last executing test programs: 1m16.705476196s ago: executing program 0 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x17}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x24000090) 1m16.410597008s ago: executing program 0 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x578d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1m16.152206476s ago: executing program 0 (id=823): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001340)=""/90, 0x5a}], 0x1, 0x0, 0xd) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 1m15.862327131s ago: executing program 0 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0xde) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0x3, 0x80000001, 0xfffffffe}) 1m15.634360511s ago: executing program 0 (id=832): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 1m15.306734427s ago: executing program 0 (id=835): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xff, 0x0, "fafc00"}, 0x40000, 0x1, {0x0}}) 1m5.167781352s ago: executing program 1 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x23d1) 1m5.039882695s ago: executing program 1 (id=966): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={r1}, &(0x7f0000000080)=0x8) 1m4.82785422s ago: executing program 1 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write(r0, &(0x7f00000217c0)='1', 0x1) 1m4.766170177s ago: executing program 1 (id=970): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1m4.239704614s ago: executing program 1 (id=978): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f0000000280)={[{@commit={'commit', 0x3d, 0xf2a}}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@errors_remount}, {@quota}, {@barrier_val={'barrier', 0x3d, 0xf8c}}, {@discard}, {@orlov}, {@grpjquota}]}, 0xee, 0x43e, &(0x7f00000008c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000004a00030000000000000000000a008000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'], 0x44}}, 0x24008880) 1m3.663873s ago: executing program 1 (id=987): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1m3.326018778s ago: executing program 32 (id=987): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1m0.068840149s ago: executing program 33 (id=835): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xff, 0x0, "fafc00"}, 0x40000, 0x1, {0x0}}) 3.077818143s ago: executing program 2 (id=1774): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setreuid(0xee00, 0x0) 2.806150242s ago: executing program 2 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 2.644787749s ago: executing program 2 (id=1783): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/gspca_topro/parameters/force_sensor\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) 2.547683394s ago: executing program 2 (id=1785): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000006c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX=r0], 0x9) 2.296816941s ago: executing program 2 (id=1790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@delchain={0x34, 0x65, 0xe30, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0xfff1, 0xfff1}, {0xfff3, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x100009}]}, 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.9809386s ago: executing program 3 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0xffa}}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x1000000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00d3b2f23ff762be7100000a000000000000000000000006001d000000000008001e"], 0x2c}}, 0x0) 1.743562208s ago: executing program 3 (id=1800): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) 1.687239316s ago: executing program 2 (id=1801): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.686641041s ago: executing program 6 (id=1802): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@rand_addr=0x64010101, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7, 0x4, 0xe}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x3000000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi0\x00', 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000300)={0x2, 0x20, 0x41, 0x8, 0x100, 0x8, 0xffffffff, 0x7, 0x10, 0x2, 0x90, 0xb, 0x0, 0x0, 0x0}) 1.341919108s ago: executing program 6 (id=1804): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99800300000000004c0012800b00010062726964676500003c00028005002d00010000000a0014000180c2000000000008001a00040000000c002100090000000000000008001a0003a0e0000000000000000000140003006e"], 0x80}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.3174194s ago: executing program 3 (id=1806): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r1, 0x1f, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.275980195s ago: executing program 4 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0x44, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x83, 0xd3, 0x5, 0xf602, 0x3, 0x4, 0x40, 0x9]}}]}]}]}, 0x44}}, 0x0) 1.142320301s ago: executing program 3 (id=1808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2e}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@cgroup=r1, r0, 0x2f, 0x2018, 0x4}, 0x20) 1.095771502s ago: executing program 5 (id=1809): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@migrate={0x118, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, @in6=@local, 0x32, 0x0, 0x0, 0xffffffff, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x2}}]}, 0x118}}, 0x0) 1.089439539s ago: executing program 4 (id=1810): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='10000', 0x5) 1.029120172s ago: executing program 6 (id=1811): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x36, 'k!'}], 0x10}}], 0x1, 0x4000000) 909.59744ms ago: executing program 4 (id=1812): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x3, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 876.865985ms ago: executing program 6 (id=1813): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000b40)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={r1, 0x6}, 0x8) 838.683236ms ago: executing program 5 (id=1814): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='er'], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) statx(r0, 0x0, 0x1000, 0x800, 0x0) 729.288025ms ago: executing program 3 (id=1815): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 637.064073ms ago: executing program 6 (id=1816): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000180)={0x2}) 618.174304ms ago: executing program 4 (id=1817): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f0000000e00)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x3, 0x232, &(0x7f0000000500)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='s\x00uasWfs\x00', &(0x7f0000000180)='\x00', 0x0) 567.357212ms ago: executing program 5 (id=1818): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x8480, 0x0) ioctl$GIO_FONTX(r1, 0x5460, 0x0) 533.942349ms ago: executing program 3 (id=1819): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 375.199306ms ago: executing program 5 (id=1820): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0xa) 283.458405ms ago: executing program 4 (id=1821): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="071404"], 