribute type 4 has an invalid length. [ 136.754521][ T6609] netlink: 'syz.3.223': attribute type 4 has an invalid length. [ 136.757339][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88805bb6d800: abort rx timeout. Force session deactivation [ 136.824118][ T6615] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 137.683811][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 137.799408][ T6628] loop2: detected capacity change from 0 to 512 [ 137.841099][ T6628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.877448][ T6628] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.943242][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 138.055266][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.122739][ T6639] syzkaller0: entered promiscuous mode [ 138.129538][ T6639] syzkaller0: entered allmulticast mode [ 138.389659][ T6647] netlink: 'syz.1.239': attribute type 4 has an invalid length. [ 138.544448][ T6653] loop1: detected capacity change from 0 to 128 [ 138.576588][ T6653] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.608466][ T6653] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.789601][ T6659] loop2: detected capacity change from 0 to 512 [ 138.833007][ T6659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.861777][ T6659] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.908876][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.003133][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.303771][ T6675] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 139.487221][ T6682] loop0: detected capacity change from 0 to 512 [ 139.520593][ T6682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.552629][ T6682] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.557947][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.256'. [ 139.681792][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 139.705863][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.083458][ T6705] loop0: detected capacity change from 0 to 4096 [ 141.147480][ T6710] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 141.195801][ T6705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.256989][ T6705] EXT4-fs (loop0): shut down requested (0) [ 141.270114][ T6714] loop2: detected capacity change from 0 to 512 [ 141.344065][ T6714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.405120][ T6714] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.419017][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.468315][ T6734] loop1: detected capacity change from 0 to 256 [ 142.537204][ T6734] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.612178][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.683370][ T27] audit: type=1800 audit(1781563929.784:279): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.270" name="file1" dev="loop1" ino=1048596 res=0 errno=0 [ 142.686841][ T6738] loop3: detected capacity change from 0 to 512 [ 142.874905][ T6738] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.125652][ T6738] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.271: bad orphan inode 131083 [ 143.452020][ T6738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.919000][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.493441][ T6761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.722739][ T6780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.287'. [ 146.033766][ T6784] syzkaller0: entered promiscuous mode [ 146.055901][ T6755] loop2: detected capacity change from 0 to 512 [ 146.058665][ T6784] syzkaller0: entered allmulticast mode [ 146.137936][ T6755] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.276: corrupted in-inode xattr: invalid ea_ino [ 146.162400][ T6755] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.276: couldn't read orphan inode 15 (err -117) [ 146.196273][ T6755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.271779][ T27] audit: type=1800 audit(1781563933.394:280): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.276" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 146.314564][ T6755] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.276: bg 0: block 4: invalid block bitmap [ 146.342823][ T6755] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 146.380591][ T6755] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.276: invalid indirect mapped block 234881024 (level 0) [ 147.580487][ T6811] netlink: 104 bytes leftover after parsing attributes in process `syz.3.296'. [ 147.649461][ T6814] loop1: detected capacity change from 0 to 2048 [ 147.692778][ T6814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.856088][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.893294][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.274708][ T6828] syzkaller0: entered promiscuous mode [ 148.330377][ T6828] syzkaller0: entered allmulticast mode [ 149.399553][ T6841] netlink: 104 bytes leftover after parsing attributes in process `syz.1.306'. [ 149.425234][ T6839] syzkaller0: entered promiscuous mode [ 149.443499][ T6839] syzkaller0: entered allmulticast mode [ 150.349561][ T6858] loop3: detected capacity change from 0 to 4096 [ 150.455541][ T6858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.492627][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 150.726487][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.291301][ T6871] netlink: 'syz.3.314': attribute type 4 has an invalid length. [ 151.625932][ T6872] netlink: 'syz.3.314': attribute type 4 has an invalid length. [ 152.312759][ T6897] loop2: detected capacity change from 0 to 1024 [ 152.531256][ T6897] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 152.629053][ T6897] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 152.665207][ T6897] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.318: Failed to acquire dquot type 0 [ 152.733648][ T6897] EXT4-fs (loop2): 1 truncate cleaned up [ 152.814353][ T6897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.985581][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.055068][ T6909] syzkaller0: entered promiscuous mode [ 153.067601][ T6909] syzkaller0: entered allmulticast mode [ 153.170140][ T6913] loop2: detected capacity change from 0 to 512 [ 153.267210][ T6913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.284084][ T6918] netlink: 48 bytes leftover after parsing attributes in process `syz.0.325'. [ 153.345754][ T6913] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.323: iget: checksum invalid [ 153.446932][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.461543][ T6922] syzkaller0: entered promiscuous mode [ 153.474313][ T6922] syzkaller0: entered allmulticast mode [ 153.755242][ T6934] syzkaller0: entered promiscuous mode [ 153.763058][ T6934] syzkaller0: entered allmulticast mode [ 154.123792][ T6947] loop3: detected capacity change from 0 to 1024 [ 154.335604][ T6947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.104959][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.198454][ T6957] syzkaller0: entered promiscuous mode [ 155.204110][ T6957] syzkaller0: entered allmulticast mode [ 155.942405][ T6972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.340'. [ 156.117541][ T6971] syzkaller0: entered promiscuous mode [ 156.150413][ T6975] loop0: detected capacity change from 0 to 1024 [ 156.157176][ T6971] syzkaller0: entered allmulticast mode [ 156.195981][ T6975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.241826][ T6975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.254843][ T6975] EXT4-fs: inline encryption not supported [ 156.271371][ T6975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.351414][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.382552][ T6975] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.524119][ T6975] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.345: lblock 0 mapped to illegal pblock 0 (length 1) [ 156.632082][ T6975] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 156.662150][ T6975] EXT4-fs (loop0): This should not happen!! Data will be lost [ 156.662150][ T6975] [ 157.359596][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.570267][ T6998] syzkaller0: entered promiscuous mode [ 157.580214][ T6998] syzkaller0: entered allmulticast mode [ 157.955880][ T7010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.355'. [ 158.535123][ T7011] syzkaller0: entered promiscuous mode [ 158.554973][ T7011] syzkaller0: entered allmulticast mode [ 159.847174][ T7034] syzkaller0: entered promiscuous mode [ 159.852752][ T7034] syzkaller0: entered allmulticast mode [ 160.021928][ T7042] syzkaller0: entered promiscuous mode [ 160.027806][ T7042] syzkaller0: entered allmulticast mode [ 160.171612][ T7047] loop2: detected capacity change from 0 to 2048 [ 160.319101][ T7047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.598610][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.515069][ T5814] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.548385][ T7081] syzkaller0: entered promiscuous mode [ 161.554042][ T7081] syzkaller0: entered allmulticast mode [ 161.567810][ T7079] syzkaller0: entered promiscuous mode [ 161.573825][ T7079] syzkaller0: entered allmulticast mode [ 161.725159][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 161.761112][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.790825][ T5814] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 161.814528][ T7087] loop1: detected capacity change from 0 to 2048 [ 