last executing test programs: 29.107253259s ago: executing program 0 (id=1043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{r1}, &(0x7f00000007c0), &(0x7f0000001980)=r0}, 0x20) 29.0653743s ago: executing program 0 (id=1045): r0 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) close_range(r0, r0, 0x0) 28.177266935s ago: executing program 0 (id=1074): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchownat(r1, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) 28.094940306s ago: executing program 0 (id=1079): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000580)={[{@acl}, {@debug}, {@bsdgroups}, {@noload}, {@delalloc}, {@resuid}, {@norecovery}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@errors_remount}]}, 0xfa, 0x477, &(0x7f0000000dc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 27.959594582s ago: executing program 0 (id=1085): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x600) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 27.645499491s ago: executing program 0 (id=1100): timerfd_create(0x7, 0x800) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') close(0x3) pread64(r0, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) 27.482124256s ago: executing program 32 (id=1100): timerfd_create(0x7, 0x800) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') close(0x3) pread64(r0, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) 22.091995184s ago: executing program 1 (id=1272): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 22.001723514s ago: executing program 1 (id=1277): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x35, 0x0, &(0x7f0000000040)="3d25ff005b19c4cbe601709b080084dac826ab0815acd86628f86c32f6ede78b6ea6134e28e5c4bcb9fb8f083f3a81657a32532b51", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.940869995s ago: executing program 1 (id=1280): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 21.865364465s ago: executing program 1 (id=1282): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 21.723537142s ago: executing program 1 (id=1289): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 21.383555153s ago: executing program 1 (id=1297): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="696f636861727365743d63703836322c6e66732c696f636861727365743d63703933362c636f6465706167653d313235302c636865636b3d6e6f726d616c00000000000000ff6d653d77696e39352c726f6469722c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6572726f72733d72656d70756e742d726f2c757466383d312c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c00"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) 21.27895839s ago: executing program 33 (id=1297): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="696f636861727365743d63703836322c6e66732c696f636861727365743d63703933362c636f6465706167653d313235302c636865636b3d6e6f726d616c00000000000000ff6d653d77696e39352c726f6469722c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6572726f72733d72656d70756e742d726f2c757466383d312c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c00"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) 14.503233614s ago: executing program 6 (id=1508): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x60, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0xffffffffffffffe5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "de544d3d582cf07e72683783f0"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "44486d6d3afd8de2ceb42cb8c3"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x44151}, 0x0) 14.421289016s ago: executing program 6 (id=1514): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 14.359983113s ago: executing program 6 (id=1518): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}]}]}, 0x64}}, 0x0) 14.265078694s ago: executing program 6 (id=1523): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 13.963322299s ago: executing program 6 (id=1532): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)='v', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40002141, 0x0, 0x0) 13.463858421s ago: executing program 6 (id=1561): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000040)={'virt_wifi0\x00', @random="010fc93e660a"}) 13.356783734s ago: executing program 34 (id=1561): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000040)={'virt_wifi0\x00', @random="010fc93e660a"}) 1.4694852s ago: executing program 7 (id=2057): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x908, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xfff}, 0x1c) 1.413218961s ago: executing program 7 (id=2060): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 1.280264473s ago: executing program 7 (id=2066): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/40, 0x28) getdents64(r0, &(0x7f0000002280)=""/233, 0xe9) 1.241409248s ago: executing program 4 (id=2069): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) 1.160208467s ago: executing program 7 (id=2072): r0 = io_uring_setup(0x3330, &(0x7f0000000240)={0x0, 0x8c6c, 0x1040, 0xffffffff, 0x20161}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x1, 0x40], 0x2) 1.159450638s ago: executing program 7 (id=2074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.142239734s ago: executing program 5 (id=2076): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x48001005, r0, 0x0) readv(r0, 0x0, 0x0) 1.06773101s ago: executing program 5 (id=2078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r1, 0xa}, 0x8) 991.671521ms ago: executing program 2 (id=2081): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfffffffffffffead) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 972.405957ms ago: executing program 5 (id=2082): setreuid(0xee01, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioprio_set$uid(0x3, 0xee01, 0x2007) 948.35621ms ago: executing program 7 (id=2083): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='mem\n', 0x5) 439.888473ms ago: executing program 3 (id=2087): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x12, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffff, 0x8}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 439.381138ms ago: executing program 2 (id=2088): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000180)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@errors_remount}, {@mblk_io_submit}, {@quota}, {@mblk_io_submit}, {@user_xattr}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000000f) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) 379.079617ms ago: executing program 3 (id=2089): r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 378.451117ms ago: executing program 4 (id=2090): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af83, &(0x7f00000008c0)=0x8000) 375.336002ms ago: executing program 5 (id=2091): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 340.918636ms ago: executing program 2 (id=2092): r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000000000000001"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 317.667941ms ago: executing program 4 (id=2093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048010000180090001006d61737100000000140001800a0001007265646972000000040002800900020073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) 274.523055ms ago: executing program 3 (id=2094): unshare(0x6020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r0, &(0x7f0000000040), r1, 0x0, 0x808, 0x0) 266.198591ms ago: executing program 2 (id=2095): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20005000}, 0x0) 265.835394ms ago: executing program 3 (id=2096): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x10, @desc4}) 232.79325ms ago: executing program 4 (id=2097): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99800300000000004c0012800b00010062726964676500003c00028005002d00010000000a0014000180c2000000000008001a00040000000c002100090000000000000008001a0003a0e0000000000000000000140003006e"], 0x80}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 198.897111ms ago: executing program 3 (id=2098): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, r0, 0x205, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x4, 0x0, {0x46f, 0x6, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x7fffffff}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x24000000) 151.876231ms ago: executing program 2 (id=2099): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x79}, {0x6, 0x7, 0x0, 0xfffffffe}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 103.373703ms ago: executing program 5 (id=2100): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0xaf01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x4008af21, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc3}) 102.270164ms ago: executing program 4 (id=2101): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r1, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0xfc, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x4, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @broadcast}}}}) 86.675686ms ago: executing program 2 (id=2102): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320ff6900140000007ef506be000000020000000088fb000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 76.745581ms ago: executing program 3 (id=2103): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f00000002c0)="05033900d3fc142e0000478886dd", 0x50, 0x4, &(0x7f0000000000)={0x11, 0x86dd, r1, 0x1, 0x10, 0x6, @multicast}, 0x14) 46.543065ms ago: executing program 4 (id=2104): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff8000}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x11}, 0x1c) 0s ago: executing program 5 (id=2105): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x8000004, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) kernel console output (not intermixed with test programs): 8][ T4994] EXT4-fs error (device loop1): __ext4_new_inode:1081: comm syz.1.47: reserved inode found cleared - inode=1 [ 33.973304][ T4994] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 33.990831][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.023026][ T5002] netlink: 204 bytes leftover after parsing attributes in process `syz.1.49'. [ 34.115615][ T4789] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.139944][ T4789] usb 1-1: device descriptor read/8, error -71 [ 34.207829][ T5028] warning: `syz.3.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 34.208868][ T5026] loop1: detected capacity change from 0 to 1024 [ 34.245714][ T4789] usb usb1-port1: unable to enumerate USB device [ 34.253338][ T5026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.291216][ T1457] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 6) [ 34.292222][ T1457] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 34.292240][ T1457] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.292240][ T1457] [ 34.300726][ T1457] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 34.301636][ T1457] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 13 with error 28 [ 34.301652][ T1457] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.301652][ T1457] [ 34.301659][ T1457] EXT4-fs (loop1): Total free blocks count 0 [ 34.301666][ T1457] EXT4-fs (loop1): Free/Dirty block details [ 34.301673][ T1457] EXT4-fs (loop1): free_blocks=0 [ 34.301683][ T1457] EXT4-fs (loop1): dirty_blocks=16 [ 34.301689][ T1457] EXT4-fs (loop1): Block reservation details [ 34.315177][ T4711] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 34.345631][ T4715] Bluetooth: hci0: command tx timeout [ 34.345676][ T4715] Bluetooth: hci3: command tx timeout [ 34.345705][ T4715] Bluetooth: hci1: command tx timeout [ 34.345721][ T4715] Bluetooth: hci2: command tx timeout [ 34.345736][ T4715] Bluetooth: hci4: command tx timeout [ 34.421034][ T30] audit: type=1400 audit(34.390:2): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=5046 comm="syz.4.71" opid=4710 ocomm="syz-executor" [ 34.421087][ T30] audit: type=1400 audit(34.390:3): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=5046 comm="syz.4.71" opid=5046 ocomm="syz.4.71" [ 34.622452][ T5077] netlink: 56 bytes leftover after parsing attributes in process `syz.3.82'. [ 34.653830][ T5081] loop3: detected capacity change from 0 to 1024 [ 34.700919][ T5081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.710243][ T5081] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.86: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.713563][ T5081] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 34.716362][ T5081] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.716362][ T5081] [ 34.719354][ T5081] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.86: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.722727][ T5081] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.86: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.728139][ T5090] process 'syz.1.89' launched './file2' with NULL argv: empty string added [ 34.735752][ T4719] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 34.736987][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.777022][ T5092] loop3: detected capacity change from 0 to 512 [ 34.784611][ T5092] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.90: corrupted in-inode xattr: e_value size too large [ 34.784707][ T5092] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.784850][ T5092] EXT4-fs (loop3): Remounting filesystem read-only [ 34.785352][ T5092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.786241][ T5094] loop1: detected capacity change from 0 to 512 [ 34.787015][ T5094] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.787031][ T5094] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.799214][ T5094] EXT4-fs (loop1): 1 truncate cleaned up [ 34.799698][ T5094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.811386][ T5094] EXT4-fs (loop1): shut down requested (2) [ 34.813970][ T5092] EXT4-fs (loop3): shut down requested (2) [ 34.844347][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.851516][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.288663][ T5110] loop1: detected capacity change from 0 to 4096 [ 35.291887][ T5110] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.303386][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.458945][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.609539][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.698754][ T5144] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 35.725662][ C1] Illegal XDP return value 16128 on prog (id 10) dev bond0, expect packet loss! [ 35.759359][ T5152] loop3: detected capacity change from 0 to 256 [ 35.888756][ T5165] loop2: detected capacity change from 0 to 256 [ 35.984886][ T5175] loop0: detected capacity change from 0 to 256 [ 36.022448][ T30] audit: type=1400 audit(35.990:4): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="}" requested=x pid=5177 comm="syz.2.129" name="file0" dev="tmpfs" ino=169 [ 36.361529][ T5222] netlink: 80 bytes leftover after parsing attributes in process `syz.4.149'. [ 36.409824][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 36.426351][ T50] Bluetooth: hci4: command tx timeout [ 36.426404][ T50] Bluetooth: hci2: command tx timeout [ 36.426421][ T50] Bluetooth: hci1: command tx timeout [ 36.426436][ T50] Bluetooth: hci3: command tx timeout [ 36.426450][ T50] Bluetooth: hci0: command tx timeout [ 36.454491][ T5234] loop3: detected capacity change from 0 to 512 [ 36.466108][ T5234] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.468921][ T5234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 36.468979][ T5234] System zones: 1-12 [ 36.469078][ T5234] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.469456][ T5234] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.156: invalid indirect mapped block 12 (level 1) [ 36.469471][ T5234] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.470748][ T5234] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.156: invalid indirect mapped block 2 (level 2) [ 36.470767][ T5234] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.471046][ T5234] EXT4-fs (loop3): 1 truncate cleaned up [ 36.471730][ T5234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 36.509835][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 36.593026][ T5247] netlink: 56 bytes leftover after parsing attributes in process `syz.3.161'. [ 36.593168][ T5247] sch_fq: defrate 678942120 ignored. [ 36.613639][ T5244] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.906803][ T9] atkbd serio1: keyboard reset failed on [ 36.948526][ T5285] __nla_validate_parse: 2 callbacks suppressed [ 36.949771][ T5285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.179'. [ 37.211762][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.246728][ T5322] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 37.246766][ T5322] netlink: 56 bytes leftover after parsing attributes in process `syz.3.197'. [ 37.254804][ T5321] tap0: tun_chr_ioctl cmd 1074025677 [ 37.259079][ T5321] tap0: linktype set to 780 [ 37.370252][ T5337] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.454225][ T5343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.476463][ T5343] capability: warning: `syz.0.205' uses deprecated v2 capabilities in a way that may be insecure [ 37.514867][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.524778][ T5353] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 37.725292][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'. [ 37.731804][ T5385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.222'. [ 37.731854][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'. [ 37.767250][ T5391] netlink: 'syz.1.223': attribute type 5 has an invalid length. [ 37.779733][ T5380] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 37.787181][ T5388] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 37.809320][ T5397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.228'. [ 37.856148][ T4719] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.930975][ T5405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.978637][ T5405] EXT4-fs: Cannot change journaled quota options when quota turned on [ 37.992086][ T5423] bridge0: port 3(syz_tun) entered blocking state [ 37.993734][ T5423] bridge0: port 3(syz_tun) entered disabled state [ 37.996304][ T5423] syz_tun: entered allmulticast mode [ 37.998414][ T5423] syz_tun: entered promiscuous mode [ 37.999983][ T5423] bridge0: port 3(syz_tun) entered blocking state [ 38.000046][ T5423] bridge0: port 3(syz_tun) entered forwarding state [ 38.082698][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.429187][ T5474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.264'. [ 38.467366][ T5483] bridge: RTM_NEWNEIGH with invalid ether address [ 38.505834][ T50] Bluetooth: hci3: command tx timeout [ 38.506002][ T50] Bluetooth: hci1: command tx timeout [ 38.506017][ T50] Bluetooth: hci2: command tx timeout [ 38.506030][ T50] Bluetooth: hci4: command tx timeout [ 38.506082][ T4715] Bluetooth: hci0: command tx timeout [ 38.747320][ T5519] input: syz0 as /devices/virtual/input/input6 [ 38.829984][ T5528] ipvlan2: entered allmulticast mode [ 38.831370][ T5528] batadv_slave_1: entered allmulticast mode [ 38.832452][ T5529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 38.832506][ T5529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 38.841680][ T5528] batman_adv: batadv0: Adding interface: ipvlan2 [ 38.841800][ T5528] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.841834][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.841848][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.841861][ T5528] batman_adv: batadv0: Interface activated: ipvlan2 [ 39.024243][ T5546] set_capacity_and_notify: 7 callbacks suppressed [ 39.024282][ T5546] loop3: detected capacity change from 0 to 512 [ 39.034581][ T5546] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 39.034813][ T5546] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.038280][ T5546] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 39.042141][ T5546] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 39.043770][ T5546] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.297: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 39.043813][ T5546] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 39.047136][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 39.047146][ C1] EXT4-fs (loop3): last error at time 39: ext4_ext_check_inode:521: inode 13 [ 39.052649][ T5546] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.297: couldn't read orphan inode 13 (err -117) [ 39.052694][ T5546] loop3: lost filesystem error report for type 5 error -117 [ 39.056336][ T5546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.079383][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.121201][ T5555] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 39.121294][ T5555] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 39.121357][ T5555] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 39.121387][ T5555] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 39.121428][ T5555] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 39.121456][ T5555] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 39.121496][ T5555] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 39.121523][ T5555] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 39.121562][ T5555] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 39.315159][ T5574] loop1: detected capacity change from 0 to 512 [ 39.332360][ T5574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.398746][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.480801][ T4721] hid-generic 0005:0C45:5AF3.0001: unknown main item tag 0x0 [ 39.484987][ T4721] hid-generic 0005:0C45:5AF3.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 39.563231][ T5609] loop2: detected capacity change from 0 to 1024 [ 39.622673][ T5609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.630082][ T5621] syz.1.330 uses obsolete (PF_INET,SOCK_PACKET) [ 39.658478][ T5625] Zero length message leads to an empty skb [ 39.690635][ T5629] io-wq is not configured for unbound workers [ 39.731748][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.798477][ T5639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.334'. [ 39.831950][ T5643] loop3: detected capacity change from 0 to 256 [ 40.050592][ T5676] capability: warning: `syz.1.353' uses 32-bit capabilities (legacy support in use) [ 40.566509][ T5725] Bluetooth: MGMT ver 1.23 [ 40.567194][ T5725] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 40.648561][ T5727] loop4: detected capacity change from 0 to 2048 [ 40.734920][ T5727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.854452][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.025053][ T5748] binder: 5746:5748 cannot find target node [ 41.025100][ T5748] binder: 5746:5748 transaction async to 0:0 failed 1/29189/-22, code 0 size 0-0 line 3252 [ 41.472693][ T5783] netlink: 'syz.4.404': attribute type 15 has an invalid length. [ 41.842824][ T5802] Injecting memory failure for pfn 0x123713 at process virtual address 0x20000000 [ 41.855975][ T5802] Memory failure: 0x123713: Sending SIGBUS to syz.2.423:5802 due to hardware memory corruption [ 41.858345][ T5802] Memory failure: 0x123713: recovery action for dirty LRU page: Recovered [ 41.859987][ T5802] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 41.865611][ T5802] Memory failure: 0x219250: unhandlable page. [ 41.866848][ T5802] Memory failure: 0x219250: recovery action for get hwpoison page: Ignored [ 42.027549][ T5812] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 42.089160][ T5816] loop2: detected capacity change from 0 to 512 [ 42.117123][ T5816] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 42.126470][ T5816] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.419: invalid block [ 42.128709][ T5816] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.129457][ T5816] EXT4-fs (loop2): 1 truncate cleaned up [ 42.132632][ T5816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.164358][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.244664][ T5830] Bluetooth: MGMT ver 1.23 [ 42.417501][ T5846] __nla_validate_parse: 2 callbacks suppressed [ 42.417550][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 42.649953][ T5865] loop0: detected capacity change from 0 to 512 [ 42.651940][ T5865] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.661035][ T5865] EXT4-fs (loop0): 1 truncate cleaned up [ 42.666084][ T5865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.680391][ T5865] EXT4-fs (loop0): shut down requested (1) [ 42.713966][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.873480][ T5891] loop1: detected capacity change from 0 to 512 [ 42.878799][ T5891] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.453: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 42.878845][ T5891] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.881848][ T5891] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.453: ea_inode dec ref err=-117 [ 42.882668][ T5891] EXT4-fs (loop1): 1 orphan inode deleted [ 42.883134][ T5891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.910826][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.118659][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.118910][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.127737][ T5916] loop3: detected capacity change from 0 to 8 [ 43.139346][ T5916] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 43.139378][ T5916] unable to read xattr id index table [ 43.146137][ T5916] SQUASHFS error: zlib decompression failed, data probably corrupt [ 43.146179][ T5916] SQUASHFS error: Failed to read block 0x9b: -5 [ 43.146189][ T5916] SQUASHFS error: Unable to read metadata cache entry [99] [ 43.146197][ T5916] SQUASHFS error: Unable to read inode 0x104 [ 43.224021][ T5926] [ 43.385262][ T5948] loop1: detected capacity change from 0 to 1024 [ 43.391781][ T5950] Injecting memory failure for pfn 0x120106 at process virtual address 0x20001000 [ 43.403758][ T5950] Memory failure: 0x120106: recovery action for clean LRU page: Recovered [ 43.403805][ T5950] Injecting memory failure for pfn 0x120105 at process virtual address 0x20002000 [ 43.408939][ T5950] Memory failure: 0x120105: recovery action for clean LRU page: Recovered [ 43.408960][ T5950] Injecting memory failure for pfn 0x120104 at process virtual address 0x20003000 [ 43.409086][ T5950] Memory failure: 0x120104: recovery action for clean LRU page: Recovered [ 43.419872][ T5948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.437825][ T5948] EXT4-fs (loop1): shut down requested (2) [ 43.461439][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.643381][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 43.680605][ T5983] netlink: 88 bytes leftover after parsing attributes in process `syz.1.493'. [ 44.102675][ T3407] Bluetooth: hci5: Frame reassembly failed (-84) [ 44.102764][ T3407] Bluetooth: hci5: Frame reassembly failed (-84) [ 44.102847][ T6029] Bluetooth: hci5: Frame reassembly failed (-84) [ 44.235974][ T6039] netdevsim netdevsim4: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 44.420328][ T6061] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 44.420371][ T6061] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 44.441040][ T6063] netlink: 92 bytes leftover after parsing attributes in process `syz.4.530'. [ 44.441075][ T6063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.530'. [ 44.474246][ T6067] set_capacity_and_notify: 1 callbacks suppressed [ 44.474292][ T6067] loop0: detected capacity change from 0 to 512 [ 44.476121][ T6067] EXT4-fs error (device loop0): ext4_get_journal_inode:5900: comm syz.0.529: inode #2147418112: comm syz.0.529: iget: illegal inode # [ 44.476139][ T6067] loop0: lost filesystem error report for type 5 error -117 [ 44.476238][ T6067] EXT4-fs (loop0): no journal found [ 44.476245][ T6067] EXT4-fs (loop0): can't get journal size [ 44.477055][ T6068] net_ratelimit: 3 callbacks suppressed [ 44.477064][ T6068] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 44.480897][ T6068] loop4: detected capacity change from 0 to 128 [ 44.488047][ T6067] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 44.488218][ T6067] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 44.488922][ T6067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.702424][ T6082] loop3: detected capacity change from 0 to 512 [ 44.703085][ T6082] EXT4-fs (loop3): Test dummy encryption mode enabled [ 44.703095][ T6082] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.703996][ T6082] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.537: bad orphan inode 131072 [ 44.704012][ T6082] loop3: lost filesystem error report for type 5 error -117 [ 44.714310][ T6082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.735045][ T6082] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 44.763275][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.084184][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 45.273164][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.297639][ T6150] block nbd1: shutting down sockets [ 45.395040][ T6169] netlink: 140 bytes leftover after parsing attributes in process `syz.3.580'. [ 45.404074][ T6172] loop1: detected capacity change from 0 to 128 [ 45.414732][ T6172] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.494443][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.557255][ T6188] loop3: detected capacity change from 0 to 2048 [ 45.560594][ T6190] loop8: detected capacity change from 0 to 1 [ 45.564710][ T6190] Dev loop8: unable to read RDB block 1 [ 45.564758][ T6190] loop8: unable to read partition table [ 45.564831][ T6190] loop8: partition table beyond EOD, truncated [ 45.564851][ T6190] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 45.577800][ T6188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.662015][ T30] audit: type=1400 audit(302.622:5): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=6198 comm="syz.1.592" name="122" dev="tmpfs" ino=636 [ 45.690144][ T3407] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 45.693892][ T3407] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.693929][ T3407] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.693929][ T3407] [ 45.693952][ T3407] EXT4-fs (loop3): Total free blocks count 0 [ 45.693966][ T3407] EXT4-fs (loop3): Free/Dirty block details [ 45.693978][ T3407] EXT4-fs (loop3): free_blocks=4096 [ 45.693990][ T3407] EXT4-fs (loop3): dirty_blocks=832 [ 45.694002][ T3407] EXT4-fs (loop3): Block reservation details [ 45.694012][ T3407] EXT4-fs (loop3): i_reserved_data_blocks=52 [ 45.707709][ T3407] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 800 with error 28 [ 45.729760][ T4719] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 45.780492][ T6210] trusted_key: encrypted_key: keyword 'ÿÿÿÿdefault' not recognized [ 46.107150][ T4715] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 46.108008][ T4715] Bluetooth: hci4: command tx timeout [ 46.296545][ T6282] random: crng reseeded on system resumption [ 46.352302][ T6285] netlink: 52 bytes leftover after parsing attributes in process `syz.0.619'. [ 46.546431][ T6318] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 46.581447][ T6316] block nbd0: shutting down sockets [ 46.624830][ T6324] ipvlan2: entered promiscuous mode [ 46.626980][ T6324] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 46.654379][ T6330] tap0: tun_chr_ioctl cmd 1074025678 [ 46.659477][ T6330] tap0: group set to 0 [ 46.680972][ T6337] loop3: detected capacity change from 0 to 512 [ 46.698880][ T6337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.714876][ T6337] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 46.742461][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.825352][ T6358] loop3: detected capacity change from 0 to 512 [ 46.830836][ T6358] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.838336][ T6358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 46.838415][ T6358] System zones: 1-12 [ 46.841759][ T6358] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.847547][ T6358] EXT4-fs (loop3): 1 truncate cleaned up [ 46.851416][ T6358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.900461][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.998135][ T6376] loop3: detected capacity change from 0 to 8192 [ 47.114102][ T6389] loop3: detected capacity change from 0 to 512 [ 47.119579][ T6389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.125224][ T6389] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.664: bad orphan inode 131083 [ 47.125267][ T6389] loop3: lost filesystem error report for type 5 error -117 [ 47.127491][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 47.127511][ C1] EXT4-fs (loop3): initial error at time 304: ext4_orphan_get:1425 [ 47.127530][ C1] EXT4-fs (loop3): last error at time 304: ext4_orphan_get:1425 [ 47.135149][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.160163][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.245766][ T6402] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 47.245766][ T6402] The task syz.4.666 (6402) triggered the difference, watch for misbehavior. [ 47.534535][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.640431][ T6430] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 47.640468][ T6430] FAT-fs (loop2): Filesystem has been set read-only [ 47.720328][ T6437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.790059][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.868312][ T50] Bluetooth: hci6: command 0x1003 tx timeout [ 47.868389][ T4712] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 47.954874][ T6465] netlink: 'syz.0.697': attribute type 3 has an invalid length. [ 48.078691][ T4712] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 48.078721][ T4712] CPU: 0 UID: 0 PID: 4712 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT [ 48.078736][ T4712] Tainted: [L]=SOFTLOCKUP [ 48.078740][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 48.078746][ T4712] Workqueue: hci1 hci_rx_work [ 48.078768][ T4712] Call trace: [ 48.078771][ T4712] show_stack+0x2c/0x3c (C) [ 48.078791][ T4712] __dump_stack+0x30/0x40 [ 48.078803][ T4712] dump_stack_lvl+0xd8/0x12c [ 48.078814][ T4712] dump_stack+0x1c/0x28 [ 48.078826][ T4712] sysfs_warn_dup+0x9c/0xb8 [ 48.078838][ T4712] sysfs_create_dir_ns+0x190/0x1f4 [ 48.078850][ T4712] kobject_add_internal+0x290/0x6f0 [ 48.078860][ T4712] kobject_add_varg+0x9c/0xe8 [ 48.078872][ T4712] kobject_add+0x110/0x1c8 [ 48.078884][ T4712] device_add+0x394/0x9e0 [ 48.078897][ T4712] hci_conn_add_sysfs+0xbc/0x1e8 [ 48.078908][ T4712] le_conn_complete_evt+0xc68/0x10f8 [ 48.078918][ T4712] hci_le_enh_conn_complete_evt+0x114/0x3d8 [ 48.078927][ T4712] hci_le_meta_evt+0x2b0/0x46c [ 48.078937][ T4712] hci_event_packet+0x4c0/0x9c8 [ 48.078947][ T4712] hci_rx_work+0x2f4/0xd78 [ 48.078959][ T4712] process_scheduled_works+0x788/0x10b8 [ 48.078971][ T4712] worker_thread+0x798/0xbd0 [ 48.078981][ T4712] kthread+0x304/0x3d4 [ 48.078989][ T4712] ret_from_fork+0x10/0x20 [ 48.079023][ T4712] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 48.079043][ T4712] Bluetooth: hci1: failed to register connection device [ 48.109512][ T6481] usb usb9: usbfs: process 6481 (syz.4.703) did not claim interface 3 before use [ 48.163905][ T6489] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 48.164039][ T6489] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.177567][ T6489] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.181738][ T6489] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 48.182003][ T6489] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.198684][ T6489] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.208862][ T6489] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.219826][ T6489] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 48.219910][ T6489] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.222687][ T6489] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.224972][ T6489] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 48.225916][ T6489] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 48.234736][ T6489] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 48.241693][ T6489] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 48.241753][ T6489] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 48.255365][ T6509] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 48.270318][ T6489] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 48.329789][ T6519] netlink: 87 bytes leftover after parsing attributes in process `syz.3.723'. [ 48.345731][ T6513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.403200][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.614626][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.614688][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.614715][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.615242][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.615269][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.615291][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.615314][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.615336][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.615358][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.615379][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.620938][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.620969][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.620998][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621020][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621045][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621066][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621089][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621110][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621133][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621155][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621178][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621199][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621223][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621245][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621268][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621289][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621313][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621333][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621356][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621378][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621400][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621422][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.621452][ T6558] SQUASHFS error: Failed to read block 0x4de: -5 [ 48.637127][ T6559] tmpfs: Too few inodes for current use [ 48.665223][ T6563] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.699325][ T6563] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.702115][ T6567] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 48.702190][ T6567] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 48.702241][ T6567] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 48.702274][ T6567] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 48.702324][ T6567] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 48.702354][ T6567] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 48.702394][ T6567] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 48.702423][ T6567] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 48.850134][ T6580] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.854279][ T6579] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.865658][ T6579] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.751: Directory block failed checksum [ 48.888951][ T4719] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.513744][ T6648] netlink: 'syz.0.781': attribute type 7 has an invalid length. [ 49.684619][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.790'. [ 49.786044][ T6674] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 49.786711][ T6674] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 49.786779][ T6674] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 49.786830][ T6674] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 49.786853][ T6674] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 49.797786][ T6674] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 49.917865][ T6698] set_capacity_and_notify: 8 callbacks suppressed [ 49.918091][ T6698] loop4: detected capacity change from 0 to 512 [ 49.954580][ T6698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.000698][ T6710] netlink: 316 bytes leftover after parsing attributes in process `syz.2.806'. [ 50.043301][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.119739][ T6718] vxcan3: entered promiscuous mode [ 50.119770][ T6718] vxcan3: entered allmulticast mode [ 50.120274][ T6718] team0: Device vxcan3 is of different type [ 50.123888][ T6725] loop0: detected capacity change from 0 to 256 [ 50.124360][ T6725] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.131077][ T6725] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.541078][ T6752] loop2: detected capacity change from 0 to 512 [ 50.561881][ T6752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.591499][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.610922][ T6759] loop4: detected capacity change from 0 to 4096 [ 50.622615][ T6759] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.624208][ T6759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.641408][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.692740][ T6768] tipc: Enabling of bearer rejected, failed to enable media [ 50.850143][ T6781] netlink: 44 bytes leftover after parsing attributes in process `syz.2.839'. [ 50.898128][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 50.898235][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 50.905547][ T4913] atkbd serio2: keyboard reset failed on [ 51.043772][ T30] audit: type=1326 audit(309.008:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6726 comm="syz.0.814" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97577fe8 code=0x7fc00000 [ 51.255492][ T4712] block nbd0: Receive control failed (result -32) [ 51.414065][ T6852] netlink: 'syz.4.870': attribute type 12 has an invalid length. [ 51.417287][ T6852] netlink: 'syz.4.870': attribute type 29 has an invalid length. [ 51.418839][ T6852] netlink: 148 bytes leftover after parsing attributes in process `syz.4.870'. [ 51.426531][ T6849] loop1: detected capacity change from 0 to 256 [ 51.477619][ T6862] loop4: detected capacity change from 0 to 512 [ 51.479322][ T6862] EXT4-fs: Ignoring removed i_version option [ 51.488330][ T6863] loop0: detected capacity change from 0 to 512 [ 51.498899][ T6862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.518724][ T6863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.532796][ T6862] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.875: iget: bad i_size value: 2533274857506816 [ 51.537256][ T6862] EXT4-fs (loop4): Remounting filesystem read-only [ 51.569842][ T6873] loop3: detected capacity change from 0 to 8 [ 51.585189][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.602139][ T6873] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 51.602194][ T6873] unable to read xattr id index table [ 51.610481][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.610640][ T6873] SQUASHFS error: zlib decompression failed, data probably corrupt [ 51.610658][ T6873] SQUASHFS error: Failed to read block 0x9b: -5 [ 51.610668][ T6873] SQUASHFS error: Unable to read metadata cache entry [99] [ 51.610676][ T6873] SQUASHFS error: Unable to read inode 0x127 [ 51.657133][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'. [ 51.745265][ T6897] loop3: detected capacity change from 0 to 512 [ 51.785772][ T4712] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.830259][ T6907] veth1_macvtap: left promiscuous mode [ 51.865583][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 51.865631][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 51.865663][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 51.869077][ T4712] Bluetooth: hci4: command 0x0c1a tx timeout [ 51.990489][ T6925] netlink: 116 bytes leftover after parsing attributes in process `syz.2.902'. [ 52.081900][ T6932] pimreg: tun_chr_ioctl cmd 2147767507 [ 52.142085][ T6946] binder: binder_mmap: 6945 0-3000 bad vm_flags failed -1 [ 52.185237][ T6952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.916'. [ 52.252505][ T6966] loop4: detected capacity change from 0 to 512 [ 52.285154][ T6966] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 52.285289][ T6966] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.298770][ T6966] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 52.304430][ T6966] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 52.307480][ T6966] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.921: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 52.307525][ T6966] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 52.313013][ T6966] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.921: couldn't read orphan inode 13 (err -117) [ 52.313048][ T6966] loop4: lost filesystem error report for type 5 error -117 [ 52.317193][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 52.317210][ C0] EXT4-fs (loop4): last error at time 310: ext4_orphan_get:1404 [ 52.335633][ T4712] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 52.600801][ T7013] EXT4-fs: Ignoring removed nobh option [ 52.602782][ T7013] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 52.607724][ T7013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 52.607842][ T7013] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.612224][ T7013] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.939: attempt to clear invalid blocks 1024 len 1 [ 52.612268][ T7013] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.615280][ T7013] EXT4-fs (loop0): Remounting filesystem read-only [ 52.615427][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 52.615444][ C1] EXT4-fs (loop0): initial error at time 310: ext4_clear_blocks:876: inode 11 [ 52.615482][ C1] EXT4-fs (loop0): last error at time 310: ext4_clear_blocks:876: inode 11 [ 52.629909][ T7013] EXT4-fs (loop0): 1 truncate cleaned up [ 52.785333][ T7039] veth1_macvtap: left promiscuous mode [ 52.797554][ T7022] loop4: RDSK (0) [ 52.797554][ T7022] AHDI p2 p3 p4 [ 52.797678][ T7022] loop4: p2 start 67108614 is beyond EOD, truncated [ 52.797708][ T7022] loop4: p3 size 55780 extends beyond EOD, truncated [ 52.913022][ T7043] Soft offlining pfn 0x11f1f9 at process virtual address 0x20d7b000 [ 52.916827][ T7043] Soft offline: 0x11f1f9: page migration failed 1, type 0x5ffc00000020008(uptodate|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 53.209619][ T7071] veth1_macvtap: left promiscuous mode [ 53.233569][ T7073] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 53.236429][ T7073] FAT-fs (loop0): Filesystem has been set read-only [ 53.354861][ T7084] geneve2: entered promiscuous mode [ 53.358120][ T7084] geneve2: entered allmulticast mode [ 53.604039][ T7109] veth1_macvtap: left promiscuous mode [ 53.726399][ T7118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.771677][ T7128] __nla_validate_parse: 3 callbacks suppressed [ 53.773001][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 53.946446][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 53.946470][ T4725] Bluetooth: hci2: command 0x0c1a tx timeout [ 53.946517][ T4715] Bluetooth: hci4: command 0x0c1a tx timeout [ 53.950430][ T4729] Bluetooth: hci3: command 0x0c1a tx timeout [ 53.985249][ T7147] EXT4-fs: Ignoring removed nobh option [ 54.001766][ T7147] fscrypt (loop2, inode 12): Reserved bits set in encryption policy [ 54.037666][ T1042] IPVS: starting estimator thread 0... [ 54.080919][ T7156] EXT4-fs: Ignoring removed nobh option [ 54.083164][ T7156] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 54.086639][ T7156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 54.088316][ T7156] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.094933][ T7156] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.997: attempt to clear invalid blocks 1024 len 1 [ 54.094980][ T7156] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.097562][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 54.097578][ C1] EXT4-fs (loop2): initial error at time 312: ext4_clear_blocks:876: inode 11 [ 54.097607][ C1] EXT4-fs (loop2): last error at time 312: ext4_clear_blocks:876: inode 11 [ 54.098292][ T7156] EXT4-fs (loop2): Remounting filesystem read-only [ 54.103222][ T7156] EXT4-fs (loop2): 1 truncate cleaned up [ 54.125507][ T7152] IPVS: using max 61 ests per chain, 146400 per kthread [ 54.179813][ T7165] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 54.288019][ T7177] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 54.298941][ T7180] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1008: inode has both inline data and extents flags [ 54.298986][ T7180] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.301875][ T7180] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1008: couldn't read orphan inode 15 (err -117) [ 54.301906][ T7180] loop2: lost filesystem error report for type 5 error -117 [ 54.306235][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 54.306249][ C1] EXT4-fs (loop2): initial error at time 312: ext4_orphan_get:1399: inode 15 [ 54.306266][ C1] EXT4-fs (loop2): last error at time 312: ext4_orphan_get:1404 [ 54.573825][ T7216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.578499][ T7216] EXT4-fs (loop2): 1 truncate cleaned up [ 54.691311][ T7226] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1031'. [ 54.693907][ T7226] block nbd1: Unsupported socket: should be TCP or UNIX. [ 54.726484][ T4725] Bluetooth: hci0: ISO packet too small [ 55.224099][ T7287] set_capacity_and_notify: 9 callbacks suppressed [ 55.226788][ T7287] loop4: detected capacity change from 0 to 4096 [ 55.228985][ T7287] EXT4-fs (loop4): Test dummy encryption mode enabled [ 55.242470][ T7290] loop1: detected capacity change from 0 to 128 [ 55.245109][ T7290] EXT4-fs: Ignoring removed nobh option [ 55.254513][ T7287] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 55.279731][ T7290] fscrypt (loop1, inode 12): Reserved bits set in encryption policy [ 55.390889][ T7303] loop1: detected capacity change from 0 to 512 [ 55.413453][ T7303] EXT4-fs warning (device loop1): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 55.514776][ T7311] can0: slcan on ptm0. [ 55.565999][ T7310] can0 (unregistered): slcan off ptm0. [ 55.597452][ T7313] loop1: detected capacity change from 0 to 128 [ 55.743852][ T7324] loop3: detected capacity change from 0 to 2048 [ 55.779226][ T7324] EXT4-fs (loop3): shut down requested (2) [ 55.901614][ T7343] net_ratelimit: 5 callbacks suppressed [ 55.901661][ T7343] IPv6: addrconf: prefix option has invalid lifetime [ 55.904800][ T7342] loop0: detected capacity change from 0 to 512 [ 55.935626][ T7342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c1ac, mo2=0003] [ 55.935690][ T7342] System zones: 1-12 [ 55.937314][ T7342] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1079: corrupted in-inode xattr: e_value size too large [ 55.937334][ T7342] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.944332][ T7342] EXT4-fs (loop0): Remounting filesystem read-only [ 55.961754][ T7348] loop3: detected capacity change from 0 to 256 [ 55.987680][ T7352] loop1: detected capacity change from 0 to 1024 [ 56.025786][ T4725] Bluetooth: hci4: command 0x0c1a tx timeout [ 56.025832][ T4725] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.025867][ T4725] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.025889][ T4725] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.259153][ T7380] loop2: detected capacity change from 0 to 512 [ 56.297312][ T7380] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 56.297373][ T7380] System zones: 0-2, 18-18, 34-35 [ 56.517968][ T7397] vxcan0: tx address claim with dlc 0 [ 56.573807][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.576377][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.578211][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.579063][ T7403] loop4: detected capacity change from 0 to 256 [ 56.581159][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.582802][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.703429][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1110'. [ 56.949637][ T7430] Cannot find add_set index 4 as target [ 57.151544][ T7437] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 57.447492][ T4725] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 57.625072][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.625163][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.626219][ T7401] bridge_slave_0: entered allmulticast mode [ 57.626700][ T7401] bridge_slave_0: entered promiscuous mode [ 57.627975][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.628034][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.628094][ T7401] bridge_slave_1: entered allmulticast mode [ 57.628595][ T7401] bridge_slave_1: entered promiscuous mode [ 57.637316][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.640258][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.653391][ T7401] team0: Port device team_slave_0 added [ 57.657053][ T7401] team0: Port device team_slave_1 added [ 57.671482][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.671508][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.671523][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.673372][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.673380][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.673394][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.724611][ T7401] hsr_slave_0: entered promiscuous mode [ 57.746942][ T7401] hsr_slave_1: entered promiscuous mode [ 57.747270][ T7401] debugfs: 'hsr0' already exists in 'hsr' [ 57.747283][ T7401] Cannot create hsr debugfs directory [ 58.016267][ T7401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.017521][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.027077][ T7401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.053725][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.054112][ T7401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.067419][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.067812][ T7401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.072279][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.115261][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.115319][ T7401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.115441][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.115472][ T7401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.121659][ T4725] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.121699][ T4725] Bluetooth: hci4: command 0x0c1a tx timeout [ 58.135796][ T7493] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 58.135852][ T7493] System zones: 0-2, 18-18, 34-35 [ 58.158904][ T7501] batman_adv: batadv0: Adding interface: ip6gretap1 [ 58.158949][ T7501] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.158964][ T7501] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 58.206841][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.239508][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.240208][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.279444][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.307786][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.307839][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.308178][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.308197][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.349738][ T7505] Dev loop5: unable to read RDB block 7 [ 58.349782][ T7505] loop5: unable to read partition table [ 58.349909][ T7505] loop5: partition table beyond EOD, truncated [ 58.349945][ T7505] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 58.506525][ T7529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.523732][ T7529] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.1151: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 58.523777][ T7529] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.523907][ T7529] EXT4-fs error (device loop1): ext4_quota_enable:7235: comm syz.1.1151: Bad quota inode: 3, type: 0 [ 58.523921][ T7529] loop1: lost filesystem error report for type 5 error -117 [ 58.523995][ T7529] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 58.524241][ T7529] EXT4-fs (loop1): mount failed [ 58.525440][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 58.525453][ C0] EXT4-fs (loop1): initial error at time 316: ext4_ext_check_inode:521: inode 3 [ 58.525475][ C0] EXT4-fs (loop1): last error at time 316: ext4_quota_enable:7235 [ 58.543539][ T30] audit: type=1400 audit(316.508:7): lsm=SMACK fn=smack_inode_set_acl action=denied subject="_" object="lowerdir" requested=w pid=7534 comm="syz.2.1154" name="file1" dev="tmpfs" ino=1192 [ 58.622271][ T30] audit: type=1326 audit(316.588:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1377fe8 code=0x7ffc0000 [ 58.622566][ T30] audit: type=1326 audit(316.588:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1377fe8 code=0x7ffc0000 [ 58.624068][ T30] audit: type=1326 audit(316.588:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1377fe8 code=0x7ffc0000 [ 58.636939][ T30] audit: type=1326 audit(316.608:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb1377fe8 code=0x7ffc0000 [ 58.636961][ T30] audit: type=1326 audit(316.608:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1377fe8 code=0x7ffc0000 [ 58.636976][ T30] audit: type=1326 audit(316.608:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1377fe8 code=0x7ffc0000 [ 58.636990][ T30] audit: type=1326 audit(316.608:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1377fe8 code=0x7ffc0000 [ 58.637005][ T30] audit: type=1326 audit(316.608:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1377fe8 code=0x7ffc0000 [ 58.639047][ T30] audit: type=1326 audit(316.608:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=263 compat=0 ip=0xffffb1377fe8 code=0x7ffc0000 [ 58.676655][ T4729] Bluetooth: hci2: command tx timeout [ 58.702343][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.834060][ T7578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 58.834117][ T7578] System zones: 1-12 [ 58.834618][ T7578] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1170: missing EA_INODE flag [ 58.834650][ T7578] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.835427][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 58.835442][ C0] EXT4-fs (loop2): initial error at time 316: ext4_xattr_inode_iget:441: inode 12 [ 58.835461][ C0] EXT4-fs (loop2): last error at time 316: ext4_xattr_inode_iget:441: inode 12 [ 58.837410][ T7578] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1170: error while reading EA inode 12 err=-117 [ 58.837429][ T7578] loop2: lost filesystem error report for type 5 error -117 [ 58.837556][ T7578] EXT4-fs (loop2): 1 orphan inode deleted [ 58.891798][ T7401] veth0_vlan: entered promiscuous mode [ 58.894510][ T7401] veth1_vlan: entered promiscuous mode [ 58.915276][ T7401] veth0_macvtap: entered promiscuous mode [ 58.937780][ T7401] veth1_macvtap: entered promiscuous mode [ 58.949018][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.950073][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.955356][ T3297] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.964336][ T3297] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.964394][ T3297] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.964420][ T3297] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.984392][ T7593] netlink: 'syz.3.1174': attribute type 11 has an invalid length. [ 59.018553][ T7596] openvswitch: netlink: Duplicate key (type 1). [ 59.048223][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.048257][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.069096][ T7598] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1176'. [ 59.070769][ T7598] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1176'. [ 59.083058][ T3297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.083095][ T3297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.290077][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 59.290126][ T7631] netlink: 'syz.2.1191': attribute type 7 has an invalid length. [ 59.291199][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 59.383261][ T7639] FAT-fs (loop1): Directory bread(block 1285) failed [ 59.383304][ T7639] FAT-fs (loop1): Directory bread(block 1286) failed [ 59.383336][ T7639] FAT-fs (loop1): Directory bread(block 1287) failed [ 59.383377][ T7639] FAT-fs (loop1): Directory bread(block 1288) failed [ 59.391204][ T7639] FAT-fs (loop1): Directory bread(block 1285) failed [ 59.391238][ T7639] FAT-fs (loop1): Directory bread(block 1286) failed [ 59.391254][ T7639] FAT-fs (loop1): Directory bread(block 1287) failed [ 59.391279][ T7639] FAT-fs (loop1): Directory bread(block 1288) failed [ 59.391313][ T7639] FAT-fs (loop1): Directory bread(block 1285) failed [ 59.391329][ T7639] FAT-fs (loop1): Directory bread(block 1286) failed [ 59.428797][ T7627] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 59.487258][ T7646] EXT4-fs: inline encryption not supported [ 59.504420][ T7646] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 59.504643][ T7646] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1198: invalid indirect mapped block 2683928664 (level 1) [ 59.504673][ T7646] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.505459][ C0] EXT4-fs (loop1): initial error at time 317: ext4_free_branches:1023: inode 13 [ 59.505502][ C0] EXT4-fs (loop1): last error at time 317: ext4_free_branches:1023: inode 13 [ 59.530519][ T7646] EXT4-fs (loop1): 1 truncate cleaned up [ 59.555879][ T7646] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1803188595: comm syz.1.1198: invalid block [ 59.560900][ T7646] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1198: invalid indirect mapped block 317 (level 0) [ 59.575861][ T7646] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1198: invalid indirect mapped block 84213760 (level 0) [ 59.578738][ T7646] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1198: invalid indirect mapped block 2054779762 (level 0) [ 59.940056][ T7687] netlink: 'syz.3.1215': attribute type 27 has an invalid length. [ 59.960587][ T7687] bond0: (slave bond_slave_1): Releasing backup interface [ 60.019656][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 60.019698][ T7695] netlink: 'syz.1.1219': attribute type 7 has an invalid length. [ 60.019722][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 60.301013][ T7713] set_capacity_and_notify: 10 callbacks suppressed [ 60.307835][ T7713] loop3: detected capacity change from 0 to 128 [ 60.315164][ T7713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 60.315228][ T7713] System zones: 1-3, 19-19, 35-36 [ 60.328580][ T7715] tap0: tun_chr_ioctl cmd 1074025681 [ 60.484091][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 60.755791][ T4729] Bluetooth: hci2: command tx timeout [ 61.028107][ T7759] binder: 7756:7759 ioctl 40046205 0 returned -22 [ 61.028340][ T7759] binder: 7756:7759 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 61.028353][ T7759] binder: 7759 RLIMIT_NICE not set [ 61.031761][ T7763] loop2: detected capacity change from 0 to 1024 [ 61.057996][ T7763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.079895][ T7763] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.1247: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 61.079941][ T7763] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.080062][ T7763] EXT4-fs error (device loop2): ext4_quota_enable:7235: comm syz.2.1247: Bad quota inode: 3, type: 0 [ 61.080078][ T7763] loop2: lost filesystem error report for type 5 error -117 [ 61.080149][ T7763] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 61.080310][ T7763] EXT4-fs (loop2): mount failed [ 61.085427][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 61.085442][ C0] EXT4-fs (loop2): initial error at time 575: ext4_ext_check_inode:521: inode 3 [ 61.085457][ C0] EXT4-fs (loop2): last error at time 575: ext4_quota_enable:7235 [ 61.141893][ T7771] loop3: detected capacity change from 0 to 8 [ 61.412529][ T7793] loop3: detected capacity change from 0 to 1024 [ 61.425236][ T7793] EXT4-fs: Ignoring removed orlov option [ 61.429211][ T7793] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 61.456681][ T7793] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.456841][ T7793] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.470556][ T7793] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.1259: Invalid inode table block 0 in block_group 0 [ 61.470613][ T7793] loop3: lost filesystem error report for type 5 error -117 [ 61.473771][ T7793] EXT4-fs (loop3): Remounting filesystem read-only [ 61.473915][ T7793] EXT4-fs (loop3): 1 truncate cleaned up [ 61.475431][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 61.475448][ C0] EXT4-fs (loop3): initial error at time 575: __ext4_get_inode_loc:4886 [ 61.475461][ C0] EXT4-fs (loop3): last error at time 575: __ext4_get_inode_loc:4886 [ 62.134880][ T7845] loop1: detected capacity change from 0 to 8 [ 62.213404][ T7851] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 62.240928][ T4711] SQUASHFS error: Unable to read directory block [631:72] [ 62.241110][ T4711] SQUASHFS error: Unable to read inode 0x0 [ 62.241341][ T4711] SQUASHFS error: Unable to read inode 0x0 [ 62.417278][ T7858] usb usb8: selecting invalid altsetting 2147483647 [ 62.825537][ T4729] Bluetooth: hci2: command tx timeout [ 62.839136][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.841463][ T4725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.843208][ T4725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.847023][ T4725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.851702][ T4725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.967077][ T7883] loop2: detected capacity change from 0 to 8192 [ 63.000154][ T7883] loop2: p1 p2 p3 [ 63.009990][ T7893] loop3: detected capacity change from 0 to 128 [ 63.017667][ T7893] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.019891][ T7893] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.197369][ T7908] loop4: detected capacity change from 0 to 512 [ 63.215824][ T7908] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1313: bad orphan inode 15 [ 63.215862][ T7908] loop4: lost filesystem error report for type 5 error -117 [ 63.216013][ T7908] ext4_test_bit(bit=14, block=5) = 0 [ 63.249886][ T7908] EXT4-fs error (device loop4): __ext4_new_inode:1081: comm syz.4.1313: reserved inode found cleared - inode=1 [ 63.266420][ T7908] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 63.446127][ T7926] netlink: 'syz.5.1320': attribute type 14 has an invalid length. [ 63.629626][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 63.803653][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 63.843728][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 63.851420][ T7954] No such timeout policy "syz1" [ 63.886117][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.928608][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.943700][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 63.953233][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 64.022757][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.060574][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.067573][ T7882] bridge_slave_0: entered allmulticast mode [ 64.068116][ T7882] bridge_slave_0: entered promiscuous mode [ 64.068915][ T7882] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.068937][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.069003][ T7882] bridge_slave_1: entered allmulticast mode [ 64.069425][ T7882] bridge_slave_1: entered promiscuous mode [ 64.117880][ T7882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.119015][ T7882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.132179][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1339'. [ 64.163006][ T7882] team0: Port device team_slave_0 added [ 64.164322][ T7882] team0: Port device team_slave_1 added [ 64.183016][ T4729] Bluetooth: hci0: adv larger than maximum supported [ 64.183058][ T4729] Bluetooth: hci0: Malformed LE Event: 0x0d [ 64.222179][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.222220][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.222236][ T7882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.223202][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.223209][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.223224][ T7882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.236055][ T7979] loop5: detected capacity change from 0 to 512 [ 64.256230][ T7979] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 64.256261][ T7979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 64.256286][ T7979] System zones: 0-1, 15-15, 18-18, 34-34 [ 64.256392][ T7979] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.256421][ T7979] __quota_error: 13 callbacks suppressed [ 64.256428][ T7979] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 64.256465][ T7979] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 64.256477][ T7979] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 64.256589][ T7979] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1342: bad orphan inode 16 [ 64.256607][ T7979] loop5: lost filesystem error report for type 5 error -117 [ 64.256875][ T7979] ext4_test_bit(bit=15, block=18) = 1 [ 64.256882][ T7979] is_bad_inode(inode)=0 [ 64.256886][ T7979] NEXT_ORPHAN(inode)=0 [ 64.256890][ T7979] max_ino=32 [ 64.256893][ T7979] i_nlink=2 [ 64.257365][ T7979] EXT4-fs mount: 50 callbacks suppressed [ 64.257372][ T7979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.295729][ T7979] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 64.312415][ T7882] hsr_slave_0: entered promiscuous mode [ 64.312830][ T7882] hsr_slave_1: entered promiscuous mode [ 64.313038][ T7882] debugfs: 'hsr0' already exists in 'hsr' [ 64.313050][ T7882] Cannot create hsr debugfs directory [ 64.322784][ T7401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.475667][ T7986] tun0: tun_chr_ioctl cmd 1074025675 [ 64.475713][ T7986] tun0: persist disabled [ 64.507373][ T1588] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.507427][ T1588] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.517577][ T866] cfg80211: failed to load regulatory.db [ 64.606716][ T7882] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 64.609930][ T7882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.614354][ T7882] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 64.616614][ T7882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.617033][ T7882] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 64.619216][ T7882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.619709][ T7882] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 64.627204][ T7882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.789248][ T7882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.818635][ T7882] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.837688][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.837744][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.850436][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.850492][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.861358][ T7882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.861417][ T7882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.905590][ T4729] Bluetooth: hci1: command tx timeout [ 64.906242][ T4729] Bluetooth: hci2: command tx timeout [ 65.034190][ T8031] loop2: detected capacity change from 0 to 256 [ 65.051999][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.069961][ T8031] syz.2.1363: attempt to access beyond end of device [ 65.069961][ T8031] loop2: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 65.228821][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.287610][ T7882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.362803][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.365071][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1371'. [ 65.365170][ T8058] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1371'. [ 65.426627][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.521238][ T8072] loop5: detected capacity change from 0 to 2048 [ 65.533974][ T7882] veth0_vlan: entered promiscuous mode [ 65.540153][ T8072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.549079][ T8077] loop4: detected capacity change from 0 to 512 [ 65.556534][ T8077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.571466][ T7882] veth1_vlan: entered promiscuous mode [ 65.595260][ T8072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.626227][ T7882] veth0_macvtap: entered promiscuous mode [ 65.643719][ T7882] veth1_macvtap: entered promiscuous mode [ 65.655334][ T12] bridge_slave_1: left promiscuous mode [ 65.658326][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.673698][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.713311][ T12] bridge_slave_0: left allmulticast mode [ 65.713358][ T12] bridge_slave_0: left promiscuous mode [ 65.713456][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.902871][ T12] batman_adv: batadv0: Removing interface: ip6gretap1 [ 65.953973][ T8102] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 66.054164][ T8105] netlink: 'syz.3.1382': attribute type 3 has an invalid length. [ 66.117251][ T8113] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1383'. [ 66.142554][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.174873][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.196066][ T12] bond0 (unregistering): Released all slaves [ 66.249941][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 66.269009][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.270779][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.338557][ T1457] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.338622][ T1457] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.338660][ T1457] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.338682][ T1457] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.485139][ T8128] loop3: detected capacity change from 0 to 1024 [ 66.531369][ T8128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.648882][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.648921][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.654676][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.764936][ T8145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.770008][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.770033][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.878076][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.985698][ T4725] Bluetooth: hci1: command tx timeout [ 