last executing test programs: 39.218348996s ago: executing program 2 (id=423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20) 39.178236829s ago: executing program 2 (id=426): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 38.30398228s ago: executing program 2 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x9, 0x20a, &(0x7f0000000900)="$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") sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000001e000d0300f3ffffff54294c81000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x20}}, 0x0) 38.20688945s ago: executing program 2 (id=463): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 38.075015531s ago: executing program 2 (id=465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x8253, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) 37.656367251s ago: executing program 2 (id=476): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB='uni_xlate=1,shortname=win95,check=relaxed,utf8=1,uni_xlate=0,nonumtail=0,uni_xlate=0,showexec,utf8=0,uni_xlate=1,shortname=winnt,iocharset=macroman,iocharset=macceltic,nonumtail=0,nonumtail=0,\x00'/209], 0x7, 0x2a6, &(0x7f0000000740)="$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") setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x18) 37.649003713s ago: executing program 32 (id=476): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB='uni_xlate=1,shortname=win95,check=relaxed,utf8=1,uni_xlate=0,nonumtail=0,uni_xlate=0,showexec,utf8=0,uni_xlate=1,shortname=winnt,iocharset=macroman,iocharset=macceltic,nonumtail=0,nonumtail=0,\x00'/209], 0x7, 0x2a6, &(0x7f0000000740)="$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") setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x18) 23.806095855s ago: executing program 5 (id=878): syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 23.769158762s ago: executing program 5 (id=881): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0x18}, 0x404f444) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, 0x0, @private1}}, 0x24) 23.731384998s ago: executing program 5 (id=884): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 23.670734189s ago: executing program 5 (id=888): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x95e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}, {@grpid}, {@oldalloc}]}, 0x3, 0x44d, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 23.574538472s ago: executing program 5 (id=893): r0 = syz_io_uring_setup(0xefd, &(0x7f0000000140)={0x0, 0xaa32, 0x10000, 0x5, 0x59}, &(0x7f0000000100), &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x11000, 0x20000000, 0x51}, &(0x7f0000000480)=0x0, &(0x7f0000000000), &(0x7f0000000080)) syz_io_uring_submit(r3, r1, r2, &(0x7f00000001c0)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, 0x0, 0x6}}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 23.26037794s ago: executing program 5 (id=907): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0xb01f, 0x5601}]) 23.247228843s ago: executing program 33 (id=907): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0xb01f, 0x5601}]) 1.071367893s ago: executing program 1 (id=1610): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 920.186392ms ago: executing program 4 (id=1618): signalfd4(0xffffffffffffffff, &(0x7f0000002180)={[0xfffffffffffffff7]}, 0x8, 0x80000) openat$smackfs_cipso(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000680)=""/235, 0xeb, 0x10002) 876.311581ms ago: executing program 1 (id=1619): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 874.853126ms ago: executing program 4 (id=1622): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) close(r0) 870.093386ms ago: executing program 1 (id=1623): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) 795.970606ms ago: executing program 4 (id=1627): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 795.834744ms ago: executing program 4 (id=1628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000040)="4a57b01363c58aeced8ef9ff3f0a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 772.929955ms ago: executing program 4 (id=1629): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{0x0, 0x26}, {&(0x7f00000000c0)="7843e7", 0x3}], 0x2, 0x1, 0x7, 0x14) 753.232638ms ago: executing program 1 (id=1631): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 676.404509ms ago: executing program 1 (id=1632): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) 676.230544ms ago: executing program 4 (id=1633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 659.228675ms ago: executing program 1 (id=1636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e23, 0x2, @remote, 0x4}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000700)=0x1, 0x4) 480.304521ms ago: executing program 6 (id=1641): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 408.979396ms ago: executing program 6 (id=1645): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 360.304499ms ago: executing program 3 (id=1646): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) 347.802094ms ago: executing program 3 (id=1648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000002480)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x9, 0xd220000, 0x8001, 0x8001, 0x0, 0x1ff, 0x0, 0x0, 0x40, 0x2e5}}, 0x50) 311.005855ms ago: executing program 6 (id=1649): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000a40)='0fc5:1227:dl', 0xc) 244.332571ms ago: executing program 3 (id=1651): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x7fffffff}, &(0x7f00000002c0)=0x8) 244.123647ms ago: executing program 6 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000140)=r1) 243.851157ms ago: executing program 3 (id=1654): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$eJzs3e9rI2kdAPDvTJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1tWkrTpjTpuS2H9vCFLwURFfwDfCP4Bwhyf4IIB/peVBTRPX2pO5Jkgv2RNKFNN73084Fpnmcm83y/z9BMZiYPMwFcWS9ExP2IKETESxExl89P8ykOOlPrfR88eme5NSWRZW/9I4kkn9dtq1Wfiogb+WozEfHNr0XcSk/GbeztbyzVatWdvF5pbm5XGnv7d9c3l9aqa9WthYX5VxdfW3xl8V6WO1c/SxHx+lf+8pMf/uKrr//mc9/544O/3fluK98vfaKTd0QsnytAH522i+1t0dXaRjsXEWxMWv0pFsadBQAAw2gdmn80Ij7dPv6fi0L7aA4AAACYJNkbs/GfJCIDAAAAJlYaEbORpOV8LMBspGm53BnD+/G4ntbqjeZnV+u7WyutZRGlKKar67XqvXyscCmKSas+n4+x7dZfPlZfiIhnIuLHc9fa9fJyvbYy7osfAAAAcEXceP7o+f+/59J2GQAAAJgwpb4VAAAAYFI45QcAAIDJ5/wfAAAAJtrX33yzNWXd53ivvL23u1F/++5KtbFR3txdLi/Xd7bLa/X6WvuefZuD2qvV69ufj63dh5VmtdGsNPb2H2zWd7eaD9aPPAIbAAAAeIKeef69PyQRcfDFa+0p8vsADjJ94ZkBl8qfx50AMEqFcScAjM3UuBMAxqY48B32EDDpkgHLTw7e6VwrjN9eTD4AAMDo3f7kyd//u7/tD742AHyYDTPWBwCYLH7dg6ureNYRgDdHnQkwLh/pvDzVb3nfm3cM8ft/5xpDlp0pMQAAYGRm21OSlvPj9NlI03I54un2YwGKyep6rXovPz/4/VzxqVZ9vr1mMnDMMAAAAAAAAAAAAAAAAAAAAAAAAADQkWVJZAAAAMBEi0j/mrTv5h9xe+7F2aNXB4499evnb/304VKzuTMfMZ38c641azoimj/L57+ceSQAAAAAXAKd8/T8dX7c2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaT549M5yd3qScf/+5Ygo9Yo/FTPt15koRsT1fyUxdWi9JCIKI4h/8G5E3OwVP4nHWZaV8ix6xb92wfFL7U0zkyX5ew/HTyPixgjiw1X2Xmv/c7/X5y+NF9qvvT//U8c+j2fV3f9N5/XD8bv7v0Kf/c/Th+tp/xjPvv+rSt/470Y8O9WJez+O7n+68ZNO/CSOxb81ZB+//a39/Z4LDjXZa/93OFalubldaezt313fXFqrrlW3FhbmX118bfGVxXuV1fVaNf/bM8yPPvXrx6f1/3qf+KWj/T+x/V8cqvdZ/Pf9h48+1qkUe8W/c6v39+/NPvHT/LvvM3m5tfx2t3zQKR/23C9/99xp/V/p0/+ZAf2/M1T/4wsvfeP7f+q55MTWAACehMbe/sZSrVbdOaUwM8R7hi4URtLOGyPL57IU4nKkMa5C9r3O/+P52jnn6icKWfUHZ199KkaQxvSJz2khztpgEnHQamvIf0gAAGDC/P+gPxl3KgAAAAAAAAAAAAAAAAAAAHBlnfG2ZDMR0ZlTHHw7seMxD8bTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU/0vAAD//xluyPE=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x4, 0xfffffffffffffffb, 0x0, 0x84}) 197.923188ms ago: executing program 0 (id=1655): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00840000000004000c001a8004000580"], 0x2c}}, 0x0) 193.874027ms ago: executing program 6 (id=1656): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="707265765f73746174652e66756e6374696f6e203d3d78d0d00ee6bb0a04", 0x1e) 162.773516ms ago: executing program 0 (id=1657): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x4000003e) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) 144.517424ms ago: executing program 6 (id=1658): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a0000012cbd7000dbdbdf2500000000008941bc7953b88b56"], 0x20}}, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x9, 0x9936c5154318bee0, 0x8}}]}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 122.633408ms ago: executing program 3 (id=1659): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x10000, 0x4, 0x2}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_BIND=@ipv4={0x38, 0x44, 0x0, r0, 0x10, &(0x7f0000000480)={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x44de, 0x6d90, 0x8, 0x0, 0x0) 113.585468ms ago: executing program 0 (id=1660): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x 1', 0x4) 86.191195ms ago: executing program 3 (id=1661): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r0, 0x4e44, 0x0) 69.170251ms ago: executing program 0 (id=1662): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 47.420135ms ago: executing program 0 (id=1663): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x2000) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000001300)={&(0x7f0000001200), 0x0}) 0s ago: executing program 0 (id=1664): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@local}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) kernel console output (not intermixed with test programs): eth0_macvtap: entered promiscuous mode [ 30.832652][ T4722] veth0_vlan: entered promiscuous mode [ 30.834560][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.835602][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.837963][ T1364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.838109][ T1364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.838132][ T1364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.838153][ T1364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.845713][ T4722] veth1_vlan: entered promiscuous mode [ 30.848092][ T4721] veth1_macvtap: entered promiscuous mode [ 30.864884][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.877608][ T4891] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x20 [ 30.877951][ T1405] maxtcpc 0-0020: error -EIO: Failed to read TCPC_POWER_STATUS [ 30.879545][ T1405] maxtcpc 0-0020: probe with driver maxtcpc failed with error -5 [ 30.899774][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.900849][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.901137][ T1364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.902457][ T1364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.903242][ T1364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.903325][ T1364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.903521][ T1364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.931839][ T4722] veth0_macvtap: entered promiscuous mode [ 30.944241][ T4722] veth1_macvtap: entered promiscuous mode [ 30.965449][ T1405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.965481][ T1405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.973391][ T1364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.973419][ T1364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.981418][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.981599][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.981681][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.981689][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.981766][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.994426][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.999801][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.018029][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.018070][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.044743][ T4897] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8'. [ 31.068065][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.068096][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.097486][ T1405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.097520][ T1405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.100059][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.110412][ T1405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.112654][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.112694][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.112703][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.112959][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.119807][ T4903] loop3: detected capacity change from 0 to 256 [ 31.120845][ T4903] ======================================================= [ 31.120845][ T4903] WARNING: The mand mount option has been deprecated and [ 31.120845][ T4903] and is ignored by this kernel. Remove the mand [ 31.120845][ T4903] option from the mount to silence this warning. [ 31.120845][ T4903] ======================================================= [ 31.170976][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.171005][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.206180][ T4911] loop0: detected capacity change from 0 to 1024 [ 31.206543][ T4911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.215391][ T4909] loop4: detected capacity change from 0 to 128 [ 31.260046][ T4909] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.289697][ T4719] Bluetooth: hci1: command tx timeout [ 31.289700][ T4713] Bluetooth: hci0: command tx timeout [ 31.290279][ T4723] Bluetooth: hci3: command tx timeout [ 31.290374][ T4716] Bluetooth: hci2: command tx timeout [ 31.291823][ T4726] Bluetooth: hci4: command tx timeout [ 31.317335][ T4911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.322331][ T4721] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.431440][ T4937] loop3: detected capacity change from 0 to 4096 [ 31.438719][ T4937] EXT4-fs (loop3): Test dummy encryption mode enabled [ 31.462226][ T4937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.497569][ T4946] loop1: detected capacity change from 0 to 512 [ 31.517007][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.517240][ T4946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.579203][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.584019][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.704943][ T4957] loop0: detected capacity change from 0 to 8192 [ 31.709744][ T4957] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.733637][ T4971] binder: 4970:4971 ioctl c018620c 200000c0 returned -1 [ 31.905305][ T4986] bridge0: port 2(bridge_slave_1) entered listening state [ 31.906896][ T4986] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.936772][ T4993] capability: warning: `syz.0.45' uses deprecated v2 capabilities in a way that may be insecure [ 31.943695][ T4993] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 31.986702][ T4388] kernel write not supported for file /27/net/netstat (pid: 4388 comm: kworker/0:3) [ 32.080185][ T5008] loop3: detected capacity change from 0 to 1024 [ 32.098069][ T5008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.135470][ T39] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 6) [ 32.141421][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 32.141457][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.141457][ T39] [ 32.150162][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 32.153567][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 13 with error 28 [ 32.153603][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.153603][ T12] [ 32.153618][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 32.153633][ T12] EXT4-fs (loop3): Free/Dirty block details [ 32.153647][ T12] EXT4-fs (loop3): free_blocks=0 [ 32.153663][ T12] EXT4-fs (loop3): dirty_blocks=16 [ 32.153674][ T12] EXT4-fs (loop3): Block reservation details [ 32.173096][ T4711] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 32.197795][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 32.206487][ T5022] vlan2: entered allmulticast mode [ 32.206523][ T5022] macsec0: entered allmulticast mode [ 32.206552][ T5022] veth1_macvtap: entered allmulticast mode [ 32.212280][ T5022] batman_adv: batadv0: Adding interface: vlan2 [ 32.212310][ T5022] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.212345][ T5022] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 32.230243][ T5023] loop0: detected capacity change from 0 to 4096 [ 32.241363][ T5023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.268688][ T5023] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.59: corrupted inode contents [ 32.274312][ T5023] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.59: mark_inode_dirty error [ 32.276530][ T5023] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.59: corrupted inode contents [ 32.280715][ T5023] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.59: mark_inode_dirty error [ 32.282886][ T5023] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.59: corrupted inode contents [ 32.285209][ T5023] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.59: mark_inode_dirty error [ 32.287484][ T5023] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.59: corrupted inode contents [ 32.291091][ T5023] EXT4-fs error (device loop0): ext4_truncate:4691: inode #15: comm syz.0.59: mark_inode_dirty error [ 32.293139][ T5023] EXT4-fs error (device loop0) in ext4_setattr:6172: Corrupt filesystem [ 32.297324][ T5031] loop3: detected capacity change from 0 to 8192 [ 32.303049][ T5031] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.312635][ T5023] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.59: corrupted inode contents [ 32.340968][ T4718] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 32.341495][ T4718] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 32.343787][ T4718] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 32.356553][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.396076][ T5038] loop2: detected capacity change from 0 to 1024 [ 32.433305][ T5038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.465016][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.490495][ T5047] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.490537][ T5047] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 32.504263][ T5047] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.67: bg 0: block 255: padding at end of block bitmap is not set [ 32.504339][ T5047] loop3: lost filesystem error report for type 5 error -117 [ 32.508633][ T5047] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 32.508677][ T5047] loop3: lost filesystem error report for type 5 error -117 [ 32.509760][ T5047] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.67: invalid indirect mapped block 1 (level 1) [ 32.509782][ T5047] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 32.510060][ T5047] EXT4-fs (loop3): 1 truncate cleaned up [ 32.515327][ T5047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.597034][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.846508][ T5095] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 32.966064][ T30] audit: type=1326 audit(32.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 32.987606][ T30] audit: type=1326 audit(32.970:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 32.987649][ T30] audit: type=1326 audit(32.970:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 32.987665][ T30] audit: type=1326 audit(32.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 32.989188][ T30] audit: type=1326 audit(32.970:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 32.989206][ T30] audit: type=1326 audit(32.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 32.989235][ T30] audit: type=1326 audit(32.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 32.989250][ T30] audit: type=1326 audit(32.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 32.991603][ T30] audit: type=1326 audit(32.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 32.991979][ T30] audit: type=1326 audit(32.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5109 comm="syz.2.98" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579228 code=0x7ffc0000 [ 33.078061][ T5120] EXT4-fs: Conflicting test_dummy_encryption options [ 33.196580][ T5138] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 33.369451][ T4726] Bluetooth: hci2: command tx timeout [ 33.369490][ T4726] Bluetooth: hci4: command tx timeout [ 33.369519][ T4726] Bluetooth: hci3: command tx timeout [ 33.369544][ T4726] Bluetooth: hci0: command tx timeout [ 33.369563][ T4726] Bluetooth: hci1: command tx timeout [ 33.614076][ T5168] netlink: 'syz.4.124': attribute type 3 has an invalid length. [ 33.677505][ T5177] EXT4-fs (loop3): Test dummy encryption mode enabled [ 33.682064][ T5177] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.128: corrupted in-inode xattr: invalid ea_ino [ 33.682165][ T5177] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.685241][ T5177] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.128: couldn't read orphan inode 15 (err -117) [ 33.689406][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 33.689420][ C0] EXT4-fs (loop3): initial error at time 33: ext4_iget_extra_inode:5180: inode 15 [ 33.689449][ C0] EXT4-fs (loop3): last error at time 33: ext4_iget_extra_inode:5180: inode 15 [ 33.695090][ T5177] loop3: lost filesystem error report for type 5 error -117 [ 33.696750][ T5177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.722389][ T5177] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 33.759915][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.864923][ T4813] IPVS: starting estimator thread 0... [ 33.865239][ T5198] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 33.881314][ T5197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.945251][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.958328][ T5200] IPVS: using max 60 ests per chain, 144000 per kthread [ 34.068336][ T5218] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.145: bad orphan inode 15 [ 34.068376][ T5218] loop2: lost filesystem error report for type 5 error -117 [ 34.071570][ T5218] ext4_test_bit(bit=14, block=5) = 0 [ 34.074980][ T5218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.097919][ T5220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.133149][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.167277][ T5228] usb_storage.quirks: string doesn't fit in 127 chars. [ 34.203903][ T5233] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.146: bg 0: block 345: padding at end of block bitmap is not set [ 34.205032][ T5233] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 34.205048][ T5233] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.205048][ T5233] [ 34.219183][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 604 with error 28 [ 34.219215][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.219215][ T12] [ 34.219225][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 34.219235][ T12] EXT4-fs (loop4): Free/Dirty block details [ 34.219243][ T12] EXT4-fs (loop4): free_blocks=0 [ 34.219251][ T12] EXT4-fs (loop4): dirty_blocks=608 [ 34.219257][ T12] EXT4-fs (loop4): Block reservation details [ 34.293768][ T4721] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 34.333255][ T5246] netlink: 'syz.2.157': attribute type 12 has an invalid length. [ 34.333289][ T5246] netlink: 'syz.2.157': attribute type 29 has an invalid length. [ 34.333356][ T5246] netlink: 148 bytes leftover after parsing attributes in process `syz.2.157'. [ 34.333371][ T5246] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 34.333379][ T5246] netlink: 'syz.2.157': attribute type 2 has an invalid length. [ 34.464157][ T5267] netlink: 36 bytes leftover after parsing attributes in process `syz.1.167'. [ 34.527657][ T5269] binder: 5268:5269 ioctl 40046205 0 returned -22 [ 34.527990][ T5269] binder: 5268:5269 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 34.528024][ T5269] binder: 5269 RLIMIT_NICE not set [ 34.554230][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 34.554268][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 34.643421][ T5285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.747591][ T5305] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 34.747810][ T5305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.758053][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.762327][ T5305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.762387][ T5305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.809128][ T5305] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 34.827861][ T5305] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 34.828742][ T5311] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.847848][ T5311] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 34.850314][ T5305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.851184][ T5305] team0: Port device bond0 added [ 34.851652][ T5315] netlink: 'syz.4.187': attribute type 4 has an invalid length. [ 34.920092][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.929761][ T5319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.944794][ T5326] netlink: 'syz.3.193': attribute type 12 has an invalid length. [ 34.944822][ T5326] netlink: 'syz.3.193': attribute type 29 has an invalid length. [ 34.944846][ T5326] netlink: 148 bytes leftover after parsing attributes in process `syz.3.193'. [ 34.977107][ T5319] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.006479][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.017805][ T5334] < [ 35.132986][ T5345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.170304][ T5352] evm: overlay not supported [ 35.180063][ T5356] alloc_netdev: Unable to allocate device with zero queues [ 35.189283][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.227295][ T5363] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 35.227295][ T5363] The task syz.4.206 (5363) triggered the difference, watch for misbehavior. [ 35.448650][ T4716] Bluetooth: hci1: command tx timeout [ 35.448982][ T4726] Bluetooth: hci0: command tx timeout [ 35.449043][ T4716] Bluetooth: hci3: command tx timeout [ 35.449077][ T4716] Bluetooth: hci4: command tx timeout [ 35.449097][ T4716] Bluetooth: hci2: command tx timeout [ 35.540195][ T5402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.561782][ T5402] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 35.583589][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.615624][ T5412] EXT4-fs: Ignoring removed nobh option [ 35.626060][ T5412] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.629365][ T5412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 35.629474][ T5412] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.634398][ T5412] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.234: attempt to clear invalid blocks 1024 len 1 [ 35.637130][ T5412] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.637563][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 35.639443][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 35.639453][ C1] EXT4-fs (loop3): initial error at time 35: ext4_clear_blocks:876: inode 11 [ 35.639468][ C1] EXT4-fs (loop3): last error at time 35: ext4_clear_blocks:876: inode 11 [ 35.651841][ T5412] EXT4-fs (loop3): 1 truncate cleaned up [ 35.654240][ T5412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.698946][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 35.804662][ T5434] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.242: inode has both inline data and extents flags [ 35.804699][ T5434] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.804960][ T5434] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.242: couldn't read orphan inode 15 (err -117) [ 35.804978][ T5434] loop1: lost filesystem error report for type 5 error -117 [ 35.805570][ T5434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.839852][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.941754][ T5454] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 36.142917][ T5483] set_capacity_and_notify: 20 callbacks suppressed [ 36.143575][ T5483] loop3: detected capacity change from 0 to 256 [ 36.189064][ T5488] œ [ 36.234999][ T5494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.270'. [ 36.235039][ T5494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.270'. [ 36.295213][ T4300] hid-generic 0000:FFFFFFFE:0800.0001: unknown main item tag 0x0 [ 36.295247][ T4300] hid-generic 0000:FFFFFFFE:0800.0001: unknown main item tag 0x0 [ 36.306360][ T4300] hid-generic 0000:FFFFFFFE:0800.