last executing test programs: 13.736831624s ago: executing program 2 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0xfe0f, 0x4) 13.728767281s ago: executing program 2 (id=151): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) chdir(&(0x7f0000000300)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000"], 0x24, 0x0) 13.707696188s ago: executing program 2 (id=152): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}], [{@dont_appraise}, {@seclabel}, {@uid_gt}, {@euid_eq}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@euid_eq}, {@hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0xc2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x1000040, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13.616989824s ago: executing program 2 (id=153): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@grpquota}]}, 0x1, 0x5c4, &(0x7f00000004c0)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) 13.603147168s ago: executing program 2 (id=154): socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x1, 0x257}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x407ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35c, 0x8000, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 13.403306262s ago: executing program 2 (id=160): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0) 13.328194577s ago: executing program 32 (id=160): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0) 2.164696556s ago: executing program 3 (id=299): r0 = socket$netlink(0x10, 0x3, 0xf) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001"], 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 2.084990938s ago: executing program 3 (id=303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9800000000020104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac14141608000740000000050800048004000380080008400000a9"], 0x98}}, 0x4004000) 1.767194143s ago: executing program 3 (id=306): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = syz_io_uring_complete(r1, r2) syz_io_uring_setup(0x72c4, &(0x7f0000000080)={0x0, 0xedb8, 0x20, 0x1, 0x1b4, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit$UBLK(r1, r2, r5, &(0x7f0000001480)=@ublk_io_cmd_sqes={0x2e, 0x2, 0x0, r4, 0xc0107521, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x1, 0xdfc, 0x7, 0x0}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 1.766935718s ago: executing program 1 (id=307): r0 = syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x80, 0x10, 0x5, {0x7, 0x25, 0x1, 0x0, 0x8, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x0, 0xa, {0x7, 0x25, 0x1, 0x4, 0x8, 0x800}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x19, @string={0x19, 0x3, "194143e9d808150a81744e67204466f27253f9321aa850"}}}, 0x0) 1.674330934s ago: executing program 5 (id=310): r0 = socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x803c1, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$pokeuser(0x6, 0x0, 0x3, 0x80000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x50) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x288}, 0x20000004) 1.205638324s ago: executing program 0 (id=316): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001280)={[{@fat=@uid}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@shortname_win95}, {@rodir}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlateno}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@fat=@quiet}, {@uni_xlate}]}, 0x7f, 0x2c1, &(0x7f0000001640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.205387869s ago: executing program 0 (id=317): r0 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syncfs(r0) 1.205195489s ago: executing program 0 (id=318): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0xa0) mkdirat(r0, &(0x7f0000000200)='./file1/file4\x00', 0xd0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 1.176701276s ago: executing program 1 (id=319): syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.161099417s ago: executing program 0 (id=320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @random="420a00020019", @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @empty}}}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) 792.631297ms ago: executing program 3 (id=322): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x32, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0xb4, 0x81, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='*\b)\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 792.48149ms ago: executing program 5 (id=323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2309e}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x18, 0x0, @val=@iter={&(0x7f0000000040)=@cgroup={0x1}, 0x10}}, 0x20) 788.618799ms ago: executing program 5 (id=324): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@ll={0x11, 0xf5, r2, 0x1, 0xf1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="070f", 0x2}, {&(0x7f0000001540)="11ec4e696119aed2", 0x8}], 0x2}, 0x4) 674.801241ms ago: executing program 5 (id=329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) syz_usb_connect$cdc_ecm(0x3, 0x54, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x2, 0xe0, 0x8f, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x7, 0x1, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x7, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x7f, 0x4}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 646.548801ms ago: executing program 4 (id=332): setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000002180)={0x0, 0x3938700}, 0x0) prlimit64(r0, 0xa, 0x0, 0x0) 488.944256ms ago: executing program 1 (id=333): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x14, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 488.716305ms ago: executing program 1 (id=334): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x80142, 0x100) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) 460.151548ms ago: executing program 4 (id=335): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0xe86c0, 0x161) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088a8", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) setresuid(0xee01, 0x0, 0x0) 322.627921ms ago: executing program 4 (id=336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv6_delroute={0x1c, 0x19, 0x407, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x20, 0x2, 0xfd, 0x1, 0xfe, 0xa, 0x2400}}, 0x1c}}, 0x0) 264.295563ms ago: executing program 4 (id=337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000002600)=ANY=[@ANYBLOB="080086dd0001140004000000a60c6eec00be00442ffffe8000"/37, @ANYRESDEC=r1], 0xfdef) 263.920487ms ago: executing program 0 (id=338): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@grpjquota, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") 263.666094ms ago: executing program 3 (id=339): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x20, {}, {}, 0x39a142fa}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 219.201938ms ago: executing program 0 (id=340): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d0000090401010202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x1, 0x27, 0x5, 0xfff9, 0x400, 0xfffd, 0x5, 0x1000, 0x401, 0x3, 0x100, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 217.368406ms ago: executing program 4 (id=341): r0 = socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) 161.002699ms ago: executing program 3 (id=342): syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000040630781204000010203010902690003017f5006080b0002012030230904000000010130000a2401100a000a0000000904010000010230000904010101010230000905010960002503000a25250304000005050009040200"], 0x0) 158.50941ms ago: executing program 5 (id=343): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000180)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x10}}], 0x1, 0x45) 133.017648ms ago: executing program 4 (id=344): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xb) syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xdf, 0x40, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x24}, {0x60, 0x24, 0xf, 0x1, 0xfffffffc, 0xba, 0xb4, 0x9}, {0x6, 0x24, 0x1a, 0xf8bc, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xdd, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x18, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x6, 0xb}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 103.410698ms ago: executing program 1 (id=345): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0xffffffffffffffff) 182.136µs ago: executing program 5 (id=346): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x8, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162eb7ad3300", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 0s ago: executing program 1 (id=347): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000240)={[{@debug}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_lock}, {@grpid}, {@jqfmt_vfsv1}]}, 0xff, 0x43b, &(0x7f0000000900)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.1' (ED25519) to the list of known hosts. [ 27.626404][ T4695] cgroup: Unknown subsys name 'net' [ 27.736343][ T4695] cgroup: Unknown subsys name 'cpuset' [ 27.738479][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.916597][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.939374][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.939844][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.940058][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.940371][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.940588][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.947142][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.948838][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.950329][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.951843][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.960694][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.961049][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.961618][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.963491][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.964725][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.967540][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.967614][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.967811][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.968117][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.972916][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.974474][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.979255][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.980940][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.982200][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.983890][ T4712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.985416][ T4712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.239467][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.239706][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.239771][ T4707] bridge_slave_0: entered allmulticast mode [ 29.240257][ T4707] bridge_slave_0: entered promiscuous mode [ 29.252036][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.252101][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.252164][ T4707] bridge_slave_1: entered allmulticast mode [ 29.252584][ T4707] bridge_slave_1: entered promiscuous mode [ 29.284154][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.285733][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.301357][ T4707] team0: Port device team_slave_0 added [ 29.303086][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.304449][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.305309][ T4715] bridge_slave_0: entered allmulticast mode [ 29.305735][ T4715] bridge_slave_0: entered promiscuous mode [ 29.306905][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.306926][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.306972][ T4715] bridge_slave_1: entered allmulticast mode [ 29.307419][ T4715] bridge_slave_1: entered promiscuous mode [ 29.312473][ T4707] team0: Port device team_slave_1 added [ 29.335578][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.335604][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.335619][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.345859][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.346817][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.354833][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.356191][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.356214][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.371026][ T4715] team0: Port device team_slave_0 added [ 29.371889][ T4715] team0: Port device team_slave_1 added [ 29.381323][ T4707] hsr_slave_0: entered promiscuous mode [ 29.383344][ T4707] hsr_slave_1: entered promiscuous mode [ 29.393589][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.394806][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.399088][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.401623][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.402809][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.407255][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.457007][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.458231][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.459338][ T4714] bridge_slave_0: entered allmulticast mode [ 29.460785][ T4714] bridge_slave_0: entered promiscuous mode [ 29.466900][ T4715] hsr_slave_0: entered promiscuous mode [ 29.467239][ T4715] hsr_slave_1: entered promiscuous mode [ 29.467452][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 29.467485][ T4715] Cannot create hsr debugfs directory [ 29.477284][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.478504][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.478581][ T4714] bridge_slave_1: entered allmulticast mode [ 29.478992][ T4714] bridge_slave_1: entered promiscuous mode [ 29.495833][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.496736][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.508286][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.509542][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.510906][ T4716] bridge_slave_0: entered allmulticast mode [ 29.512481][ T4716] bridge_slave_0: entered promiscuous mode [ 29.514996][ T4714] team0: Port device team_slave_0 added [ 29.515768][ T4714] team0: Port device team_slave_1 added [ 29.526918][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.526969][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.527037][ T4716] bridge_slave_1: entered allmulticast mode [ 29.527434][ T4716] bridge_slave_1: entered promiscuous mode [ 29.546460][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.547420][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.550244][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.551534][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.555003][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.555631][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.555639][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.555652][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.565420][ T4714] hsr_slave_0: entered promiscuous mode [ 29.565736][ T4714] hsr_slave_1: entered promiscuous mode [ 29.565938][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 29.565947][ T4714] Cannot create hsr debugfs directory [ 29.570009][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.571334][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.572539][ T4708] bridge_slave_0: entered allmulticast mode [ 29.574001][ T4708] bridge_slave_0: entered promiscuous mode [ 29.575792][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.575825][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.575879][ T4708] bridge_slave_1: entered allmulticast mode [ 29.576295][ T4708] bridge_slave_1: entered promiscuous mode [ 29.582640][ T4716] team0: Port device team_slave_0 added [ 29.584529][ T4716] team0: Port device team_slave_1 added [ 29.608598][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.612062][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.613281][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.614903][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.615554][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.615562][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.615575][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.623537][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.637654][ T4708] team0: Port device team_slave_0 added [ 29.640037][ T4708] team0: Port device team_slave_1 added [ 29.655452][ T4716] hsr_slave_0: entered promiscuous mode [ 29.656813][ T4716] hsr_slave_1: entered promiscuous mode [ 29.658058][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 29.659114][ T4716] Cannot create hsr debugfs directory [ 29.686512][ T4707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.690423][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.692261][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.692285][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.692300][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.692917][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.692925][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.692937][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.709267][ T4707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.711784][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.718435][ T4707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.720661][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.736703][ T4707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.738739][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.745634][ T4708] hsr_slave_0: entered promiscuous mode [ 29.745956][ T4708] hsr_slave_1: entered promiscuous mode [ 29.746183][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 29.746194][ T4708] Cannot create hsr debugfs directory [ 29.767835][ T4714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.770021][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.771569][ T4714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.773771][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.777947][ T4714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.779851][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.781538][ T4714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.783454][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.808107][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.808152][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.808300][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.808336][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.812153][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.812177][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.812240][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.812274][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.833404][ T4716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.836709][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.838352][ T4716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.840302][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.842476][ T4716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.844525][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.851052][ T4716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.853247][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.871770][ T4715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.874627][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.884409][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.886298][ T4715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.888488][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.891135][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.891188][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.891264][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.891296][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.896697][ T4715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.898744][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.907418][ T4715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.909690][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.911938][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.923684][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.925496][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.929772][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.931000][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.932810][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.934407][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.941552][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.946430][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.961802][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.962459][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.967107][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.967151][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.967517][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.967536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.967883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.967902][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.968287][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.968305][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.987594][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.988905][ T4708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.990723][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.992160][ T4708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.994085][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.996633][ T4708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.998654][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.005102][ T4708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.008719][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.033303][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.041585][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.047331][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.047373][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.051695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.051741][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.059372][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.068275][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.068324][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.077117][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.077160][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.091181][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.093062][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.114283][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.118955][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.130444][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.132814][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.145656][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.145694][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.160666][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.160704][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.229196][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.268372][ T4707] veth0_vlan: entered promiscuous mode [ 30.270750][ T4707] veth1_vlan: entered promiscuous mode [ 30.281525][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.288409][ T4707] veth0_macvtap: entered promiscuous mode [ 30.290614][ T4707] veth1_macvtap: entered promiscuous mode [ 30.301812][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.307883][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.328726][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.328770][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.328787][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.328802][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.360416][ T4714] veth0_vlan: entered promiscuous mode [ 30.362406][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.377717][ T4714] veth1_vlan: entered promiscuous mode [ 30.391040][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.393815][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.393844][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.398029][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.428364][ T4715] veth0_vlan: entered promiscuous mode [ 30.432070][ T4715] veth1_vlan: entered promiscuous mode [ 30.447214][ T4714] veth0_macvtap: entered promiscuous mode [ 30.449703][ T4852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.449737][ T4852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.453316][ T4714] veth1_macvtap: entered promiscuous mode [ 30.453979][ T4708] veth0_vlan: entered promiscuous mode [ 30.468886][ T4708] veth1_vlan: entered promiscuous mode [ 30.475401][ T4715] veth0_macvtap: entered promiscuous mode [ 30.480052][ T4715] veth1_macvtap: entered promiscuous mode [ 30.483446][ T4716] veth0_vlan: entered promiscuous mode [ 30.488933][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.491278][ T4707] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.497282][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.498186][ T4716] veth1_vlan: entered promiscuous mode [ 30.500116][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.510602][ T4716] veth0_macvtap: entered promiscuous mode [ 30.511639][ T4716] veth1_macvtap: entered promiscuous mode [ 30.519922][ T4890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.523152][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.528690][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.528905][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.528934][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.528956][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.528979][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.529000][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.529021][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.529050][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.541852][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.561649][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.563406][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.563584][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.564542][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.564570][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.579662][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.579691][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.596887][ T4708] veth0_macvtap: entered promiscuous mode [ 30.598387][ T4708] veth1_macvtap: entered promiscuous mode [ 30.609681][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.610708][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.628645][ T4852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.628852][ T4852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.628870][ T4852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.628885][ T4852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.640238][ T4852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.640264][ T4852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.661155][ T4852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.661182][ T4852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.681788][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.681820][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.712799][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.712821][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.761145][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.761174][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.765355][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.765377][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.789409][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.789437][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.025195][ T4713] Bluetooth: hci3: command tx timeout [ 31.025446][ T4713] Bluetooth: hci2: command tx timeout [ 31.025504][ T4712] Bluetooth: hci0: command tx timeout [ 31.065005][ T50] Bluetooth: hci1: command tx timeout [ 31.075038][ T50] Bluetooth: hci4: command tx timeout [ 31.153487][ T4919] loop1: detected capacity change from 0 to 256 [ 31.161363][ T4920] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 31.207089][ T4928] loop0: detected capacity change from 0 to 512 [ 31.212919][ T4928] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 31.230059][ T4928] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.19: bad orphan inode 15 [ 31.230123][ T4928] loop0: lost filesystem error report for type 5 error -117 [ 31.230550][ T4928] ext4_test_bit(bit=14, block=18) = 1 [ 31.230559][ T4928] is_bad_inode(inode)=0 [ 31.230563][ T4928] NEXT_ORPHAN(inode)=1023 [ 31.230567][ T4928] max_ino=32 [ 31.230571][ T4928] i_nlink=0 [ 31.248930][ T4928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 31.282104][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 31.331292][ T4943] Illegal XDP return value 3211595776 on prog (id 2) dev syz_tun, expect packet loss! [ 32.081510][ T4961] loop4: detected capacity change from 0 to 512 [ 32.098473][ T4961] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.098502][ T4961] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.104175][ T4961] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.30: bad orphan inode 131083 [ 32.104208][ T4961] loop4: lost filesystem error report for type 5 error -117 [ 32.105505][ T4961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.129756][ T4961] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.30: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=124 fake=0 [ 32.182107][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.334896][ T4969] loop4: detected capacity change from 0 to 128 [ 32.335303][ T4969] ======================================================= [ 32.335303][ T4969] WARNING: The mand mount option has been deprecated and [ 32.335303][ T4969] and is ignored by this kernel. Remove the mand [ 32.335303][ T4969] option from the mount to silence this warning. [ 32.335303][ T4969] ======================================================= [ 32.340662][ T4969] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.368677][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.880077][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 33.017836][ T5000] loop2: detected capacity change from 0 to 4096 [ 33.036452][ T5000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.037469][ T5003] binder: 5001:5003 tried to acquire reference to desc 0, got 1 instead [ 33.037614][ T5003] binder: 5001:5003 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 33.037622][ T5003] binder: 5001:5003 unknown command 0 [ 33.037629][ T5003] binder: 5001:5003 ioctl c0306201 200001c0 returned -22 [ 33.065061][ T50] Bluetooth: hci2: command tx timeout [ 33.065095][ T50] Bluetooth: hci3: command tx timeout [ 33.065122][ T50] Bluetooth: hci0: command tx timeout [ 33.074002][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.094554][ T5006] loop3: detected capacity change from 0 to 512 [ 33.096095][ T5006] ext4: Unknown parameter 'defcontext' [ 33.145470][ T50] Bluetooth: hci1: command tx timeout [ 33.145524][ T4712] Bluetooth: hci4: command tx timeout [ 33.159285][ T5012] loop3: detected capacity change from 0 to 512 [ 33.159613][ T5012] EXT4-fs: Ignoring removed orlov option [ 33.168562][ T5012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.198858][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.290132][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.290166][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.290177][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.290187][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.290195][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.290204][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.290212][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.290220][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.290227][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.290235][ T4795] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 33.303171][ T4795] hid-generic 0006:0008:0001.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 33.587748][ T5025] fido_id[5025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.611988][ T5030] loop0: detected capacity change from 0 to 1024 [ 33.616760][ T5030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.623398][ T5030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.637898][ T5030] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.55: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 33.651934][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.731430][ T5041] loop4: detected capacity change from 0 to 128 [ 33.753286][ T5041] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.774511][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.832692][ T5049] netlink: 'syz.4.62': attribute type 1 has an invalid length. [ 33.852818][ T5051] loop4: detected capacity change from 0 to 512 [ 33.915069][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.633247][ T5044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 34.633310][ T5044] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 34.667693][ T5044] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 34.678626][ T5044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 34.678665][ T5044] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.709554][ T5044] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.711524][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.714932][ T5044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 34.714966][ T5044] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 34.718575][ T5044] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 34.721138][ T5044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 34.722288][ T5044] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 34.727130][ T5044] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 34.729525][ T5044] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 34.729565][ T5044] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 34.732190][ T5044] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 34.740724][ T5058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.748114][ T5058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.890626][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.891501][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.898011][ T5069] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.904106][ T5069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 34.904175][ T5069] System zones: 1-12 [ 34.908615][ T5069] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.911360][ T5069] EXT4-fs (loop0): 1 truncate cleaned up [ 34.911851][ T5069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.927158][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.935099][ T5073] syz.2.69 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.282881][ T5086] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 35.293815][ T4701] udevd[4701]: incorrect ext4 checksum on /dev/loop1 [ 35.313313][ T4701] udevd[4701]: incorrect ext4 checksum on /dev/loop1 [ 35.354236][ T5086] EXT4-fs: inline encryption not supported [ 35.354281][ T5086] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.359773][ T5086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.360483][ T5086] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c118, mo2=0002] [ 35.360515][ T5086] System zones: 0-5 [ 35.361305][ T5086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.575534][ T5094] binder: 5092:5094 ioctl c0306201 20000080 returned -14 [ 35.613556][ T5097] EXT4-fs: Ignoring removed nobh option [ 35.615877][ T5097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.618263][ T5097] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.81: iget: bad i_size value: 38620345925642 [ 35.618481][ T5097] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.618994][ T5097] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.81: couldn't read orphan inode 15 (err -117) [ 35.619010][ T5097] loop3: lost filesystem error report for type 5 error -117 [ 35.619874][ T5097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.655587][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.674219][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.733096][ T5104] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.83: inode has both inline data and extents flags [ 35.733140][ T5104] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.733270][ T5104] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.83: couldn't read orphan inode 15 (err -117) [ 35.733284][ T5104] loop1: lost filesystem error report for type 5 error -117 [ 35.733795][ T5104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.845135][ T5113] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.86: corrupted in-inode xattr: bad e_name length [ 35.845235][ T5113] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.845663][ T5113] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.86: couldn't read orphan inode 15 (err -117) [ 35.845692][ T5113] loop3: lost filesystem error report for type 5 error -117 [ 35.846361][ T5113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.084135][ T4712] Bluetooth: hci0: command 0x0419 tx timeout [ 36.099634][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.184383][ T5129] set_capacity_and_notify: 9 callbacks suppressed [ 36.184515][ T5129] loop3: detected capacity change from 0 to 512 [ 36.198861][ T5129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.209714][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.342347][ T5144] vhci_hcd vhci_hcd.2: invalid port number 102 [ 36.343602][ T5144] vhci_hcd vhci_hcd.2: default hub control req: 00ba v0006 i0066 l2 [ 36.590933][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.637850][ T5177] loop4: detected capacity change from 0 to 4096 [ 36.653699][ T5177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.711528][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.745137][ T4712] Bluetooth: hci4: command 0x0419 tx timeout [ 36.745210][ T4712] Bluetooth: hci3: command 0x0419 tx timeout [ 36.745238][ T4712] Bluetooth: hci2: command 0x0419 tx timeout [ 36.745259][ T4712] Bluetooth: hci1: command 0x0419 tx timeout [ 36.854156][ T5196] tmpfs: Unknown parameter 'fscontext' [ 36.979386][ T5194] xt_hashlimit: size too large, truncated to 1048576 [ 37.027134][ T4382] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 37.027515][ T5202] loop4: detected capacity change from 0 to 128 [ 37.044732][ T5202] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.105680][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.176854][ T4382] usb 1-1: too many endpoints for config 0 interface 0 altsetting 251: 255, using maximum allowed: 30 [ 37.176897][ T4382] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 37.176909][ T4382] usb 1-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 37.176921][ T4382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.176937][ T4382] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 37.176947][ T4382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.181344][ T4382] usb 1-1: config 0 descriptor?? [ 37.182250][ T5190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 37.216297][ T5210] loop4: detected capacity change from 0 to 512 [ 37.224318][ T5210] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.128: inode has both inline data and extents flags [ 37.224357][ T5210] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.224569][ T5210] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.128: couldn't read orphan inode 15 (err -117) [ 37.224585][ T5210] loop4: lost filesystem error report for type 5 error -117 [ 37.224899][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 37.224912][ C1] EXT4-fs (loop4): initial error at time 293: ext4_orphan_get:1399: inode 15 [ 37.224928][ C1] EXT4-fs (loop4): last error at time 293: ext4_orphan_get:1404 [ 37.228907][ T5210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 37.254364][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 37.388035][ T5221] loop2: detected capacity change from 0 to 2048 [ 37.407567][ T5219] loop4: detected capacity change from 0 to 1024 [ 37.409520][ T5221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.414422][ T5221] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.422750][ T5221] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 37.422788][ T5221] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.422788][ T5221] [ 37.422802][ T5221] EXT4-fs (loop2): Total free blocks count 0 [ 37.422816][ T5221] EXT4-fs (loop2): Free/Dirty block details [ 37.422833][ T5221] EXT4-fs (loop2): free_blocks=2415919104 [ 37.422849][ T5221] EXT4-fs (loop2): dirty_blocks=32 [ 37.422860][ T5221] EXT4-fs (loop2): Block reservation details [ 37.422870][ T5221] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 37.424017][ T5221] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 37.444119][ T5219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.471023][ T4715] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 37.500915][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.589109][ T5230] loop4: detected capacity change from 0 to 4096 [ 37.592711][ T4382] acrux 0003:1A34:0802.0002: unexpected long global item [ 37.595863][ T4382] acrux 0003:1A34:0802.0002: parse failed [ 37.595908][ T4382] acrux 0003:1A34:0802.0002: probe with driver acrux failed with error -22 [ 37.615884][ T5230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.678875][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.705708][ T5235] loop3: detected capacity change from 0 to 512 [ 37.709110][ T5235] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.713981][ T5235] EXT4-fs (loop3): 1 truncate cleaned up [ 37.714452][ T5235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.734637][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.748392][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.750194][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.762402][ T5228] loop2: detected capacity change from 0 to 32768 [ 37.793484][ T4382] usb 1-1: USB disconnect, device number 2 [ 37.797400][ T5228] loop2: p1 p2 p3 < p5 p6 > [ 37.797429][ T5228] loop2: partition table partially beyond EOD, truncated [ 37.803845][ T5228] loop2: p2 start 131072 is beyond EOD, truncated [ 37.807911][ T5244] loop1: detected capacity change from 0 to 512 [ 37.817268][ T5244] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 37.913964][ T5245] udevd[5245]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 37.917203][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 37.919615][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 37.922561][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 38.104977][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 38.247457][ T5256] mmap: syz.2.144 (5256) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.320286][ T5263] capability: warning: `syz.4.147' uses deprecated v2 capabilities in a way that may be insecure [ 38.340076][ T5265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.342179][ T5265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.417667][ T5273] EXT4-fs: Invalid want_extra_isize 9 [ 38.480930][ T5276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.506307][ T4715] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /32/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 38.640370][ T5282] netlink: 'syz.3.156': attribute type 32 has an invalid length. [ 38.640402][ T5282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.156'. [ 38.680809][ T5286] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 38.686151][ T5286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.699709][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.705902][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.801109][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.822737][ T4712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.823037][ T4712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.825745][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.825993][ T4712] Bluetooth: hci1: command 0x0419 tx timeout [ 38.826011][ T4712] Bluetooth: hci3: command 0x0419 tx timeout [ 38.826026][ T4712] Bluetooth: hci4: command 0x0419 tx timeout [ 38.829496][ T4713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.829721][ T4713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.413419][ T5300] ipvlan1: renamed from veth0_vlan [ 39.641298][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.654828][ T5303] EXT4-fs: inline encryption not supported [ 39.699537][ T5303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.699579][ T5303] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.704068][ T5303] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 39.704161][ T5303] System zones: 0-5 [ 39.722208][ T5303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.771426][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.783528][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.859367][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.246466][ T12] bridge_slave_1: left allmulticast mode [ 40.248445][ T12] bridge_slave_1: left promiscuous mode [ 40.248924][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.263521][ T12] bridge_slave_0: left allmulticast mode [ 40.263550][ T12] bridge_slave_0: left promiscuous mode [ 40.263633][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.362191][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.365969][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.374736][ T12] bond0 (unregistering): Released all slaves [ 40.498500][ T5307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 40.500296][ T5307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 40.501819][ T5307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 40.503295][ T5307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 40.504635][ T5307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 40.506170][ T5307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 40.508810][ T5307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 40.519316][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.581654][ T12] hsr_slave_0: left promiscuous mode [ 40.583825][ T12] hsr_slave_1: left promiscuous mode [ 40.584129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.584152][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.591266][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.592733][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.599355][ T12] veth1_macvtap: left promiscuous mode [ 40.600485][ T12] veth0_macvtap: left promiscuous mode [ 40.600611][ T5363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.604439][ T12] veth1_vlan: left promiscuous mode [ 40.604501][ T12] veth0_vlan: left promiscuous mode [ 40.710594][ T12] team0 (unregistering): Port device team_slave_1 removed [ 40.720200][ T12] team0 (unregistering): Port device team_slave_0 removed [ 40.780118][ T5369] xt_nat: multiple ranges no longer supported [ 41.521290][ T5294] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.522819][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.524344][ T5294] bridge_slave_0: entered allmulticast mode [ 41.526229][ T5294] bridge_slave_0: entered promiscuous mode [ 41.528345][ T5294] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.529886][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.531596][ T5294] bridge_slave_1: entered allmulticast mode [ 41.533328][ T5294] bridge_slave_1: entered promiscuous mode [ 41.542949][ T5294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.554471][ T5294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.564228][ T5294] team0: Port device team_slave_0 added [ 41.567038][ T5294] team0: Port device team_slave_1 added [ 41.584286][ T5294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.589386][ T5294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.589429][ T5294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.598841][ T5294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.598869][ T5294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.598896][ T5294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.665696][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.669910][ T5388] set_capacity_and_notify: 5 callbacks suppressed [ 41.674493][ T5294] hsr_slave_0: entered promiscuous mode [ 41.678381][ T5294] hsr_slave_1: entered promiscuous mode [ 41.680304][ T5294] debugfs: 'hsr0' already exists in 'hsr' [ 41.681367][ T5294] Cannot create hsr debugfs directory [ 41.692721][ T5388] loop3: detected capacity change from 0 to 512 [ 41.693176][ T5388] EXT4-fs: Ignoring removed oldalloc option [ 41.695043][ T4794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.696003][ T5388] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.712107][ T5388] EXT4-fs (loop3): 1 orphan inode deleted [ 41.712139][ T5388] EXT4-fs (loop3): 1 truncate cleaned up [ 41.712592][ T5388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.799436][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 41.808323][ T5294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.818370][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.820748][ T5294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.823973][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.826939][ T5294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.830802][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.833469][ T5294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.838416][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.875874][ T4794] usb 1-1: Using ep0 maxpacket: 32 [ 42.084056][ T4794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.084091][ T4794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.084117][ T4794] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 42.084131][ T4794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.098156][ T4794] usb 1-1: config 0 descriptor?? [ 42.100533][ T5294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.103837][ T4794] hub 1-1:0.0: USB hub found [ 42.114210][ T5294] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.122981][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.123027][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.140051][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.140098][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.159305][ T5388] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.163715][ T5388] EXT4-fs (loop3): Remounting filesystem read-only [ 42.198796][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.228163][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1 [ 42.316078][ T4794] hub 1-1:0.0: 1 port detected [ 42.505382][ T4713] Bluetooth: hci4: command 0x0419 tx timeout [ 42.505874][ T4713] Bluetooth: hci3: command 0x0419 tx timeout [ 42.505976][ T4713] Bluetooth: hci1: command 0x0419 tx timeout [ 42.511413][ T50] Bluetooth: hci2: command 0x041b tx timeout [ 43.269375][ T5444] process 'syz.4.193' launched './file1' with NULL argv: empty string added [ 43.289451][ T4794] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 43.289484][ T4794] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 43.302801][ T4794] usbhid 1-1:0.0: can't add hid device: -71 [ 43.302869][ T4794] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 43.326779][ T5450] binder: 5449:5450 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 43.328317][ T5450] binder: 5449:5450 unknown command 0 [ 43.329673][ T5450] binder: 5449:5450 ioctl c0306201 200001c0 returned -22 [ 43.337239][ T4794] usb 1-1: USB disconnect, device number 3 [ 43.492923][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.498215][ T5294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.570092][ T5294] veth0_vlan: entered promiscuous mode [ 43.574331][ T5294] veth1_vlan: entered promiscuous mode [ 43.583242][ T5294] veth0_macvtap: entered promiscuous mode [ 43.590999][ T5294] veth1_macvtap: entered promiscuous mode [ 43.598083][ T5294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.602134][ T5294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.607597][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.607637][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.607667][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.607686][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.645842][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.645874][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.664024][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.664051][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.671653][ T5491] loop3: detected capacity change from 0 to 512 [ 43.698698][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #3: comm syz.3.200: corrupted inode contents [ 43.698732][ T5491] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.699699][ T5491] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #3: comm syz.3.200: mark_inode_dirty error [ 43.699714][ T5491] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.700720][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #3: comm syz.3.200: corrupted inode contents [ 43.700736][ T5491] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.700888][ T5491] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.200: mark_inode_dirty error [ 43.700900][ T5491] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.701023][ T5491] Quota error (device loop3): write_blk: dquota write failed [ 43.701078][ T5491] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 43.701096][ T5491] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.200: Failed to acquire dquot type 0 [ 43.701107][ T5491] loop3: lost filesystem error report for type 5 error -117 [ 43.702875][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.200: corrupted inode contents [ 43.702896][ T5491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.704037][ T5491] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.200: mark_inode_dirty error [ 43.704058][ T5491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.704398][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.200: corrupted inode contents [ 43.704411][ T5491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.704528][ T5491] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.200: mark_inode_dirty error [ 43.704538][ T5491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.704662][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.200: corrupted inode contents [ 43.704672][ T5491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.704810][ T5491] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 43.704819][ T5491] loop3: lost filesystem error report for type 5 error -117 [ 43.704887][ C0] EXT4-fs (loop3): error count since last fsck: 11 [ 43.704897][ C0] EXT4-fs (loop3): initial error at time 299: ext4_do_update_inode:5742: inode 3 [ 43.704913][ C0] EXT4-fs (loop3): last error at time 299: ext4_orphan_del:303 [ 43.714206][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.200: corrupted inode contents [ 43.714221][ T5491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.714350][ T5491] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.200: mark_inode_dirty error [ 43.714467][ T5491] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 43.714476][ T5491] loop3: lost filesystem error report for type 5 error -117 [ 43.716327][ T5491] EXT4-fs (loop3): 1 truncate cleaned up [ 43.716778][ T5491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.729717][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3 [ 43.770612][ T5501] netlink: 'syz.5.162': attribute type 6 has an invalid length. [ 43.772208][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.819664][ T866] hid_parser_main: 8 callbacks suppressed [ 43.819707][ T866] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 43.822072][ T866] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.862343][ T5514] xt_hashlimit: size too large, truncated to 1048576 [ 43.875046][ T4712] Bluetooth: hci0: command 0x0419 tx timeout [ 43.905618][ T5514] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.585434][ T4709] Bluetooth: hci4: command 0x0419 tx timeout [ 44.585575][ T4713] Bluetooth: hci3: command 0x0419 tx timeout [ 44.588068][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 44.593760][ T4712] Bluetooth: hci2: command 0x041b tx timeout [ 45.049165][ T5541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.049353][ T5541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.426896][ T5547] loop0: detected capacity change from 0 to 512 [ 45.440716][ T5547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.470431][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.637496][ T5576] binder: 5575:5576 tried to acquire reference to desc 0, got 1 instead [ 45.638012][ T5576] binder: cannot allocate buffer [ 45.638036][ T5576] binder: 5575:5576 transaction call to 5575:0 failed 9/29201/-22, code 0 size -3--56 line 3391 [ 45.638424][ T4794] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.476380][ T5587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.476578][ T5587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.666116][ T5597] loop1: detected capacity change from 0 to 4096 [ 46.675967][ T4712] Bluetooth: hci2: command 0x041b tx timeout [ 46.678527][ T5597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.678549][ T5597] EXT4-fs (loop1): Test dummy encryption mode enabled [ 46.681924][ T5600] xt_hashlimit: size too large, truncated to 1048576 [ 46.692336][ T5597] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8841c1a8, mo2=0002] [ 46.694527][ T5597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.707118][ T5597] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 46.716699][ T5597] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 46.742327][ T5597] evm: overlay not supported [ 46.814219][ T5610] loop0: detected capacity change from 0 to 1024 [ 46.814554][ T5610] EXT4-fs: Ignoring removed bh option [ 46.818259][ T5610] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.826478][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.833358][ T5608] loop5: detected capacity change from 0 to 4096 [ 46.837846][ T5608] EXT4-fs: inline encryption not supported [ 46.839755][ T5608] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.839785][ T5608] EXT4-fs (loop5): Test dummy encryption mode enabled [ 46.845374][ T5608] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 46.845441][ T5608] System zones: 0-5 [ 46.847079][ T5610] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.242: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.850332][ T5610] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 46.850398][ T5610] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.242: Invalid inode table block 1 in block_group 0 [ 46.850420][ T5610] loop0: lost filesystem error report for type 5 error -117 [ 46.850609][ T5610] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 46.850619][ T5610] loop0: lost filesystem error report for type 5 error -117 [ 46.850693][ T5610] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.242: mark_inode_dirty error [ 46.850775][ T5610] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 46.850782][ T5610] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.242: Failed to acquire dquot type 0 [ 46.850791][ T5610] loop0: lost filesystem error report for type 5 error -117 [ 46.850915][ T5610] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 46.850923][ T5610] loop0: lost filesystem error report for type 5 error -117 [ 46.851460][ T5610] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.242: mark_inode_dirty error [ 46.851541][ T5610] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 46.851572][ T5610] EXT4-fs (loop0): 1 orphan inode deleted [ 46.852011][ T5610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.865023][ T5372] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.876499][ T5372] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 46.876528][ T5372] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 0 [ 46.878436][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.879364][ T5608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.880639][ T4708] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 46.880652][ T4708] loop0: lost filesystem error report for type 5 error -117 [ 46.881206][ T4708] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 46.881218][ T4708] loop0: lost filesystem error report for type 5 error -117 [ 46.881290][ T4708] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 47.176351][ T5619] netlink: 84 bytes leftover after parsing attributes in process `syz.1.241'. [ 47.453193][ T5623] loop0: detected capacity change from 0 to 512 [ 47.465858][ T5294] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.482695][ T5623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.511193][ T5627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.513463][ T5627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.532478][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.991435][ T5648] loop0: detected capacity change from 0 to 256 [ 48.034452][ T5651] loop3: detected capacity change from 0 to 4096 [ 48.037099][ T5651] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.038943][ T5651] EXT4-fs (loop3): Test dummy encryption mode enabled [ 48.052650][ T5651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.318433][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.410288][ T30] audit: type=1326 audit(304.374:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5661 comm="syz.4.259" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f78f68 code=0x7ffc0000 [ 48.410793][ T30] audit: type=1326 audit(304.374:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5661 comm="syz.4.259" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f78f68 code=0x7ffc0000 [ 48.411381][ T30] audit: type=1326 audit(304.374:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5661 comm="syz.4.259" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f78f68 code=0x7ffc0000 [ 48.411475][ T30] audit: type=1326 audit(304.374:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5661 comm="syz.4.259" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa7f5be2c code=0x7ffc0000 [ 48.411607][ T30] audit: type=1326 audit(304.374:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5661 comm="syz.4.259" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa7f5be2c code=0x7ffc0000 [ 48.471303][ T5668] loop3: detected capacity change from 0 to 2048 [ 48.498649][ T5668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.526437][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.721321][ T5686] loop3: detected capacity change from 0 to 512 [ 48.724459][ T5686] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.727732][ T5686] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 48.727857][ T5686] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.730951][ T5686] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.269: Allocating blocks 41-42 which overlap fs metadata [ 48.730995][ T5686] loop3: lost filesystem error report for type 5 error -117 [ 48.732972][ T5686] EXT4-fs (loop3): Remounting filesystem read-only [ 48.733052][ T5686] __quota_error: 10 callbacks suppressed [ 48.733059][ T5686] Quota error (device loop3): write_blk: dquota write failed [ 48.733165][ T5686] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 48.733224][ T5686] EXT4-fs (loop3): 1 truncate cleaned up [ 48.734865][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 48.734881][ C0] EXT4-fs (loop3): initial error at time 304: ext4_mb_mark_diskspace_used:4222 [ 48.734894][ C0] EXT4-fs (loop3): last error at time 304: ext4_mb_mark_diskspace_used:4222 [ 48.738096][ T5686] EXT4-fs (loop3): pa 00000000d0732479: logic 1, phys. 41, len 23 [ 48.738627][ T5686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.755231][ T4712] Bluetooth: hci2: command 0x041b tx timeout [ 48.807015][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.923568][ T5701] loop0: detected capacity change from 0 to 512 [ 48.950763][ T5701] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.956546][ T5701] EXT4-fs (loop0): 1 truncate cleaned up [ 48.957015][ T5701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.010890][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.509888][ T5733] loop3: detected capacity change from 0 to 512 [ 49.513341][ T5733] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 49.696148][ T5736] Zero length message leads to an empty skb [ 49.821093][ T5738] loop5: detected capacity change from 0 to 512 [ 49.826871][ T5738] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 49.882784][ T5745] binder: 5743:5745 ioctl 541b 0 returned -22 [ 49.966176][ T5757] EXT4-fs: Ignoring removed nobh option [ 49.999216][ T5757] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.274184][ T5768] netlink: 'syz.3.303': attribute type 7 has an invalid length. [ 50.361726][ T5781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.361920][ T5781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.379336][ T5783] xt_hashlimit: size too large, truncated to 1048576 [ 50.399032][ T5294] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.835016][ T4712] Bluetooth: hci2: command 0x041b tx timeout [ 50.885283][ T30] audit: type=1326 audit(306.854:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5805 comm="syz.0.317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe578f68 code=0x7ffc0000 [ 50.885326][ T30] audit: type=1326 audit(306.854:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5805 comm="syz.0.317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe578f68 code=0x7ffc0000 [ 50.885452][ T30] audit: type=1326 audit(306.854:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5805 comm="syz.0.317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe578f68 code=0x7ffc0000 [ 50.886290][ T30] audit: type=1326 audit(306.854:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5805 comm="syz.0.317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe578f68 code=0x7ffc0000 [ 50.886407][ T30] audit: type=1326 audit(306.854:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5805 comm="syz.0.317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=267 compat=0 ip=0xffffbe578f68 code=0x7ffc0000 [ 50.886861][ T30] audit: type=1326 audit(306.854:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5805 comm="syz.0.317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe578f68 code=0x7ffc0000 [ 50.887681][ T30] audit: type=1326 audit(306.854:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5805 comm="syz.0.317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe578f68 code=0x7ffc0000 [ 50.887805][ T30] audit: type=1326 audit(306.854:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5805 comm="syz.0.317" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbe578f68 code=0x7ffc0000 [ 50.921974][ T5808] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 50.922035][ T5808] System zones: 1-3, 19-19, 35-36 [ 50.922581][ T5808] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.938908][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.940682][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.949292][ T4708] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.085874][ T5815] bridge0: port 3(syz_tun) entered blocking state [ 51.086192][ T5815] bridge0: port 3(syz_tun) entered disabled state [ 51.087791][ T5815] syz_tun: entered allmulticast mode [ 51.094446][ T5815] syz_tun: entered promiscuous mode [ 51.095668][ T5815] bridge0: port 3(syz_tun) entered blocking state [ 51.095723][ T5815] bridge0: port 3(syz_tun) entered forwarding state [ 51.115396][ T5815] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 51.304605][ T5822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.307669][ T5822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.439385][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.439606][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.588184][ T5844] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 51.592903][ T5844] EXT4-fs (loop1): invalid journal inode [ 51.593383][ T5844] EXT4-fs (loop1): can't get journal size [ 51.597344][ T5844] EXT4-fs (loop1): 1 truncate cleaned up [ 51.598123][ T5844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.620046][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.658651][ T5848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.841413][ T5860] set_capacity_and_notify: 6 callbacks suppressed [ 51.841455][ T5860] loop0: detected capacity