last executing test programs: 1m41.362547498s ago: executing program 4 (id=277): r0 = socket(0x23, 0x80805, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)="a31853a6", 0x4}], 0x1) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1m41.296324398s ago: executing program 4 (id=282): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r0, r0, 0x0, 0x7a680000) 1m41.164523775s ago: executing program 4 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x14, r1, 0x731, 0x0, 0x0, {0x2f}}, 0x14}, 0x1, 0x2}, 0x0) 1m41.051978383s ago: executing program 4 (id=290): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000080)={[{@noauto_da_alloc}, {@errors_continue}, {@dioread_nolock}, {@debug}]}, 0x1, 0x5c4, &(0x7f0000000600)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) quotactl_fd$Q_GETFMT(r0, 0x0, 0x0, 0x0) 1m41.008382168s ago: executing program 4 (id=294): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) 1m40.91237591s ago: executing program 4 (id=296): r0 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000100)) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 1m25.862748584s ago: executing program 32 (id=296): r0 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000100)) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 50.122380245s ago: executing program 2 (id=2188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x5e}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 50.05848775s ago: executing program 0 (id=2190): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x32b, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/72, 0x48) 50.003112393s ago: executing program 1 (id=2192): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2a44a9, 0x0) 49.939543982s ago: executing program 1 (id=2193): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x4, {@in6_addr=@empty, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 49.939250041s ago: executing program 3 (id=2194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.936527739s ago: executing program 5 (id=2195): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000140)) 49.907947976s ago: executing program 0 (id=2196): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) mmap(&(0x7f00000c5000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) 49.865512315s ago: executing program 5 (id=2197): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x2a, 0x0, 0xffffffffffffffff, 0x46, 0x0, 0x0}) 49.854087265s ago: executing program 1 (id=2198): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f00000002c0)="279a004c6588d5d6dc03d5cc6000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 49.791114888s ago: executing program 0 (id=2199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbc4252c0000002000018008000100", @ANYRES32=r1, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x8811}, 0xc080) 49.790931086s ago: executing program 5 (id=2200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40005e00005c0000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a3100000000300003802c0000800800018004000100200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 49.775496977s ago: executing program 2 (id=2201): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000200)=0x2, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4, @multicast1}, 0x10) 49.745353148s ago: executing program 0 (id=2202): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 49.74072173s ago: executing program 3 (id=2203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8af}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 49.650482354s ago: executing program 0 (id=2204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0x7}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x2d}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) 49.648009393s ago: executing program 3 (id=2205): r0 = memfd_create(&(0x7f000000a440)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xb1\xea_\x8cZ7\xe7a\xdenJ\xeb\xa7\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xcc\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97\x05\xac\x9e\xce\x84\xae\xb3\x92\xab\a\b\xb0\xc2<\x80I\xe7\x10\x8f\x00\xa0\xbbP\x19\xe8I\xda=\xcam\xfdE\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef', 0xf) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x600000) 49.644778773s ago: executing program 2 (id=2206): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)=@chain) add_key$user(&(0x7f00000003c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000200)="8ac59241", 0x4, r0) 49.585792169s ago: executing program 1 (id=2207): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="30000000190001001122334455660100"/31, 0x1f) 49.583325401s ago: executing program 5 (id=2208): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x50, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x3, 0x6, @remote}, 0x14) 49.556320311s ago: executing program 0 (id=2209): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002540)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 49.555127027s ago: executing program 1 (id=2210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x6, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 49.519875371s ago: executing program 2 (id=2211): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 49.495421438s ago: executing program 2 (id=2212): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x50) 49.491596543s ago: executing program 3 (id=2213): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 49.462286422s ago: executing program 3 (id=2214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 49.423794965s ago: executing program 5 (id=2215): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x90, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd1be0ffff00fe3321632f77fbac14140be000031762079f4b200287e5feca6aab845013f2325f1a393b050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b6206368", 0x0, 0xfce7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x59}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x4e, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9005bec6886dd", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.41590648s ago: executing program 1 (id=2216): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/276, 0x114}], 0x1, 0x5, 0x7) 49.386177262s ago: executing program 2 (id=2217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 49.385389876s ago: executing program 3 (id=2218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000008030000000000000000000000000506000240001c00000900010073797a31000000000c00048008000b4000007eb30500030006"], 0x3c}, 0x1, 0x0, 0x0, 0x4c840}, 0x20008800) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 0s ago: executing program 5 (id=2219): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000400)) ppoll(&(0x7f00000003c0)=[{r0, 0x3341}, {r0}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): bridge_slave_0) entered blocking state [ 23.398278][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.398928][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.398949][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.410102][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.410116][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.427650][ T4711] veth0_vlan: entered promiscuous mode [ 23.460738][ T4711] veth1_vlan: entered promiscuous mode [ 23.472384][ T4711] veth0_macvtap: entered promiscuous mode [ 23.473630][ T4711] veth1_macvtap: entered promiscuous mode [ 23.483599][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.487146][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.488120][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.490646][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.490829][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.491564][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.491629][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.520850][ T4710] veth0_vlan: entered promiscuous mode [ 23.522981][ T4710] veth1_vlan: entered promiscuous mode [ 23.532474][ T4710] veth0_macvtap: entered promiscuous mode [ 23.533558][ T4710] veth1_macvtap: entered promiscuous mode [ 23.565381][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.565391][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.572795][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.572805][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.596492][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.597484][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.633191][ T4711] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.649901][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.649910][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.653315][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.660660][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.660800][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.660826][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.660850][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.677420][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.677433][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.716805][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.737588][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.741328][ T4719] veth0_vlan: entered promiscuous mode [ 23.755662][ T4706] veth0_vlan: entered promiscuous mode [ 23.758753][ T4719] veth1_vlan: entered promiscuous mode [ 23.763334][ T4706] veth1_vlan: entered promiscuous mode [ 23.770184][ T4719] veth0_macvtap: entered promiscuous mode [ 23.776663][ T4719] veth1_macvtap: entered promiscuous mode [ 23.781385][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.789715][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.795401][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.795803][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.795874][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.795933][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.799987][ T4706] veth0_macvtap: entered promiscuous mode [ 23.835943][ T4706] veth1_macvtap: entered promiscuous mode [ 23.848164][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.848177][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.850872][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 23.850886][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 23.850918][ T4895] netlink: 'syz.2.9': attribute type 6 has an invalid length. [ 23.866866][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.867842][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.883425][ T4716] veth0_vlan: entered promiscuous mode [ 23.891423][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.891579][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.891657][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.893362][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.893372][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.896299][ T12] IPVS: starting estimator thread 0... [ 23.898371][ T4716] veth1_vlan: entered promiscuous mode [ 23.925418][ T4716] veth0_macvtap: entered promiscuous mode [ 23.939736][ T4716] veth1_macvtap: entered promiscuous mode [ 23.949378][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.951127][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.967138][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.967151][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.984267][ T128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.993988][ T4900] IPVS: using max 61 ests per chain, 146400 per kthread [ 24.005726][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.005737][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.028559][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.028575][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.039394][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.039713][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.039733][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.039751][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.061899][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.061913][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.092728][ T4922] tipc: Started in network mode [ 24.092743][ T4922] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 24.093057][ T4922] tipc: Enabled bearer , priority 21 [ 24.126945][ T4927] Bluetooth: MGMT ver 1.23 [ 24.264143][ T51] Bluetooth: hci4: command tx timeout [ 24.264246][ T51] Bluetooth: hci0: command tx timeout [ 24.264305][ T51] Bluetooth: hci3: command tx timeout [ 24.264360][ T51] Bluetooth: hci2: command tx timeout [ 24.264414][ T51] Bluetooth: hci1: command tx timeout [ 24.286743][ T4959] Bluetooth: hci0: unsupported parameter 5135 [ 24.286755][ T4959] Bluetooth: hci0: unsupported parameter 8192 [ 24.286764][ T4959] Bluetooth: hci0: unsupported parameter 5135 [ 24.286772][ T4959] Bluetooth: hci0: unsupported parameter 8192 [ 24.378050][ T4977] warning: `syz.3.