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.440423][ T5508] fido_id[5508]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.456573][ T5529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 36.495304][ T5532] Zero length message leads to an empty skb [ 36.711032][ T5562] loop4: detected capacity change from 0 to 256 [ 36.711423][ T5559] loop1: detected capacity change from 0 to 1024 [ 36.714674][ T5562] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.722337][ T5559] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.729078][ T5559] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 36.729201][ T5559] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.730824][ T5559] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.301: Invalid inode table block 0 in block_group 0 [ 36.730844][ T5559] loop1: lost filesystem error report for type 5 error -117 [ 36.731506][ T5559] EXT4-fs (loop1): Remounting filesystem read-only [ 36.731660][ T5559] EXT4-fs (loop1): 1 truncate cleaned up [ 36.738221][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 36.738249][ C0] EXT4-fs (loop1): initial error at time 36: __ext4_get_inode_loc:4886 [ 36.738281][ C0] EXT4-fs (loop1): last error at time 36: __ext4_get_inode_loc:4886 [ 36.755126][ T5559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.784077][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.905286][ T5589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 36.905343][ T5588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 36.985294][ T5599] loop4: detected capacity change from 0 to 128 [ 36.999788][ T5599] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.016189][ T4721] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.135035][ T5618] loop4: detected capacity change from 0 to 512 [ 37.137690][ T5618] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 37.140400][ T5618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 37.140468][ T5618] System zones: 1-12 [ 37.140591][ T5618] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.145638][ T5618] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.327: bg 0: block 361: padding at end of block bitmap is not set [ 37.145682][ T5618] loop4: lost filesystem error report for type 5 error -117 [ 37.148458][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 37.148469][ C1] EXT4-fs (loop4): initial error at time 37: ext4_validate_block_bitmap:441 [ 37.148483][ C1] EXT4-fs (loop4): last error at time 37: ext4_validate_block_bitmap:441 [ 37.155551][ T5618] EXT4-fs (loop4): Remounting filesystem read-only [ 37.155690][ T5618] EXT4-fs (loop4): 1 truncate cleaned up [ 37.158938][ T5618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 37.166958][ T4723] Bluetooth: hci3: Malformed LE Event: 0x0d [ 37.177119][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 37.319530][ T5641] tap0: tun_chr_ioctl cmd 1074025677 [ 37.320654][ T5641] tap0: linktype set to 769 [ 37.379618][ T5648] loop0: detected capacity change from 0 to 256 [ 37.414449][ T5653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'. [ 37.414488][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 37.483239][ T5661] loop0: detected capacity change from 0 to 512 [ 37.486995][ T5661] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.489939][ T5661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 37.489991][ T5661] System zones: 1-12 [ 37.500123][ T5661] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.502988][ T5661] EXT4-fs (loop0): 1 truncate cleaned up [ 37.503441][ T5661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.522642][ T5661] EXT4-fs (loop0): shut down requested (1) [ 37.528491][ T4723] Bluetooth: hci0: command tx timeout [ 37.528532][ T4723] Bluetooth: hci2: command tx timeout [ 37.528561][ T4723] Bluetooth: hci4: command tx timeout [ 37.528585][ T4723] Bluetooth: hci3: command tx timeout [ 37.528607][ T4723] Bluetooth: hci1: command tx timeout [ 37.542177][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.602055][ T5674] loop4: detected capacity change from 0 to 256 [ 37.603739][ T5674] vfat: Unknown parameter '0xffffffffffffffff' [ 37.655848][ T5678] loop0: detected capacity change from 0 to 512 [ 37.666282][ T5678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.701692][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.844963][ T5698] loop3: detected capacity change from 0 to 1024 [ 37.857933][ T5698] EXT4-fs: Invalid want_extra_isize 2 [ 37.885465][ T5702] EXT4-fs (loop1): bad s_min_extra_isize: 65535 [ 38.151979][ T1364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.233400][ T4716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 38.234927][ T4716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 38.236380][ T4716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 38.240610][ T4716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 38.240892][ T4716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 38.244207][ T1364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.261550][ T5733] tipc: Started in network mode [ 38.261582][ T5733] tipc: Node identity ac14140f, cluster identity 4711 [ 38.262131][ T5733] tipc: New replicast peer: 255.255.255.255 [ 38.263492][ T5733] tipc: Enabled bearer , priority 10 [ 38.321690][ T1364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.403462][ T1364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.454807][ T5761] netlink: 232 bytes leftover after parsing attributes in process `syz.4.391'. [ 38.484067][ T5764] EXT4-fs: Ignoring removed oldalloc option [ 38.486567][ T5764] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 38.502417][ T5764] EXT4-fs (loop4): 1 truncate cleaned up [ 38.503028][ T5764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.534690][ T5764] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.392: invalid indirect mapped block 4294901760 (level 0) [ 38.538140][ T5764] EXT4-fs (loop4): Remounting filesystem read-only [ 38.580549][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.629721][ T1364] bridge_slave_1: left allmulticast mode [ 38.629763][ T1364] bridge_slave_1: left promiscuous mode [ 38.630163][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.635598][ T1364] bridge_slave_0: left allmulticast mode [ 38.635948][ T1364] bridge_slave_0: left promiscuous mode [ 38.636023][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.714756][ T1364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.740093][ T1364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.779418][ T1364] bond0 (unregistering): Released all slaves [ 38.781849][ T1364] bond1 (unregistering): Released all slaves [ 38.873010][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.873069][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.873172][ T5730] bridge_slave_0: entered allmulticast mode [ 38.873793][ T5730] bridge_slave_0: entered promiscuous mode [ 38.877567][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.877635][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.877693][ T5730] bridge_slave_1: entered allmulticast mode [ 38.879583][ T5730] bridge_slave_1: entered promiscuous mode [ 38.947488][ T5356] netdevsim netdevsim10: probe with driver netdevsim failed with error -12 [ 39.011338][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.056110][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.094490][ T5730] team0: Port device team_slave_0 added [ 39.095331][ T5730] team0: Port device team_slave_1 added [ 39.164775][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.164811][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.164826][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.166737][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.166748][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.166767][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.199044][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 39.257370][ T1364] hsr_slave_0: left promiscuous mode [ 39.259127][ T1364] hsr_slave_1: left promiscuous mode [ 39.259441][ T1364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.259458][ T1364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.264708][ T1364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.264737][ T1364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.290368][ T1364] veth1_macvtap: left promiscuous mode [ 39.290424][ T1364] veth0_macvtap: left promiscuous mode [ 39.290487][ T1364] veth1_vlan: left promiscuous mode [ 39.290531][ T1364] veth0_vlan: left promiscuous mode [ 39.302073][ T5812] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.406715][ T5823] process 'syz.4.408' launched '/dev/fd/4' with NULL argv: empty string added [ 39.504266][ T1364] team0 (unregistering): Port device team_slave_1 removed [ 39.514055][ T1364] team0 (unregistering): Port device team_slave_0 removed [ 39.612526][ T5730] hsr_slave_0: entered promiscuous mode [ 39.613271][ T5730] hsr_slave_1: entered promiscuous mode [ 39.613470][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 39.613480][ T5730] Cannot create hsr debugfs directory [ 39.613548][ T4799] tipc: Node number set to 2886997007 [ 39.697458][ T5847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.726219][ T5855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.422'. [ 39.740561][ T5847] EXT4-fs warning (device loop3): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 39.769249][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.915799][ T5882] ip_tables: iptables: counters copy to user failed while replacing table [ 39.943261][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.009595][ T4726] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 40.097723][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 40.133928][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.141075][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.144374][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.146955][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.150153][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.156051][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.157705][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.163191][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.248462][ T4723] Bluetooth: hci5: command tx timeout [ 40.269982][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.281753][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.285801][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.285868][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.300146][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.300195][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.361937][ T5944] Injecting memory failure for pfn 0x120f2a at process virtual address 0x20000000 [ 40.365170][ T5947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 40.377090][ T5944] Memory failure: 0x120f2a: Sending SIGBUS to syz.3.446:5944 due to hardware memory corruption [ 40.377232][ T5944] Memory failure: 0x120f2a: recovery action for dirty LRU page: Recovered [ 40.377266][ T5944] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 40.378145][ T5944] Memory failure: 0x219270: unhandlable page. [ 40.378168][ T5944] Memory failure: 0x219270: recovery action for get hwpoison page: Ignored [ 40.487744][ T5968] EXT4-fs: inline encryption not supported [ 40.500617][ T5968] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 40.502625][ T5968] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.453: invalid indirect mapped block 2683928664 (level 1) [ 40.502658][ T5968] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.506592][ T5968] EXT4-fs (loop4): 1 truncate cleaned up [ 40.507064][ T5968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.533858][ T5968] EXT4-fs (loop4): shut down requested (2) [ 40.569376][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.575688][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.593269][ T5730] veth0_vlan: entered promiscuous mode [ 40.595397][ T5730] veth1_vlan: entered promiscuous mode [ 40.610723][ T5730] veth0_macvtap: entered promiscuous mode [ 40.611834][ T5730] veth1_macvtap: entered promiscuous mode [ 40.622713][ T5982] capability: warning: `syz.4.456' uses 32-bit capabilities (legacy support in use) [ 40.626061][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.627100][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.649070][ T1181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.665863][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 40.665898][ T30] audit: type=1326 audit(40.650:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.3.458" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f379228 code=0x0 [ 40.722448][ T5994] squashfs image failed sanity check [ 40.782463][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.782494][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.789479][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.789520][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.789549][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.816056][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.816095][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.826243][ T6007] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 40.826280][ T6007] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 40.826343][ T6007] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 40.830973][ T6007] EXT4-fs error (device loop2): ext4_get_journal_inode:5900: inode #32: comm syz.2.463: iget: special inode unallocated [ 40.830997][ T6007] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 40.831181][ T6007] EXT4-fs (loop2): no journal found [ 40.831189][ T6007] EXT4-fs (loop2): can't get journal size [ 40.837365][ T6007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.858545][ T6007] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 40.862713][ T6007] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1332: inode #12: block 16: comm syz.2.463: path /: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 40.905988][ T4722] EXT4-fs error (device loop2): __ext4_iget:5533: inode #15: block 1803188595: comm syz-executor: invalid block [ 40.910389][ T4722] EXT4-fs error (device loop2): __ext4_iget:5533: inode #15: block 1803188595: comm syz-executor: invalid block [ 40.983255][ T6022] EXT4-fs (loop0): Test dummy encryption mode enabled [ 40.992631][ T6022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.019310][ T5730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.176977][ T6036] set_capacity_and_notify: 9 callbacks suppressed [ 41.178891][ T6036] loop0: detected capacity change from 0 to 2048 [ 41.192172][ T6036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.213119][ T6036] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.474: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 41.218141][ T6036] EXT4-fs (loop0): Remounting filesystem read-only [ 41.226834][ T5730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.261122][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.301713][ T1364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.377757][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.380094][ T4726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.381654][ T4726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.386033][ T6044] loop0: detected capacity change from 0 to 8192 [ 41.387471][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.390385][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.408456][ T6044] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 41.408491][ T6044] FAT-fs (loop0): Filesystem has been set read-only [ 41.411408][ T6044] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 41.413185][ T6044] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 41.413412][ T6044] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 41.421597][ T1364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.521704][ T1364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.532858][ T6065] loop3: detected capacity change from 0 to 8 [ 41.564290][ T6069] loop4: detected capacity change from 0 to 512 [ 41.575482][ T6069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.611306][ T1364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.672078][ T6082] loop1: detected capacity change from 0 to 4096 [ 41.682697][ T6082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.739877][ T6087] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 41.757247][ T1364] bridge_slave_1: left allmulticast mode [ 41.758563][ T1364] bridge_slave_1: left promiscuous mode [ 41.759942][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.777035][ T1364] bridge_slave_0: left allmulticast mode [ 41.779515][ T1364] bridge_slave_0: left promiscuous mode [ 41.779622][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.795395][ T6082] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 41.833236][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.895195][ T6105] loop1: detected capacity change from 0 to 512 [ 41.896908][ T6105] EXT4-fs: Ignoring removed bh option [ 41.899561][ T6105] EXT4-fs: Ignoring removed bh option [ 41.907114][ T6105] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.917219][ T6105] EXT4-fs error (device loop1): __ext4_add_entry:2412: inode #2: comm syz.1.499: Directory hole found for htree leaf block 0 [ 41.921258][ T6105] EXT4-fs (loop1): Remounting filesystem read-only [ 41.924281][ T1364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.935943][ T4712] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 41.940499][ T1364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.960392][ T1364] bond0 (unregistering): Released all slaves [ 42.061325][ T6115] __nla_validate_parse: 1 callbacks suppressed [ 42.061360][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 42.095762][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.095806][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.095905][ T6047] bridge_slave_0: entered allmulticast mode [ 42.096336][ T6047] bridge_slave_0: entered promiscuous mode [ 42.140218][ T6129] validate_nla: 2 callbacks suppressed [ 42.142748][ T6129] netlink: 'syz.1.504': attribute type 2 has an invalid length. [ 42.142868][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 42.147722][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.147766][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.147875][ T6047] bridge_slave_1: entered allmulticast mode [ 42.150778][ T6047] bridge_slave_1: entered promiscuous mode [ 42.178953][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.213256][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.285659][ T6146] mmap: syz.3.509 (6146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.291085][ T6047] team0: Port device team_slave_0 added [ 42.292148][ T6047] team0: Port device team_slave_1 added [ 42.292648][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 42.319438][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.320948][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.325411][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.328178][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.328791][ T4726] Bluetooth: hci5: command tx timeout [ 42.331382][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.336746][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.381495][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.394274][ T1364] hsr_slave_0: left promiscuous mode [ 42.397162][ T1364] hsr_slave_1: left promiscuous mode [ 42.397482][ T1364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.397494][ T1364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.399477][ T1364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.399493][ T1364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.400169][ T1364] batman_adv: batadv0: Removing interface: vlan2 [ 42.417482][ T1364] veth1_macvtap: left allmulticast mode [ 42.417515][ T1364] veth1_macvtap: left promiscuous mode [ 42.417551][ T1364] veth0_macvtap: left promiscuous mode [ 42.417603][ T1364] veth1_vlan: left promiscuous mode [ 42.417682][ T1364] veth0_vlan: left promiscuous mode [ 42.446290][ T6151] usb usb7: usbfs: process 6151 (syz.4.511) did not claim interface 0 before use [ 42.501220][ T30] audit: type=1400 audit(42.490:23): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="l" requested=r pid=6158 comm="syz.3.515" name="file1" dev="tmpfs" ino=645 [ 42.596590][ T1364] team0 (unregistering): Port device team_slave_1 removed [ 42.604274][ T1364] team0 (unregistering): Port device team_slave_0 removed [ 42.685154][ T6163] bond0: invalid ARP target specified [ 42.686688][ T6149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.510'. [ 42.690590][ T6165] tun0: tun_chr_ioctl cmd 1074025681 [ 42.729700][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 42.731826][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 42.733386][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 42.742139][ T6047] hsr_slave_0: entered promiscuous mode [ 42.744446][ T6047] hsr_slave_1: entered promiscuous mode [ 42.744694][ T6047] debugfs: 'hsr0' already exists in 'hsr' [ 42.744709][ T6047] Cannot create hsr debugfs directory [ 42.915074][ T6047] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.927074][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.927397][ T6047] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.935458][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.941999][ T6047] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.954674][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.967132][ T6195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.526'. [ 42.973853][ T6047] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.976440][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.979579][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.013406][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.013463][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.013555][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.013594][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.071223][ T6217] ubi31: attaching mtd0 [ 43.072243][ T6217] ubi31 error: ubi_attach_mtd_dev: bad VID header (28) or data offsets (92) [ 43.082946][ T6212] veth0_to_bond: entered allmulticast mode [ 43.090613][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.092122][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.123036][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.142157][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.146153][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.146216][ T1471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.182879][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.182932][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.244991][ T6243] loop3: detected capacity change from 0 to 512 [ 43.245333][ T6243] EXT4-fs: Ignoring removed orlov option [ 43.245352][ T6243] EXT4-fs: Ignoring removed oldalloc option [ 43.250426][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 43.250980][ T6243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.274290][ T6243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.353631][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.448944][ T4726] Bluetooth: hci2: command tx timeout [ 43.475707][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.607319][ T4403] 8021q: adding VLAN 0 to HW filter on device eth3 [ 43.610721][ T6047] veth0_vlan: entered promiscuous mode [ 43.616135][ T6047] veth1_vlan: entered promiscuous mode [ 43.631968][ T6047] veth0_macvtap: entered promiscuous mode [ 43.654323][ T6047] veth1_macvtap: entered promiscuous mode [ 43.667499][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.669683][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.005186][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.014230][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.033121][ T1471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.036127][ T1405] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.036166][ T1405] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.036185][ T1405] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.057032][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.057062][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.095612][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.095641][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.103054][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 44.105150][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 44.194923][ T6316] loop4: detected capacity change from 0 to 512 [ 44.206819][ T6316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.556: bg 0: block 5: invalid block bitmap [ 44.206857][ T6316] loop4: lost filesystem error report for type 5 error -117 [ 44.208227][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 44.208250][ C0] EXT4-fs (loop4): initial error at time 44: ext4_validate_block_bitmap:432 [ 44.208262][ C0] EXT4-fs (loop4): last error at time 44: ext4_validate_block_bitmap:432 [ 44.211961][ T6316] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 44.211980][ T6316] loop4: lost filesystem error report for type 5 error -117 [ 44.212155][ T6316] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.556: invalid indirect mapped block 3 (level 2) [ 44.212172][ T6316] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.212397][ T6316] EXT4-fs (loop4): 1 orphan inode deleted [ 44.212406][ T6316] EXT4-fs (loop4): 1 truncate cleaned up [ 44.212881][ T6316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.248183][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.360353][ T6334] loop4: detected capacity change from 0 to 4096 [ 44.373423][ T6334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.391542][ T6334] EXT4-fs (loop4): shut down requested (0) [ 44.408412][ T4726] Bluetooth: hci5: command tx timeout [ 44.431644][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.431833][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.506868][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.579994][ T6359] loop5: detected capacity change from 0 to 4096 [ 44.607023][ T6359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.634990][ T6359] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.652755][ T6047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.710161][ T6373] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.721347][ T6378] netlink: 'syz.0.581': attribute type 4 has an invalid length. [ 44.725681][ T6373] fscrypt (loop5, inode 12): Direct key flag not allowed with different contents and filenames modes [ 44.742446][ T6047] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.776469][ T6376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.805015][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.827203][ T6384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.835424][ T6384] EXT4-fs (loop5): shut down requested (0) [ 44.854023][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.920616][ T6047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.992318][ T6389] fs-verity (loop3, inode 13): Error -28 writing Merkle tree block 1441 [ 44.994619][ T6389] fs-verity (loop3, inode 13): Error -28 building Merkle tree [ 45.004576][ T6406] netlink: 'syz.1.590': attribute type 10 has an invalid length. [ 45.004754][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.004916][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.015207][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.015273][ T6406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.015359][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.015391][ T6406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.016378][ T6406] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 45.047415][ T6406] netlink: 'syz.1.590': attribute type 10 has an invalid length. [ 45.055408][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.061197][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.067038][ T6406] team0: Port device bond0 added [ 45.068123][ T6412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.211608][ T30] audit: type=1326 audit(45.200:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6432 comm="syz.1.601" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff85779228 code=0x0 [ 45.346082][ T6440] netlink: 'syz.3.606': attribute type 11 has an invalid length. [ 45.528952][ T4726] Bluetooth: hci2: command tx timeout [ 45.834374][ T6047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.978533][ T6461] team0: entered allmulticast mode [ 45.978566][ T6461] team_slave_0: entered allmulticast mode [ 45.978595][ T6461] team_slave_1: entered allmulticast mode [ 45.982175][ T6461] team0: left allmulticast mode [ 45.982196][ T6461] team_slave_0: left allmulticast mode [ 45.982221][ T6461] team_slave_1: left allmulticast mode [ 46.184739][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.625'. [ 46.275458][ T6496] set_capacity_and_notify: 6 callbacks suppressed [ 46.279152][ T6496] loop3: detected capacity change from 0 to 512 [ 46.284288][ T6496] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.290833][ T6496] FAT-fs (loop3): error, invalid access to FAT (entry 0x0ffffff6) [ 46.438506][ T6515] netlink: 'syz.1.640': attribute type 2 has an invalid length. [ 46.488552][ T4726] Bluetooth: hci5: command tx timeout [ 46.531316][ T6527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.531348][ T6527] IPv6: NLM_F_CREATE should be set when creating new route [ 46.531416][ T6527] IPv6: NLM_F_CREATE should be set when creating new route [ 46.531425][ T6527] IPv6: NLM_F_CREATE should be set when creating new route [ 46.534578][ T6527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.674615][ T6551] loop3: detected capacity change from 0 to 256 [ 46.675005][ T6551] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.937179][ T6582] loop0: detected capacity change from 0 to 128 [ 46.970329][ T6582] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.047403][ T5730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.102694][ T6594] loop0: detected capacity change from 0 to 512 [ 47.113284][ T6594] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 47.115659][ T6594] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 47.115708][ T6594] System zones: 1-12 [ 47.115812][ T6594] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.117082][ T6594] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.678: bg 0: block 361: padding at end of block bitmap is not set [ 47.117097][ T6594] loop0: lost filesystem error report for type 5 error -117 [ 47.117252][ T6594] EXT4-fs (loop0): Remounting filesystem read-only [ 47.117344][ T6594] EXT4-fs (loop0): 1 truncate cleaned up [ 47.119783][ T6594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.166631][ T4726] Bluetooth: hci5: Malformed LE Event: 0x0d [ 47.256346][ T6609] loop5: detected capacity change from 0 to 256 [ 47.256769][ T6609] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.363304][ T6617] __nla_validate_parse: 3 callbacks suppressed [ 47.364463][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.689'. [ 47.366011][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.689'. [ 47.477454][ T6627] loop3: detected capacity change from 0 to 256 [ 47.479348][ T6626] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.693'. [ 47.482788][ T6626] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.693'. [ 47.490485][ T6627] vfat: Unknown parameter '0xffffffffffffffff' [ 47.556938][ T6636] loop3: detected capacity change from 0 to 512 [ 47.608318][ T4726] Bluetooth: hci2: command tx timeout [ 47.740574][ T6660] loop3: detected capacity change from 0 to 512 [ 47.747085][ T6660] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 47.760842][ T6662] loop0: detected capacity change from 0 to 1024 [ 47.762425][ T6662] EXT4-fs: Invalid want_extra_isize 2 [ 47.849531][ T6668] bridge0: port 3(syz_tun) entered blocking state [ 47.849616][ T6668] bridge0: port 3(syz_tun) entered disabled state [ 47.849849][ T6668] syz_tun: entered allmulticast mode [ 47.852982][ T6668] syz_tun: entered promiscuous mode [ 47.853352][ T6668] bridge0: port 3(syz_tun) entered blocking state [ 47.853391][ T6668] bridge0: port 3(syz_tun) entered forwarding state [ 47.865022][ T6668] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 48.005858][ T6691] loop1: detected capacity change from 0 to 1024 [ 48.006756][ T6691] EXT4-fs: Invalid want_extra_isize 2 [ 48.100448][ T6701] bridge0: port 3(syz_tun) entered blocking state [ 48.100544][ T6701] bridge0: port 3(syz_tun) entered disabled state [ 48.101122][ T6701] syz_tun: entered allmulticast mode [ 48.109804][ T6701] syz_tun: entered promiscuous mode [ 48.110061][ T6701] bridge0: port 3(syz_tun) entered blocking state [ 48.110084][ T6701] bridge0: port 3(syz_tun) entered forwarding state [ 48.123887][ T6701] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 48.330606][ T6732] bridge0: port 3(syz_tun) entered blocking state [ 48.330654][ T6732] bridge0: port 3(syz_tun) entered disabled state [ 48.330756][ T6732] syz_tun: entered allmulticast mode [ 48.331260][ T6732] syz_tun: entered promiscuous mode [ 48.437950][ T6750] EXT4-fs: Ignoring removed oldalloc option [ 48.444048][ T6750] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.450914][ T6750] EXT4-fs (loop0): 1 truncate cleaned up [ 48.462738][ T6750] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.754: invalid indirect mapped block 4294901760 (level 0) [ 48.465665][ T6750] EXT4-fs (loop0): Remounting filesystem read-only [ 48.485554][ T6755] bonding: unable to delete non-existent b [ 49.698759][ T4726] Bluetooth: hci2: command tx timeout [ 52.640734][ T6770] set_capacity_and_notify: 1 callbacks suppressed [ 52.640779][ T6770] loop5: detected capacity change from 0 to 128 [ 52.711363][ T6782] netlink: 232 bytes leftover after parsing attributes in process `syz.0.766'. [ 52.747409][ T6788] loop3: detected capacity change from 0 to 512 [ 52.747786][ T6788] EXT4-fs: inline encryption not supported [ 52.754356][ T6788] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 52.757733][ T6788] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.770: invalid indirect mapped block 2683928664 (level 1) [ 52.757782][ T6788] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 52.758223][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.758254][ C1] EXT4-fs (loop3): initial error at time 52: ext4_free_branches:1023: inode 13 [ 52.758287][ C1] EXT4-fs (loop3): last error at time 52: ext4_free_branches:1023: inode 13 [ 52.765062][ T6788] EXT4-fs (loop3): 1 truncate cleaned up [ 52.791877][ T6788] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.770: invalid indirect mapped block 480848489 (level 1) [ 52.813666][ T1181] Bluetooth: hci4: Frame reassembly failed (-84) [ 52.995436][ T6817] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.084059][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 53.086249][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 53.106105][ T6828] loop5: detected capacity change from 0 to 128 [ 53.129251][ T6828] fscrypt (loop5, inode 12): Unsupported encryption flags (0x08) [ 53.196985][ T30] audit: type=1400 audit(53.180:25): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=r pid=6835 comm="syz.5.792" name="file1" dev="tmpfs" ino=241 [ 53.236704][ T6840] loop5: detected capacity change from 0 to 512 [ 53.237576][ T6840] EXT4-fs: inline encryption not supported [ 53.257936][ T6840] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 53.258102][ T6840] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.793: invalid indirect mapped block 2683928664 (level 1) [ 53.258117][ T6840] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.258228][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 53.258242][ C0] EXT4-fs (loop5): initial error at time 53: ext4_free_branches:1023: inode 13 [ 53.258261][ C0] EXT4-fs (loop5): last error at time 53: ext4_free_branches:1023: inode 13 [ 53.263875][ T6840] EXT4-fs (loop5): 1 truncate cleaned up [ 53.285579][ T6840] EXT4-fs (loop5): shut down requested (2) [ 53.394438][ T6856] syz.1.800 uses obsolete (PF_INET,SOCK_PACKET) [ 53.495114][ T4300] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 53.557610][ T6869] fido_id[6869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.627612][ T6881] loop4: detected capacity change from 0 to 256 [ 53.690297][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 53.702407][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 54.011410][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 54.096269][ T6955] loop1: detected capacity change from 0 to 256 [ 54.168901][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 54.396813][ T6990] binder: 6989:6990 ERROR: BC_REGISTER_LOOPER called without request [ 54.398540][ T6990] binder: 6989:6990 got transaction to invalid handle, 1 [ 54.399909][ T6990] binder: 6989:6990 cannot find target node [ 54.401014][ T6990] binder: 6989:6990 transaction async to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3252 [ 54.449670][ T6996] netlink: 116 bytes leftover after parsing attributes in process `syz.5.860'. [ 54.888619][ T4726] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.014277][ T7016] netlink: 'syz.0.868': attribute type 11 has an invalid length. [ 55.014371][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 55.102567][ T7028] netlink: 64 bytes leftover after parsing attributes in process `syz.4.873'. [ 55.107141][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.141356][ T7032] loop4: detected capacity change from 0 to 256 [ 55.332145][ T7063] loop5: detected capacity change from 0 to 512 [ 55.332494][ T7063] EXT4-fs: Ignoring removed oldalloc option [ 55.333768][ T7063] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.346873][ T7063] EXT4-fs (loop5): 1 orphan inode deleted [ 55.346904][ T7063] EXT4-fs (loop5): 1 truncate cleaned up [ 55.369666][ T7063] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 55.383265][ T7072] loop0: detected capacity change from 0 to 512 [ 55.384860][ T7063] EXT4-fs (loop5): Remounting filesystem read-only [ 55.385034][ T7063] overlayfs: failed to verify upper root origin [ 55.396557][ T7063] overlayfs: cleanup of 'bus/work' failed (-30) [ 55.396598][ T7063] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 55.442233][ T7072] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.890: resize_inode disabled but reserved GDT blocks non-zero [ 55.508063][ T7094] netlink: 'syz.4.897': attribute type 4 has an invalid length. [ 55.704167][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.779799][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.800133][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.800706][ T4726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.801051][ T4726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.801408][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.801642][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.855815][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.946387][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.124207][ T7171] loop3: detected capacity change from 0 to 512 [ 56.217505][ T40] bridge_slave_1: left allmulticast mode [ 56.218996][ T40] bridge_slave_1: left promiscuous mode [ 56.220305][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.225351][ T40] bridge_slave_0: left allmulticast mode [ 56.226534][ T40] bridge_slave_0: left promiscuous mode [ 56.227737][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.432641][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.461222][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.479267][ T40] bond0 (unregistering): Released all slaves [ 56.485026][ T4403] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.714439][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.714487][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.714649][ T7129] bridge_slave_0: entered allmulticast mode [ 56.715100][ T7129] bridge_slave_0: entered promiscuous mode [ 56.715861][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.715891][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.715962][ T7129] bridge_slave_1: entered allmulticast mode [ 56.716392][ T7129] bridge_slave_1: entered promiscuous mode [ 56.735213][ T7255] EXT4-fs: Ignoring removed oldalloc option [ 56.735257][ T7255] EXT4-fs: Ignoring removed i_version option [ 56.744089][ T7255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.752769][ T7255] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.945: invalid block [ 56.755909][ T7255] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.757758][ T7255] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.945: invalid indirect mapped block 4294967295 (level 1) [ 56.759532][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 56.759543][ C0] EXT4-fs (loop4): initial error at time 56: ext4_get_branch:178: inode 11: block 4294967295 [ 56.759561][ C0] EXT4-fs (loop4): last error at time 56: ext4_get_branch:178: inode 11: block 4294967295 [ 56.766885][ T7255] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.767983][ T7255] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.945: invalid indirect mapped block 4294967295 (level 1) [ 56.768017][ T7255] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.772445][ T7255] EXT4-fs (loop4): 2 truncates cleaned up [ 56.805872][ T7263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.811697][ T7263] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 56.811724][ T7263] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 56.811823][ T7263] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.812408][ T7263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.947: bg 0: block 15: invalid block bitmap [ 56.812428][ T7263] loop0: lost filesystem error report for type 5 error -117 [ 56.812929][ T7263] EXT4-fs (loop0): Remounting filesystem read-only [ 56.812984][ T7263] EXT4-fs (loop0): 1 truncate cleaned up [ 56.829174][ T7263] EXT4-fs (loop0): shut down requested (2) [ 56.843961][ T7129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.871703][ T7129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.917835][ T40] hsr_slave_0: left promiscuous mode [ 56.920897][ T40] hsr_slave_1: left promiscuous mode [ 56.923315][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.923353][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.925628][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.925640][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.950139][ T40] veth1_macvtap: left promiscuous mode [ 56.950186][ T40] veth0_macvtap: left promiscuous mode [ 56.950246][ T40] veth1_vlan: left promiscuous mode [ 56.950284][ T40] veth0_vlan: left promiscuous mode [ 56.977401][ T7274] EXT4-fs (loop0): Test dummy encryption mode enabled [ 57.208021][ T40] team0 (unregistering): Port device team_slave_1 removed [ 57.216478][ T40] team0 (unregistering): Port device team_slave_0 removed [ 57.295696][ T7129] team0: Port device team_slave_0 added [ 57.303000][ T7129] team0: Port device team_slave_1 added [ 57.327984][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.331545][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.331594][ T7129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.332212][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.332226][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.332253][ T7129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.372503][ T7129] hsr_slave_0: entered promiscuous mode [ 57.381415][ T7129] hsr_slave_1: entered promiscuous mode [ 57.381686][ T7129] debugfs: 'hsr0' already exists in 'hsr' [ 57.381697][ T7129] Cannot create hsr debugfs directory [ 57.501837][ T7129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.507997][ T7129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.511455][ T7129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.515615][ T7129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.517432][ T7129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.524356][ T7129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.526083][ T7129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.533859][ T7129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.573495][ T7129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.586017][ T7129] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.593303][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.593349][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.593865][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.593884][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.605859][ T7129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.609474][ T7129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.670005][ T4403] 8021q: adding VLAN 0 to HW filter on device eth5 [ 57.723307][ T30] audit: type=1326 audit(57.710:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.0.977" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb79228 code=0x7ffc0000 [ 57.727758][ T30] audit: type=1326 audit(57.710:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.0.977" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb79228 code=0x7ffc0000 [ 57.732828][ T30] audit: type=1326 