0xa8) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x16, 0x0, 0x3, 0x9, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0xffffff1e, @empty, 0x401}, @in={0x2, 0x4e21, @multicast2}}]}, 0x48}}, 0x4000800) 267.221683ms ago: executing program 6 (id=1822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 174.637057ms ago: executing program 5 (id=1823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x34}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x34}}, 0x0) 124.494795ms ago: executing program 4 (id=1824): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 0s ago: executing program 5 (id=1825): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0504e49, 0x0) kernel console output (not intermixed with test programs): cuous mode [ 30.971329][ T4706] veth1_vlan: entered promiscuous mode [ 30.977737][ T4704] veth0_macvtap: entered promiscuous mode [ 30.980183][ T4704] veth1_macvtap: entered promiscuous mode [ 30.988215][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.992170][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.013050][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.028245][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.030269][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.034949][ T4706] veth0_macvtap: entered promiscuous mode [ 31.056064][ T903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.056392][ T903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.056478][ T903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.080897][ T4706] veth1_macvtap: entered promiscuous mode [ 31.084628][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.101178][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.107920][ T1440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.107975][ T1440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.108004][ T1440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.114253][ T4888] ======================================================= [ 31.114253][ T4888] WARNING: The mand mount option has been deprecated and [ 31.114253][ T4888] and is ignored by this kernel. Remove the mand [ 31.114253][ T4888] option from the mount to silence this warning. [ 31.114253][ T4888] ======================================================= [ 31.114702][ T4717] veth0_vlan: entered promiscuous mode [ 31.124738][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.124772][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.130804][ T93] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.159556][ T4717] veth1_vlan: entered promiscuous mode [ 31.176558][ T4717] veth0_macvtap: entered promiscuous mode [ 31.180104][ T4717] veth1_macvtap: entered promiscuous mode [ 31.191277][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.201966][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.202391][ T1379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.202402][ T1379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.233671][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.233708][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.237188][ T1440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237213][ T1440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237229][ T1440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237246][ T1440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.250184][ T4707] veth0_vlan: entered promiscuous mode [ 31.253456][ T4707] veth1_vlan: entered promiscuous mode [ 31.263165][ T4707] veth0_macvtap: entered promiscuous mode [ 31.277721][ T4707] veth1_macvtap: entered promiscuous mode [ 31.282919][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.290074][ T903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.290286][ T903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.292466][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.302115][ T1379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.302153][ T1379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.324068][ T1379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.324103][ T1379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.335957][ T1379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.336009][ T1379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.336042][ T1379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.336064][ T1379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.366397][ T4713] Bluetooth: hci2: command tx timeout [ 31.377113][ T1379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.377145][ T1379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.393306][ T4903] loop2: detected capacity change from 0 to 512 [ 31.425318][ T4903] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.11: bg 0: block 5: invalid block bitmap [ 31.425391][ T4903] loop2: lost filesystem error report for type 5 error -117 [ 31.429768][ T4903] EXT4-fs (loop2): Remounting filesystem read-only [ 31.429884][ T4903] EXT4-fs (loop2): 2 truncates cleaned up [ 31.430382][ T4903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.441919][ T1379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.441949][ T1379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.445954][ T4713] Bluetooth: hci3: command tx timeout [ 31.446097][ T4713] Bluetooth: hci4: command tx timeout [ 31.446181][ T4713] Bluetooth: hci1: command tx timeout [ 31.446251][ T4713] Bluetooth: hci0: command tx timeout [ 31.480128][ T4912] Bluetooth: MGMT ver 1.23 [ 31.500816][ T4916] loop3: detected capacity change from 0 to 128 [ 31.503866][ T4916] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.520856][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.534196][ T4705] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.562920][ T4922] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 31.659507][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 31.661277][ T4929] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.673426][ T1379] IPVS: starting estimator thread 0... [ 31.681083][ T4934] loop0: detected capacity change from 0 to 8192 [ 31.742807][ T4943] loop3: detected capacity change from 0 to 1024 [ 31.743277][ T4943] EXT4-fs: Ignoring removed nobh option [ 31.743286][ T4943] EXT4-fs: Ignoring removed bh option [ 31.750505][ T4942] loop4: detected capacity change from 0 to 256 [ 31.756019][ T4937] IPVS: using max 53 ests per chain, 127200 per kthread [ 31.791977][ T4943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.911996][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.933246][ T4958] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 31.933601][ T4958] overlayfs: conflicting lowerdir path [ 32.286352][ T4994] loop1: detected capacity change from 0 to 512 [ 32.294037][ T4994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 32.294110][ T4994] System zones: 1-12 [ 32.294743][ T4994] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.49: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 32.294763][ T4994] loop1: lost filesystem error report for type 5 error -117 [ 32.297017][ T4994] EXT4-fs (loop1): 1 orphan inode deleted [ 32.297714][ T4994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.315353][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.353032][ T5000] loop1: detected capacity change from 0 to 512 [ 32.359320][ T5000] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.361033][ T5000] FAT-fs (loop1): error, invalid access to FAT (entry 0x0ffffff6) [ 32.400372][ T5005] netlink: 'syz.0.55': attribute type 63 has an invalid length. [ 32.509628][ T5016] loop3: detected capacity change from 0 to 4096 [ 32.539333][ T5016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.560313][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.627892][ T5026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 32.641381][ T5030] lo: entered promiscuous mode [ 32.641425][ T5030] lo: entered allmulticast mode [ 32.643559][ T5030] bond0: entered promiscuous mode [ 32.643604][ T5030] bond0: entered allmulticast mode [ 32.644029][ T5030] dummy0: entered promiscuous mode [ 32.644040][ T5030] dummy0: entered allmulticast mode [ 32.644669][ T5030] eql: entered promiscuous mode [ 32.644679][ T5030] eql: entered allmulticast mode [ 32.644775][ T5030] ifb0: entered promiscuous mode [ 32.644783][ T5030] ifb0: entered allmulticast mode [ 32.644983][ T5030] ifb1: entered promiscuous mode [ 32.644992][ T5030] ifb1: entered allmulticast mode [ 32.645205][ T5030] gve 0000:00:00.0 enp0s0: entered promiscuous mode [ 32.645217][ T5030] gve 0000:00:00.0 enp0s0: entered allmulticast mode [ 32.651222][ T5030] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 32.651278][ T5030] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 32.655161][ T5030] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 32.655198][ T5030] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 32.655599][ T5030] hwsim0: entered promiscuous mode [ 32.655609][ T5030] hwsim0: entered allmulticast mode [ 32.657910][ T5030] ieee802154 phy0 wpan0: entered promiscuous mode [ 32.657924][ T5030] ieee802154 phy0 wpan0: entered allmulticast mode [ 32.658044][ T5030] ieee802154 phy1 wpan1: entered promiscuous mode [ 32.658055][ T5030] ieee802154 phy1 wpan1: entered allmulticast mode [ 32.658186][ T5030] teql0: entered promiscuous mode [ 32.658194][ T5030] teql0: entered allmulticast mode [ 32.658238][ T5030] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 32.718393][ T5036] loop1: detected capacity change from 0 to 512 [ 32.724080][ T5036] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 32.788261][ T50] IPVS: starting estimator thread 0... [ 32.788871][ T5042] netlink: 72 bytes leftover after parsing attributes in process `syz.0.72'. [ 32.828717][ T5048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 32.876240][ T5043] IPVS: using max 58 ests per chain, 139200 per kthread [ 32.998674][ T5070] loop3: detected capacity change from 0 to 512 [ 33.001676][ T5070] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.84: bad orphan inode 15 [ 33.002456][ T5070] loop3: lost filesystem error report for type 5 error -117 [ 33.002751][ T5070] ext4_test_bit(bit=14, block=5) = 0 [ 33.003211][ T5070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.041706][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.109959][ T5086] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 33.200963][ T5097] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 33.203066][ T5097] retu-mfd 0-0002: probe with driver retu-mfd failed with error -5 [ 33.205106][ T5097] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 33.449336][ T4720] Bluetooth: hci2: command tx timeout [ 33.456065][ T5125] netlink: 'syz.1.108': attribute type 83 has an invalid length. [ 33.526209][ T4720] Bluetooth: hci0: command tx timeout [ 33.526778][ T4720] Bluetooth: hci1: command tx timeout [ 33.526796][ T4720] Bluetooth: hci4: command tx timeout [ 33.526814][ T4720] Bluetooth: hci3: command tx timeout [ 33.614171][ T5143] vhci_hcd vhci_hcd.2: invalid port number 96 [ 33.615551][ T5143] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 33.730166][ T5157] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.730204][ T5157] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.750645][ T5157] EXT4-fs (loop1): 1 truncate cleaned up [ 33.751133][ T5157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.779658][ T5157] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.126: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1 [ 33.780810][ T5157] EXT4-fs (loop1): Remounting filesystem read-only [ 33.790963][ T5157] EXT4-fs warning (device loop1): ext4_empty_dir:3106: inode #2: comm syz.1.126: directory missing '..' [ 33.820892][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.821906][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 33.891162][ T5173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.908043][ T5175] gadgetfs: bound to dummy_udc driver [ 34.002541][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.211148][ T5212] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 34.211182][ T5212] FAT-fs (loop1): Filesystem has been set read-only [ 34.263090][ T5216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.263132][ T5216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.265630][ T5216] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.273273][ T5216] EXT4-fs (loop4): 1 truncate cleaned up [ 34.273880][ T5216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.324470][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.551960][ T5258] process 'syz.4.161' launched './file2' with NULL argv: empty string added [ 34.642753][ T5271] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 34.642860][ T5271] syzkaller0: linktype set to 0 [ 34.676559][ T5275] sch_fq: defrate 512 ignored. [ 34.731900][ T5285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 34.800748][ T5293] syz_tun: entered allmulticast mode [ 34.802784][ T5292] syz_tun: left allmulticast mode [ 34.960635][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 34.983174][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 35.012793][ T4713] block nbd0: Receive control failed (result -104) [ 35.182357][ T5345] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 35.182485][ T5345] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.189493][ T5345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.204351][ T5345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.228512][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 35.228555][ T5350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.203'. [ 35.260103][ T5358] netlink: 56 bytes leftover after parsing attributes in process `syz.1.208'. [ 35.282015][ T5360] i2c i2c-0: delete_device: Can't find device in list [ 35.290969][ T5354] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108008 [ 35.291002][ T5354] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 35.291032][ T5354] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 35.291048][ T5354] raw: 0000000000000000 ffff0000c1908200 00000001ffffffff 0000000000000000 [ 35.291059][ T5354] page dumped because: unmovable page [ 35.317263][ T5362] netlink: 'syz.1.211': attribute type 2 has an invalid length. [ 35.331906][ T5366] Zero