66.990404][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1398'. [ 67.028639][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'. [ 67.175073][ T8175] bond1: option ad_user_port_key: invalid value (65535) [ 67.175121][ T8175] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 67.178634][ T8175] bond1 (unregistering): Released all slaves [ 67.234195][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 67.462496][ T12] hsr_slave_0: left promiscuous mode [ 67.464938][ T12] hsr_slave_1: left promiscuous mode [ 67.465280][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.465380][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.471091][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.471131][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.497289][ T12] veth0_macvtap: left promiscuous mode [ 67.497391][ T12] veth1_vlan: left promiscuous mode [ 67.497451][ T12] veth0_vlan: left promiscuous mode [ 67.664371][ T12] team0 (unregistering): Port device team_slave_1 removed [ 67.670676][ T12] team0 (unregistering): Port device team_slave_0 removed [ 67.751855][ T8229] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1417'. [ 67.758581][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 68.038935][ T8275] block nbd6: not configured, cannot reconfigure [ 68.088413][ T8279] loop2: detected capacity change from 0 to 4096 [ 68.091089][ T8279] EXT4-fs (loop2): Test dummy encryption mode enabled [ 68.126714][ T8279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.142555][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1440'. [ 68.163023][ T8279] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.1436: reserved inode found cleared - inode=18 [ 68.187159][ T8291] loop5: detected capacity change from 0 to 256 [ 68.221520][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.357169][ T8309] loop4: detected capacity change from 0 to 1024 [ 68.388720][ T8319] loop6: detected capacity change from 0 to 512 [ 68.389657][ T8309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.423628][ T8319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.448513][ T8319] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #2: comm syz.6.1455: corrupted inode contents [ 68.451626][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.463874][ T8319] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #2: comm syz.6.1455: mark_inode_dirty error [ 68.476060][ T8319] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #2: comm syz.6.1455: corrupted inode contents [ 68.484539][ T8319] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1455: mark_inode_dirty error [ 68.492997][ T8330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1460'. [ 68.504400][ T8319] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #2: comm syz.6.1455: corrupted inode contents [ 68.579660][ T7882] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.600671][ T8342] loop5: detected capacity change from 0 to 4096 [ 68.602421][ T8342] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.605221][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 68.608082][ T8342] EXT4-fs (loop5): Test dummy encryption mode enabled [ 68.614047][ T8348] loop6: detected capacity change from 0 to 128 [ 68.614538][ T8348] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.628913][ T8342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.629321][ T8348] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.732142][ T3297] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.767611][ T8363] evm: overlay not supported [ 68.891743][ T8381] loop3: detected capacity change from 0 to 8 [ 68.893300][ T7401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.929569][ T4725] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 68.931120][ T8379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.964032][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.065864][ T4725] Bluetooth: hci1: command tx timeout [ 69.081676][ T4721] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.102646][ T4721] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.232954][ T8414] EXT4-fs (loop4): Test dummy encryption mode enabled [ 69.243610][ T8414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.272341][ T8409] fido_id[8409]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.297068][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.496654][ T8447] vfat: Bad value for 'shortname' [ 69.501863][ T8450] __nla_validate_parse: 1 callbacks suppressed [ 69.502136][ T8450] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1508'. [ 69.621777][ T8464] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.621814][ T8464] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 69.621824][ T8464] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1516: Corrupt directory, running e2fsck is recommended [ 69.622115][ T8464] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 69.622219][ T8464] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1516: corrupted in-inode xattr: invalid ea_ino [ 69.622232][ T8464] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.622360][ T8464] EXT4-fs (loop2): Remounting filesystem read-only [ 69.622856][ T8464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.710096][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.823536][ T8479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.913141][ T8479] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 69.913227][ T8479] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 69.913270][ T8479] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1523: Failed to acquire dquot type 0 [ 69.924234][ T8479] overlayfs: failed to set uuid (/file0, err=-117); falling back to uuid=null. [ 69.949612][ T8479] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 69.949694][ T8479] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 69.949731][ T8479] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1523: Failed to acquire dquot type 0 [ 69.961004][ T8494] FAT-fs (loop5): Directory bread(block 1285) failed [ 69.961025][ T8494] FAT-fs (loop5): Directory bread(block 1286) failed [ 69.961037][ T8494] FAT-fs (loop5): Directory bread(block 1287) failed [ 69.961073][ T8494] FAT-fs (loop5): Directory bread(block 1288) failed [ 69.980825][ T8494] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 70.086831][ T7882] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 70.086935][ T7882] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 70.086957][ T7882] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz-executor: Failed to acquire dquot type 0 [ 70.187617][ T8514] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 70.301780][ T8523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1544'. [ 70.407200][ T8538] macvlan2: entered promiscuous mode [ 70.407244][ T8538] bridge0: entered promiscuous mode [ 70.408023][ T8540] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 70.425013][ T8544] EXT4-fs: Ignoring removed i_version option [ 70.427229][ T8544] EXT4-fs: inline encryption not supported [ 70.440788][ T8544] EXT4-fs (loop4): Test dummy encryption mode enabled [ 70.440908][ T8544] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 70.459169][ T8544] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.1555: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 70.459221][ T8544] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 70.459540][ T8544] EXT4-fs error (device loop4): ext4_quota_enable:7235: comm syz.4.1555: Bad quota inode: 4, type: 1 [ 70.459560][ T8544] loop4: lost filesystem error report for type 5 error -117 [ 70.459662][ T8544] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.459873][ T8544] EXT4-fs (loop4): mount failed [ 70.484444][ T7882] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.547841][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1555'. [ 70.562696][ T3407] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.619897][ T8561] ªªªªªª: renamed from vlan0 (while UP) [ 70.642216][ T8567] vxcan0: tx address claim with dest, not broadcast [ 70.681337][ T4729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.684223][ T4729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.686502][ T4729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.688651][ T4729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.688958][ T4729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.694936][ T3407] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.818684][ T3407] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.859358][ T8594] set_capacity_and_notify: 8 callbacks suppressed [ 70.859410][ T8594] loop2: detected capacity change from 0 to 512 [ 70.859826][ T8594] EXT4-fs: Ignoring removed orlov option [ 70.861730][ T8594] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 70.861739][ T8594] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 70.942400][ T3407] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.012814][ T8617] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1585'. [ 71.162052][ T3407] bridge_slave_1: left allmulticast mode [ 71.162090][ T3407] bridge_slave_1: left promiscuous mode [ 71.162176][ T3407] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.164820][ T3407] bridge_slave_0: left allmulticast mode [ 71.164835][ T3407] bridge_slave_0: left promiscuous mode [ 71.164952][ T3407] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.457341][ T8657] loop4: detected capacity change from 0 to 1024 [ 71.483475][ T8657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.490431][ T8657] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1603: lblock 0 mapped to illegal pblock 0 (length 6) [ 71.919497][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.977622][ T8663] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1604'. [ 71.999431][ T8665] loop2: detected capacity change from 0 to 512 [ 71.999995][ T8665] EXT4-fs: Ignoring removed oldalloc option [ 72.026462][ T8665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.101761][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.154164][ T3407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.171111][ T3407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.177190][ T3407] bond0 (unregistering): Released all slaves [ 72.341339][ T8683] loop2: detected capacity change from 0 to 4096 [ 72.351150][ T8694] Injecting memory failure for pfn 0x1a23a0 at process virtual address 0x20000000 [ 72.368939][ T8683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.415606][ T8705] vivid-000: disconnect [ 72.419530][ T8705] vivid-000: reconnect [ 72.421361][ T8694] Memory failure: 0x1a23a0: Sending SIGBUS to syz.3.1617:8694 due to hardware memory corruption [ 72.442631][ T8694] Memory failure: 0x1a23a0: recovery action for dirty LRU page: Recovered [ 72.442698][ T8694] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 72.442868][ T8694] Memory failure: 0x219250: Sending SIGBUS to syz.3.1617:8694 due to hardware memory corruption [ 72.442906][ T8694] Memory failure: 0x219250: recovery action for already poisoned page: Failed [ 72.465813][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1621'. [ 72.497660][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.557058][ T8724] sctp: [Deprecated]: syz.5.1627 (pid 8724) Use of int in max_burst socket option. [ 72.557058][ T8724] Use struct sctp_assoc_value instead [ 72.674919][ T8741] loop4: detected capacity change from 0 to 512 [ 72.708123][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 72.708169][ T8748] netlink: 'syz.3.1634': attribute type 25 has an invalid length. [ 72.708179][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 72.739054][ T8741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.745854][ T4729] Bluetooth: hci1: command tx timeout [ 72.815383][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 72.847954][ T8759] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1638'. [ 72.847997][ T8759] netlink: 'syz.5.1638': attribute type 1 has an invalid length. [ 72.855904][ T8757] batadv0: entered promiscuous mode [ 72.871824][ T8757] batadv0: left promiscuous mode [ 72.879606][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.879660][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.879778][ T8569] bridge_slave_0: entered allmulticast mode [ 72.880430][ T8569] bridge_slave_0: entered promiscuous mode [ 72.881247][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.881267][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.881323][ T8569] bridge_slave_1: entered allmulticast mode [ 72.881903][ T8569] bridge_slave_1: entered promiscuous mode [ 72.971671][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.017856][ T8569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.032095][ T8779] loop2: detected capacity change from 0 to 512 [ 73.040055][ T8779] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.050783][ T3407] hsr_slave_0: left promiscuous mode [ 73.051637][ T8779] EXT4-fs (loop2): 1 truncate cleaned up [ 73.052085][ T8779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.055657][ T3407] hsr_slave_1: left promiscuous mode [ 73.056529][ T3407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.056550][ T3407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.060945][ T3407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.060969][ T3407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.062407][ T8770] ./file0: Can't open blockdev [ 73.080641][ T3407] veth1_macvtap: left promiscuous mode [ 73.080704][ T3407] veth0_macvtap: left promiscuous mode [ 73.080850][ T3407] veth1_vlan: left promiscuous mode [ 73.080889][ T3407] veth0_vlan: left promiscuous mode [ 73.137625][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.420375][ T3407] team0 (unregistering): Port device team_slave_1 removed [ 73.441316][ T3407] team0 (unregistering): Port device team_slave_0 removed [ 73.584851][ T8569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.591291][ T8792] sit0: entered promiscuous mode [ 73.594249][ T8792] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 73.594293][ T8792] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1652'. [ 73.620336][ T8569] team0: Port device team_slave_0 added [ 73.622407][ T8569] team0: Port device team_slave_1 added [ 73.674125][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.674157][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.674172][ T8569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.687406][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.687441][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.687470][ T8569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.725707][ T8808] netlink: 'syz.4.1660': attribute type 8 has an invalid length. [ 73.725779][ T8808] sch_fq: defrate 0 ignored. [ 73.764901][ T8814] loop4: detected capacity change from 0 to 8 [ 73.788806][ T8569] hsr_slave_0: entered promiscuous mode [ 73.798488][ T8569] hsr_slave_1: entered promiscuous mode [ 73.802313][ T8569] debugfs: 'hsr0' already exists in 'hsr' [ 73.807118][ T8569] Cannot create