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 24.421762][ T4986] loop0: detected capacity change from 0 to 256 [ 24.431993][ T4989] loop1: detected capacity change from 0 to 512 [ 24.450713][ T4989] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 24.451264][ T4989] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.48: corrupted in-inode xattr: e_value size too large [ 24.451310][ T4989] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 24.452095][ T4989] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.48: couldn't read orphan inode 15 (err -117) [ 24.452140][ T4989] loop1: lost filesystem error report for type 5 error -117 [ 24.453906][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 24.453917][ C1] EXT4-fs (loop1): initial error at time 24: ext4_iget_extra_inode:5210: inode 15 [ 24.453934][ C1] EXT4-fs (loop1): last error at time 24: ext4_orphan_get:1408 [ 24.463449][ T4989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 24.501222][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 24.535860][ T5000] Bluetooth: hci0: unsupported parameter 5135 [ 24.535874][ T5000] Bluetooth: hci0: unsupported parameter 8192 [ 24.535883][ T5000] Bluetooth: hci0: unsupported parameter 5135 [ 24.535892][ T5000] Bluetooth: hci0: unsupported parameter 8192 [ 24.669269][ T5028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.60'. [ 24.669873][ T5028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.60'. [ 24.670593][ T5026] netlink: 260 bytes leftover after parsing attributes in process `syz.3.58'. [ 24.670709][ T5026] netlink: 172 bytes leftover after parsing attributes in process `syz.3.58'. [ 24.720663][ T5037] loop2: detected capacity change from 0 to 1024 [ 24.727674][ T5037] EXT4-fs: Ignoring removed bh option [ 24.732006][ T5037] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 24.763191][ T5037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 24.768724][ T5044] loop3: detected capacity change from 0 to 512 [ 24.781285][ T5037] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 24.797619][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 24.800224][ T5044] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 24.809555][ T5044] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.66: corrupted in-inode xattr: e_value size too large [ 24.809608][ T5044] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 24.810676][ T5044] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.66: couldn't read orphan inode 15 (err -117) [ 24.810698][ T5044] loop3: lost filesystem error report for type 5 error -117 [ 24.811214][ T5044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 24.869032][ T5059] netlink: 44 bytes leftover after parsing attributes in process `syz.1.70'. [ 24.875143][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 24.913560][ T12] IPVS: starting estimator thread 0... [ 24.957083][ T5073] netlink: 60 bytes leftover after parsing attributes in process `syz.3.74'. [ 24.957634][ T5073] netlink: 60 bytes leftover after parsing attributes in process `syz.3.74'. [ 24.989608][ T5075] loop0: detected capacity change from 0 to 1024 [ 24.989920][ T5075] EXT4-fs: Ignoring removed nobh option [ 24.989942][ T5075] EXT4-fs: Ignoring removed bh option [ 24.995203][ T5066] IPVS: using max 61 ests per chain, 146400 per kthread [ 25.004757][ T5075] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 25.018657][ T5075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.048641][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.081296][ T5091] loop2: detected capacity change from 0 to 512 [ 25.094321][ T5091] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 25.094893][ T4721] tipc: Node number set to 10398378 [ 25.098987][ T5091] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.83: corrupted in-inode xattr: e_value size too large [ 25.099018][ T5091] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 25.101022][ T5091] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.83: couldn't read orphan inode 15 (err -117) [ 25.101043][ T5091] loop2: lost filesystem error report for type 5 error -117 [ 25.101580][ T5091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.176705][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.243400][ T5109] ======================================================= [ 25.243400][ T5109] WARNING: The mand mount option has been deprecated and [ 25.243400][ T5109] and is ignored by this kernel. Remove the mand [ 25.243400][ T5109] option from the mount to silence this warning. [ 25.243400][ T5109] ======================================================= [ 25.313194][ T5127] loop0: detected capacity change from 0 to 512 [ 25.313489][ T5127] EXT4-fs: Ignoring removed nobh option [ 25.323451][ T5127] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 25.323562][ T5127] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 25.326175][ T5127] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #13: comm syz.0.100: inode has both inline data and extents flags [ 25.326194][ T5127] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 25.326447][ T5127] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.100: couldn't read orphan inode 13 (err -117) [ 25.326462][ T5127] loop0: lost filesystem error report for type 5 error -117 [ 25.327441][ T5127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.338215][ T5127] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 25.359067][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.383222][ T5135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 25.383245][ T5135] netlink: 'syz.0.101': attribute type 6 has an invalid length. [ 25.513050][ T5159] Illegal XDP return value 16 on prog (id 7) dev N/A, expect packet loss! [ 25.818924][ T5179] loop0: detected capacity change from 0 to 512 [ 25.825504][ T5179] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.126: invalid block [ 25.826198][ T5179] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 25.826533][ T5179] EXT4-fs (loop0): Remounting filesystem read-only [ 25.826805][ T5179] EXT4-fs (loop0): 2 truncates cleaned up [ 25.827450][ T5179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.079056][ T5184] syz.3.129 uses obsolete (PF_INET,SOCK_PACKET) [ 26.344516][ T4713] Bluetooth: hci3: command tx timeout [ 26.344538][ T4714] Bluetooth: hci0: command tx timeout [ 26.344544][ T4713] Bluetooth: hci4: command tx timeout [ 26.344601][ T51] Bluetooth: hci2: command tx timeout [ 26.344636][ T4707] Bluetooth: hci1: command tx timeout [ 26.348222][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.409577][ T5194] loop0: detected capacity change from 0 to 1024 [ 26.409926][ T5194] EXT4-fs: Ignoring removed nobh option [ 26.409966][ T5194] EXT4-fs: Ignoring removed bh option [ 26.415911][ T5199] netlink: 'syz.2.135': attribute type 34 has an invalid length. [ 26.422640][ T5194] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 26.432857][ T5199] bond1: option lacp_strict: invalid value (64) [ 26.438156][ T5199] bond1 (unregistering): Released all slaves [ 26.454223][ T5194] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 26.454300][ T5194] System zones: 0-1, 3-12 [ 26.454896][ T5194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.477434][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.690106][ T5253] loop1: detected capacity change from 0 to 2048 [ 26.731925][ T5253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.761727][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.762555][ T5264] macsec1: entered promiscuous mode [ 26.762580][ T5264] bridge0: entered promiscuous mode [ 26.777665][ T5271] sock: sock_timestamping_bind_phc: sock not bind to device [ 26.784886][ T5272] Bluetooth: hci0: unsupported parameter 5135 [ 26.784897][ T5272] Bluetooth: hci0: unsupported parameter 8192 [ 26.784906][ T5272] Bluetooth: hci0: unsupported parameter 5135 [ 26.784913][ T5272] Bluetooth: hci0: unsupported parameter 8192 [ 26.803182][ T5275] EXT4-fs: Ignoring removed oldalloc option [ 26.844550][ T5282] Cannot find set identified by id 0 to match [ 26.851837][ T5275] EXT4-fs (loop0): orphan cleanup on readonly fs [ 26.851905][ T5275] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 26.851918][ T5275] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 26.851924][ T5275] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.172: bad orphan inode 768 [ 26.851935][ T5275] loop0: lost filesystem error report for type 5 error -117 [ 26.852873][ T5275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 26.867116][ T5288] fuse: Invalid rootmode [ 26.886327][ T5275] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.909590][ T5275] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 26.945986][ T5305] netlink: 'syz.4.185': attribute type 12 has an invalid length. [ 26.948361][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.987550][ T5311] EXT4-fs: Ignoring removed oldalloc option [ 26.993252][ T5311] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 27.007155][ T5311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.030660][ T5320] overlayfs: workdir and upperdir must be separate subtrees [ 27.088287][ T5311] EXT4-fs error (device loop1): __ext4_remount:6872: comm syz.1.187: Abort forced by user [ 27.090219][ T5311] EXT4-fs (loop1): Remounting filesystem read-only [ 27.090246][ T5311] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 27.115108][ T5328] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 27.237302][ T4710] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 27.238816][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.545034][ T4808] kernel read not supported for file /input/mice (pid: 4808 comm: kworker/0:4) [ 27.665608][ T5373] EXT4-fs (loop0): 1 truncate cleaned up [ 27.666055][ T5373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.703646][ T5380] Injecting memory failure for pfn 0x11d9f9 at process virtual address 0x20000000 [ 27.737056][ T5380] Memory failure: 0x11d9f9: Sending SIGBUS to syz.4.210:5380 due to hardware memory corruption [ 27.737117][ T5380] Memory failure: 0x11d9f9: recovery action for dirty LRU page: Recovered [ 27.737137][ T5380] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20001000 [ 27.737225][ T5380] Memory failure: 0x216bf1: unhandlable page. [ 27.737232][ T5380] Memory failure: 0x216bf1: recovery action for reserved kernel page: Ignored [ 27.789683][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.850536][ T5389] veth1_macvtap: left promiscuous mode [ 27.850593][ T5389] macsec0: entered promiscuous mode [ 27.878845][ T5389] veth1_macvtap: entered promiscuous mode [ 27.878963][ T5389] macsec0: left promiscuous mode [ 28.039339][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.039362][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.039375][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.039387][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.039398][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.039409][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.039419][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.039430][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.039440][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.039451][ T5405] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 28.264823][ T5417] nbd: illegal input index -2068635998 [ 28.429149][ T51] Bluetooth: hci3: command tx timeout [ 28.429665][ T4707] Bluetooth: hci4: command tx timeout [ 28.434450][ T51] Bluetooth: hci2: command tx timeout [ 28.434472][ T51] Bluetooth: hci0: command tx timeout [ 28.434537][ T4707] Bluetooth: hci1: command tx timeout [ 28.504992][ T5433] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 28.505005][ T5433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 28.505036][ T5433] System zones: 1-12 [ 28.505117][ T5433] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 28.505125][ T5433] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 28.597546][ T5433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 28.716312][ T5433] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 28.809192][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.897147][ T5470] capability: warning: `syz.3.246' uses 32-bit capabilities (legacy support in use) [ 29.072460][ T5480] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.072481][ T5480] EXT4-fs (loop4): Test dummy encryption mode enabled [ 29.081979][ T5480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.217543][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.430468][ T5507] __nla_validate_parse: 18 callbacks suppressed [ 29.430484][ T5507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.262'. [ 29.600340][ T5524] set_capacity_and_notify: 6 callbacks suppressed [ 29.600353][ T5524] loop3: detected capacity change from 0 to 1024 [ 29.617196][ T5524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 29.668078][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 29.671273][ T5527] netlink: 'syz.1.270': attribute type 34 has an invalid length. [ 29.671287][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 29.687420][ T5527] bond1: option lacp_strict: invalid value (64) [ 29.695658][ T5527] bond1 (unregistering): Released all slaves [ 29.889356][ T5549] loop4: detected capacity change from 0 to 2048 [ 29.918696][ T5549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.952313][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.091309][ T5567] loop4: detected capacity change from 0 to 512 [ 30.107418][ T5567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c018, mo2=0002] [ 30.107446][ T5567] System zones: 1-3, 19-19, 35-66 [ 30.108679][ T5567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.151047][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.523891][ T4708] Bluetooth: hci1: command tx timeout [ 30.523917][ T4708] Bluetooth: hci0: command tx timeout [ 30.523934][ T4708] Bluetooth: hci2: command tx timeout [ 30.523948][ T4708] Bluetooth: hci4: command tx timeout [ 30.523962][ T4708] Bluetooth: hci3: command tx timeout [ 30.636205][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 30.636223][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 30.636239][ T5607] netlink: 'syz.2.310': attribute type 7 has an invalid length. [ 30.664959][ T5609] capability: warning: `syz.3.311' uses deprecated v2 capabilities in a way that may be insecure [ 30.746934][ T5618] loop1: detected capacity change from 0 to 256 [ 30.805110][ T5624] binder: 5623:5624 got transaction to invalid handle, 3 [ 30.805136][ T5624] binder: 5623:5624 cannot find target node [ 30.805150][ T5624] binder: 5623:5624 transaction call to 0:0 failed 1/29201/-22, code 0 size 0-0 line 3253 [ 30.807914][ T5624] binder: undelivered TRANSACTION_ERROR: 29201 [ 31.319543][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 31.319560][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 31.319567][ T5651] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 31.871086][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 32.004949][ T5681] vivid-000: disconnect [ 32.011286][ T5680] vivid-000: reconnect [ 32.583282][ T5713] netlink: 'syz.2.360': attribute type 4 has an invalid length. [ 32.583301][ T5713] netlink: 'syz.2.360': attribute type 5 has an invalid length. [ 32.583311][ T5713] netlink: 'syz.2.360': attribute type 5 has an invalid length. [ 32.583318][ T5713] netlink: 3637 bytes leftover after parsing attributes in process `syz.2.360'. [ 32.945241][ T5732] loop2: detected capacity change from 0 to 256 [ 32.956398][ T5732] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.082426][ T5732] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 33.082444][ T5732] FAT-fs (loop2): Filesystem has been set read-only [ 33.346551][ T5754] netlink: 312 bytes leftover after parsing attributes in process `syz.1.377'. [ 33.489177][ T5762] loop2: detected capacity change from 0 to 512 [ 33.506326][ T5762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.506336][ T5762] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 33.511964][ T5762] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.380: bg 0: block 255: padding at end of block bitmap is not set [ 33.511984][ T5762] loop2: lost filesystem error report for type 5 error -117 [ 33.513770][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 33.513782][ C0] EXT4-fs (loop2): initial error at time 33: ext4_validate_block_bitmap:445 [ 33.513795][ C0] EXT4-fs (loop2): last error at time 33: ext4_validate_block_bitmap:445 [ 33.540803][ T5762] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 33.540822][ T5762] loop2: lost filesystem error report for type 5 error -117 [ 33.550741][ T5765] loop1: detected capacity change from 0 to 512 [ 33.558365][ T5762] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.380: invalid indirect mapped block 1 (level 1) [ 33.558385][ T5762] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.559007][ T5762] EXT4-fs (loop2): 1 truncate cleaned up [ 33.559588][ T5762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.561305][ T5765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.708126][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.847760][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.143087][ T5797] loop3: detected capacity change from 0 to 512 [ 34.192349][ T5797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.260411][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.436922][ T5812] loop3: detected capacity change from 0 to 8192 [ 34.501849][ T128] IPVS: starting estimator thread 0... [ 34.523535][ T5812] Dev loop3: RDB in block 1 has bad checksum [ 34.586014][ T5823] IPVS: using max 48 ests per chain, 115200 per kthread [ 34.633850][ T5829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'. [ 34.891736][ T5845] netlink: 'syz.0.418': attribute type 10 has an invalid length. [ 34.891758][ T5845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.418'. [ 34.891842][ T5845] erspan0: entered promiscuous mode [ 35.001798][ T5851] loop3: detected capacity change from 0 to 512 [ 35.035508][ T5851] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 35.035524][ T5851] loop3: lost filesystem error report for type 5 error -117 [ 35.036385][ T5851] EXT4-fs (loop3): Remounting filesystem read-only [ 35.036515][ T5851] EXT4-fs (loop3): 2 truncates cleaned up [ 35.037026][ T5851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.243506][ T5862] loop2: detected capacity change from 0 to 128 [ 35.425643][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.728706][ T5890] loop3: detected capacity change from 0 to 1024 [ 35.729801][ T5890] EXT4-fs: Ignoring removed bh option [ 35.742536][ T5890] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 35.777817][ T5893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.434'. [ 35.778781][ T5893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.434'. [ 35.849560][ T5899] loop1: detected capacity change from 0 to 1024 [ 35.867331][ T5890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.898157][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.907899][ T5890] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 35.944733][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.984602][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.022502][ T5912] net_ratelimit: 3256 callbacks suppressed [ 36.022514][ T5912] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 36.074053][ T5914] sch_tbf: peakrate 2048 is lower than or equals to rate 17006904472301849741 ! [ 36.134828][ T5919] loop2: detected capacity change from 0 to 512 [ 36.167442][ T5919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.216369][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.675621][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 36.675638][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 36.675656][ T5946] netlink: 'syz.2.454': attribute type 18 has an invalid length. [ 36.933216][ T4808] Process accounting resumed [ 37.034268][ T5962] netlink: 44 bytes leftover after parsing attributes in process `syz.0.462'. [ 37.034285][ T5962] tipc: Enabling of bearer rejected, media not registered [ 37.457250][ T5990] loop2: detected capacity change from 0 to 128 [ 37.479470][ T5990] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.555439][ T4710] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.800197][ T6011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.484'. [ 37.896487][ T6020] loop0: detected capacity change from 0 to 512 [ 37.902666][ T6020] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.902821][ T6020] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 37.920095][ T6020] block device autoloading is deprecated and will be removed. [ 37.920142][ T6020] EXT4-fs (loop0): external journal has bad superblock [ 38.172262][ T6030] random: crng reseeded on system resumption [ 38.243846][ T30] audit: type=1326 audit(38.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad788e8 code=0x7ffc0000 [ 38.243882][ T30] audit: type=1326 audit(38.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad788e8 code=0x7ffc0000 [ 38.243898][ T30] audit: type=1326 audit(38.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad788e8 code=0x7ffc0000 [ 38.243914][ T30] audit: type=1326 audit(38.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffbad788e8 code=0x7ffc0000 [ 38.243928][ T30] audit: type=1326 audit(38.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad788e8 code=0x7ffc0000 [ 38.243942][ T30] audit: type=1326 audit(38.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad788e8 code=0x7ffc0000 [ 38.243956][ T30] audit: type=1326 audit(38.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad788e8 code=0x7ffc0000 [ 38.243969][ T30] audit: type=1326 audit(38.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffffbad788e8 code=0x7ffc0000 [ 38.307429][ T30] audit: type=1326 audit(38.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffbad5b7ac code=0x7ffc0000 [ 38.322498][ T30] audit: type=1326 audit(38.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.3.495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffbad5b7ac code=0x7ffc0000 [ 38.744414][ T4808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.923863][ T4808] usb 1-1: Using ep0 maxpacket: 8 [ 38.924403][ T4808] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 38.924430][ T4808] usb 1-1: too many configurations: 234, using maximum allowed: 8 [ 38.925624][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.925642][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.925654][ T4808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.926354][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.926366][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.926375][ T4808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.927304][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.927317][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.927326][ T4808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.932138][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.932154][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.932163][ T4808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.932895][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.932907][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.932917][ T4808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.933630][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.933641][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.933650][ T4808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.950072][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.950084][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.950093][ T4808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.993961][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.993980][ T4808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.993990][ T4808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.994006][ T4808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.001547][ T4808] usb 1-1: config 0 descriptor?? [ 39.180853][ T6061] ip_tables: iptables: counters copy to user failed while replacing table [ 39.284729][ T6068] random: crng reseeded on system resumption [ 39.598229][ T4808] usbhid 1-1:0.0: can't add hid device: -71 [ 39.598291][ T4808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.604121][ T4808] usb 1-1: USB disconnect, device number 2 [ 39.678394][ T6085] netlink: 532 bytes leftover after parsing attributes in process `syz.1.516'. [ 40.327809][ T6128] netlink: 296 bytes leftover after parsing attributes in process `syz.1.533'. [ 40.327831][ T6128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.533'. [ 40.401915][ T6133] loop2: detected capacity change from 0 to 1024 [ 40.402257][ T6133] EXT4-fs: Ignoring removed nobh option [ 40.425046][ T6133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.426669][ T6133] EXT4-fs error (device loop2): ext4_search_dir:1476: inode #12: block 7: comm syz.2.535: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 40.430218][ T6133] EXT4-fs (loop2): Remounting filesystem read-only [ 40.641491][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.820639][ T6156] binder: 6155:6156 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 40.889212][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 41.030606][ T6175] loop1: detected capacity change from 0 to 512 [ 41.049762][ T6175] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.552: corrupted in-inode xattr: invalid ea_ino [ 41.049780][ T6175] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.049934][ T6175] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.552: couldn't read orphan inode 15 (err -117) [ 41.049950][ T6175] loop1: lost filesystem error report for type 5 error -117 [ 41.050452][ T6175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.089808][ T6172] loop0: detected capacity change from 0 to 8192 [ 41.117378][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.200531][ T6180] loop3: detected capacity change from 0 to 128 [ 41.224627][ T6180] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.446517][ T4719] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.694683][ T6198] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 42.312057][ T6222] netlink: 'syz.0.573': attribute type 2 has an invalid length. [ 42.320481][ T6224] loop3: detected capacity change from 0 to 512 [ 42.375349][ T6224] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.379290][ T6224] EXT4-fs (loop3): 1 orphan inode deleted [ 42.379753][ T6224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.438778][ T6227] loop0: detected capacity change from 0 to 512 [ 42.450842][ T6224] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 42.468713][ T6227] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.575: inode has both inline data and extents flags [ 42.468733][ T6227] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.468845][ T6227] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.575: couldn't read orphan inode 15 (err -117) [ 42.468857][ T6227] loop0: lost filesystem error report for type 5 error -117 [ 42.469380][ T6227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.597066][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.601226][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.623369][ T6231] process 'syz.1.578' launched './file1' with NULL argv: empty string added [ 42.732970][ T6233] loop3: detected capacity change from 0 to 512 [ 42.733300][ T6233] EXT4-fs: Ignoring removed nobh option [ 42.763273][ T6233] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 42.777128][ T6233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 42.777215][ T6233] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.778438][ T6233] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.576: attempt to clear invalid blocks 1024 len 1 [ 42.778463][ T6233] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.783151][ T6233] EXT4-fs (loop3): Remounting filesystem read-only [ 42.783599][ T6233] EXT4-fs (loop3): 1 truncate cleaned up [ 42.795550][ T6233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 42.877488][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 42.995800][ T6246] loop1: detected capacity change from 0 to 128 [ 43.016580][ T6246] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.282275][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.147679][ T6295] loop1: detected capacity change from 0 to 256 [ 44.264942][ T4707] Bluetooth: hci1: command tx timeout [ 44.357315][ T6307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.609'. [ 44.357352][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.609'. [ 44.468549][ T6316] loop2: detected capacity change from 0 to 8 [ 44.531763][ T6316] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 44.531777][ T6316] unable to read xattr id index table [ 44.562633][ T6320] ip_tables: iptables: counters copy to user failed while replacing table [ 44.857237][ T6341] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.623'. [ 45.303344][ T6380] futex_wake_op: syz.0.635 tries to shift op by 