audit(57.720:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.0.977" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffabb79228 code=0x7ffc0000 [ 57.737098][ T30] audit: type=1326 audit(57.720:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.0.977" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb79228 code=0x7ffc0000 [ 57.742455][ T30] audit: type=1326 audit(57.730:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.0.977" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb79228 code=0x7ffc0000 [ 57.746801][ T30] audit: type=1326 audit(57.730:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.0.977" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffabb79228 code=0x7ffc0000 [ 57.753525][ T30] audit: type=1326 audit(57.740:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.0.977" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb79228 code=0x7ffc0000 [ 57.757630][ T30] audit: type=1326 audit(57.740:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.0.977" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb79228 code=0x7ffc0000 [ 57.772139][ T7364] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 57.830226][ T7375] set_capacity_and_notify: 5 callbacks suppressed [ 57.831015][ T7375] loop3: detected capacity change from 0 to 512 [ 57.831501][ T7129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.833023][ T7375] EXT4-fs: Ignoring removed i_version option [ 57.833040][ T7375] EXT4-fs: Ignoring removed oldalloc option [ 57.848409][ T4723] Bluetooth: hci2: command tx timeout [ 57.947781][ T4403] 8021q: adding VLAN 0 to HW filter on device eth6 [ 58.024536][ T7129] veth0_vlan: entered promiscuous mode [ 58.034227][ T7129] veth1_vlan: entered promiscuous mode [ 58.044596][ T7129] veth0_macvtap: entered promiscuous mode [ 58.047283][ T7129] veth1_macvtap: entered promiscuous mode [ 58.052282][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.059488][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.093174][ T7409] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 58.101281][ T1405] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.101396][ T1405] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.101523][ T1405] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.101548][ T1405] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.115368][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.115395][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.124282][ T1405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.124314][ T1405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.194768][ T7416] stusb160x 0-0048: Failed to allocate register map:-22 [ 58.195056][ T7416] stusb160x 0-0048: probe with driver stusb160x failed with error -22 [ 58.195375][ T7416] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x48 [ 58.331267][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.331730][ T4723] Bluetooth: hci3: command 0x2016 tx timeout [ 58.367649][ T4403] 8021q: adding VLAN 0 to HW filter on device eth7 [ 58.440543][ T7455] __nla_validate_parse: 3 callbacks suppressed [ 58.440590][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1002'. [ 58.945545][ T7538] overlayfs: option "workdir=./mysys" is useless in a non-upper mount, ignore [ 58.945587][ T7538] overlayfs: missing 'lowerdir' [ 59.033383][ T7552] loop1: detected capacity change from 0 to 256 [ 59.036003][ T7552] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.046113][ T7552] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.086681][ T7557] loop4: detected capacity change from 0 to 1024 [ 59.263258][ T7580] Injecting memory failure for pfn 0x122bd9 at process virtual address 0x20001000 [ 59.267393][ T7580] Memory failure: 0x122bd9: Sending SIGBUS to syz.4.1055:7580 due to hardware memory corruption [ 59.270332][ T7580] Memory failure: 0x122bd9: recovery action for dirty LRU page: Recovered [ 59.273378][ T7580] Injecting memory failure for pfn 0x219270 at process virtual address 0x20002000 [ 59.275077][ T7580] Memory failure: 0x219270: Sending SIGBUS to syz.4.1055:7580 due to hardware memory corruption [ 59.277192][ T7580] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 59.346385][ T7589] loop4: detected capacity change from 0 to 512 [ 59.409554][ T7595] loop1: detected capacity change from 0 to 512 [ 59.551734][ T7615] loop4: detected capacity change from 0 to 128 [ 59.640905][ T7622] zswap: compressor z not available [ 59.696878][ T7636] loop0: detected capacity change from 0 to 256 [ 59.815551][ T7648] input: syz0 as /devices/virtual/input/input3 [ 59.938491][ T4726] Bluetooth: hci2: command tx timeout [ 59.968581][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 59.968617][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 59.968651][ T7668] netlink: 'syz.1.1096': attribute type 18 has an invalid length. [ 59.989160][ T7670] loop6: detected capacity change from 0 to 1024 [ 60.005612][ T7672] blkio.reset_stats is deprecated [ 60.023435][ T7670] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.1094: lblock 0 mapped to illegal pblock 0 (length 1) [ 60.024165][ T7670] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 60.024182][ T7670] EXT4-fs (loop6): This should not happen!! Data will be lost [ 60.024182][ T7670] [ 60.036993][ T12] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 60.040062][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 60.040080][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 60.040080][ T12] [ 60.046244][ T7129] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 60.070582][ T7679] Injecting memory failure for pfn 0x13b532 at process virtual address 0x20000000 [ 60.072652][ T7679] Memory failure: 0x13b532: Sending SIGBUS to syz.1.1100:7679 due to hardware memory corruption [ 60.072720][ T7679] Memory failure: 0x13b532: recovery action for dirty LRU page: Recovered [ 60.072756][ T7679] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 60.072781][ T7679] Memory failure: 0x219270: Sending SIGBUS to syz.1.1100:7679 due to hardware memory corruption [ 60.072796][ T7679] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 60.396672][ T7714] loop6: detected capacity change from 0 to 512 [ 60.397701][ T7714] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.408280][ T4726] Bluetooth: hci3: command 0x2016 tx timeout [ 60.497659][ T7724] loop3: detected capacity change from 0 to 2048 [ 60.579752][ T7733] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x42 [ 60.635459][ T7744] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.826271][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1137'. [ 60.835409][ T7767] faux_driver vkms: [drm] Unknown color mode 32769; guessing buffer size. [ 60.861697][ T7770] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.881201][ T7770] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.1140: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.881249][ T7770] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.881585][ T7770] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 60.881618][ T7770] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.1140: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.881638][ T7770] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.881721][ T7770] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 60.881729][ T7770] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1140: Failed to acquire dquot type 0 [ 60.881740][ T7770] loop0: lost filesystem error report for type 5 error -117 [ 60.881875][ T7770] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 60.881885][ T7770] loop0: lost filesystem error report for type 5 error -117 [ 60.882582][ T7770] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.1140: mark_inode_dirty error [ 60.882600][ T7770] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.882682][ T7770] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 60.882715][ T7770] EXT4-fs (loop0): 1 orphan inode deleted [ 60.884539][ T7770] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.1140: Invalid inode table block 1 in block_group 0 [ 60.885430][ T7770] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 60.914845][ T1471] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.914868][ T1471] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.915732][ T1471] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 60.915754][ T1471] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 0 [ 60.915765][ T1471] loop0: lost filesystem error report for type 5 error -117 [ 60.917282][ T5730] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 60.917299][ T5730] loop0: lost filesystem error report for type 5 error -117 [ 60.917903][ T5730] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 60.917915][ T5730] loop0: lost filesystem error report for type 5 error -117 [ 60.917990][ T5730] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 60.918000][ T5730] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.947172][ T7743] netlink: 'syz.1.1128': attribute type 6 has an invalid length. [ 60.965932][ T7783] EXT4-fs: inline encryption not supported [ 60.976741][ T7783] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 60.978645][ T7783] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1144: invalid indirect mapped block 2683928664 (level 1) [ 60.978677][ T7783] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.982831][ T7783] EXT4-fs (loop6): 1 truncate cleaned up [ 60.988224][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 60.988254][ C1] EXT4-fs (loop6): initial error at time 61: ext4_free_branches:1023: inode 13 [ 60.988296][ C1] EXT4-fs (loop6): last error at time 61: ext4_free_branches:1023: inode 13 [ 61.015573][ T7783] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1144: invalid indirect mapped block 480848489 (level 1) [ 61.049705][ T7789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.050645][ T7789] bond0: (slave bond1): Enslaving as an active interface with an up link [ 61.116927][ T7797] vxcan3: entered promiscuous mode [ 61.116967][ T7797] vxcan3: entered allmulticast mode [ 61.117241][ T7797] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 61.305496][ T4723] block nbd0: Receive control failed (result -32) [ 61.307117][ T4726] block nbd0: Receive control failed (result -32) [ 61.515839][ T7856] netlink: 'syz.4.1175': attribute type 2 has an invalid length. [ 61.518266][ T7856] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 61.518313][ T7856] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1175'. [ 61.518348][ T7856] nbd: couldn't find device at index 16 [ 61.665222][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1193'. [ 61.672389][ T7870] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1184'. [ 61.832671][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 61.881056][ T7893] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1194'. [ 61.881096][ T7893] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1194'. [ 61.964152][ T7900] bridge0: port 2(bridge_slave_1) entered listening state [ 61.965276][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.008476][ T4726] Bluetooth: hci2: command tx timeout [ 62.078021][ T7912] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 62.087403][ T7912] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1205: bg 0: block 104: invalid block bitmap [ 62.087452][ T7912] loop3: lost filesystem error report for type 5 error -117 [ 62.089953][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 62.089965][ C1] EXT4-fs (loop3): initial error at time 63: ext4_validate_block_bitmap:432 [ 62.089977][ C1] EXT4-fs (loop3): last error at time 63: ext4_validate_block_bitmap:432 [ 62.094805][ T7912] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 62.094824][ T7912] loop3: lost filesystem error report for type 5 error -117 [ 62.095033][ T7912] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1205: invalid indirect mapped block 1 (level 1) [ 62.095049][ T7912] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.095222][ T7912] EXT4-fs (loop3): 1 truncate cleaned up [ 62.108590][ T7912] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 62.112482][ T7912] overlayfs: failed to look up (fi) for ino (-13) [ 62.264442][ T7928] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.460177][ T7948] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.13565952.0), cmd(5) [ 62.567780][ T7964] i2c i2c-0: delete_device: Can't parse I2C address [ 62.653196][ T7972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.663932][ T7972] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 62.663963][ T7972] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 62.664076][ T7972] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.665002][ T7972] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1230: bg 0: block 15: invalid block bitmap [ 62.665026][ T7972] loop1: lost filesystem error report for type 5 error -117 [ 62.667571][ T7972] EXT4-fs (loop1): Remounting filesystem read-only [ 62.667639][ T7972] EXT4-fs (loop1): 1 truncate cleaned up [ 62.707315][ T7972] EXT4-fs (loop1): shut down requested (2) [ 62.921469][ T8000] set_capacity_and_notify: 12 callbacks suppressed [ 62.925128][ T8000] loop1: detected capacity change from 0 to 512 [ 62.958415][ T8000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.972900][ T8003] loop4: detected capacity change from 0 to 128 [ 63.134439][ T8018] loop0: detected capacity change from 0 to 8 [ 63.283429][ T8034] loop1: detected capacity change from 0 to 512 [ 63.286444][ T8034] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.311377][ T8036] loop6: detected capacity change from 0 to 256 [ 63.504461][ T8048] loop0: detected capacity change from 0 to 2048 [ 63.524365][ T8056] loop1: detected capacity change from 0 to 512 [ 63.526117][ T8056] EXT4-fs: Ignoring removed i_version option [ 63.527359][ T8056] EXT4-fs: Ignoring removed oldalloc option [ 63.658017][ T8070] loop1: detected capacity change from 0 to 4096 [ 63.761464][ T8084] loop3: detected capacity change from 0 to 8 [ 63.765797][ T8084] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 63.765824][ T8084] unable to read xattr id index table [ 63.766977][ T8084] SQUASHFS error: zlib decompression failed, data probably corrupt [ 63.766992][ T8084] SQUASHFS error: Failed to read block 0x9b: -5 [ 63.766999][ T8084] SQUASHFS error: Unable to read metadata cache entry [99] [ 63.767006][ T8084] SQUASHFS error: Unable to read inode 0x127 [ 63.781458][ T8084] loop3: detected capacity change from 0 to 256 [ 63.972766][ T8107] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 63.978808][ T8107] FAT-fs (loop3): Filesystem has been set read-only [ 64.089869][ T4726] Bluetooth: hci2: command tx timeout [ 64.110571][ T8128] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 