161.814916][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.832559][ T5814] usb 3-1: Product: syz [ 161.837084][ T5814] usb 3-1: Manufacturer: syz [ 161.841905][ T5814] usb 3-1: SerialNumber: syz [ 161.875647][ T7087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.038874][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.955356][ T5814] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 163.111460][ T5814] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 163.799673][ T5814] usb 3-1: USB disconnect, device number 3 [ 164.490827][ T7112] syzkaller0: entered promiscuous mode [ 164.544678][ T7112] syzkaller0: entered allmulticast mode [ 164.907656][ T7120] loop0: detected capacity change from 0 to 2048 [ 165.018643][ T7120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.212003][ T7124] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 165.279572][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.321471][ T7132] loop2: detected capacity change from 0 to 128 [ 165.329115][ T7132] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.342736][ T7132] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.025973][ T7135] Invalid option length (1048237) for dns_resolver key [ 166.136939][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.242055][ T7139] syzkaller0: entered promiscuous mode [ 166.271292][ T7139] syzkaller0: entered allmulticast mode [ 166.527539][ T7150] loop3: detected capacity change from 0 to 4096 [ 166.570910][ T7150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.350066][ T7150] EXT4-fs (loop3): shut down requested (0) [ 167.683525][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.714163][ T7159] loop1: detected capacity change from 0 to 2048 [ 167.846448][ T7159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.073249][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.809470][ T7154] Set syz1 is full, maxelem 65536 reached [ 170.913253][ T7182] syzkaller0: entered promiscuous mode [ 170.955812][ T7182] syzkaller0: entered allmulticast mode [ 171.297055][ T7190] loop1: detected capacity change from 0 to 2048 [ 171.366757][ T7190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.485869][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.613596][ T7210] loop1: detected capacity change from 0 to 4096 [ 172.811943][ T7210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.994008][ T27] audit: type=1800 audit(1781563960.064:281): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.420" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 173.281123][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.617658][ T7227] syzkaller0: entered promiscuous mode [ 173.620087][ T7230] loop1: detected capacity change from 0 to 2048 [ 173.629563][ T7227] syzkaller0: entered allmulticast mode [ 173.697250][ T7230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.949941][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.879616][ T7261] syzkaller0: entered promiscuous mode [ 175.885830][ T7261] syzkaller0: entered allmulticast mode [ 176.348048][ T7275] loop3: detected capacity change from 0 to 4096 [ 176.677066][ T7275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.017190][ T27] audit: type=1800 audit(1781563964.144:282): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.444" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 177.172513][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.142585][ T7294] syzkaller0: entered promiscuous mode [ 178.178179][ T7294] syzkaller0: entered allmulticast mode [ 179.426441][ T7319] loop5: detected capacity change from 0 to 7 [ 179.445537][ T7317] syzkaller0: entered promiscuous mode [ 179.451127][ T7317] syzkaller0: entered allmulticast mode [ 179.470755][ T7323] loop3: detected capacity change from 0 to 2048 [ 179.472184][ T7313] syzkaller0: entered promiscuous mode [ 179.485129][ T7319] Dev loop5: unable to read RDB block 7 [ 179.493346][ T7313] syzkaller0: entered allmulticast mode [ 179.500637][ T7319] loop5: AHDI p1 p2 p3 [ 179.506822][ T7319] loop5: partition table partially beyond EOD, truncated [ 179.514386][ T7319] loop5: p1 start 1818582900 is beyond EOD, truncated [ 179.522136][ T7319] loop5: p3 start 335544320 is beyond EOD, truncated [ 179.547676][ T7323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.636431][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.037690][ T7332] loop3: detected capacity change from 0 to 4096 [ 180.069213][ T7332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.101990][ T27] audit: type=1800 audit(1781563967.234:283): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.465" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 180.217372][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.324359][ T7348] loop3: detected capacity change from 0 to 4096 [ 182.376037][ T7348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.463574][ T7351] loop2: detected capacity change from 0 to 1024 [ 182.515802][ T7351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.577212][ T7351] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.625764][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.644949][ T27] audit: type=1800 audit(1781563969.774:284): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.470" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 182.847656][ T12] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 182.879137][ T7359] loop3: detected capacity change from 0 to 2048 [ 182.900692][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 182.956513][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.956513][ T12] [ 182.972582][ T7359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.003296][ T12] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 4) [ 183.014977][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 183.029526][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 183.042460][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 183.042460][ T12] [ 183.060544][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 183.099007][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.451042][ T7373] syzkaller0: entered promiscuous mode [ 183.464973][ T7373] syzkaller0: entered allmulticast mode [ 183.483307][ T7370] loop2: detected capacity change from 0 to 4096 [ 183.515088][ T7370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.527174][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 183.547782][ T27] audit: type=1800 audit(1781563970.684:285): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.475" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 183.672061][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.681825][ T7379] loop1: detected capacity change from 0 to 1764 [ 183.777978][ T5758] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.141875][ T7387] loop0: detected capacity change from 0 to 4096 [ 184.177657][ T7387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.076922][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.284543][ T7398] loop3: detected capacity change from 0 to 512 [ 186.372371][ T7398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.426587][ T7398] ext4 filesystem being mounted at /119/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.600297][ T7407] loop2: detected capacity change from 0 to 2048 [ 186.603514][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.727676][ T7407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.972070][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.001279][ T7417] syzkaller0: entered promiscuous mode [ 187.005832][ T7414] loop3: detected capacity change from 0 to 4096 [ 187.016001][ T7417] syzkaller0: entered allmulticast mode [ 187.038437][ T7414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.130582][ T27] audit: type=1800 audit(1781563974.204:286): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.487" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 187.206674][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.247494][ T7422] loop2: detected capacity change from 0 to 4096 [ 187.267163][ T7422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.431635][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.374633][ T7447] loop0: detected capacity change from 0 to 736 [ 189.442987][ T7449] loop2: detected capacity change from 0 to 2048 [ 189.546945][ T7449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.664580][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.962585][ T7457] loop2: detected capacity change from 0 to 4096 [ 190.024388][ T7457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.073700][ T7467] loop0: detected capacity change from 0 to 512 [ 190.126524][ T7467] EXT4-fs: Ignoring removed oldalloc option [ 190.132488][ T7467] EXT4-fs: Ignoring removed nobh option [ 190.147570][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.204051][ T7467] [ 190.206426][ T7467] ====================================================== [ 190.213455][ T7467] WARNING: possible circular locking dependency detected [ 190.220482][ T7467] syzkaller #0 Not tainted [ 190.224915][ T7467] ------------------------------------------------------ [ 190.231944][ T7467] syz.0.505/7467 is trying to acquire lock: [ 190.237930][ T7467] ffff88802be0cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 190.248005][ T7467] [ 190.248005][ T7467] but task is already holding lock: [ 190.255641][ T7467] ffff88805bdfdac8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 190.265479][ T7467] [ 190.265479][ T7467] which