144; fix this program [ 45.303415][ T6380] futex_wake_op: syz.0.635 tries to shift op by 144; fix this program [ 45.511405][ T4708] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 45.511919][ T4708] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 45.512222][ T4708] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 45.512545][ T4708] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 45.512766][ T4708] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 45.684048][ T6414] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.869621][ T6429] ip_tables: iptables: counters copy to user failed while replacing table [ 46.036882][ T6442] xt_policy: too many policy elements [ 46.064587][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.064613][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.064670][ T6394] bridge_slave_0: entered allmulticast mode [ 46.065071][ T6394] bridge_slave_0: entered promiscuous mode [ 46.072369][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.072390][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.072440][ T6394] bridge_slave_1: entered allmulticast mode [ 46.072881][ T6394] bridge_slave_1: entered promiscuous mode [ 46.093233][ T6447] loop3: detected capacity change from 0 to 1024 [ 46.113200][ T6394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.124451][ T6394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.130196][ T6447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.162389][ T6394] team0: Port device team_slave_0 added [ 46.165557][ T6394] team0: Port device team_slave_1 added [ 46.199539][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.199557][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.199572][ T6394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.201374][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.225381][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.225397][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.225408][ T6394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.281144][ T6394] hsr_slave_0: entered promiscuous mode [ 46.285505][ T6394] hsr_slave_1: entered promiscuous mode [ 46.287515][ T6459] loop1: detected capacity change from 0 to 512 [ 46.288021][ T6394] debugfs: 'hsr0' already exists in 'hsr' [ 46.288089][ T6394] Cannot create hsr debugfs directory [ 46.309365][ T6459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.310582][ T6459] EXT4-fs (loop1): 1 truncate cleaned up [ 46.311027][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.335224][ T6459] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1341: inode #12: block 7: comm syz.1.658: path /152/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 46.342947][ T6459] EXT4-fs (loop1): Remounting filesystem read-only [ 46.363383][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.540691][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.638404][ T6394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.642017][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.642305][ T6394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.644497][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.644804][ T6394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.654711][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.658421][ T6394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.661061][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.687917][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.687975][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.688043][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.688070][ T6394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.744990][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.750467][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.777108][ T6394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.780013][ T6394] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.794320][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.794344][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.796961][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.796983][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.819687][ T6394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.819701][ T6394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.942900][ T6513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 47.085439][ T6394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.120012][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.216187][ T6535] loop3: detected capacity change from 0 to 2048 [ 47.245761][ T6535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.292895][ T6394] veth0_vlan: entered promiscuous mode [ 47.305325][ T6394] veth1_vlan: entered promiscuous mode [ 47.311671][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.346615][ T6394] veth0_macvtap: entered promiscuous mode [ 47.350918][ T6394] veth1_macvtap: entered promiscuous mode [ 47.367729][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.369958][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.429391][ T6545] can0: slcan on ptm0. [ 47.439337][ T128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.439378][ T128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.439396][ T128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.481517][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.481531][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.513189][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.513199][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.525372][ T128] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.544013][ T4708] Bluetooth: hci5: command tx timeout [ 47.559348][ T6552] loop2: detected capacity change from 0 to 128 [ 47.573544][ T6552] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.605262][ T6556] netlink: 'syz.0.692': attribute type 27 has an invalid length. [ 47.606863][ T4710] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.798311][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.136129][ T6544] can0 (unregistered): slcan off ptm0. [ 48.327447][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 48.327464][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 48.327480][ T6612] netlink: 'syz.0.719': attribute type 14 has an invalid length. [ 48.389661][ T6618] loop3: detected capacity change from 0 to 1 [ 48.542809][ T6626] Bluetooth: hci0: load_link_keys: too big key_count value 38657 [ 48.643325][ T6638] loop1: detected capacity change from 0 to 2048 [ 48.655390][ T6638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.681461][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.688562][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.009557][ T6673] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 49.313116][ T4808] hid-sensor-hub 0003:1234:5678.0001: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 49.442711][ T6699] fido_id[6699]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.495881][ T6707] loop5: detected capacity change from 0 to 256 [ 49.623860][ T4708] Bluetooth: hci5: command tx timeout [ 49.725940][ T6722] loop5: detected capacity change from 0 to 4096 [ 49.737231][ T6722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.802890][ T6729] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 49.820066][ T6729] team0: Port device dummy0 added [ 49.840313][ T6729] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 49.864102][ T6729] team0: Port device dummy0 removed [ 49.882806][ T6722] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.771: corrupted inode contents [ 49.890551][ T41] bridge_slave_1: left allmulticast mode [ 49.890580][ T41] bridge_slave_1: left promiscuous mode [ 49.890983][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.893707][ T6722] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #15: comm syz.5.771: mark_inode_dirty error [ 49.903457][ T6722] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.771: corrupted inode contents [ 49.973344][ T6722] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.771: mark_inode_dirty error [ 49.980803][ T6722] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.771: corrupted inode contents [ 49.981002][ T6722] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.771: mark_inode_dirty error [ 49.981181][ T6722] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.771: corrupted inode contents [ 49.982428][ T6722] EXT4-fs error (device loop5): ext4_truncate:4721: inode #15: comm syz.5.771: mark_inode_dirty error [ 49.983018][ T6722] EXT4-fs error (device loop5) in ext4_setattr:6247: Corrupt filesystem [ 50.013144][ T6730] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.771: corrupted inode contents [ 50.100348][ T41] bridge_slave_0: left allmulticast mode [ 50.100367][ T41] bridge_slave_0: left promiscuous mode [ 50.100460][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.113148][ T6394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.371649][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.401130][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.470932][ T41] bond0 (unregistering): Released all slaves [ 50.572343][ T6774] ip_tables: iptables: counters copy to user failed while replacing table [ 50.618840][ T6781] loop5: detected capacity change from 0 to 1024 [ 50.631331][ T6781] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 50.650109][ T6781] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.796: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.650136][ T6781] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.650936][ T6781] __quota_error: 5 callbacks suppressed [ 50.650954][ T6781] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 50.650979][ T6781] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.796: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.650997][ T6781] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.652033][ T6781] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 50.652046][ T6781] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.796: Failed to acquire dquot type 0 [ 50.652058][ T6781] loop5: lost filesystem error report for type 5 error -117 [ 50.652253][ T6781] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 50.652263][ T6781] loop5: lost filesystem error report for type 5 error -117 [ 50.653645][ T6781] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.796: mark_inode_dirty error [ 50.653667][ T6781] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.653850][ C0] EXT4-fs (loop5): error count since last fsck: 5 [ 50.653858][ C0] EXT4-fs (loop5): initial error at time 50: ext4_map_blocks:790: inode 3: block 2 [ 50.653874][ C0] EXT4-fs (loop5): last error at time 50: ext4_evict_inode:269: inode 11 [ 50.654021][ T6781] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 50.654062][ T6781] EXT4-fs (loop5): 1 orphan inode deleted [ 50.667726][ T58] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.667748][ T58] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.668352][ T58] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 50.668369][ T58] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 0 [ 50.668378][ T58] loop5: lost filesystem error report for type 5 error -117 [ 50.682795][ T6781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.725607][ T6781] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.796: Invalid inode table block 1 in block_group 0 [ 50.726114][ T6781] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 50.726218][ T6781] EXT4-fs error (device loop5): ext4_setattr:6073: inode #2: comm syz.5.796: mark_inode_dirty error [ 50.755718][ T6394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.776087][ T14] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.776106][ T14] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.778101][ T14] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 50.778118][ T14] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0 [ 50.778129][ T14] loop5: lost filesystem error report for type 5 error -117 [ 50.779141][ T6394] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.779155][ T6394] loop5: lost filesystem error report for type 5 error -117 [ 50.779948][ T6394] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 50.779976][ T6394] loop5: lost filesystem error report for type 5 error -117 [ 50.780087][ T6394] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 50.780103][ T6394] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.780203][ T6394] loop5: lost filesystem error report for type 5 error -117 [ 51.168821][ T6821] loop3: detected capacity change from 0 to 512 [ 51.181708][ T6821] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.808: inode has both inline data and extents flags [ 51.181732][ T6821] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.181846][ T6821] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.808: couldn't read orphan inode 15 (err -117) [ 51.181859][ T6821] loop3: lost filesystem error report for type 5 error -117 [ 51.182358][ T6821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.182893][ T6819] loop0: detected capacity change from 0 to 4096 [ 51.204251][ T6819] EXT4-fs: Ignoring removed orlov option [ 51.205074][ T6819] EXT4-fs (loop0): Test dummy encryption mode enabled [ 51.234453][ T6819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.325995][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.329237][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.430451][ T4396] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.481322][ T6837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.689811][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.690003][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.705938][ T4708] Bluetooth: hci5: command tx timeout [ 52.052237][ T6892] loop1: detected capacity change from 0 to 4096 [ 52.072325][ T6892] EXT4-fs (loop1): Test dummy encryption mode enabled [ 52.077131][ T6892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.111293][ T6897] loop0: detected capacity