length message leads to an empty skb [ 35.526884][ T4713] Bluetooth: hci2: command tx timeout [ 35.603459][ T5402] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.616244][ T4713] Bluetooth: hci3: command tx timeout [ 35.616687][ T4713] Bluetooth: hci4: command tx timeout [ 35.616705][ T4713] Bluetooth: hci1: command tx timeout [ 35.616720][ T4713] Bluetooth: hci0: command tx timeout [ 35.622199][ T5402] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.229: inode has both inline data and extents flags [ 35.622298][ T5402] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.625543][ T5402] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.229: couldn't read orphan inode 15 (err -117) [ 35.625582][ T5402] loop1: lost filesystem error report for type 5 error -117 [ 35.627581][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 35.627595][ C1] EXT4-fs (loop1): initial error at time 35: ext4_orphan_get:1403: inode 15 [ 35.627619][ C1] EXT4-fs (loop1): last error at time 35: ext4_orphan_get:1408 [ 35.636035][ T5402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.649619][ T5402] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 35.704316][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.935878][ T5440] tap0: tun_chr_ioctl cmd 1074812118 [ 35.981430][ T5446] pi3usb30532 0-0005: Error reading config register -5 [ 35.986018][ T5446] pi3usb30532 0-0005: probe with driver pi3usb30532 failed with error -5 [ 35.988138][ T5446] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 36.070470][ T5462] capability: warning: `syz.3.255' uses 32-bit capabilities (legacy support in use) [ 36.162141][ T5468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.162174][ T5468] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.162947][ T5468] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 36.162981][ T5468] System zones: 0-5 [ 36.164468][ T5468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.212314][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.307706][ T5482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.383535][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.403884][ T4720] Bluetooth: hci0: Zero size dump init pkt [ 36.773994][ T5535] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 36.819348][ T5541] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 37.265233][ T5577] set_capacity_and_notify: 11 callbacks suppressed [ 37.265269][ T5577] loop1: detected capacity change from 0 to 256 [ 37.422903][ T5589] __nla_validate_parse: 1 callbacks suppressed [ 37.425570][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 37.484699][ T5596] Console: switching to colour dummy device 80x25 [ 37.595743][ T5611] netlink: 'syz.3.326': attribute type 12 has an invalid length. [ 37.606145][ T4720] Bluetooth: hci2: command tx timeout [ 37.613490][ T30] audit: type=1326 audit(37.590:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.614193][ T30] audit: type=1326 audit(37.590:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.624647][ T30] audit: type=1326 audit(37.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.624707][ T30] audit: type=1326 audit(37.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.632825][ T30] audit: type=1326 audit(37.610:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.632846][ T30] audit: type=1326 audit(37.610:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.632862][ T30] audit: type=1326 audit(37.610:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.638496][ T30] audit: type=1326 audit(37.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.638520][ T30] audit: type=1326 audit(37.610:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.638872][ T30] audit: type=1326 audit(37.610:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5612 comm="syz.4.327" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff94b782e8 code=0x7ffc0000 [ 37.686048][ T4719] Bluetooth: hci4: command tx timeout [ 37.686061][ T4711] Bluetooth: hci3: command tx timeout [ 37.686110][ T4713] Bluetooth: hci1: command tx timeout [ 37.686137][ T4720] Bluetooth: hci0: command tx timeout [ 37.828355][ T5637] netlink: 64 bytes leftover after parsing attributes in process `syz.1.339'. [ 37.836356][ T5640] sctp: Trying to GSO but underlying device doesn't support it. [ 37.980662][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 38.004546][ T5663] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.351'. [ 38.009136][ T5663] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.351'. [ 38.096374][ T5675] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 38.180061][ T5691] loop1: detected capacity change from 0 to 512 [ 38.195455][ T5691] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.366: corrupted in-inode xattr: invalid ea_ino [ 38.198921][ T5691] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.199517][ T5691] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.366: couldn't read orphan inode 15 (err -117) [ 38.203627][ T5691] loop1: lost filesystem error report for type 5 error -117 [ 38.204312][ T5691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.218961][ T5691] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #2: comm syz.1.366: directory missing '.' [ 38.231663][ T5698] netlink: 64 bytes leftover after parsing attributes in process `syz.0.367'. [ 38.278132][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.310045][ T5708] loop1: detected capacity change from 0 to 512 [ 38.320180][ T5708] EXT4-fs: Ignoring removed nobh option [ 38.323390][ T5707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 38.344661][ T5708] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 38.348327][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 38.348341][ C1] EXT4-fs (loop1): initial error at time 38: ext4_mb_generate_buddy:1317 [ 38.348353][ C1] EXT4-fs (loop1): last error at time 38: ext4_mb_generate_buddy:1317 [ 38.352757][ T5708] EXT4-fs (loop1): Remounting filesystem read-only [ 38.353025][ T5708] EXT4-fs (loop1): 1 truncate cleaned up [ 38.353531][ T5708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.370829][ T5708] EXT4-fs (loop1): shut down requested (1) [ 38.399101][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.477480][ T5722] capability: warning: `syz.0.377' uses deprecated v2 capabilities in a way that may be insecure [ 38.483518][ T5722] loop0: detected capacity change from 0 to 1024 [ 38.485209][ T5722] ext4: Unknown parameter 'noacl' [ 38.502242][ T5723] netlink: 72 bytes leftover after parsing attributes in process `syz.1.375'. [ 38.526749][ T5726] loop4: detected capacity change from 0 to 8 [ 38.558000][ T5726] SQUASHFS error: Failed to read block 0x9ca: -5 [ 38.558067][ T5726] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 38.558990][ T5726] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 38.559000][ T5726] SQUASHFS error: Unable to read data cache entry [2cf2] [ 38.559007][ T5726] SQUASHFS error: Unable to read page, block 2cf2, size 50000 [ 38.559151][ T5726] SQUASHFS error: Unable to read data cache entry [2cf2] [ 38.559157][ T5726] SQUASHFS error: Unable to read page, block 