lock already depends on the new lock. [ 190.265479][ T7467] [ 190.275898][ T7467] [ 190.275898][ T7467] the existing dependency chain (in reverse order) is: [ 190.284991][ T7467] [ 190.284991][ T7467] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 190.292708][ T7467] down_write+0x97/0x200 [ 190.297476][ T7467] ext4_destroy_inline_data+0x28/0xe0 [ 190.303368][ T7467] ext4_do_writepages+0x4f0/0x3990 [ 190.309011][ T7467] ext4_writepages+0x1dd/0x350 [ 190.314290][ T7467] do_writepages+0x3b3/0x630 [ 190.319396][ T7467] filemap_fdatawrite_wbc+0x122/0x180 [ 190.325374][ T7467] filemap_flush+0xe4/0x150 [ 190.330393][ T7467] ext4_release_file+0x82/0x310 [ 190.335782][ T7467] __fput+0x234/0x970 [ 190.340302][ T7467] task_work_run+0x1d4/0x260 [ 190.345410][ T7467] exit_to_user_mode_loop+0xe6/0x110 [ 190.351210][ T7467] exit_to_user_mode_prepare+0xee/0x180 [ 190.357287][ T7467] syscall_exit_to_user_mode+0x1a/0x50 [ 190.363266][ T7467] do_syscall_64+0x61/0xb0 [ 190.368204][ T7467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.374609][ T7467] [ 190.374609][ T7467] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 190.383060][ T7467] __lock_acquire+0x2df1/0x7d40 [ 190.388449][ T7467] lock_acquire+0x19e/0x420 [ 190.393478][ T7467] percpu_down_read+0x44/0x1a0 [ 190.398883][ T7467] ext4_writepages+0x1a4/0x350 [ 190.404201][ T7467] do_writepages+0x3b3/0x630 [ 190.409341][ T7467] __writeback_single_inode+0x153/0xec0 [ 190.415444][ T7467] writeback_single_inode+0x21f/0x760 [ 190.421362][ T7467] write_inode_now+0x183/0x210 [ 190.426663][ T7467] iput+0x5ae/0x920 [ 190.431004][ T7467] ext4_xattr_block_set+0x273f/0x32b0 [ 190.436940][ T7467] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 190.443348][ T7467] __ext4_expand_extra_isize+0x306/0x400 [ 190.449678][ T7467] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 190.455670][ T7467] ext4_evict_inode+0x7f3/0xea0 [ 190.461054][ T7467] evict+0x4ca/0x8d0 [ 190.465461][ T7467] ext4_orphan_cleanup+0xbec/0x1420 [ 190.471169][ T7467] ext4_fill_super+0x5eea/0x67b0 [ 190.476716][ T7467] get_tree_bdev+0x3f3/0x520 [ 190.481815][ T7467] vfs_get_tree+0x8c/0x280 [ 190.486746][ T7467] do_new_mount+0x24b/0xa40 [ 190.491776][ T7467] __se_sys_mount+0x2e7/0x3d0 [ 190.496961][ T7467] do_syscall_64+0x55/0xb0 [ 190.501889][ T7467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.508303][ T7467] [ 190.508303][ T7467] other info that might help us debug this: [ 190.508303][ T7467] [ 190.518520][ T7467] Possible unsafe locking scenario: [ 190.518520][ T7467] [ 190.525955][ T7467] CPU0 CPU1 [ 190.531305][ T7467] ---- ---- [ 190.536674][ T7467] lock(&ei->xattr_sem); [ 190.541037][ T7467] lock(&sbi->s_writepages_rwsem); [ 190.548748][ T7467] lock(&ei->xattr_sem); [ 190.555602][ T7467] rlock(&sbi->s_writepages_rwsem); [ 190.560894][ T7467] [ 190.560894][ T7467] *** DEADLOCK *** [ 190.560894][ T7467] [ 190.569025][ T7467] 3 locks held by syz.0.505/7467: [ 190.574034][ T7467] #0: ffff88802be0e0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x353/0x520 [ 190.584121][ T7467] #1: ffff88802be0e608 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x2bf/0xea0 [ 190.593511][ T7467] #2: ffff88805bdfdac8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 190.603777][ T7467] [ 190.603777][ T7467] stack backtrace: [ 190.609673][ T7467] CPU: 0 PID: 7467 Comm: syz.0.505 Not tainted syzkaller #0 [ 190.616960][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.627024][ T7467] Call Trace: [ 190.630307][ T7467] [ 190.633226][ T7467] dump_stack_lvl+0x18c/0x250 [ 190.637932][ T7467] ? load_image+0x420/0x420 [ 190.642442][ T7467] ? show_regs_print_info+0x20/0x20 [ 190.647635][ T7467] ? print_circular_bug+0x12b/0x1a0 [ 190.652822][ T7467] check_noncircular+0x2fc/0x400 [ 190.657755][ T7467] ? look_up_lock_class+0x75/0x140 [ 190.662869][ T7467] ? print_deadlock_bug+0x5d0/0x5d0 [ 190.668087][ T7467] ? lockdep_lock+0xf5/0x230 [ 190.672681][ T7467] ? _find_first_zero_bit+0xd3/0x100 [ 190.677958][ T7467] __lock_acquire+0x2df1/0x7d40 [ 190.682899][ T7467] ? mark_lock+0x94/0x320 [ 190.687254][ T7467] ? verify_lock_unused+0x140/0x140 [ 190.692456][ T7467] ? __lock_acquire+0x1347/0x7d40 [ 190.697503][ T7467] ? verify_lock_unused+0x140/0x140 [ 190.702717][ T7467] lock_acquire+0x19e/0x420 [ 190.707217][ T7467] ? ext4_writepages+0x1a4/0x350 [ 190.712163][ T7467] ? __might_sleep+0xe0/0xe0 [ 190.716749][ T7467] ? read_lock_is_recursive+0x20/0x20 [ 190.722115][ T7467] ? mark_lock+0x94/0x320 [ 190.726561][ T7467] ? __lock_acquire+0x1347/0x7d40 [ 190.731598][ T7467] percpu_down_read+0x44/0x1a0 [ 190.736366][ T7467] ? ext4_writepages+0x1a4/0x350 [ 190.741304][ T7467] ext4_writepages+0x1a4/0x350 [ 190.746073][ T7467] ? ext4_read_folio+0x2f0/0x2f0 [ 