change from 0 to 1024 [ 52.131144][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.142121][ T6897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.226440][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.365507][ T6915] loop1: detected capacity change from 0 to 512 [ 52.379214][ T6915] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 52.474965][ T6915] EXT4-fs (loop1): invalid journal inode [ 52.475027][ T6915] EXT4-fs (loop1): can't get journal size [ 52.489322][ T6915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 52.489502][ T6915] System zones: 1-12, 13-13 [ 52.490806][ T6915] EXT4-fs (loop1): 1 truncate cleaned up [ 52.491427][ T6915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.512196][ T6915] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 52.534482][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.539509][ T6924] loop2: detected capacity change from 0 to 128 [ 52.540218][ T6924] Invalid source name [ 52.540226][ T6924] UBIFS error (pid: 6924): cannot open "/dev/loop2", error -22 [ 52.616807][ T4396] 8021q: adding VLAN 0 to HW filter on device eth2 [ 52.837667][ T6953] loop5: detected capacity change from 0 to 256 [ 52.948215][ T6958] loop3: detected capacity change from 0 to 1024 [ 52.979252][ T41] hsr_slave_0: left promiscuous mode [ 52.981991][ T6958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 52.983613][ T41] hsr_slave_1: left promiscuous mode [ 53.157561][ T30] audit: type=1326 audit(53.130:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6973 comm="syz.0.864" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa71788e8 code=0x0 [ 53.198954][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.198978][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.255555][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 53.270063][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.270078][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.497812][ T41] veth1_macvtap: left promiscuous mode [ 53.497873][ T41] veth0_macvtap: left promiscuous mode [ 53.497931][ T41] veth1_vlan: left promiscuous mode [ 53.497976][ T41] veth0_vlan: left promiscuous mode [ 53.784102][ T4708] Bluetooth: hci5: command tx timeout [ 53.816595][ T41] team0 (unregistering): Port device team_slave_1 removed [ 53.827476][ T41] team0 (unregistering): Port device team_slave_0 removed [ 53.906175][ T4396] 8021q: adding VLAN 0 to HW filter on device eth3 [ 54.093030][ T7014] loop3: detected capacity change from 0 to 512 [ 54.093371][ T7014] EXT4-fs: Ignoring removed i_version option [ 54.093389][ T7014] EXT4-fs: Ignoring removed bh option [ 54.106022][ T7013] netlink: 60 bytes leftover after parsing attributes in process `syz.2.876'. [ 54.125573][ T7013] netlink: 60 bytes leftover after parsing attributes in process `syz.2.876'. [ 54.131117][ T7014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.199995][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 54.472754][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.521213][ T4396] 8021q: adding VLAN 0 to HW filter on device eth0 [ 54.679913][ T7059] loop2: detected capacity change from 0 to 512 [ 54.702887][ T7059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.714466][ T7059] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 2147500033 (only 1 groups) [ 54.733516][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.000329][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 55.007137][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 55.007150][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 55.385107][ T7113] Bluetooth: hci0: unsupported parameter 4354 [ 55.385126][ T7113] Bluetooth: hci0: unsupported parameter 8192 [ 55.385136][ T7113] Bluetooth: hci0: unsupported parameter 4354 [ 55.385145][ T7113] Bluetooth: hci0: unsupported parameter 8192 [ 55.487305][ T7121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.920'. [ 56.305125][ T7189] set_capacity_and_notify: 1 callbacks suppressed [ 56.305138][ T7189] loop1: detected capacity change from 0 to 4096 [ 56.317511][ T7189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.317522][ T7189] EXT4-fs (loop1): Test dummy encryption mode enabled [ 56.319592][ T7189] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 56.319648][ T7189] System zones: 0-5 [ 56.321144][ T7189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.380598][ T7189] fscrypt: AES-256-XTS using blk-crypto-fallback [ 56.462297][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.650156][ T7205] loop2: detected capacity change from 0 to 2048 [ 56.707188][ T7205] loop2: p1 < > p4 < > [ 56.707203][ T7205] loop2: partition table partially beyond EOD, truncated [ 56.712537][ T7205] loop2: p4 start 42180 is beyond EOD, truncated [ 56.734310][ T4340] loop2: p1 < > p4 < > [ 56.734321][ T4340] loop2: partition table partially beyond EOD, truncated [ 56.735114][ T4340] loop2: p4 start 42180 is beyond EOD, truncated [ 56.823295][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 56.908684][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'. [ 56.948260][ T7226] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 56.983069][ T7234] loop2: detected capacity change from 0 to 512 [ 57.019110][ T7234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.046762][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.105320][ T7252] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 57.105341][ T7252] openvswitch: netlink: Actions may not be safe on all matching packets [ 57.113905][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 57.150530][ T7259] loop2: detected capacity change from 0 to 512 [ 57.309347][ T7289] ip_tables: iptables: counters copy to user failed while replacing table [ 57.378479][ T7305] @: renamed from veth0 (while UP) [ 57.459253][ T7324] loop2: detected capacity change from 0 to 512 [ 57.469284][ T7324] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.493632][ T7324] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1003: invalid indirect mapped block 4294967295 (level 0) [ 57.493657][ T7324] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 57.493910][ C0] EXT4-fs (loop2): initial error at time 57: ext4_free_branches:1023: inode 16 [ 57.493941][ C0] EXT4-fs (loop2): last error at time 57: ext4_free_branches:1023: inode 16 [ 57.524327][ T7324] EXT4-fs (loop2): Remounting filesystem read-only [ 57.524508][ T7324] EXT4-fs (loop2): 1 orphan inode deleted [ 57.524519][ T7324] EXT4-fs (loop2): 1 truncate cleaned up [ 57.554241][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 57.612959][ T7342] loop1: detected capacity change from 0 to 512 [ 57.671461][ T7342] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.1012: corrupted xattr block 6: invalid header [ 57.671717][ T7342] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.1012: corrupted xattr block 6: invalid header [ 57.671869][ T7342] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.1012: corrupted xattr block 6: invalid header [ 57.672010][ T7342] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.1012: corrupted xattr block 6: invalid header [ 57.694996][ T7342] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.1012: corrupted xattr block 6: invalid header [ 57.697855][ T7342] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 57.704647][ T4796] sony 0005:054C:03D5.0002: UNIQ does not contain a MAC address; duplicate check skipped [ 57.708117][ T4796] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0002/input/input3 [ 57.722856][ T4796] sony 0005:054C:03D5.0002: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 57.761897][ T4711] EXT4-fs warning (device loop1): ext4_rmdir:3194: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 57.762259][ T4711] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 57.762282][ T4711] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.767223][ T4711] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 57.767690][ T4711] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 57.772823][ T4711] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 57.774876][ T7355] fido_id[7355]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.775493][ T4711] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 57.779807][ T4711] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 57.779830][ T4711] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.782889][ T4711] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 58.046509][ T7389] loop3: detected capacity change from 0 to 2048 [ 58.058915][ T7389] EXT4-fs: Ignoring removed i_version option [ 58.221662][ T7409] loop1: detected capacity change from 0 to 8 [ 58.229281][ T7409] Filesystem uses "lzo" compression. This is not supported [ 58.398212][ T7417] loop1: detected capacity change from 0 to 128 [ 58.417770][ T7422] loop5: detected capacity change from 0 to 1024 [ 58.576584][ T7445] pimreg3: entered allmulticast mode [ 58.686939][ T7466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.686963][ T7466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.770245][ T7479] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 58.770245][ T7479] Please contact the netfilter-devel mailing list or update your nftables rules. [ 59.172656][ T7551] __nla_validate_parse: 4 callbacks suppressed [ 59.172672][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 59.172685][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1106'. [ 59.183160][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1107'. [ 59.241236][ T7564] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 59.260502][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1116'. [ 59.325872][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 59.421479][ T7603] vlan2: entered promiscuous mode [ 59.421495][ T7603] bridge0: entered promiscuous mode [ 59.500562][ T7620] EXT4-fs: Ignoring removed nobh option [ 59.502341][ T7620] EXT4-fs (loop1): 1 truncate cleaned up [ 59.509782][ T7620] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1141: invalid indirect mapped block 4294901760 (level 0) [ 59.509812][ T7620] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.510922][ T7620] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1141: invalid indirect mapped block 4294967295 (level 1) [ 59.510968][ T7620] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.511125][ T7620] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1141: invalid indirect mapped block 65535 (level 2) [ 59.511154][ T7620] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.552869][ T7624] EXT4-fs: Ignoring removed i_version option [ 59.616433][ T7633] tipc: Enabling of bearer rejected, failed to enable media [ 59.932069][ T7693] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.999046][ T7699] EXT4-fs (loop2): Test dummy encryption mode enabled [ 60.031481][ T7710] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1173: bg 0: block 7: invalid block bitmap [ 60.031503][ T7710] loop3: lost filesystem error report for type 5 error -117 [ 60.033908][ C0] EXT4-fs (loop3): initial error at time 60: ext4_validate_block_bitmap:436 [ 60.033931][ C0] EXT4-fs (loop3): last error at time 60: ext4_validate_block_bitmap:436 [ 60.050834][ T7710] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 60.050852][ T7710] loop3: lost filesystem error report for type 5 error -117 [ 60.052455][ T7710] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.1173: corrupted xattr block 95: invalid header [ 60.052484][ T7710] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.062471][ T7710] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 60.062519][ T7710] EXT4-fs (loop3): 1 orphan inode deleted [ 60.065473][ T1009] cfg80211: failed to load regulatory.db [ 60.146052][ T7721] Injecting memory failure for pfn 0x13935b at process virtual address 0x20000000 [ 60.159418][ T7721] Memory failure: 0x13935b: Sending SIGBUS to syz.5.1175:7721 due to hardware memory corruption [ 60.159464][ T7721] Memory failure: 0x13935b: recovery action for dirty LRU page: Recovered [ 60.159486][ T7721] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20001000 [ 60.159578][ T7721] Memory failure: 0x216bf1: Sending SIGBUS to syz.5.1175:7721 due to hardware memory corruption [ 60.159605][ T7721] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 60.161978][ T7699] EXT4-fs: Ignoring removed nobh option [ 60.162005][ T7699] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 60.449241][ T7770] netlink: 'syz.3.1194': attribute type 10 has an invalid length. [ 60.469347][ T7770] team0: Port device dummy0 added [ 60.471134][ T7768] gretap0: entered promiscuous mode [ 60.471165][ T7768] vlan3: entered promiscuous mode [ 60.484198][ T7770] netlink: 'syz.3.1194': attribute type 10 has an invalid length. [ 60.540419][ T7770] team0: Port device dummy0 removed [ 60.628401][ T7785] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 60.672151][ T7789] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.1212: inode has both inline data and extents flags [ 60.672181][ T7789] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.672315][ T7789] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1212: couldn't read orphan inode 15 (err -117) [ 60.672333][ T7789] loop0: lost filesystem error report for type 5 error -117 [ 60.675612][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 60.675626][ C0] EXT4-fs (loop0): initial error at time 60: ext4_orphan_get:1403: inode 15 [ 60.675641][ C0] EXT4-fs (loop0): last error at time 60: ext4_orphan_get:1408 [ 60.734665][ T7804] random: crng reseeded on system resumption [ 60.921465][ T7836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.038137][ T7866] xt_policy: too many policy elements [ 61.038205][ T7865] ip_tables: iptables: counters copy to user failed while replacing table [ 61.070565][ T7870] EXT4-fs: Ignoring removed bh option [ 61.071471][ T7870] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 61.253453][ T7908] ip6gre1: entered allmulticast mode [ 61.257883][ T6767] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.258319][ T7909] ext4: Unknown parameter 'obj_type' [ 61.451388][ T7945] set_capacity_and_notify: 14 callbacks suppressed [ 61.451401][ T7945] loop1: detected capacity change from 0 to 256 [ 61.518944][ T7956] loop3: detected capacity change from 0 to 256 [ 61.521385][ T7956] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.673397][ T7982] loop2: detected capacity change from 0 to 4096 [ 61.710967][ T7982] EXT4-fs: Ignoring removed nobh option [ 61.710980][ T7982] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.711006][ T7982] EXT4-fs (loop2): stripe (14845) is not aligned with cluster size (16), stripe is disabled [ 61.736694][ T7982] EXT4-fs error (device loop2): __ext4_remount:6872: comm syz.2.1294: Abort forced by user [ 61.736842][ T7982] EXT4-fs (loop2): Remounting filesystem read-only [ 61.736850][ T7982] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.935172][ T8027] loop3: detected capacity change from 0 to 128 [ 61.951215][ T8029] loop2: detected capacity change from 0 to 512 [ 61.956293][ T8029] EXT4-fs (loop2): Test dummy encryption mode enabled [ 61.967205][ T8029] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1315: inode has both inline data and extents flags [ 61.967236][ T8029] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.967374][ T8029] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1315: couldn't read orphan inode 15 (err -117) [ 61.967390][ T8029] loop2: lost filesystem error report for type 5 error -117 [ 62.020747][ T8037] loop3: detected capacity change from 0 to 512 [ 62.031558][ T8037] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.1317: inode has both inline data and extents flags [ 62.031783][ T8037] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.032397][ T8037] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1317: couldn't read orphan inode 15 (err -117) [ 62.032421][ T8037] loop3: lost filesystem error report for type 5 error -117 [ 62.082385][ T8046] loop5: detected capacity change from 0 to 512 [ 62.088040][ T8046] EXT4-fs: Ignoring removed i_version option [ 62.088057][ T8046] EXT4-fs: Ignoring removed bh option [ 62.108718][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1322'. [ 62.109457][ T8050] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1323'. [ 62.160815][ T8055] Zero length message leads to an empty skb [ 62.258043][ T8074] loop3: detected capacity change from 0 to 512 [ 62.265487][ T8074] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.269152][ T8074] EXT4-fs (loop3): 1 truncate cleaned up [ 62.287888][ T8081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.291825][ T8074] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1341: inode #12: block 7: comm syz.3.1334: path /313/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 62.292045][ T8074] EXT4-fs (loop3): Remounting filesystem read-only [ 62.330376][ T8085] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1350'. [ 62.330399][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1350'. [ 62.330409][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 62.362023][ T30] audit: type=1326 audit(62.330:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.3.1342" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad788e8 code=0x0 [ 62.403217][ T4708] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 62.488266][ T8117] loop5: detected capacity change from 0 to 128 [ 62.491399][ T8117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 62.491440][ T8117] System zones: 1-3, 19-19, 35-36 [ 62.504441][ T8117] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 62.570441][ T8126] loop5: detected capacity change from 0 to 8 [ 62.590995][ T8126] SQUASHFS error: Failed to read block 0x4de: -5 [ 62.591033][ T8126] SQUASHFS error: Failed to read block 0x4de: -5 [ 62.687787][ T8144] netlink: 'syz.1.1367': attribute type 1 has an invalid length. [ 62.898693][ T8166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.898708][ T8166] EXT4-fs (loop5): Test dummy encryption mode enabled [ 62.899443][ T8166] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 62.899474][ T8166] System zones: 0-5 [ 63.316709][ T8221] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.318070][ T8221] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1403: bg 0: block 384: padding at end of block bitmap is not set [ 63.318087][ T8221] loop1: lost filesystem error report for type 5 error -117 [ 63.318263][ T8221] EXT4-fs (loop1): Remounting filesystem read-only [ 63.318333][ T8221] EXT4-fs (loop1): 1 truncate cleaned up [ 63.336379][ T8228] tipc: Enabling of bearer rejected, failed to enable media [ 63.369930][ T8230] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.442100][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.442140][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.442168][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.442182][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.504098][ T14] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.784968][ T8308] mmap: syz.1.1437 (8308) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.810510][ T8315] vlan3: entered promiscuous mode [ 63.810526][ T8315] batadv0: entered promiscuous mode [ 63.810624][ T8315] vlan3: entered allmulticast mode [ 63.810632][ T8315] batadv0: entered allmulticast mode [ 63.850188][ T8321] IPv6: NLM_F_REPLACE set, but no existing node found! [ 63.895295][ T8328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.898323][ T8329] EXT4-fs mount: 56 callbacks suppressed [ 63.898335][ T8329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.899271][ T8328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.924636][ T8334] Bluetooth: MGMT ver 1.23 [ 63.931251][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.968185][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.269697][ T8394] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 64.269715][ T8394] __nla_validate_parse: 2 callbacks suppressed [ 64.269724][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'. [ 64.361473][ T8410] [U] [ 64.412971][ T8418] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 64.505113][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.505144][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.629267][ T8458] tipc: Started in network mode [ 64.629289][ T8458] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 64.629328][ T8458] tipc: Enabled bearer , priority 0 [ 64.684077][ T8464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.684254][ T8464] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.685864][ T8464] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 64.685977][ T8464] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.697775][ T8464] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 3: comm syz.2.1504: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.697794][ T8464] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 64.698240][ T8464] Quota error (device loop2): write_blk: dquota write failed [ 64.698252][ T8464] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3 [ 64.698293][ T8464] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 64.698314][ T8464] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1504: Failed to acquire dquot type 0 [ 64.698324][ T8464] loop2: lost filesystem error report for type 5 error -117 [ 64.698461][ T8464] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 3: comm syz.2.1504: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.698474][ T8464] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 64.698580][ T8464] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 64.698597][ T8464] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1504: Failed to acquire dquot type 0 [ 64.698607][ T8464] loop2: lost filesystem error report for type 5 error -117 [ 64.698717][ T8464] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.1504: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.698729][ T8464] loop2: lost filesystem error report for type 5 error -117 [ 64.699080][ T8464] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 3: comm syz.2.1504: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.699095][ T8464] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 64.699487][ T8464] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 64.699506][ T8464] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1504: Failed to acquire dquot type 0 [ 64.699515][ T8464] loop2: lost filesystem error report for type 5 error -117 [ 64.699644][ T8464] EXT4-fs (loop2): 1 orphan inode deleted [ 64.707141][ T8464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.794127][ T8464] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 64.812597][ T8475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.852810][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.869067][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.934701][ T8491] 9p: Unknown access argument t [ 64.934701][ T8491] : -22 [ 64.952317][ T8492] EXT4-fs: Ignoring removed i_version option [ 64.986448][ T8492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.998353][ T8497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 64.998386][ T8497] System zones: 1-12 [ 64.998675][ T8497] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.1519: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 64.999380][ T8497] EXT4-fs (loop3): 1 orphan inode deleted [ 65.000727][ T8497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.033476][ T8497] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6542: inode #18: comm syz.3.1519: bad extra_isize 6 (inode size 256) [ 65.049607][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.068182][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.095248][ T8512] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.102600][ T8515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.124516][ T8517] CUSE: unknown device info "" [ 65.124526][ T8517] CUSE: unknown device info "" [ 65.124532][ T8517] CUSE: unknown device info "" [ 65.124537][ T8517] CUSE: unknown device info "" [ 65.124542][ T8517] CUSE: unknown device info "" [ 65.124546][ T8517] CUSE: unknown device info "" [ 65.124549][ T8517] CUSE: unknown device info "" [ 65.124553][ T8517] CUSE: unknown device info "" [ 65.124557][ T8517] CUSE: unknown device info "@" [ 65.124561][ T8517] CUSE: unknown device info "" [ 65.124565][ T8517] CUSE: unknown device info "" [ 65.124568][ T8517] CUSE: unknown device info "#" [ 65.124583][ T8517] CUSE: unknown device info "" [ 65.124587][ T8517] CUSE: unknown device info "" [ 65.124591][ T8517] CUSE: unknown device info "" [ 65.124595][ T8517] CUSE: DEVNAME unspecified [ 65.164435][ T8515] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.1524: corrupted xattr block 6: invalid header [ 65.172279][ T8515] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.1524: corrupted xattr block 6: invalid header [ 65.172494][ T8515] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.1524: corrupted xattr block 6: invalid header [ 65.172660][ T8515] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.1524: corrupted xattr block 6: invalid header [ 65.173507][ T8515] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.1524: corrupted xattr block 6: invalid header [ 65.186267][ T8515] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 65.202028][ T8527] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1531'. [ 65.202048][ T8527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1531'. [ 65.241342][ T4706] EXT4-fs warning (device loop0): ext4_rmdir:3194: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 65.241406][ T4706] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 65.241425][ T4706] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 65.242908][ T4706] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 65.243137][ T4706] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 65.243305][ T4706] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 65.246272][ T4706] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 65.254076][ T1009] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #15: comm kworker/1:2: corrupted xattr block 33: invalid header [ 65.254104][ T1009] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.263935][ T1009] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 65.276831][ T8534] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 65.278648][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.278856][ T8534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11c, mo2=0102] [ 65.278952][ T8534] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 65.279492][ T8534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.322429][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.348927][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 65.413547][ T8550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.461761][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.535396][ T8577] netlink: 'syz.5.1554': attribute type 3 has an invalid length. [ 65.612313][ T8589] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 65.622020][ T8589] EXT4-fs (loop5): 1 truncate cleaned up [ 65.622467][ T8589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.623895][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 65.624243][ T4808] tipc: Node number set to 11578026 [ 65.650109][ T8589] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.1560: invalid fast symlink length 39 [ 65.695322][ T6394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.704830][ T8606] Bluetooth: hci0: unsupported parameter 5135 [ 65.704842][ T8606] Bluetooth: hci0: unsupported parameter 8192 [ 65.704850][ T8606] Bluetooth: hci0: unsupported parameter 5135 [ 65.704857][ T8606] Bluetooth: hci0: unsupported parameter 8192 [ 65.945593][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 65.945657][ T4708] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 65.997502][ T8634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.020077][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.288750][ T8680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.367566][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.486737][ T4796] wacom 0003:056A:003F.0003: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 66.513178][ T8713] fido_id[8713]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.602709][ T8735] set_capacity_and_notify: 20 callbacks suppressed [ 66.602721][ T8735] loop0: detected capacity change from 0 to 256 [ 66.694208][ T8745] netlink: 'syz.5.1619': attribute type 6 has an invalid length. [ 66.711362][ T8751] loop0: detected capacity change from 0 to 512 [ 66.715885][ T8751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.723213][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1622'. [ 66.729200][ T8751] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.1621: inode has both inline data and extents flags [ 66.729226][ T8751] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.738826][ T8751] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1621: couldn't read orphan inode 15 (err -117) [ 66.738843][ T8751] fserror_report: 1 callbacks suppressed [ 66.738849][ T8751] loop0: lost filesystem error report for type 5 error -117 [ 66.739387][ T8751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.795850][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.802858][ T8764] loop5: detected capacity change from 0 to 512 [ 66.808133][ T8764] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.830014][ T8764] EXT4-fs (loop5): orphan cleanup on readonly fs [ 66.830027][ T8764] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 66.837328][ T8764] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1627: attempt to clear invalid blocks 2 len 1 [ 66.837355][ T8764] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.839334][ T8764] EXT4-fs (loop5): Remounting filesystem read-only [ 66.839650][ T8764] EXT4-fs (loop5): 1 truncate cleaned up [ 66.840085][ T8764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.855553][ T6394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.864963][ T8770] ip_tables: iptables: counters copy to user failed while replacing table [ 66.868747][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1630'. [ 66.868764][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1630'. [ 66.868774][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 66.881672][ T8773] loop1: detected capacity change from 0 to 512 [ 66.890737][ T8773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.900948][ T8773] EXT4-fs (loop1): 1 truncate cleaned up [ 66.901395][ T8773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.922494][ T8773] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 66.923306][ T8773] EXT4-fs (loop1): Remounting filesystem read-only [ 66.923376][ T8773] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 66.952609][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.013485][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1642'. [ 67.029697][ T8797] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 67.075677][ T8807] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Cc80(3նi" [ 67.075688][ T8807] CUSE: unknown device info "ٮ,ًqd" [ 67.075692][ T8807] CUSE: unknown device info "3ܟ,̘" [ 67.075697][ T8807] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 67.075701][ T8807] CUSE: unknown device info " [ 67.075701][ T8807] fzXS! [ 67.075701][ T8807] Axj" [ 67.075706][ T8807] CUSE: unknown device info " xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 67.075711][ T8807] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 67.075716][ T8807] CUSE: unknown device info "n_h b rejected, failed to enable media [ 71.357180][ T9254] team0: entered allmulticast mode [ 71.357192][ T9254] team_slave_0: entered allmulticast mode [ 71.357204][ T9254] team_slave_1: entered allmulticast mode [ 71.378568][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 71.610774][ T9280] set_capacity_and_notify: 9 callbacks suppressed [ 71.610787][ T9280] loop2: detected capacity change from 0 to 512 [ 71.621038][ T9279] tipc: Enabling of bearer rejected, failed to enable media [ 71.660551][ T9280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.710628][ T9288] Injecting memory failure for pfn 0x1304dc at process virtual address 0x20001000 [ 71.722399][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.746229][ T9288] Memory failure: 0x1304dc: corrupted page was clean: dropped without side effects [ 71.746308][ T9288] Memory failure: 0x1304dc: recovery action for clean LRU page: Recovered [ 71.746323][ T9288] Injecting memory failure for pfn 0x11cf47 at process virtual address 0x20002000 [ 71.746552][ T9288] Memory failure: 0x11cf47: corrupted page was clean: dropped without side effects [ 71.746579][ T9288] Memory failure: 0x11cf47: recovery action for clean LRU page: Recovered [ 71.746598][ T9288] Injecting memory failure for pfn 0x11cf46 at process virtual address 0x20003000 [ 71.746627][ T9288] Memory failure: 0x11cf46: corrupted page was clean: dropped without side effects [ 71.746648][ T9288] Memory failure: 0x11cf46: recovery action for clean LRU page: Recovered [ 71.984571][ T9308] loop3: detected capacity change from 0 to 8 [ 72.077116][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 72.098433][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.099831][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.240049][ T9323] loop1: detected capacity change from 0 to 512 [ 72.245684][ T9323] EXT4-fs: Ignoring removed oldalloc option [ 72.248808][ T9323] EXT4-fs (loop1): Test dummy encryption mode enabled [ 72.285535][ T9323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.305797][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.666227][ T9356] netlink: 'syz.5.1897': attribute type 1 has an invalid length. [ 72.946547][ T9378] loop1: detected capacity change from 0 to 1024 [ 72.955452][ T9378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.955478][ T9378] EXT4-fs: Ignoring removed bh option [ 72.999016][ T9378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a04ec01c, mo2=0002] [ 72.999068][ T9378] System zones: 0-1, 3-12 [ 72.999605][ T9378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.059698][ T9384] netlink: 810 bytes leftover after parsing attributes in process `syz.0.1910'. [ 73.095806][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.313291][ T9406] loop2: detected capacity change from 0 to 256 [ 73.413290][ T9415] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1924'. [ 73.413312][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1924'. [ 73.516357][ T9427] Bluetooth: hci0: unsupported parameter 5135 [ 73.516373][ T9427] Bluetooth: hci0: unsupported parameter 8192 [ 73.516382][ T9427] Bluetooth: hci0: unsupported parameter 5135 [ 73.516391][ T9427] Bluetooth: hci0: unsupported parameter 8192 [ 73.721934][ T9443] loop1: detected capacity change from 0 to 1024 [ 73.722325][ T9443] EXT4-fs: Ignoring removed orlov option [ 73.737805][ T9443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.760569][ T9443] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.1936: bit already cleared for inode 15 [ 73.768380][ T9446] pim6reg: entered allmulticast mode [ 73.788001][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.796181][ T9446] pim6reg: left allmulticast mode [ 74.017261][ T9458] loop2: detected capacity change from 0 to 4096 [ 74.017609][ T9458] EXT4-fs: Ignoring removed orlov option [ 74.025475][ T9458] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.025487][ T9458] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.091865][ T9458] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0002] [ 74.094238][ T9458] System zones: 0-5 [ 74.099921][ T9458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.172643][ T9458] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 74.176432][ T9458] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1942: bg 0: block 98: padding at end of block bitmap is not set [ 74.179848][ T9458] EXT4-fs (loop2): Remounting filesystem read-only [ 74.212915][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.221316][ T6767] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 74.221339][ T6767] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 74.743828][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.810968][ T9498] loop2: detected capacity change from 0 to 1024 [ 74.835215][ T9498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.891496][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.253662][ T9541] Injecting memory failure for pfn 0x13c1b0 at process virtual address 0x20000000 [ 75.264365][ T9541] Memory failure: 0x13c1b0: Sending SIGBUS to syz.1.1980:9541 due to hardware memory corruption [ 75.264408][ T9541] Memory failure: 0x13c1b0: recovery action for dirty LRU page: Recovered [ 75.264428][ T9541] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20001000 [ 75.264444][ T9541] Memory failure: 0x216bf1: Sending SIGBUS to syz.1.1980:9541 due to hardware memory corruption [ 75.264453][ T9541] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 75.468860][ T9557] loop2: detected capacity change from 0 to 256 [ 75.583056][ T9561] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1988'. [ 75.684054][ T9574] netlink: 'syz.3.1995': attribute type 1 has an invalid length. [ 75.846735][ T9588] loop1: detected capacity change from 0 to 2048 [ 75.858609][ T9590] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.867672][ T9590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.867868][ T9590] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.869549][ T9590] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.2002: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 75.869578][ T9590] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.869870][ T9590] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2002: couldn't read orphan inode 11 (err -117) [ 75.869883][ T9590] loop0: lost filesystem error report for type 5 error -117 [ 75.870388][ T9590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.981124][ T9588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.201637][ T9608] EXT4-fs: Ignoring removed orlov option [ 76.212315][ T9611] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.254086][ T9611] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.259955][ T9611] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.260113][ T9611] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.422065][ T9626] binder: 9625:9626 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.608685][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'. [ 76.636520][ T9640] bond1 (unregistering): Released all slaves [ 76.870503][ T9661] gretap0: entered promiscuous mode [ 76.870559][ T9661] vlan3: entered promiscuous mode [ 76.885392][ T9663] set_capacity_and_notify: 5 callbacks suppressed [ 76.885401][ T9663] loop0: detected capacity change from 0 to 512 [ 76.890663][ T9663] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.904775][ T9663] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.904786][ T9663] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 76.907123][ T9663] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2034: attempt to clear invalid blocks 2 len 1 [ 76.907145][ T9663] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 76.908513][ T9663] EXT4-fs (loop0): Remounting filesystem read-only [ 76.908772][ T9663] EXT4-fs (loop0): 1 truncate cleaned up [ 77.091296][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 77.297753][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.297796][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.297826][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.297840][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.411928][ T9704] Bluetooth: hci0: unsupported parameter 5135 [ 77.411943][ T9704] Bluetooth: hci0: unsupported parameter 8192 [ 77.411952][ T9704] Bluetooth: hci0: unsupported parameter 5135 [ 77.411960][ T9704] Bluetooth: hci0: unsupported parameter 8192 [ 77.773446][ T9744] vhci_hcd vhci_hcd.2: invalid port number 96 [ 77.773463][ T9744] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 77.854036][ T9755] loop5: detected capacity change from 0 to 512 [ 77.963595][ T9766] loop1: detected capacity change from 0 to 512 [ 77.968129][ T9766] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.982983][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 78.074332][ T9775] loop3: detected capacity change from 0 to 512 [ 78.145218][ T9780] loop2: detected capacity change from 0 to 256 [ 78.247744][ T9775] xt_hashlimit: size too large, truncated to 1048576 [ 78.247787][ T9775] xt_hashlimit: max too large, truncated to 1048576 [ 78.614252][ T9818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 78.933900][ T9840] PKCS8: Unsupported PKCS#8 version [ 78.949398][ T9845] loop1: detected capacity change from 0 to 2048 [ 79.002145][ T9847] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 79.030479][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 79.030801][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 117 [ 79.030819][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.030819][ T12] [ 79.103535][ T9858] loop1: detected capacity change from 0 to 8 [ 79.314015][ T9873] loop1: detected capacity change from 0 to 512 [ 79.348203][ T9873] EXT4-fs (loop1): 1 truncate cleaned up [ 79.451706][ T4707] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 79.532944][ T9891] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 79.601377][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2142'. [ 79.633644][ T9899] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2140'. [ 79.711531][ T9903] netlink: 'syz.5.2145': attribute type 5 has an invalid length. [ 79.793770][ T9905] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2143'. [ 79.802308][ T9916] netlink: 'syz.2.2151': attribute type 1 has an invalid length. [ 79.802321][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2151'. [ 