2cf2, size 50000 [ 38.709879][ T5732] syz.4.382: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 38.713194][ T5732] CPU: 1 UID: 0 PID: 5732 Comm: syz.4.382 Tainted: G L syzkaller #0 PREEMPT [ 38.713212][ T5732] Tainted: [L]=SOFTLOCKUP [ 38.713216][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.713222][ T5732] Call trace: [ 38.713225][ T5732] show_stack+0x2c/0x3c (C) [ 38.713246][ T5732] __dump_stack+0x30/0x40 [ 38.713260][ T5732] dump_stack_lvl+0xd8/0x12c [ 38.713272][ T5732] dump_stack+0x1c/0x28 [ 38.713283][ T5732] warn_alloc+0x1c4/0x1d8 [ 38.713297][ T5732] __vmalloc_node_range_noprof+0x110/0xe9c [ 38.713308][ T5732] __vmalloc_node_noprof+0xec/0x14c [ 38.713318][ T5732] vzalloc_noprof+0x3c/0x4c [ 38.713327][ T5732] disksize_store+0x100/0x31c [ 38.713340][ T5732] dev_attr_store+0x6c/0x90 [ 38.713351][ T5732] sysfs_kf_write+0xe0/0x108 [ 38.713364][ T5732] kernfs_fop_write_iter+0x260/0x3b8 [ 38.713376][ T5732] vfs_write+0x51c/0xa0c [ 38.713389][ T5732] ksys_write+0x12c/0x228 [ 38.713408][ T5732] __arm64_sys_write+0x84/0x98 [ 38.713422][ T5732] invoke_syscall+0x98/0x244 [ 38.713438][ T5732] el0_svc_common+0xec/0x23c [ 38.713450][ T5732] do_el0_svc+0x4c/0x5c [ 38.713461][ T5732] el0_svc+0x64/0x260 [ 38.713472][ T5732] el0t_64_sync_handler+0x44/0x104 [ 38.713482][ T5732] el0t_64_sync+0x198/0x19c [ 38.713498][ T5732] Mem-Info: [ 38.713509][ T5732] active_anon:24 inactive_anon:5231 isolated_anon:0 [ 38.713509][ T5732] active_file:2763 inactive_file:3803 isolated_file:0 [ 38.713509][ T5732] unevictable:768 dirty:1691 writeback:0 [ 38.713509][ T5732] slab_reclaimable:8684 slab_unreclaimable:87942 [ 38.713509][ T5732] mapped:29000 shmem:942 pagetables:1055 [ 38.713509][ T5732] sec_pagetables:0 bounce:0 [ 38.713509][ T5732] kernel_misc_reclaimable:0 [ 38.713509][ T5732] free:1494282 free_pcp:8556 free_cma:7616 [ 38.713539][ T5732] Node 0 active_anon:96kB inactive_anon:20924kB active_file:11052kB inactive_file:15212kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116000kB dirty:6764kB writeback:0kB shmem:3768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8872kB pagetables:4220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 38.713565][ T5732] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 38.713598][ T5732] lowmem_reserve[]: 0 0 3650 3650 3650 [ 38.713644][ T5732] Node 0 Normal free:2899240kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:96kB inactive_anon:20924kB active_file:11052kB inactive_file:15212kB unevictable:3072kB writepending:6764kB zspages:0kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:34204kB local_pcp:28168kB free_cma:0kB [ 38.713678][ T5732] lowmem_reserve[]: 0 0 0 0 0 [ 38.713722][ T5732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 38.713859][ T5732] Node 0 Normal: 1134*4kB (UME) 834*8kB (UME) 584*16kB (UM) 84*32kB (UME) 45*64kB (UME) 18*128kB (UME) 8*256kB (UME) 3*512kB (U) 6*1024kB (UM) 5*2048kB (UM) 696*4096kB (UM) = 2899208kB [ 38.714033][ T5732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 38.714044][ T5732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 38.714054][ T5732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 38.714065][ T5732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 38.714075][ T5732] 7504 total pagecache pages [ 38.714096][ T5732] 0 pages in swap cache [ 38.714104][ T5732] Free swap = 124996kB [ 38.714111][ T5732] Total swap = 124996kB [ 38.714119][ T5732] 2097152 pages RAM [ 38.714126][ T5732] 0 pages HighMem/MovableOnly [ 38.714133][ T5732] 392568 pages reserved [ 38.714140][ T5732] 8192 pages cma reserved [ 38.714146][ T5732] 0 pages hwpoisoned [ 38.862805][ T5741] netlink: 'syz.3.387': attribute type 2 has an invalid length. [ 38.862846][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 38.930574][ T5750] loop4: detected capacity change from 0 to 1024 [ 38.973225][ T5750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.996591][ T5750] EXT4-fs (loop4): shut down requested (1) [ 39.019364][ T5763] loop0: detected capacity change from 0 to 1024 [ 39.021633][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.067052][ T5763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.094457][ T5773] loop4: detected capacity change from 0 to 256 [ 39.102855][ T5763] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 1: comm syz.0.395: lblock 1 mapped to illegal pblock 1 (length 5) [ 39.103868][ T5763] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 39.103885][ T5763] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.103885][ T5763] [ 39.174171][ T12] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 39.186018][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 39.188332][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.188332][ T12] [ 39.194601][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.474589][ T5804] loop0: detected capacity change from 0 to 256 [ 39.484582][ T5802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.413'. [ 39.704172][ T5806] can0: slcan on ptm0. [ 39.886765][ T5805] can0 (unregistered): slcan off ptm0. [ 40.089853][ T5825] ip_tables: iptables: counters copy to user failed while replacing table [ 41.619003][ T5883] pim6reg: entered allmulticast mode [ 41.648920][ T5886] loop0: detected capacity change from 0 to 1024 [ 41.662731][ T5882] pim6reg: left allmulticast mode [ 41.700715][ T5886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.628844][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.152646][ T5922] loop3: detected capacity change from 0 to 4096 [ 43.155050][ T5922] EXT4-fs: Ignoring removed orlov option [ 43.166242][ T5922] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.200566][ T5922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.321857][ T5928] nvme_fcloop: unknown parameter or missing value 'w' [ 43.393304][ T5922] fscrypt: AES-256-XTS using blk-crypto-fallback [ 43.413528][ T5933] loop4: detected capacity change from 0 to 512 [ 43.416245][ T5933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.423707][ T5933] EXT4-fs (loop4): 1 truncate cleaned up [ 43.496647][ T5933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.708285][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.819554][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.830129][ T5945] loop0: detected capacity change from 0 to 256 [ 44.149692][ T5958] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.156405][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 44.156447][ T30] audit: type=1400 audit(44.130:21): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=r pid=5954 comm="syz.3.483" name="file0" dev="tmpfs" ino=613 [ 44.161866][ T5959] loop0: detected capacity change from 0 to 512 [ 44.167485][ T5959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.177627][ T5959] EXT4-fs (loop0): 1 truncate cleaned up [ 44.217598][ T5959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.249859][ T5962] loop3: detected capacity change from 0 to 256 [ 44.281842][ T5964] __nla_validate_parse: 1 callbacks suppressed [ 44.281925][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 44.485793][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.320621][ T5994] Injecting memory failure for pfn 0x1221db at process virtual address 0x20000000 [ 45.360700][ T5994] Memory failure: 0x1221db: recovery action for clean LRU page: Recovered [ 45.364050][ T5994] Injecting memory failure for pfn 0x121a09 at process virtual address 0x20001000 [ 45.370302][ T5994] Memory failure: 0x121a09: recovery action for clean LRU page: Recovered [ 45.376256][ T5994] Injecting memory failure for pfn 0x11d562 at process virtual address 0x20002000 [ 45.386193][ T5994] Memory failure: 0x11d562: recovery action for clean LRU page: Recovered [ 45.388054][ T5994] Injecting memory failure for pfn 0x120cc6 at process virtual address 0x20003000 [ 45.396259][ T5994] Memory failure: 0x120cc6: recovery action for clean LRU page: Recovered [ 45.398011][ T5994] Injecting memory failure for pfn 0x1210a1 at process virtual address 0x20004000 [ 45.406452][ T5994] Memory failure: 0x1210a1: recovery action for clean LRU page: Recovered [ 45.408299][ T5994] Injecting memory failure for pfn 0x11ff65 at process virtual address 0x20005000 [ 45.421203][ T5994] Memory failure: 0x11ff65: recovery action for clean LRU page: Recovered [ 45.423042][ T5994] Injecting memory failure for pfn 0x120d3b at process virtual address 0x20006000 [ 45.431361][ T5994] Memory failure: 0x120d3b: recovery action for clean LRU page: Recovered [ 45.431858][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.433545][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.433617][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.433682][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.433746][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.439612][ T5994] Injecting memory failure for pfn 0x1216e3 at process virtual address 0x20007000 [ 45.451893][ T5994] Memory failure: 0x1216e3: recovery action for clean LRU page: Recovered [ 45.453564][ T5994] Injecting memory failure for pfn 0x11ff70 at process virtual address 0x20008000 [ 45.458627][ T5994] Memory failure: 0x11ff70: recovery action for clean LRU page: Recovered [ 45.465944][ T5994] Injecting memory failure for pfn 0x121fcd at process virtual address 0x20009000 [ 45.488580][ T5994] Memory failure: 0x121fcd: clean LRU page still referenced by 1 users [ 45.488627][ T5994] Memory failure: 0x121fcd: recovery action for clean LRU page: Failed [ 45.899465][ T6009] input: syz0 as /devices/virtual/input/input3 [ 46.311917][ T6025] loop4: detected capacity change from 0 to 512 [ 46.347740][ T6025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.374473][ T6030] loop2: detected capacity change from 0 to 8 [ 46.399799][ T6025] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.512: corrupted xattr block 33: overlapping e_value [ 46.410784][ T6025] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.512: corrupted xattr block 33: overlapping e_value [ 46.416509][ T6025] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.512: corrupted xattr block 33: overlapping e_value [ 46.428674][ T6030] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 46.442875][ T6025] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.512: corrupted xattr block 33: overlapping e_value [ 46.684220][ T6037] loop2: detected capacity change from 0 to 512 [ 46.690099][ T6037] EXT4-fs (loop2): bad geometry: block count 16776960 exceeds size of device (256 blocks) [ 46.817889][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.308678][ T6059] loop1: detected capacity change from 0 to 512 [ 47.318850][ T6059] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 47.327680][ T6059] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 47.327944][ T6059] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.329423][ T6059] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.527: bg 0: block 361: padding at end of block bitmap is not set [ 47.329446][ T6059] loop1: lost filesystem error report for type 5 error -117 [ 47.330122][ T6059] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 47.330137][ T6059] loop1: lost filesystem error report for type 5 error -117 [ 47.330320][ T6059] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.527: attempt to clear invalid blocks 33619980 len 1 [ 47.330336][ T6059] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.331461][ T6059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.527: invalid indirect mapped block 1811939328 (level 0) [ 47.331483][ T6059] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.331646][ T6059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.527: invalid indirect mapped block 2185560079 (level 1) [ 47.331662][ T6059] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.332292][ T6059] EXT4-fs (loop1): 1 truncate cleaned up [ 47.334701][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.340469][ T6061] loop0: detected capacity change from 0 to 128 [ 47.459654][ T4713] Bluetooth: hci5: command 0x1003 tx timeout [ 47.459781][ T4720] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 47.489403][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 47.556229][ T6066] netlink: 124 bytes leftover after parsing attributes in process `syz.2.530'. [ 47.892713][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 47.925045][ T6080] binder: 6079:6080 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 47.925100][ T6080] binder: 6079:6080 ioctl c0306201 200001c0 returned -22 [ 47.972691][ T6085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.972729][ T6085] IPv6: NLM_F_CREATE should be set when creating new route [ 47.972841][ T6085] IPv6: NLM_F_CREATE should be set when creating new route [ 47.972867][ T6085] IPv6: NLM_F_CREATE should be set when creating new route [ 47.983084][ T6085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.096614][ T6088] EXT4-fs (loop2): Test dummy encryption mode enabled [ 48.096668][ T6088] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.116191][ T6088] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.539: bad orphan inode 131083 [ 48.116250][ T6088] loop2: lost filesystem error report for type 5 error -117 [ 48.122239][ T6088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.365145][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.527879][ T6113] set_capacity_and_notify: 1 callbacks suppressed [ 48.527940][ T6113] loop0: detected capacity change from 0 to 512 [ 48.529905][ T6113] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.534686][ T6114] netlink: 168 bytes leftover after parsing attributes in process `syz.4.552'. [ 48.535656][ T6113] EXT4-fs (loop0): 1 truncate cleaned up [ 48.538688][ T6113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.598100][ T6113] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 48.679472][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.904860][ T6124] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 49.500004][ T6146] loop1: detected capacity change from 0 to 256 [ 49.619628][ T6148] loop3: detected capacity change from 0 to 128 [ 49.622170][ T6148] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.636982][ T6148] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.916684][ T1440] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.333740][ T6171] loop0: detected capacity change from 0 to 4096 [ 50.346688][ T6171] EXT4-fs (loop0): Test dummy encryption mode enabled [ 50.362699][ T6171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.432320][ T6179] loop3: detected capacity change from 0 to 512 [ 50.495010][ T6179] EXT4-fs: Ignoring removed bh option [ 50.517005][ T6179] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.555143][ T6179] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 50.556566][ T6179] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.582: bg 0: block 248: padding at end of block bitmap is not set [ 50.556604][ T6179] loop3: lost filesystem error report for type 5 error -117 [ 50.558174][ T6179] Quota error (device loop3): write_blk: dquota write failed [ 50.558250][ T6179] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 50.558312][ T6179] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.582: Failed to acquire dquot type 1 [ 50.558337][ T6179] loop3: lost filesystem error report for type 5 error -28 [ 50.566076][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 50.566091][ C1] EXT4-fs (loop3): last error at time 50: ext4_acquire_dquot:7069 [ 50.571042][ T6179] EXT4-fs (loop3): 1 truncate cleaned up [ 50.573386][ T6179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 50.660294][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.698837][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 51.238653][ T6215] loop0: detected capacity change from 0 to 2048 [ 51.278439][ T6215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.385434][ T6215] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 51.401677][ T6215] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 51.404756][ T6215] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.404756][ T6215] [ 51.407322][ T6215] EXT4-fs (loop0): Total free blocks count 0 [ 51.408821][ T6215] EXT4-fs (loop0): Free/Dirty block details [ 51.410484][ T6215] EXT4-fs (loop0): free_blocks=4096 [ 51.411867][ T6215] EXT4-fs (loop0): dirty_blocks=64 [ 51.411915][ T6215] EXT4-fs (loop0): Block reservation details [ 51.411936][ T6215] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 51.436510][ T6215] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.836496][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.610'. [ 52.056283][ T6250] loop3: detected capacity change from 0 to 256 [ 52.390623][ T6263] loop2: detected capacity change from 0 to 128 [ 52.451965][ T6263] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.765585][ T4704] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.820585][ T6279] netlink: 11 bytes leftover after parsing attributes in process `syz.1.630'. [ 52.820641][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.630'. [ 52.820697][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.630'. [ 53.055956][ T6291] loop0: detected capacity change from 0 to 1024 [ 53.130892][ T6291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 53.192155][ T6299] loop3: detected capacity change from 0 to 128 [ 53.193420][ T6299] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.199110][ T6299] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.287542][ T4713] Bluetooth: hci3: command 0x0406 tx timeout [ 53.313657][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 53.323498][ T6296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.574671][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.739660][ T6314] syz.2.642 (6314): drop_caches: 2 [ 54.835388][ T6351] veth1_macvtap: left promiscuous mode [ 54.835456][ T6351] macsec0: entered allmulticast mode [ 54.846853][ T6351] veth1_macvtap: entered promiscuous mode [ 54.846898][ T6351] veth1_macvtap: entered allmulticast mode [ 54.859035][ T6351] macsec0: left allmulticast mode [ 54.860041][ T6351] veth1_macvtap: left allmulticast mode [ 55.166844][ T6361] lo speed is unknown, defaulting to 1000 [ 55.168724][ T6361] lo speed is unknown, defaulting to 1000 [ 55.197448][ T6361] lo speed is unknown, defaulting to 1000 [ 55.308550][ T6366] nvme nvme1: rdma_resolve_addr failed (-19). [ 55.659933][ T6388] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 55.667140][ T6388] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 55.668679][ T6388] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.673'. [ 55.670513][ T6388] nbd: couldn't find a device at index 16 [ 55.933009][ T6396] bridge0: port 3(syz_tun) entered blocking state [ 55.933106][ T6396] bridge0: port 3(syz_tun) entered disabled state [ 55.933323][ T6396] syz_tun: entered allmulticast mode [ 55.936287][ T6396] syz_tun: entered promiscuous mode [ 55.937269][ T6396] bridge0: port 3(syz_tun) entered blocking state [ 55.937331][ T6396] bridge0: port 3(syz_tun) entered forwarding state [ 55.973273][ T6400] netlink: 60 bytes leftover after parsing attributes in process `syz.4.679'. [ 56.203930][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 56.525531][ T24] lo speed is unknown, defaulting to 1000 [ 56.546383][ T6361] infiniband syz0: set down [ 56.546768][ T6361] infiniband syz0: added lo [ 56.549513][ T6361] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 56.558902][ T6361] infiniband syz0: Couldn't open port 1 [ 56.617403][ T6361] RDS/IB: syz0: added [ 56.617576][ T6361] smc: adding ib device syz0 with port count 1 [ 56.624944][ T6361] smc: ib device syz0 port 1 has no pnetid [ 56.627217][ T6361] lo speed is unknown, defaulting to 1000 [ 56.636796][ T24] lo speed is unknown, defaulting to 1000 [ 56.779767][ T6431] set_capacity_and_notify: 1 callbacks suppressed [ 56.779830][ T6431] loop4: detected capacity change from 0 to 256 [ 56.787272][ T6431] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 56.789416][ T6431] FAT-fs (loop4): bogus number of directory entries (1) [ 56.792523][ T6431] FAT-fs (loop4): Can't find a valid FAT filesystem [ 56.837684][ T6434] input: syz0 as /devices/virtual/input/input4 [ 56.861276][ T6435] loop1: detected capacity change from 0 to 512 [ 56.873631][ T6435] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.695: corrupted in-inode xattr: invalid ea_ino [ 56.873687][ T6435] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.874097][ T6435] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.695: couldn't read orphan inode 15 (err -117) [ 56.874114][ T6435] loop1: lost filesystem error report for type 5 error -117 [ 56.892569][ T6435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.085096][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.397223][ T6361] lo speed is unknown, defaulting to 1000 [ 57.722689][ T6467] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 58.254491][ T6361] lo speed is unknown, defaulting to 1000 [ 58.392524][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 58.392720][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 58.963232][ T6361] lo speed is unknown, defaulting to 1000 [ 59.167046][ T6515] loop3: detected capacity change from 0 to 128 [ 59.421344][ T6524] netlink: 148 bytes leftover after parsing attributes in process `syz.3.736'. [ 