190.751052][ T7467] ? __rwlock_init+0x150/0x150 [ 190.755850][ T7467] ? do_raw_spin_unlock+0x121/0x230 [ 190.761057][ T7467] ? ext4_read_folio+0x2f0/0x2f0 [ 190.766006][ T7467] do_writepages+0x3b3/0x630 [ 190.770636][ T7467] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 190.776361][ T7467] ? writeback_single_inode+0x214/0x760 [ 190.781919][ T7467] ? __lock_acquire+0x7d40/0x7d40 [ 190.786957][ T7467] ? do_raw_spin_lock+0x11f/0x2c0 [ 190.792079][ T7467] __writeback_single_inode+0x153/0xec0 [ 190.797651][ T7467] writeback_single_inode+0x21f/0x760 [ 190.803051][ T7467] ? write_inode_now+0x210/0x210 [ 190.807994][ T7467] write_inode_now+0x183/0x210 [ 190.812775][ T7467] ? bdi_split_work_to_wbs+0x910/0x910 [ 190.818243][ T7467] ? do_raw_spin_unlock+0x121/0x230 [ 190.823440][ T7467] iput+0x5ae/0x920 [ 190.827382][ T7467] ext4_xattr_block_set+0x273f/0x32b0 [ 190.832816][ T7467] ? __might_sleep+0xe0/0xe0 [ 190.837415][ T7467] ? xattr_find_entry+0x12b/0x2f0 [ 190.842437][ T7467] ? ext4_xattr_block_find+0x350/0x350 [ 190.847897][ T7467] ? ext4_xattr_block_find+0x2d4/0x350 [ 190.853352][ T7467] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 190.859278][ T7467] __ext4_expand_extra_isize+0x306/0x400 [ 190.864950][ T7467] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 190.870520][ T7467] ext4_evict_inode+0x7f3/0xea0 [ 190.875371][ T7467] ? _raw_spin_unlock+0x28/0x40 [ 190.880228][ T7467] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 190.886141][ T7467] ? do_raw_spin_unlock+0x121/0x230 [ 190.891338][ T7467] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 190.897231][ T7467] evict+0x4ca/0x8d0 [ 190.901122][ T7467] ? proc_nr_inodes+0x230/0x230 [ 190.905969][ T7467] ? do_raw_spin_unlock+0x121/0x230 [ 190.911161][ T7467] ? _raw_spin_unlock+0x28/0x40 [ 190.916095][ T7467] ? iput+0x706/0x920 [ 190.920095][ T7467] ext4_orphan_cleanup+0xbec/0x1420 [ 190.925317][ T7467] ? ext4_orphan_del+0xbf0/0xbf0 [ 190.930262][ T7467] ? ext4_register_li_request+0x183/0x940 [ 190.935993][ T7467] ? errseq_check_and_advance+0x66/0x120 [ 190.941724][ T7467] ext4_fill_super+0x5eea/0x67b0 [ 190.946687][ T7467] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 190.953184][ T7467] ? __might_sleep+0xe0/0xe0 [ 190.957777][ T7467] ? read_lock_is_recursive+0x20/0x20 [ 190.963209][ T7467] ? snprintf+0xe9/0x140 [ 190.967449][ T7467] ? down_read_killable+0x340/0x340 [ 190.972650][ T7467] ? setup_bdev_super+0x56b/0x660 [ 190.977666][ T7467] get_tree_bdev+0x3f3/0x520 [ 190.982251][ T7467] ? vfs_parse_fs_string+0x170/0x170 [ 190.987545][ T7467] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 190.994329][ T7467] ? setup_bdev_super+0x660/0x660 [ 190.999352][ T7467] ? apparmor_capable+0x137/0x1a0 [ 191.004373][ T7467] ? bpf_lsm_capable+0x9/0x10 [ 191.009052][ T7467] ? security_capable+0x89/0xb0 [ 191.013931][ T7467] vfs_get_tree+0x8c/0x280 [ 191.018341][ T7467] do_new_mount+0x24b/0xa40 [ 191.022839][ T7467] __se_sys_mount+0x2e7/0x3d0 [ 191.027554][ T7467] ? __x64_sys_mount+0xc0/0xc0 [ 191.032316][ T7467] ? lockdep_hardirqs_on+0x98/0x150 [ 191.037604][ T7467] ? __x64_sys_mount+0x20/0xc0 [ 191.042369][ T7467] do_syscall_64+0x55/0xb0 [ 191.046785][ T7467] ? clear_bhb_loop+0x40/0x90 [ 191.051461][ T7467] ? clear_bhb_loop+0x40/0x90 [ 191.056128][ T7467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.062026][ T7467] RIP: 0033:0x7f4b1f39e0ca [ 191.066563][ T7467] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.086161][ T7467] RSP: 002b:00007f4b20292e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.094934][ T7467] RAX: ffffffffffffffda RBX: 00007f4b20292ee0 RCX: 00007f4b1f39e0ca [ 191.102927][ T7467] RDX: 00002000000001c0 RSI: 0000200000000b80 RDI: 00007f4b20292ea0 [ 191.110894][ T7467] RBP: 00002000000001c0 R08: 00007f4b20292ee0 R09: 0000000000800744 [ 191.118860][ T7467] R10: 0000000000800744 R11: 0000000000000246 R12: 0000200000000b80 [ 191.126827][ T7467] R13: 00007f4b20292ea0 R14: 000000000000047a R15: 000000000000002c [ 191.134892][ T7467] [ 191.142251][ T7467] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.505: iget: bad extra_isize 90 (inode size 256) [ 191.156103][ T7467] EXT4-fs (loop0): Remounting filesystem read-only [ 191.162825][ T7467] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 191.176030][ T7467] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 191.186950][ T7467] EXT4-fs (loop0): 1 orphan inode deleted [ 191.193708][ T7467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.210502][ T7467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.950597][ T7459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.448548][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.455006][ T1291] ieee802154 phy1 wpan1: encryption failed: -22