79.870437][ T9920] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2143'. [ 79.948421][ T9928] loop3: detected capacity change from 0 to 512 [ 79.967774][ T9928] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.2156: corrupted in-inode xattr: invalid ea_ino [ 79.967792][ T9928] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.967896][ T9928] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2156: couldn't read orphan inode 15 (err -117) [ 79.967909][ T9928] loop3: lost filesystem error report for type 5 error -117 [ 80.186578][ T9939] loop3: detected capacity change from 0 to 512 [ 80.201494][ T9939] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.208109][ T9939] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.211658][ T9939] EXT4-fs (loop3): 1 truncate cleaned up [ 80.321344][ T9939] EXT4-fs error (device loop3): __ext4_remount:6872: comm syz.3.2161: Abort forced by user [ 80.322020][ T9939] EXT4-fs (loop3): Remounting filesystem read-only [ 80.322031][ T9939] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 80.522876][ T9958] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 80.555199][ T9958] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.2169: iget: bad i_size value: 360287970189639680 [ 80.555221][ T9958] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.557509][ T9958] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2169: couldn't read orphan inode 15 (err -117) [ 80.557530][ T9958] loop1: lost filesystem error report for type 5 error -117 [ 80.583492][ T9958] EXT4-fs error (device loop1): ext4_readdir:280: inode #12: block 13: comm syz.1.2169: path /493/file0/file0: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=12, rec_len=4096, size=4096 fake=1 [ 80.710120][ T9963] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 80.955595][ T9987] nbd: must specify an index to disconnect [ 81.003250][ T9994] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 81.112237][T10003] Injecting memory failure for pfn 0x13ea2c at process virtual address 0x20000000 [ 81.122966][T10003] Memory failure: 0x13ea2c: Sending SIGBUS to syz.3.2186:10003 due to hardware memory corruption [ 81.123003][T10003] Memory failure: 0x13ea2c: recovery action for dirty LRU page: Recovered [ 81.543310][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2204'. [ 81.543331][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 81.543348][T10036] netlink: 'syz.0.2204': attribute type 14 has an invalid length. [ 81.543357][T10036] netlink: 'syz.0.2204': attribute type 13 has an invalid length. [ 81.674864][T10051] netlink: 'syz.3.2213': attribute type 2 has an invalid length. [ 81.674882][T10051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2213'. [ 87.953760][ C0] sched: DL replenish lagged too much [ 88.837918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 92.025253][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.864675][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.406231][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.416440][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.907013][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 51s! [ 150.907054][ C0] Showing busy workqueues and worker pools: [ 150.907059][ C0] workqueue events: flags=0x100 [ 150.907099][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 150.907116][ C0] in-flight: 4721:reg_todo for 64s [ 150.907136][ C0] pending: 4*nsim_dev_hwstats_traffic_work, psi_avgs_work [ 150.907160][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=13 refcnt=14 [ 150.907176][ C0] pending: 2*psi_avgs_work, 2*nsim_dev_hwstats_traffic_work, ovs_dp_masks_rebalance, rht_deferred_worker, 2*ovs_dp_masks_rebalance, psi_avgs_work, free_obj_work, key_garbage_collector, 2*psi_avgs_work [ 150.907243][ C0] workqueue events_unbound: flags=0x2 [ 150.907247][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=20 refcnt=21 [ 150.907261][ C0] in-flight: 40:cfg80211_wiphy_work for 66s cfg80211_wiphy_work ,3056:cfg80211_wiphy_work for 67s cfg80211_wiphy_work ,1178:cfg80211_wiphy_work for 51s ,6767:cfg80211_wiphy_work for 67s cfg80211_wiphy_work [ 150.907329][ C0] pending: 2*nsim_dev_trap_report_work, cfg80211_wiphy_work, 2*macvlan_process_broadcast, nsim_dev_trap_report_work, macvlan_process_broadcast, toggle_allocation_gate, nsim_dev_trap_report_work, 2*macvlan_process_broadcast, 2*nsim_dev_trap_report_work [ 150.907392][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=15 refcnt=16 [ 150.907405][ C0] in-flight: 12:cfg80211_wiphy_work for 67s cfg80211_wiphy_work ,128:cfg80211_wiphy_work for 62s cfg80211_wiphy_work ,41:cfg80211_wiphy_work for 68s cfg80211_wiphy_work ,58:cfg80211_wiphy_work for 58s ,10066:cfg80211_wiphy_work for 3s ,14:cfg80211_wiphy_work for 60s [ 150.907491][ C0] pending: cfg80211_wiphy_work, macvlan_process_broadcast, cfg80211_wiphy_work, crng_reseed, flush_memcg_stats_dwork, cfg80211_wiphy_work [ 150.907532][ C0] workqueue events_power_efficient: flags=0x82 [ 150.907536][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=5 refcnt=6 [ 150.907549][ C0] pending: crda_timeout_work, wg_ratelimiter_gc_entries, fb_flashcursor, check_lifetime, neigh_managed_work [ 150.907592][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=7 refcnt=8 [ 150.907605][ C0] pending: neigh_periodic_work, do_cache_clean, neigh_managed_work, gc_worker, reg_check_chans_work, 2*check_lifetime [ 150.907652][ C0] workqueue events_dfl_long: flags=0x2 [ 150.907656][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=4 refcnt=5 [ 150.907669][ C0] pending: 4*defense_work_handler [ 150.907680][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 [ 150.907693][ C0] pending: 2*defense_work_handler [ 150.907706][ C0] workqueue mm_percpu_wq: flags=0x108 [ 150.907711][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 150.907726][ C0] pending: vmstat_update [ 150.907777][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 150.907782][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=9 MAYDAY [ 150.907794][ C0] in-flight: 2822(RESCUER):addrconf_verify_work for 3s [ 150.907811][ C0] pending: mayday_cursor_func [ 150.907821][ C0] inactive: 3*addrconf_verify_work [ 150.907835][ C0] workqueue bat_events: flags=0x6000a [ 150.907840][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=45 MAYDAY [ 150.907852][ C0] in-flight: 2854(RESCUER):batadv_tt_purge for 20s [ 150.907867][ C0] pending: mayday_cursor_func [ 150.907877][ C0] inactive: batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, 5*batadv_mcast_mla_update, 5*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 7*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 3*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 2*batadv_tt_purge [ 150.908023][ C0] workqueue hci0: flags=0x20012 [ 150.908028][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 150.908043][ C0] pending: hci_cmd_timeout [ 150.908056][ C0] workqueue hci0: flags=0x20012 [ 150.908060][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 150.908074][ C0] in-flight: 4707:hci_cmd_sync_work for 3s [ 150.908092][ C0] workqueue hci1: flags=0x20012 [ 150.908096][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 150.908111][ C0] pending: hci_cmd_timeout [ 150.908122][ C0] workqueue hci1: flags=0x20012 [ 150.908127][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 150.908141][ C0] in-flight: 51:hci_cmd_sync_work for 2s [ 150.908158][ C0] workqueue hci2: flags=0x20012 [ 150.908162][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 150.908176][ C0] pending: hci_cmd_timeout [ 150.908188][ C0] workqueue hci2: flags=0x20012 [ 150.908192][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 150.908207][ C0] in-flight: 4708:hci_cmd_sync_work for 2s [ 150.908226][ C0] workqueue wg-kex-wg0: flags=0x6 [ 150.908231][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.908243][ C0] pending: wg_packet_handshake_send_worker [ 150.908256][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 150.908261][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 150.908275][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 150.908291][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 150.908297][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.908311][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 150.908331][ C0] workqueue wg-kex-wg0: flags=0x6 [ 150.908336][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.908348][ C0] pending: wg_packet_handshake_send_worker [ 150.908360][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 150.908366][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.908380][ C0] in-flight: 4801:wg_packet_encrypt_worker for 51s [ 150.908394][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 150.908410][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 150.908415][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.908429][ C0] pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker [ 150.908449][ C0] workqueue wg-kex-wg1: flags=0x6 [ 150.908454][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.908466][ C0] pending: wg_packet_handshake_send_worker [ 150.908478][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 150.908484][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.908498][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 150.908518][ C0] workqueue wg-kex-wg2: flags=0x6 [ 150.908522][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.908535][ C0] pending: wg_packet_handshake_send_worker [ 150.908547][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 150.908552][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.908566][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 150.908592][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 150.908597][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.908611][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 150.908632][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 150.908637][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 150.908652][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 150.908667][ C0] workqueue wg-kex-wg0: flags=0x6 [ 150.908671][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.908684][ C0] pending: wg_packet_handshake_send_worker [ 150.908696][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 150.908701][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 150.908715][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 150.908731][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 150.908736][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.908750][ C0] pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker [ 150.908771][ C0] workqueue wg-kex-wg1: flags=0x6 [ 150.908775][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.908788][ C0] pending: wg_packet_handshake_send_worker [ 150.908800][ C0] workqueue wg-kex-wg2: flags=0x6 [ 150.908805][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.908817][ C0] pending: wg_packet_handshake_send_worker [ 150.908829][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 150.908835][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 150.908849][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 150.908871][ C0] workqueue wg-kex-wg0: flags=0x6 [ 150.908875][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.908888][ C0] pending: wg_packet_handshake_send_worker [ 150.908900][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 150.908905][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 150.908920][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 150.908935][ C0] workqueue wg-kex-wg1: flags=0x6 [ 150.908939][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.908952][ C0] pending: wg_packet_handshake_send_worker [ 150.908964][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 150.908969][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.908983][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 150.909003][ C0] workqueue wg-kex-wg2: flags=0x6 [ 150.909008][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.909020][ C0] pending: wg_packet_handshake_send_worker [ 150.909032][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 150.909037][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.909052][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 150.909076][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=0s workers=7 idle: 10 9 4808 4871 866 4907 [ 150.909122][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=51s workers=8 idle: 1009 4796 4794 24 26 4531 4809 [ 150.909170][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=3s workers=11 manager: 10067 [ 150.909187][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=0s workers=5 idle: 4713 4714 [ 150.909212][ C0] Showing backtraces of busy workers in stalled worker pools: [ 150.909218][ C0] pool 6: [ 150.909221][ C0] task:kworker/1:6 state:R running task stack:0 pid:4801 tgid:4801 ppid:2 task_flags:0x4208060 flags:0x20000010 [ 150.909235][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 150.909244][ C0] Call trace: [ 150.909247][ C0] __switch_to+0x2b4/0x6e4 (T) [ 150.909260][ C0] __schedule+0x135c/0x2b00 [ 150.909269][ C0] preempt_schedule_common+0xd4/0x190 [ 150.909279][ C0] preempt_schedule+0x60/0x78 [ 150.909289][ C0] __local_bh_enable_ip+0x16c/0x234 [ 150.909297][ C0] kernel_neon_begin+0x29c/0x400 [ 150.909307][ C0] poly1305_blocks+0x110/0x204 [ 150.909318][ C0] poly1305_update+0x168/0x39c [ 150.909328][ C0] chacha20poly1305_crypt_sg_inplace+0x888/0xc30 [ 150.909339][ C0] chacha20poly1305_encrypt_sg_inplace+0x54/0x70 [ 150.909350][ C0] wg_packet_encrypt_worker+0x74c/0x1290 [ 150.909359][ C0] process_scheduled_works+0x91c/0x1250 [ 150.909368][ C0] worker_thread+0x798/0xbd0 [ 150.909377][ C0] kthread+0x304/0x3d4 [ 150.909385][ C0] ret_from_fork+0x10/0x20 [ 151.270796][ T4713] Bluetooth: hci1: command 0x0406 tx timeout [ 151.270854][ T4713] Bluetooth: hci2: command 0x0401 tx timeout [ 151.270875][ T4713] Bluetooth: hci0: command 0x0c24 tx timeout [ 156.667887][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)