64.113360][ T8128] CPU: 1 UID: 0 PID: 8128 Comm: syz.0.1294 Tainted: G L syzkaller #0 PREEMPT [ 64.113385][ T8128] Tainted: [L]=SOFTLOCKUP [ 64.113390][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 64.113398][ T8128] Call trace: [ 64.113402][ T8128] show_stack+0x2c/0x3c (C) [ 64.113420][ T8128] __dump_stack+0x30/0x40 [ 64.113433][ T8128] dump_stack_lvl+0xd8/0x12c [ 64.113445][ T8128] dump_stack+0x1c/0x28 [ 64.113456][ T8128] sysfs_warn_dup+0x9c/0xb8 [ 64.113469][ T8128] sysfs_create_dir_ns+0x190/0x1f4 [ 64.113480][ T8128] kobject_add_internal+0x290/0x6f0 [ 64.113494][ T8128] kobject_add_varg+0x9c/0xe8 [ 64.113504][ T8128] kobject_add+0x110/0x1c8 [ 64.113515][ T8128] device_add+0x394/0x9e0 [ 64.113524][ T8128] device_register+0x28/0x38 [ 64.113541][ T8128] tty_register_device_attr+0x31c/0x5e8 [ 64.113554][ T8128] tty_register_device+0x3c/0x50 [ 64.113564][ T8128] gsm_activate_mux+0xdc/0x284 [ 64.113576][ T8128] gsmld_ioctl+0x9d0/0x1414 [ 64.113587][ T8128] tty_ioctl+0x8a8/0xcb0 [ 64.113596][ T8128] __arm64_sys_ioctl+0x154/0x1cc [ 64.113609][ T8128] invoke_syscall+0x98/0x244 [ 64.113622][ T8128] el0_svc_common+0xec/0x23c [ 64.113633][ T8128] do_el0_svc+0x4c/0x5c [ 64.113645][ T8128] el0_svc+0x64/0x260 [ 64.113655][ T8128] el0t_64_sync_handler+0x44/0x104 [ 64.113665][ T8128] el0t_64_sync+0x198/0x19c [ 64.147330][ T8128] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 64.490621][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490671][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.492240][ T10] cfg80211: failed to load regulatory.db [ 67.448294][ T8057] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 67.449976][ T8057] EXT4-fs (loop4): Remounting filesystem read-only [ 67.659172][ T4721] EXT4-fs unmount: 70 callbacks suppressed [ 67.659213][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.702494][ T8157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.732598][ T8168] __nla_validate_parse: 2 callbacks suppressed [ 67.733802][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 67.810479][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.863647][ T8189] EXT4-fs: Ignoring removed orlov option [ 67.899754][ T8189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.906069][ T8194] netlink: 'syz.0.1321': attribute type 12 has an invalid length. [ 67.908078][ T8194] netlink: 'syz.0.1321': attribute type 29 has an invalid length. [ 67.909990][ T8194] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1321'. [ 67.912466][ T8194] netlink: 'syz.0.1321': attribute type 3 has an invalid length. [ 67.913922][ T8194] netlink: 'syz.0.1321': attribute type 2 has an invalid length. [ 67.927373][ T8194] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1321'. [ 67.955024][ T7129] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.025268][ T8207] block2mtd: parameter too long [ 68.061756][ T8213] binder: 8212:8213 ioctl 40046205 0 returned -22 [ 68.065396][ T8213] binder: 8212:8213 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.065441][ T8213] binder: 8213 RLIMIT_NICE not set [ 68.116912][ T8222] binder: 8212:8222 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.122218][ T8222] binder: 8222 RLIMIT_NICE not set [ 68.145594][ T8227] set_capacity_and_notify: 5 callbacks suppressed [ 68.145875][ T8227] loop1: detected capacity change from 0 to 256 [ 68.151752][ T8227] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 68.151781][ T8227] FAT-fs (loop1): Filesystem has been set read-only [ 68.215007][ T8233] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 68.491001][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1355'. [ 68.627408][ T8297] loop6: detected capacity change from 0 to 1024 [ 68.629869][ T8297] EXT4-fs: Ignoring removed bh option [ 68.632069][ T8297] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 68.649246][ T8297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.706868][ T7129] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.716317][ T8311] loop1: detected capacity change from 0 to 128 [ 68.725950][ T30] audit: type=1807 audit(70.706:34): action=measure func=F res=0 [ 68.726965][ T8308] ima: policy update failed [ 68.728515][ T30] audit: type=1802 audit(70.706:35): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.0.1369" res=0 errno=0 [ 68.728543][ T30] audit: type=1802 audit(70.706:36): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.1369" res=0 errno=0 [ 68.738084][ T8311] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.777351][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.797349][ T8322] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03 [ 68.814509][ T8324] ima: policy update failed [ 68.815543][ T30] audit: type=1802 audit(70.796:37): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.1374" res=0 errno=0 [ 68.950154][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 69.083354][ T8366] loop4: detected capacity change from 0 to 128 [ 69.089261][ T8367] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1392'. [ 69.116154][ T8366] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 69.141643][ T8373] loop6: detected capacity change from 0 to 512 [ 69.172368][ T8373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.189744][ T4721] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.660736][ T7129] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.673072][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 72.752689][ T8408] tipc: Started in network mode [ 72.752732][ T8408] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 72.935433][ T8437] loop4: detected capacity change from 0 to 512 [ 72.937883][ T8438] loop0: detected capacity change from 0 to 512 [ 72.945761][ T8441] loop3: detected capacity change from 0 to 1024 [ 72.946136][ T8441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.956000][ T8438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.963411][ T8441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.975708][ T8437] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.975736][ T8437] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 72.981456][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1415'. [ 72.981489][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1415'. [ 73.020642][ T8433] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1416: bg 0: block 67: padding at end of block bitmap is not set [ 73.030240][ T8433] EXT4-fs (loop0): Remounting filesystem read-only [ 73.030361][ T8433] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 73.063448][ T5730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.069828][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.179589][ T8473] tun0: tun_chr_ioctl cmd 1074025677 [ 73.179713][ T8473] tun0: linktype set to 270 [ 73.182533][ T8485] Injecting memory failure for pfn 0x137dad at process virtual address 0x20000000 [ 73.205117][ T8485] Memory failure: 0x137dad: Sending SIGBUS to syz.0.1431:8485 due to hardware memory corruption [ 73.205175][ T8485] Memory failure: 0x137dad: recovery action for dirty LRU page: Recovered [ 73.205201][ T8485] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 73.205224][ T8485] Memory failure: 0x219270: Sending SIGBUS to syz.0.1431:8485 due to hardware memory corruption [ 73.205235][ T8485] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 73.261132][ T8492] loop1: detected capacity change from 0 to 1024 [ 73.315184][ T8492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.350572][ T8501] loop3: detected capacity change from 0 to 1024 [ 73.352101][ T8492] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.1433: lblock 0 mapped to illegal pblock 0 (length 6) [ 73.411728][ T8501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.420327][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.476788][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.530422][ T8527] Bluetooth: MGMT ver 1.23 [ 73.588617][ T8529] loop4: detected capacity change from 0 to 1024 [ 73.601019][ T8540] loop0: detected capacity change from 0 to 128 [ 73.601074][ T8529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.606558][ T8540] EXT4-fs (loop0): Test dummy encryption mode enabled [ 73.633369][ T8540] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.660641][ T8540] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 73.680593][ T12] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 3) [ 73.682044][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 73.682063][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.682063][ T12] [ 73.685724][ T1405] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 73.693001][ T1405] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 73.693029][ T1405] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.693029][ T1405] [ 73.693051][ T1405] EXT4-fs (loop4): Total free blocks count 0 [ 73.693066][ T1405] EXT4-fs (loop4): Free/Dirty block details [ 73.693079][ T1405] EXT4-fs (loop4): free_blocks=0 [ 73.693091][ T1405] EXT4-fs (loop4): dirty_blocks=32 [ 73.693101][ T1405] EXT4-fs (loop4): Block reservation details [ 73.694093][ T5730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.695779][ T4721] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 73.710310][ T8549] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.710345][ T8549] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.743968][ T8549] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.775151][ T8549] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.791969][ T8549] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.792034][ T8549] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.809276][ T8549] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.820253][ T8549] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.820309][ T8549] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.825059][ T8549] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.829842][ T8549] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 73.831082][ T8549] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 73.834823][ T8549] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 73.841859][ T8549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.841916][ T8549] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.850484][ T8549] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.937199][ T8584] input: syz1 as /devices/virtual/input/input4 [ 73.981725][ T8590] usb usb8: usbfs: process 8590 (syz.0.1471) did not claim interface 0 before use [ 73.998126][ T8592] loop4: detected capacity change from 0 to 128 [ 74.042338][ T8592] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.072429][ T8592] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 74.131868][ T8608] tun0: tun_chr_ioctl cmd 1074025675 [ 74.131902][ T8608] tun0: persist disabled [ 74.137420][ T4721] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.142848][ T8610] loop3: detected capacity change from 0 to 256 [ 74.148951][ T8610] vfat: Unknown parameter 'i0²sj#PêäJTÊ /—™s4êI‚¨’' [ 74.165040][ T8610] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1481'. [ 74.435764][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 74.733960][ T8674] skbuff: bad partial csum: csum=65506/2 headroom=162 headlen=65526 [ 74.810919][ T8684] Injecting memory failure for pfn 0x11fde0 at process virtual address 0x20000000 [ 74.820723][ T8684] Memory failure: 0x11fde0: Sending SIGBUS to syz.3.1511:8684 due to hardware memory corruption [ 74.820785][ T8684] Memory failure: 0x11fde0: recovery action for dirty LRU page: Recovered [ 74.820815][ T8684] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 74.820834][ T8684] Memory failure: 0x219270: Sending SIGBUS to syz.3.1511:8684 due to hardware memory corruption [ 74.820845][ T8684] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 74.913929][ T8694] loop6: detected capacity change from 0 to 128 [ 75.015010][ T8704] binder: 8703:8704 ioctl 400c620e 20000100 returned -22 [ 75.347271][ T8739] loop0: detected capacity change from 0 to 1024 [ 75.351445][ T8739] EXT4-fs: inline encryption not supported [ 75.354404][ T8739] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.359371][ T8739] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.1540: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.362893][ T8739] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.364355][ T8739] EXT4-fs (loop0): Remounting filesystem read-only [ 75.364391][ T8739] Quota error (device loop0): write_blk: dquota write failed [ 75.364414][ T8739] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 75.364495][ T8739] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 75.364552][ T8739] EXT4-fs (loop0): 1 orphan inode deleted [ 75.365016][ T8739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.400632][ T5730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.513337][ T8747] loop1: detected capacity change from 0 to 512 [ 75.514950][ T8747] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 75.522027][ T8747] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1543: bg 0: block 4: invalid block bitmap [ 75.522069][ T8747] loop1: lost filesystem error report for type 5 error -117 [ 75.522759][ T8747] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 75.522779][ T8747] loop1: lost filesystem error report for type 5 error -117 [ 75.522950][ T8747] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1543: invalid indirect mapped block 1 (level 1) [ 75.522965][ T8747] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.523148][ T8747] EXT4-fs (loop1): 1 truncate cleaned up [ 75.523615][ T8747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.565078][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.574424][ T8750] loop0: detected capacity change from 0 to 512 [ 75.581647][ T8750] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1544: inode has both inline data and extents flags [ 75.581682][ T8750] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.584311][ T8750] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1544: couldn't read orphan inode 15 (err -117) [ 75.584344][ T8750] loop0: lost filesystem error report for type 5 error -117 [ 75.591493][ T8750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.629107][ T5730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.704350][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 75.768272][ T4723] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.848458][ T4723] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.848475][ T4726] Bluetooth: hci5: command 0x0c1a tx timeout [ 75.848563][ T4723] Bluetooth: hci3: command 0x2016 tx timeout [ 75.848582][ T4723] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.063941][ T8771] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1551: iget: bad i_size