hsr debugfs directory [ 73.818495][ T8814] SQUASHFS error: Failed to read block 0x6e6: -5 [ 73.818528][ T8814] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 73.818549][ T8814] SQUASHFS error: read_indexes: reading block [6e4:0] [ 73.988810][ T8835] loop5: detected capacity change from 0 to 512 [ 74.036289][ T8835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.059201][ T8569] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 74.090774][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.092689][ T8569] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 74.127691][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.134508][ T8569] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 74.144024][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.148912][ T8569] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 74.158664][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.161464][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.199452][ T7401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.214525][ T8569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.252486][ T8569] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.276881][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.276936][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.293468][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.293520][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.630222][ T8569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.653652][ T30] audit: type=1400 audit(588.612:28): lsm=SMACK fn=smack_inode_setxattr action=denied subject="_" object="l" requested=w pid=8934 comm="syz.5.1699" name="file0" dev="tmpfs" ino=580 [ 74.682489][ T8942] loop3: detected capacity change from 0 to 1024 [ 74.684195][ T8931] __nla_validate_parse: 4 callbacks suppressed [ 74.684275][ T8931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1697'. [ 74.721348][ T8942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.778089][ T8942] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.1700: lblock 3 mapped to illegal pblock 3 (length 3) [ 74.783486][ T8942] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 74.783536][ T8942] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.783536][ T8942] [ 74.793516][ T8942] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm syz.3.1700: lblock 8 mapped to illegal pblock 8 (length 5) [ 74.808722][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 74.811039][ T8942] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 74.811069][ T8942] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.811069][ T8942] [ 74.820972][ T8569] veth0_vlan: entered promiscuous mode [ 74.825696][ T4729] Bluetooth: hci1: command tx timeout [ 74.839874][ T8569] veth1_vlan: entered promiscuous mode [ 74.851987][ T40] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 74.852553][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 74.852567][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.852567][ T40] [ 74.852575][ T40] EXT4-fs (loop3): Total free blocks count 0 [ 74.852582][ T40] EXT4-fs (loop3): Free/Dirty block details [ 74.852589][ T40] EXT4-fs (loop3): free_blocks=0 [ 74.854165][ T4719] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 74.912634][ T8569] veth0_macvtap: entered promiscuous mode [ 74.919867][ T8569] veth1_macvtap: entered promiscuous mode [ 74.939711][ T8569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.943718][ T8569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.961708][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.990049][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.990121][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.990143][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.131910][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.131944][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.132170][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 75.151809][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.151842][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.283999][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 75.398251][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 75.398341][ T9035] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1730'. [ 75.550026][ T9052] loop7: detected capacity change from 0 to 4096 [ 75.580053][ T9052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.622743][ T9066] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 75.653580][ T8569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.721681][ T9080] vxcan1: tx address claim with dest, not broadcast [ 75.884396][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1762'. [ 75.884433][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1762'. [ 75.942891][ T9108] netlink: 'syz.3.1765': attribute type 2 has an invalid length. [ 76.257770][ T9159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1789'. [ 76.320047][ T30] audit: type=1326 audit(590.282:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.320090][ T30] audit: type=1326 audit(590.282:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.321948][ T30] audit: type=1326 audit(590.282:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.324281][ T30] audit: type=1326 audit(590.282:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.324456][ T30] audit: type=1326 audit(590.282:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.324795][ T30] audit: type=1326 audit(590.282:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.325305][ T30] audit: type=1326 audit(590.282:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.326454][ T30] audit: type=1326 audit(590.282:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.326569][ T30] audit: type=1326 audit(590.282:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.326639][ T30] audit: type=1326 audit(590.282:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.3.1793" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77fe8 code=0x7ffc0000 [ 76.370332][ T9170] set_capacity_and_notify: 1 callbacks suppressed [ 76.370373][ T9170] loop4: detected capacity change from 0 to 512 [ 76.393832][ T9170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.433577][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.476565][ T9178] loop5: detected capacity change from 0 to 2048 [ 76.484873][ T9180] loop4: detected capacity change from 0 to 256 [ 76.523169][ T9178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.535041][ T9187] loop3: detected capacity change from 0 to 512 [ 76.559070][ T7401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.578225][ T9189] loop7: detected capacity change from 0 to 512 [ 76.578623][ T9189] EXT4-fs: inline encryption not supported [ 76.589581][ T9189] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 76.589804][ T9189] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1802: invalid indirect mapped block 2683928664 (level 1) [ 76.589821][ T9189] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 76.592101][ T9189] EXT4-fs (loop7): 1 truncate cleaned up [ 76.616270][ T9187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.626968][ T9189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.637129][ T9189] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1802: invalid indirect mapped block 4294967295 (level 0) [ 76.638343][ T9189] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1802: invalid indirect mapped block 65536 (level 1) [ 76.669668][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.678063][ T8569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.726241][ T9203] loop3: detected capacity change from 0 to 128 [ 76.731016][ T9203] vfat: Unknown parameter 'uni_c†ate' [ 76.825365][ T9213] loop7: detected capacity change from 0 to 512 [ 76.828370][ T9213] EXT4-fs: Ignoring removed orlov option [ 76.829739][ T9213] EXT4-fs: Ignoring removed oldalloc option [ 76.843477][ T9213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.854335][ T9213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.865274][ T9218] loop4: detected capacity change from 0 to 1024 [ 76.892966][ T9218] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.898940][ T9218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.900919][ T9218] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.904086][ T9218] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.1813: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 76.904121][ T9218] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.907531][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 76.907546][ C0] EXT4-fs (loop4): initial error at time 590: ext4_ext_check_inode:521: inode 11 [ 76.907562][ C0] EXT4-fs (loop4): last error at time 590: ext4_ext_check_inode:521: inode 11 [ 76.915507][ T4725] Bluetooth: hci1: command tx timeout [ 76.916704][ T9218] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1813: couldn't read orphan inode 11 (err -117) [ 76.916743][ T9218] loop4: lost filesystem error report for type 5 error -117 [ 76.917397][ T9218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.939463][ T9218] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1813: Invalid block bitmap block 0 in block_group 0 [ 76.945138][ T9218] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1813: Failed to acquire dquot type 0 [ 76.946484][ T9218] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.1813: Invalid inode bitmap blk 137438953472 in block_group 0 [ 76.946827][ T8569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.970528][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'. [ 77.001412][ T12] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm kworker/u8:0: Invalid inode table block 8589934593 in block_group 0 [ 77.016909][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.135354][ T9245] loop4: detected capacity change from 0 to 512 [ 77.149541][ T9245] EXT4-fs: inline encryption not supported [ 77.149628][ T9245] EXT4-fs: Ignoring removed i_version option [ 77.156761][ T9245] EXT4-fs (loop4): 1 orphan inode deleted [ 77.157249][ T9245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.178633][ T9252] loop3: detected capacity change from 0 to 8 [ 77.179130][ T9245] EXT4-fs (loop4): shut down requested (2) [ 77.191856][ T9252] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 77.194201][ T9252] unable to read xattr id index table [ 77.226183][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.380122][ T9270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.396807][ T9274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.432081][ T9274] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1839: bg 0: block 345: padding at end of block bitmap is not set [ 77.448194][ T9274] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 0 [ 77.448273][ T9274] fs-verity (loop4, inode 13): Error -28 building Merkle tree [ 77.510521][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.516336][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.589417][ T3407] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.589486][ T3407] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.589514][ T3407] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.589530][ T3407] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.589773][ T9300] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 77.742396][ T9318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.778204][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.868798][ T9335] bridge0: port 3(syz_tun) entered blocking state [ 77.869110][ T9335] bridge0: port 3(syz_tun) entered disabled state [ 77.869268][ T9335] syz_tun: entered allmulticast mode [ 77.871386][ T9335] syz_tun: entered promiscuous mode [ 77.871576][ T9335] bridge0: port 3(syz_tun) entered blocking state [ 77.871612][ T9335] bridge0: port 3(syz_tun) entered forwarding state [ 77.928534][ T9345] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 78.009032][ T9351] ip6gre1: entered allmulticast mode [ 78.120173][ T9360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1878'. [ 78.582072][ T9329] Process accounting resumed [ 78.678444][ T9416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.690768][ T9416] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1903: Freeing blocks not in datazone - block = 0, count = 16 [ 78.696646][ T9416] EXT4-fs (loop4): shut down requested (0) [ 78.793570][ T9429] tipc: Started in network mode [ 78.793610][ T9429] tipc: Node identity ac14140f, cluster identity 4711 [ 78.793961][ T9429] tipc: New replicast peer: 255.255.255.255 [ 78.794245][ T9429] tipc: Enabled bearer , priority 10 [ 78.811648][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.887211][ T9440] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1913'. [ 78.986264][ T4729] Bluetooth: hci1: command 0x0419 tx timeout [ 79.787096][ T1042] tipc: Node number set to 2886997007 [ 79.886669][ T9552] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.900057][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1951'. [ 79.976217][ T7401] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.039765][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.039958][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.162801][ T9593] EXT4-fs: Ignoring removed orlov option [ 80.168844][ T9593] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 80.181749][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.181953][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.186281][ T9593] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 80.186407][ T9593] EXT4-fs (loop7): orphan cleanup on readonly fs [ 80.188276][ T9593] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.1961: Invalid inode table block 0 in block_group 0 [ 80.188295][ T9593] loop7: lost filesystem error report for type 5 error -117 [ 80.193706][ T9593] EXT4-fs (loop7): Remounting filesystem read-only [ 80.193857][ T9593] EXT4-fs (loop7): 1 truncate cleaned up [ 80.220945][ T9593] EXT4-fs (loop7): shut down requested (2) [ 80.327739][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'. [ 80.409770][ T9620] EXT4-fs (loop4): Test dummy encryption mode enabled [ 80.409813][ T9620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.416770][ T9620] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1971: bad orphan inode 131072 [ 80.416812][ T9620] loop4: lost filesystem error report for type 5 error -117 [ 80.582569][ T9635] EXT4-fs: Ignoring removed oldalloc option [ 80.588475][ T9635] EXT4-fs: Ignoring removed i_version option [ 80.594173][ T9635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.604906][ T9632] EXT4-fs error (device loop4): ext4_get_first_dir_block:3548: inode #12: comm syz.4.1976: directory missing '.' [ 80.616232][ T9635] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1977: invalid block [ 80.616284][ T9635] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.620380][ T9635] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1977: invalid indirect mapped block 4294967295 (level 1) [ 80.620432][ T9635] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.624736][ T9635] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1977: invalid indirect mapped block 4294967295 (level 1) [ 80.624775][ T9635] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.626818][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 80.626828][ C0] EXT4-fs (loop5): initial error at time 594: ext4_get_branch:178: inode 11: block 4294967295 [ 80.626851][ C0] EXT4-fs (loop5): last error at time 594: ext4_free_branches:1023: inode 11 [ 80.631433][ T9635] EXT4-fs (loop5): 2 truncates cleaned up [ 80.714520][ T9640] EXT4-fs: inline encryption not supported [ 80.717218][ T9640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.717244][ T9640] EXT4-fs (loop5): Test dummy encryption mode enabled [ 80.721607][ T9640] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 80.721694][ T9640] System zones: 0-5 [ 80.864434][ T4725] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 81.013172][ T9671] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 81.016442][ T9674] EXT4-fs (loop5): 1 truncate cleaned up [ 81.065535][ T4725] Bluetooth: hci1: command 0x0419 tx timeout [ 81.338995][ T9714] netlink: 'syz.4.2008': attribute type 4 has an invalid length. [ 81.361469][ T9718] netlink: 'syz.7.2009': attribute type 13 has an invalid length. [ 81.361507][ T9718] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2009'. [ 81.361549][ T9718] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 81.464584][ T9727] set_capacity_and_notify: 14 callbacks suppressed [ 81.464643][ T9727] loop4: detected capacity change from 0 to 512 [ 81.563432][ T9742] loop7: detected capacity change from 0 to 8 [ 81.584264][ T9742] SQUASHFS error: Unable to read inode 0xa7 [ 81.625958][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2021'. [ 81.702704][ T9760] loop7: detected capacity change from 0 to 128 [ 81.781490][ T9767] loop5: detected capacity change from 0 to 4096 [ 81.792274][ T9767] EXT4-fs: inline encryption not supported [ 81.793988][ T9767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.797084][ T9767] EXT4-fs (loop5): Test dummy encryption mode enabled [ 81.811389][ T9767] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 81.811464][ T9767] System zones: 0-5 [ 82.302673][ T9832] can0: slcan on ptm0. [ 82.358400][ T9831] can0 (unregistered): slcan off ptm0. [ 82.358792][ T9838] tun0: tun_chr_ioctl cmd 1074025680 [ 82.414084][ T9844] loop3: detected capacity change from 0 to 512 [ 82.420516][ T9844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 82.422260][ T9844] System zones: 1-12 [ 82.424091][ T9844] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2052: missing EA_INODE flag [ 82.424125][ T9844] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 82.427309][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 82.427326][ C0] EXT4-fs (loop3): initial error at time 596: ext4_xattr_inode_iget:441: inode 12 [ 82.427345][ C0] EXT4-fs (loop3): last error at time 596: ext4_xattr_inode_iget:441: inode 12 [ 82.435292][ T9844] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2052: error while reading EA inode 12 err=-117 [ 82.438836][ T9844] loop3: lost filesystem error report for type 5 error -117 [ 82.440157][ T9844] EXT4-fs (loop3): 1 orphan inode deleted [ 82.456008][ T9844] fscrypt (loop3, inode 15): Unsupported log2_data_unit_size in encryption policy: 227 [ 82.476784][ T9849] Injecting memory failure for pfn 0x17b171 at process virtual address 0x20ffe000 [ 82.508056][ T9849] Memory failure: 0x17b171: keeping poisoned page in swap cache [ 82.508223][ T9849] Memory failure: 0x17b171: recovery action for clean swapcache page: Recovered [ 82.508252][ T9849] Injecting memory failure for pfn 0x1a10f5 at process virtual address 0x20fff000 [ 82.510448][ T9852] loop5: detected capacity change from 0 to 512 [ 82.516754][ T9849] Memory failure: 0x1a10f5: Sending SIGBUS to syz.2.2054:9849 due to hardware memory corruption [ 82.516822][ T9849] Memory failure: 0x1a10f5: recovery action for dirty LRU page: Recovered [ 82.522286][ T9852] EXT4-fs (loop5): Test dummy encryption mode enabled [ 82.522333][ T9852] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.534949][ T9852] EXT4-fs (loop5): 1 truncate cleaned up [ 82.662589][ T9874] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.730824][ T9881] loop2: detected capacity change from 0 to 128 [ 82.777454][ T9888] loop3: detected capacity change from 0 to 256 [ 82.822739][ T9888] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.840939][ T9888] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 82.840977][ T9888] FAT-fs (loop3): Filesystem has been set read-only [ 83.038324][ T9913] PM: suspend entry (deep) [ 83.102523][ T1108] Filesystems sync: 0.062 seconds [ 83.155070][ T4729] Bluetooth: hci1: command 0x0419 tx timeout [ 83.183865][ T9918] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 83.554998][ T9924] loop2: detected capacity change from 0 to 2048 [ 83.559629][ T9924] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.561057][ T9924] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.720850][ T9941] loop3: detected capacity change from 0 to 128 [ 83.743778][ T9941] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10) [ 83.772471][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'. [ 83.791249][ T9946] n: the hash_elasticity option has been deprecated and is always 16 [ 83.803750][ T9946] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 83.821020][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'. [ 83.822968][ T9946] n: the hash_elasticity option has been deprecated and is always 16 [ 83.824634][ T9946] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 83.874075][ T9913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.874687][ T9913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.880709][ T9913] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.882624][ T9913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.885912][ T9913] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.901055][ T9913] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.922540][ T9913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.925887][ T9913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.936782][ T9913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.940750][ T9913] Freezing user space processes [ 83.945294][ T9913] Freezing user space processes completed (elapsed 0.004 seconds) [ 83.949339][ T9913] OOM killer disabled. [ 83.950119][ T9913] Freezing remaining freezable tasks [ 83.953660][ T9913] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 83.955198][ T9913] printk: Suspending console(s) (use no_console_suspend to debug) [ 84.049727][ T9913] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 84.049785][ T9913] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 84.049831][ T9913] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 84.049875][ T9913] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 84.049919][ T9913] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 84.049964][ T9913] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 84.050008][ T9913] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 84.050051][ T9913] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 84.050094][ T9913] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 84.050137][ T9913] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 84.050181][ T9913] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 84.050225][ T9913] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 84.050265][ T9913] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 84.050309][ T9913] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 84.050353][ T9913] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 84.050397][ T9913] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 84.256307][ T9913] Disabling non-boot CPUs ... [ 84.265275][ T9913] psci: CPU1 killed (polled 0 ms) [ 84.273473][ T9913] ------------[ cut here ]------------ [ 84.273473][ T9913] WARNING: kernel/context_tracking.c:120 at ct_kernel_exit+0x1b4/0x1f4, CPU#0: syz.7.2083/9913 [ 84.273473][ T9913] Modules linked in: [ 84.273473][ T9913] CPU: 0 UID: 0 PID: 9913 Comm: syz.7.2083 Tainted: G L syzkaller #0 PREEMPT [ 84.273473][ T9913] Tainted: [L]=SOFTLOCKUP [ 84.273473][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 84.273473][ T9913] pstate: 634003c5 (nZCv DAIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 84.273473][ T9913] pc : ct_kernel_exit+0x1b4/0x1f4 [ 84.273473][ T9913] lr : ct_kernel_exit+0x13c/0x1f4 [ 84.273473][ T9913] sp : ffff800094f875f0 [ 84.273473][ T9913] x29: ffff800094f875f0 x28: dfff800000000000 x27: ffff800094f87660 [ 84.273473][ T9913] x26: 00000000000000c0 x25: ffff7000129f0ecc x24: ffff800088abf998 [ 84.273473][ T9913] x23: ffff800088b0b6a0 x22: ffff0001ade38998 x21: ffff0001ade38998 [ 84.273473][ T9913] x20: 0000000000000000 x19: 0000000000000005 x18: 00000000ffffffff [ 84.273473][ T9913] x17: ffff80008a791000 x16: 0000000000000006 x15: ffff80008a31ada0 [ 84.273473][ T9913] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 84.273473][ T9913] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 84.273473][ T9913] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 84.273473][ T9913] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff8000868e6858 [ 84.273473][ T9913] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 84.273473][ T9913] Call trace: [ 84.273473][ T9913] ct_kernel_exit+0x1b4/0x1f4 (P) [ 84.273473][ T9913] ct_idle_enter+0x24/0x38 [ 84.273473][ T9913] cpu_suspend+0x264/0x474 [ 84.273473][ T9913] psci_system_suspend_enter+0x4c/0x80 [ 84.273473][ T9913] suspend_devices_and_enter+0x88c/0xd0c [ 84.273473][ T9913] pm_suspend+0x498/0x698 [ 84.273473][ T9913] state_store+0x14c/0x1fc [ 84.273473][ T9913] kobj_attr_store+0x6c/0x90 [ 84.273473][ T9913] sysfs_kf_write+0xe0/0x108 [ 84.273473][ T9913] kernfs_fop_write_iter+0x260/0x3b8 [ 84.273473][ T9913] vfs_write+0x51c/0xa0c [ 84.273473][ T9913] ksys_write+0x12c/0x228 [ 84.273473][ T9913] __arm64_sys_write+0x7c/0x90 [ 84.273473][ T9913] invoke_syscall+0x98/0x244 [ 84.273473][ T9913] el0_svc_common+0xec/0x23c [ 84.273473][ T9913] do_el0_svc+0x4c/0x5c [ 84.273473][ T9913] el0_svc+0x64/0x260 [ 84.273473][ T9913] el0t_64_sync_handler+0x48/0x148 [ 84.273473][ T9913] el0t_64_sync+0x198/0x19c [ 84.273473][ T9913] irq event stamp: 76864 [ 84.273473][ T9913] hardirqs last enabled at (76863): [] _raw_spin_unlock_irq+0x30/0x80 [ 84.273473][ T9913] hardirqs last disabled at (76864): [] arch_suspend_disable_irqs+0x34/0x4c [ 84.273473][ T9913] softirqs last enabled at (75014): [] handle_softirqs+0xc28/0xd98 [ 84.273473][ T9913] softirqs last disabled at (75009): [] __do_softirq+0x14/0x20 [ 84.273473][ T9913] ---[ end trace 0000000000000000 ]--- [ 84.273473][ T9913] ------------[ cut here ]------------ [ 84.273473][ T9913] WARNING: kernel/context_tracking.c:165 at ct_kernel_enter+0x138/0x170, CPU#0: syz.7.2083/9913 [ 84.273473][ T9913] Modules linked in: [ 84.273473][ T9913] CPU: 0 UID: 0 PID: 9913 Comm: syz.7.2083 Tainted: G W L syzkaller #0 PREEMPT [ 84.273473][ T9913] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 84.273473][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 84.273473][ T9913] pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 84.273473][ T9913] pc : ct_kernel_enter+0x138/0x170 [ 84.273473][ T9913] lr : ct_kernel_enter+0xc8/0x170 [ 84.273473][ T9913] sp : ffff800094f875e0 [ 84.273473][ T9913] x29: ffff800094f875e0 x28: dfff800000000000 x27: ffff800094f87660 [ 84.273473][ T9913] x26: 00000000000000c0 x25: ffff7000129f0ecc x24: 0000000100000000 [ 84.273473][ T9913] x23: ffff800088b0b6a0 x22: ffff800088abf998 x21: ffff0001ade38998 [ 84.273473][ T9913] x20: ffff0001ade38998 x19: 0000000000000000 x18: 00000000ffffffff [ 84.273473][ T9913] x17: 000000040044ffff x16: 041000f5b5503510 x15: 0000000000000000 [ 84.273473][ T9913] x14: ffff00013e9f57c0 x13: 0000000000000001 x12: 0000000000000000 [ 84.273473][ T9913] x11: 0000000000000000 x10: ffff600035bc7135 x9 : dfff800000000000 [ 84.273473][ T9913] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 84.273473][ T9913] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000868e6a20 [ 84.273473][ T9913] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 84.273473][ T9913] Call trace: [ 84.273473][ T9913] ct_kernel_enter+0x138/0x170 (P) [ 84.273473][ T9913] ct_idle_exit+0x24/0x48 [ 84.273473][ T9913] cpu_suspend+0x2dc/0x474 [ 84.273473][ T9913] psci_system_suspend_enter+0x4c/0x80 [ 84.273473][ T9913] suspend_devices_and_enter+0x88c/0xd0c [ 84.273473][ T9913] pm_suspend+0x498/0x698 [ 84.273473][ T9913] state_store+0x14c/0x1fc [ 84.273473][ T9913] kobj_attr_store+0x6c/0x90 [ 84.273473][ T9913] sysfs_kf_write+0xe0/0x108 [ 84.273473][ T9913] kernfs_fop_write_iter+0x260/0x3b8 [ 84.273473][ T9913] vfs_write+0x51c/0xa0c [ 84.273473][ T9913] ksys_write+0x12c/0x228 [ 84.273473][ T9913] __arm64_sys_write+0x7c/0x90 [ 84.273473][ T9913] invoke_syscall+0x98/0x244 [ 84.273473][ T9913] el0_svc_common+0xec/0x23c [ 84.273473][ T9913] do_el0_svc+0x4c/0x5c [ 84.273473][ T9913] el0_svc+0x64/0x260 [ 84.273473][ T9913] el0t_64_sync_handler+0x48/0x148 [ 84.273473][ T9913] el0t_64_sync+0x198/0x19c [ 84.273473][ T9913] irq event stamp: 76866 [ 84.273473][ T9913] hardirqs last enabled at (76865): [] psci_system_suspend_enter+0x4c/0x80 [ 84.273473][ T9913] hardirqs last disabled at (76866): [] psci_system_suspend_enter+0x4c/0x80 [ 84.273473][ T9913] softirqs last enabled at (75014): [] handle_softirqs+0xc28/0xd98 [ 84.273473][ T9913] softirqs last disabled at (75009): [] __do_softirq+0x14/0x20 [ 84.273473][ T9913] ---[ end trace 0000000000000000 ]--- [ 84.273511][ T9913] Enabling non-boot CPUs ... [ 84.274033][ T0] Detected PIPT I-cache on CPU1 [ 84.274069][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 84.274246][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 84.279876][ T9913] CPU1 is up [ 84.444000][ T1457] nvme nvme0: 2/0/0 default/read/poll queues [ 84.463434][ T9972] gve 0000:00:00.0 enp0s0: Device link is up. [ 84.714984][ T9913] OOM killer enabled. [ 84.715003][ T9913] Restarting tasks: Starting [ 84.736122][ T9913] Restarting tasks: Done [ 84.737809][ T9913] random: crng reseeded on system resumption [ 84.740098][ T9913] PM: suspend exit [ 85.544861][ T4729] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.945169][ T4729] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.945217][ T4729] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.945252][ T4729] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.945285][ T4729] Bluetooth: hci1: command 0x0419 tx timeout [ 87.625913][ T4725] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.025289][ T4725] Bluetooth: hci1: command 0x0419 tx timeout [ 88.025315][ T4729] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.105665][ T4725] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.107203][ T4729] Bluetooth: hci1: command 0x0419 tx timeout