change from 0 to 512 [ 51.841767][ T5860] EXT4-fs: inline encryption not supported [ 51.846179][ T5860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.846216][ T5860] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.860379][ T5860] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.338: Failed to acquire dquot type 1 [ 51.860417][ T5860] loop0: lost filesystem error report for type 5 error -5 [ 51.860593][ T5860] EXT4-fs (loop0): Remounting filesystem read-only [ 51.860634][ T5860] EXT4-fs (loop0): 1 truncate cleaned up [ 51.918008][ T5871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.918206][ T5871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.006201][ T40] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 52.007179][ T40] EXT4-fs (loop1): Remounting filesystem read-only [ 52.082848][ T5879] loop3: detected capacity change from 0 to 7 [ 52.083424][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.083473][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.083551][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.083570][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.083628][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.083646][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.083710][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.083727][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.083790][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.083808][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.083871][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.083889][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.083942][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.083960][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.083976][ T5879] ldm_validate_partition_table(): Disk read failed. [ 52.084020][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.084048][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.084107][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.084126][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.084178][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.084204][ C0] Buffer I/O error on dev loop3, logical block 0, a ** replaying previous printk message ** [ 52.084204][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 52.084274][ T5879] Dev loop3: unable to read RDB block 0 [ 52.084500][ T5879] loop3: unable to read partition table [ 52.084558][ T5879] loop3: partition table beyond EOD, truncated [ 52.084566][ T5879] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 52.104451][ T5881] loop1: detected capacity change from 0 to 512 [ 52.107396][ T5881] EXT4-fs: inline encryption not supported [ 52.108151][ T5881] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.108165][ T5881] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 52.116958][ T5879] [ 52.128130][ T5879] ====================================================== [ 52.129267][ T5879] WARNING: possible circular locking dependency detected [ 52.130343][ T5879] syzkaller #0 Not tainted [ 52.131063][ T5879] ------------------------------------------------------ [ 52.132119][ T5879] syz.5.346/5879 is trying to acquire lock: [ 52.133071][ T5879] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x98/0xe0 [ 52.134728][ T5879] [ 52.134728][ T5879] but task is already holding lock: [ 52.135832][ T5879] ffff0000c81a9c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 52.137565][ T5879] [ 52.137565][ T5879] which lock already depends on the new lock. [ 52.137565][ T5879] [ 52.139243][ T5879] [ 52.139243][ T5879] the existing dependency chain (in reverse order) is: [ 52.140566][ T5879] [ 52.140566][ T5879] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 52.141901][ T5879] blk_alloc_queue+0x488/0x590 [ 52.142714][ T5879] blk_mq_alloc_queue+0x148/0x284 [ 52.143505][ T5879] __blk_mq_alloc_disk+0x38/0x10c [ 52.144341][ T5879] loop_add+0x358/0x8e4 [ 52.145018][ T5879] loop_init+0xe8/0x10c [ 52.145742][ T5879] do_one_initcall+0x274/0xc38 [ 52.146474][ T5879] do_initcall_level+0x12c/0x1c4 [ 52.147281][ T5879] do_initcalls+0x70/0xd0 [ 52.148074][ T5879] do_basic_setup+0x7c/0x90 [ 52.148848][ T5879] kernel_init_freeable+0x268/0x3a8 [ 52.149668][ T5879] kernel_init+0x24/0x1dc [ 52.150453][ T5879] ret_from_fork+0x10/0x20 [ 52.151233][ T5879] [ 52.151233][ T5879] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 52.152307][ T5879] fs_reclaim_acquire+0x90/0x110 [ 52.153099][ T5879] kmem_cache_alloc_noprof+0x60/0x5d8 [ 52.154038][ T5879] __kernfs_iattrs+0xd8/0x310 [ 52.154809][ T5879] __kernfs_setattr+0x48/0x2ac [ 52.155604][ T5879] kernfs_iop_setattr+0xc4/0x11c [ 52.156415][ T5879] notify_change+0x928/0xb7c [ 52.157210][ T5879] do_truncate+0x1a8/0x22c [ 52.157961][ T5879] path_openat+0x2368/0x2a60 [ 52.158777][ T5879] do_file_open+0x1c8/0x2e8 [ 52.159506][ T5879] do_sys_openat2+0x114/0x1e8 [ 52.160250][ T5879] do_sys_open+0xb0/0xe0 [ 52.160959][ T5879] __arm64_sys_openat+0xa0/0xbc [ 52.161740][ T5879] invoke_syscall+0x98/0x244 [ 52.162520][ T5879] el0_svc_common+0xec/0x23c [ 52.163320][ T5879] do_el0_svc+0x4c/0x5c [ 52.164000][ T5879] el0_svc+0x64/0x260 [ 52.164689][ T5879] el0t_64_sync_handler+0x48/0x148 [ 52.164982][ T4809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 52.166500][ T5879] el0t_64_sync+0x198/0x19c [ 52.167210][ T5879] [ 52.167210][ T5879] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 52.168522][ T5879] __lock_acquire+0x17c0/0x2ebc [ 52.169332][ T5879] lock_acquire+0x140/0x364 [ 52.170058][ T5879] down_read+0x58/0x2bc [ 52.170791][ T5879] kernfs_iop_getattr+0x98/0xe0 [ 52.171606][ T5879] vfs_getattr_nosec+0x250/0x388 [ 52.172449][ T5879] vfs_getattr+0x60/0x88 [ 52.173159][ T5879] loop_assign_backing_file+0x200/0x3c0 [ 52.174215][ T5879] lo_ioctl+0x1160/0x167c [ 52.175009][ T5879] blkdev_ioctl+0x574/0x904 [ 52.175863][ T5879] __arm64_sys_ioctl+0x14c/0x1c4 [ 52.176667][ T5879] invoke_syscall+0x98/0x244 [ 52.177495][ T5879] el0_svc_common+0xec/0x23c [ 52.178268][ T5879] do_el0_svc+0x4c/0x5c [ 52.178975][ T5879] el0_svc+0x64/0x260 [ 52.179708][ T5879] el0t_64_sync_handler+0x48/0x148 [ 52.180637][ T5879] el0t_64_sync+0x198/0x19c [ 52.181413][ T5879] [ 52.181413][ T5879] other info that might help us debug this: [ 52.181413][ T5879] [ 52.183006][ T5879] Chain exists of: [ 52.183006][ T5879] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 52.183006][ T5879] [ 52.185169][ T5879] Possible unsafe locking scenario: [ 52.185169][ T5879] [ 52.186267][ T5879] CPU0 CPU1 [ 52.187093][ T5879] ---- ---- [ 52.187903][ T5879] lock(&q->q_usage_counter(io)#20); [ 52.188703][ T5879] lock(fs_reclaim); [ 52.189712][ T5879] lock(&q->q_usage_counter(io)#20); [ 52.191017][ T5879] rlock(&root->kernfs_iattr_rwsem); [ 52.191892][ T5879] [ 52.191892][ T5879] *** DEADLOCK *** [ 52.191892][ T5879] [ 52.193142][ T5879] 3 locks held by syz.5.346/5879: [ 52.193945][ T5879] #0: ffff0000c824b430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 52.195428][ T5879] #1: ffff0000c81a9c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 52.197217][ T5879] #2: ffff0000c81a9c70 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 52.198935][ T5879] [ 52.198935][ T5879] stack backtrace: [ 52.199841][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: syz.5.346 Not tainted syzkaller #0 PREEMPT [ 52.201167][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 52.202639][ T5879] Call trace: [ 52.203135][ T5879] show_stack+0x2c/0x3c (C) [ 52.203857][ T5879] __dump_stack+0x30/0x40 [ 52.204506][ T5879] dump_stack_lvl+0xd8/0x12c [ 52.205237][ T5879] dump_stack+0x1c/0x28 [ 52.205909][ T5879] print_circular_bug+0x328/0x330 [ 52.206608][ T5879] check_noncircular+0x158/0x174 [ 52.207368][ T5879] __lock_acquire+0x17c0/0x2ebc [ 52.208082][ T5879] lock_acquire+0x140/0x364 [ 52.208743][ T5879] down_read+0x58/0x2bc [ 52.209395][ T5879] kernfs_iop_getattr+0x98/0xe0 [ 52.210134][ T5879] vfs_getattr_nosec+0x250/0x388 [ 52.210846][ T5879] vfs_getattr+0x60/0x88 [ 52.211541][ T5879] loop_assign_backing_file+0x200/0x3c0 [ 52.212377][ T5879] lo_ioctl+0x1160/0x167c [ 52.213009][ T5879] blkdev_ioctl+0x574/0x904 [ 52.213752][ T5879] __arm64_sys_ioctl+0x14c/0x1c4 [ 52.214509][ T5879] invoke_syscall+0x98/0x244 [ 52.215162][ T5879] el0_svc_common+0xec/0x23c [ 52.215831][ T5879] do_el0_svc+0x4c/0x5c [ 52.216478][ T5879] el0_svc+0x64/0x260 [ 52.217040][ T5879] el0t_64_sync_handler+0x48/0x148 [ 52.217826][ T5879] el0t_64_sync+0x198/0x19c [ 52.222984][ T5879] ldm_validate_partition_table(): Disk read failed. [ 52.223525][ T5879] Dev loop3: unable to read RDB block 0 [ 52.223721][ T5879] loop3: unable to read partition table [ 52.223778][ T5879] loop3: partition table beyond EOD, truncated [ 52.223789][ T5879] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 52.231300][ T4340] ldm_validate_partition_table(): Disk read failed. [ 52.231958][ T4340] Dev loop3: unable to read RDB block 0 [ 52.232753][ T4340] loop3: unable to read partition table [ 52.232800][ T4340] loop3: partition table beyond EOD, truncated [ 52.315838][ T4809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.315869][ T4809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.315884][ T4809] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 52.317173][ T4809] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.317183][ T4809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.317191][ T4809] usb 1-1: Product: syz [ 52.317197][ T4809] usb 1-1: Manufacturer: syz [ 52.317203][ T4809] usb 1-1: SerialNumber: syz [ 52.328361][ T4809] cdc_mbim 1-1:1.0: skipping garbage [ 52.904897][ T4712] Bluetooth: hci2: command 0x041b tx timeout [ 53.333966][ T4809] cdc_mbim 1-1:1.0: bind() failure [ 53.335292][ T4809] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 53.335315][ T4809] cdc_ncm 1-1:1.1: bind() failure [ 53.339320][ T4809] usb 1-1: USB disconnect, device number 4