value: 38620345925642 [ 76.063981][ T8771] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.066723][ T8771] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1551: couldn't read orphan inode 15 (err -117) [ 76.066753][ T8771] loop3: lost filesystem error report for type 5 error -117 [ 76.068630][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 76.068646][ C1] EXT4-fs (loop3): initial error at time 78: ext4_orphan_get:1399: inode 15 [ 76.068665][ C1] EXT4-fs (loop3): last error at time 78: ext4_orphan_get:1404 [ 76.074593][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1554'. [ 76.079317][ T8771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.112328][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.220774][ T8785] mt6360 0-0034: probe with driver mt6360 failed with error -5 [ 76.221060][ T8785] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34 [ 76.703559][ T8822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1575'. [ 76.738931][ T8830] Injecting memory failure for pfn 0x138cdc at process virtual address 0x20001000 [ 76.746060][ T8830] Memory failure: 0x138cdc: keeping poisoned page in swap cache [ 76.748017][ T8830] Memory failure: 0x138cdc: Sending SIGBUS to syz.3.1579:8830 due to hardware memory corruption [ 76.752223][ T8830] Memory failure: 0x138cdc: recovery action for dirty swapcache page: Delayed [ 76.754084][ T8830] Injecting memory failure for pfn 0x219270 at process virtual address 0x20002000 [ 76.756067][ T8830] Memory failure: 0x219270: Sending SIGBUS to syz.3.1579:8830 due to hardware memory corruption [ 76.759163][ T8830] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 76.898650][ T8850] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.1589: corrupted xattr block 95: invalid header [ 76.898689][ T8850] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.899225][ T8850] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1589: bg 0: block 7: invalid block bitmap [ 76.899250][ T8850] loop1: lost filesystem error report for type 5 error -117 [ 76.899653][ T8850] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 76.899673][ T8850] loop1: lost filesystem error report for type 5 error -117 [ 76.899813][ T8850] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.1589: corrupted xattr block 95: invalid header [ 76.899826][ T8850] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.900169][ T8850] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 76.900203][ T8850] EXT4-fs (loop1): 1 orphan inode deleted [ 76.900662][ T8850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.957338][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.001852][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.003757][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.428640][ T8870] i2c i2c-0: new_device: Missing parameters [ 77.542584][ T8874] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c029, mo2=0003] [ 77.545241][ T8874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.553606][ T8874] EXT4-fs error (device loop1): ext4_ext_precache:648: inode #2: comm syz.1.1600: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 77.563524][ T8874] EXT4-fs (loop1): Remounting filesystem read-only [ 77.801071][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.848266][ T4726] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.928312][ T4726] Bluetooth: hci5: command 0x0c1a tx timeout [ 77.928357][ T4726] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.928391][ T4716] Bluetooth: hci3: command 0x2016 tx timeout [ 77.928464][ T4716] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.971901][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1610'. [ 77.976118][ T8899] bond0: entered promiscuous mode [ 77.977291][ T8899] bond_slave_0: entered promiscuous mode [ 77.977623][ T8899] bond_slave_1: entered promiscuous mode [ 77.978332][ T8899] bridge0: entered promiscuous mode [ 77.982851][ T8899] bond0: left promiscuous mode [ 77.982885][ T8899] bond_slave_0: left promiscuous mode [ 77.982963][ T8899] bond_slave_1: left promiscuous mode [ 77.983011][ T8899] bridge0: left promiscuous mode [ 78.126376][ T8925] sctp: [Deprecated]: syz.6.1624 (pid 8925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.126376][ T8925] Use struct sctp_sack_info instead [ 78.170219][ T8933] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1627'. [ 78.172296][ T8933] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1627'. [ 78.197334][ T8934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.210386][ T8934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.247990][ T8934] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1625: bg 0: block 217: padding at end of block bitmap is not set [ 78.253406][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 78.259703][ T8934] EXT4-fs (loop0): Remounting filesystem read-only [ 78.293014][ T5730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.313240][ T8955] set_capacity_and_notify: 5 callbacks suppressed [ 78.313282][ T8955] loop6: detected capacity change from 0 to 256 [ 78.418974][ T8962] nbd1: detected capacity change from 0 to 549764202496 [ 78.420476][ T4723] block nbd1: Receive control failed (result -32) [ 78.424781][ T4361] block nbd1: Dead connection, failed to find a fallback [ 78.424817][ T4361] block nbd1: shutting down sockets [ 78.424856][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.424895][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.433348][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.435335][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.443002][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.443038][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.447659][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.447690][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.454201][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.454232][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.467768][ T4361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.467803][ T4361] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.469319][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.469335][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.469894][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.469907][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.469937][ T8166] ldm_validate_partition_table(): Disk read failed. [ 78.470104][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.470117][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.470162][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.470173][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.470261][ T8166] Dev nbd1: unable to read RDB block 0 [ 78.470550][ T8166] nbd1: unable to read partition table [ 78.475599][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1640'. [ 78.487614][ T8166] ldm_validate_partition_table(): Disk read failed. [ 78.491470][ T8166] Dev nbd1: unable to read RDB block 0 [ 78.491687][ T8166] nbd1: unable to read partition table [ 78.512184][ T8971] loop6: detected capacity change from 0 to 4096 [ 78.516825][ T8971] EXT4-fs (loop6): Test dummy encryption mode enabled [ 78.523023][ T8971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.545963][ T8971] EXT4-fs (loop6): shut down requested (1) [ 78.556069][ T8978] loop0: detected capacity change from 0 to 512 [ 78.557313][ T8978] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.564071][ T8978] EXT4-fs (loop0): 1 truncate cleaned up [ 78.564553][ T8978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.574708][ T7129] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.586499][ T8978] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.1643: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 78.601770][ T8978] EXT4-fs (loop0): Remounting filesystem read-only [ 78.621972][ T5730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.666463][ T8987] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1647'. [ 78.753543][ T8999] loop3: detected capacity change from 0 to 512 [ 78.759846][ T8999] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 78.759896][ T8999] System zones: 0-2, 18-18, 34-34 [ 78.770919][ T8999] EXT4-fs (loop3): 1 orphan inode deleted [ 78.771432][ T8999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.862094][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.872240][ T4723] Bluetooth: hci2: adv larger than maximum supported [ 78.872269][ T4723] Bluetooth: hci2: Malformed LE Event: 0x0d [ 78.916647][ T9015] nvme nvme0: resetting controller [ 78.970158][ T40] nvme nvme0: Disabling device after reset failure: -19 [ 78.999994][ T4361] ------------[ cut here ]------------ [ 79.000007][ T4361] WARNING: block/blk-mq.c:2107 at blk_mq_dispatch_rq_list+0x960/0x13a8, CPU#1: kworker/1:1H/4361 [ 79.002625][ T4361] Modules linked in: [ 79.003280][ T4361] CPU: 1 UID: 0 PID: 4361 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT [ 79.005026][ T4361] Tainted: [L]=SOFTLOCKUP [ 79.005704][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 79.007352][ T4361] Workqueue: kblockd blk_mq_run_work_fn [ 79.008235][ T4361] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 79.009453][ T4361] pc : blk_mq_dispatch_rq_list+0x960/0x13a8 [ 79.010464][ T4361] lr : blk_mq_dispatch_rq_list+0x960/0x13a8 [ 79.011485][ T4361] sp : ffff80009bb177e0 [ 79.012181][ T4361] x29: ffff80009bb178c0 x28: 0000000000000000 x27: 0000000000000000 [ 79.013583][ T4361] x26: 1fffe00019305202 x25: ffff0000c9829048 x24: ffff0000c73c2800 [ 79.014994][ T4361] x23: dfff800000000000 x22: ffff0000c9829010 x21: ffff80009bb17a48 [ 79.016416][ T4361] x20: ffff80009bb17a40 x19: ffff0000c73c2948 x18: 00000000ffffffff [ 79.017753][ T4361] x17: ffff80008a7d6000 x16: 0000000000000004 x15: ffff80008a35fda0 [ 79.019076][ T4361] x14: ffff80008a5d5e28 x13: 0000000000000002 x12: 0000000000000000 [ 79.020402][ T4361] x11: 0000000000000000 x10: ffff700013762f12 x9 : 0000000000000000 [ 79.021662][ T4361] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 79.022942][ T4361] x5 : ffff80008aaca8f8 x4 : 0000000000000000 x3 : 0000000000000010 [ 79.024215][ T4361] x2 : 0000000000000000 x1 : ffff0000c48857c0 x0 : 0000000000000000 [ 79.025450][ T4361] Call trace: [ 79.025961][ T4361] blk_mq_dispatch_rq_list+0x960/0x13a8 (P) [ 79.026839][ T4361] __blk_mq_sched_dispatch_requests+0x250/0x10e8 [ 79.027835][ T4361] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 79.028787][ T4361] blk_mq_run_work_fn+0x214/0x2e4 [ 79.029621][ T4361] process_scheduled_works+0x788/0x10b8 [ 79.030519][ T4361] worker_thread+0x798/0xbd0 [ 79.031241][ T4361] kthread+0x304/0x3d4 [ 79.031874][ T4361] ret_from_fork+0x10/0x20 [ 79.032606][ T4361] irq event stamp: 3702 [ 79.033291][ T4361] hardirqs last enabled at (3701): [] _raw_spin_unlock_irq+0x30/0x80 [ 79.034972][ T4361] hardirqs last disabled at (3702): [] el1_brk64+0x20/0x54 [ 79.036466][ T4361] softirqs last enabled at (1186): [] handle_softirqs+0xc28/0xd98 [ 79.038024][ T4361] softirqs last disabled at (1165): [] __do_softirq+0x14/0x20 [ 79.039586][ T4361] ---[ end trace 0000000000000000 ]--- [ 79.040863][ T4361] ------------[ cut here ]------------ [ 79.040872][ T4361] WARNING: block/blk.h:703 at blk_mq_free_request+0x190/0x210, CPU#1: kworker/1:1H/4361 [ 79.043217][ T4361] Modules linked in: [ 79.043815][ T4361] CPU: 1 UID: 0 PID: 4361 Comm: kworker/1:1H Tainted: G W L syzkaller #0 PREEMPT [ 79.044515][ T4310] Aborting journal on device nvme0n1p2-8. [ 79.044541][ T4310] JBD2: I/O error when updating journal superblock for nvme0n1p2-8. [ 79.047546][ T4361] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 79.048340][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 79.050088][ T4361] Workqueue: kblockd blk_mq_run_work_fn [ 79.051044][ T4361] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 79.052361][ T4361] pc : blk_mq_free_request+0x190/0x210 [ 79.053261][ T4361] lr : blk_mq_free_request+0x190/0x210 [ 79.054159][ T4361] sp : ffff80009bb17730 [ 79.054818][ T4361] x29: ffff80009bb17730 x28: ffff700013762f0c x27: ffff0000c9829000 [ 79.056123][ T4361] x26: ffff0000c48857c0 x25: 1fffe00019305203 x24: 1fffe00019305220 [ 79.057491][ T4361] x23: dfff800000000000 x22: dfff800000000000 x21: ffff0000c982909c [ 79.058832][ T4361] x20: 000000000000007f x19: ffff0000c9829000 x18: 00000000ffffffff [ 79.060168][ T4361] x17: ffff80008a7d6000 x16: 0000000000000004 x15: ffff80008a35fda0 [ 79.061508][ T4361] x14: ffff80008a5d5e28 x13: 0000000000000001 x12: 0000000000000000 [ 79.062797][ T4361] x11: 0000000000000000 x10: ffff600019305214 x9 : 0000000000000000 [ 79.064093][ T4361] x8 : 0000000000000000 x7 : ffff8000817b1a10 x6 : 0000000000000000 [ 79.065442][ T4361] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008178be24 [ 79.066850][ T4361] x2 : 000000000000007f x1 : ffff0000c48857c0 x0 : 0000000000000000 [ 79.068124][ T4361] Call trace: [ 79.068665][ T4361] blk_mq_free_request+0x190/0x210 (P) [ 79.069590][ T4361] __blk_mq_end_request+0x32c/0x434 [ 79.070430][ T4361] blk_mq_end_request+0x68/0x8c [ 79.071233][ T4361] blk_mq_dispatch_rq_list+0x410/0x13a8 [ 79.072124][ T4361] __blk_mq_sched_dispatch_requests+0x250/0x10e8 [ 79.073130][ T4361] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 79.074248][ T4361] blk_mq_run_work_fn+0x214/0x2e4 [ 79.075094][ T4361] process_scheduled_works+0x788/0x10b8 [ 79.076033][ T4361] worker_thread+0x798/0xbd0 [ 79.076835][ T4361] kthread+0x304/0x3d4 [ 79.077560][ T4361] ret_from_fork+0x10/0x20 [ 79.078361][ T4361] irq event stamp: 3808 [ 79.079094][ T4361] hardirqs last enabled at (3807): [] seqcount_lockdep_reader_access+0x7c/0xf8 [ 79.080939][ T4361] hardirqs last disabled at (3808): [] el1_brk64+0x20/0x54 [ 79.082471][ T4361] softirqs last enabled at (3800): [] handle_softirqs+0xc28/0xd98 [ 79.084145][ T4361] softirqs last disabled at (3705): [] __do_softirq+0x14/0x20 [ 79.085645][ T4361] ---[ end trace 0000000000000000 ]--- [ 79.091053][ T9022] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:86: comm syz.0.1665: Detected aborted journal [ 79.096892][ T9022] EXT4-fs (nvme0n1p2): I/O error while writing superblock [ 79.100368][ T9022] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 79.102715][ T40] EXT4-fs (nvme0n1p2): shut down requested (2) Jan 1 00:01:21 syzkaller kern.alert kernel: [ 79.102715][ T40] EXT4-fs (nvme0n1p2): shut down requested (2) [ 79.928260][ T4723] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.008252][ T4723] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.008288][ T4723] Bluetooth: hci3: command 0x2016 tx timeout [ 80.008345][ T4716] Bluetooth: hci5: command 0x0c1a tx timeout [ 80.008429][ T4716] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.008245][ T4723] Bluetooth: hci0: command 0x0c1a tx timeout