59.492769][ T6361] lo speed is unknown, defaulting to 1000 [ 59.992933][ T6539] netlink: 'syz.2.743': attribute type 6 has an invalid length. [ 60.016566][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 60.018405][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 60.676140][ T6563] overlayfs: failed to clone upperpath [ 61.221410][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 61.486100][ T6600] sctp: [Deprecated]: syz.2.770 (pid 6600) Use of int in max_burst socket option. [ 61.486100][ T6600] Use struct sctp_assoc_value instead [ 61.568818][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 62.679407][ T6655] overlayfs: failed to clone lowerpath [ 62.958908][ T6666] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 63.150613][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.805'. [ 63.383252][ T6683] nfs: Deprecated parameter 'nointr' [ 64.342502][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 64.344367][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 64.347207][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.829'. [ 64.496529][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.497937][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.501729][ T1502] cfg80211: failed to load regulatory.db [ 64.664278][ T865] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 64.672984][ T865] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 64.696368][ T865] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 64.936787][ T6735] fido_id[6735]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.995786][ T6741] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 65.051901][ T50] rtrs_client L1777: : Resolving route failed, err: -ENODEV [ 65.132927][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 30 seconds [ 65.177698][ T6741] rtrs_client L2638: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 65.601988][ T6755] loop1: detected capacity change from 0 to 512 [ 65.631575][ T6755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.697055][ T6759] ip_tables: iptables: counters copy to user failed while replacing table [ 65.766692][ T6755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.120184][ T6786] rnbd_client L127: Can't parse path ip:127.0.0.1\ߐ?:bEz[۵>,: -22 [ 67.294877][ T6791] tap0: tun_chr_ioctl cmd 1074025677 [ 67.296429][ T6791] tap0: linktype set to 805 [ 67.635660][ T6801] overlayfs: option "workdir=./mysys" is useless in a non-upper mount, ignore [ 67.638062][ T6801] overlayfs: missing 'lowerdir' [ 68.157180][ T6812] loop1: detected capacity change from 0 to 4096 [ 68.227426][ T6812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.439236][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.623093][ T6827] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.639400][ T6828] netlink: 'syz.1.876': attribute type 10 has an invalid length. [ 68.642966][ T6828] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 68.868920][ T6834] tap0: tun_chr_ioctl cmd 1074025677 [ 68.869085][ T6834] tap0: linktype set to 804 [ 69.459144][ T6864] loop2: detected capacity change from 0 to 256 [ 69.718338][ T6868] netlink: 276 bytes leftover after parsing attributes in process `syz.4.895'. [ 69.719618][ T6868] netlink: 276 bytes leftover after parsing attributes in process `syz.4.895'. [ 70.227600][ T4720] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 70.238382][ T6884] can0: slcan on ptm0. [ 70.375994][ T6881] can0 (unregistered): slcan off ptm0. [ 70.744199][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 70.787436][ T6907] macvlan2: entered allmulticast mode [ 70.788684][ T6907] hsr0: entered allmulticast mode [ 70.789756][ T6907] hsr_slave_0: entered allmulticast mode [ 70.790892][ T6907] hsr_slave_1: entered allmulticast mode [ 70.792116][ T6907] hsr0: entered promiscuous mode [ 71.613937][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 72.181410][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.930'. [ 72.358420][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 73.031012][ T6994] tap0: tun_chr_ioctl cmd 1074025677 [ 73.031181][ T6994] tap0: linktype set to 805 [ 73.389784][ T93] Bluetooth: hci5: Frame reassembly failed (-84) [ 73.407192][ T7003] Bluetooth: hci5: Frame reassembly failed (-84) [ 73.718290][ T7008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.946'. [ 73.762356][ T6990] syz.4.938 (6990): drop_caches: 2 [ 75.456718][ T4720] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 75.488612][ T7060] loop1: detected capacity change from 0 to 4096 [ 75.502242][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.631146][ T7060] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 75.733311][ T7071] bridge0: port 3(syz_tun) entered blocking state [ 75.733388][ T7071] bridge0: port 3(syz_tun) entered disabled state [ 75.733582][ T7071] syz_tun: entered allmulticast mode [ 75.753099][ T7071] syz_tun: entered promiscuous mode [ 75.753568][ T7071] bridge0: port 3(syz_tun) entered blocking state [ 75.753607][ T7071] bridge0: port 3(syz_tun) entered forwarding state [ 75.763635][ T4717] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 75.782099][ T4717] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 76.432027][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.621393][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.638596][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 76.783692][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.944911][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.027449][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.029170][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.030775][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.032986][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.034920][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.159408][ T7104] C: renamed from veth1_to_team (while UP) [ 77.163965][ T7104] netlink: 'syz.3.992': attribute type 4 has an invalid length. [ 77.167073][ T7104] netlink: 108 bytes leftover after parsing attributes in process `syz.3.992'. [ 77.167131][ T7104] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 77.325490][ T50] bridge_slave_1: left allmulticast mode [ 77.325553][ T50] bridge_slave_1: left promiscuous mode [ 77.332866][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.375217][ T50] bridge_slave_0: left allmulticast mode [ 77.375268][ T50] bridge_slave_0: left promiscuous mode [ 77.375433][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.105808][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.119071][ T7132] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1000'. [ 78.156657][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.215749][ T50] bond0 (unregistering): Released all slaves [ 78.537956][ T4396] 8021q: adding VLAN 0 to HW filter on device eth0 [ 78.749418][ T7099] lo speed is unknown, defaulting to 1000 [ 79.138782][ T4720] Bluetooth: hci4: command tx timeout [ 79.440044][ T7179] tipc: Started in network mode [ 79.440110][ T7179] tipc: Node identity ac14140f, cluster identity 4711 [ 79.440658][ T7179] tipc: New replicast peer: 255.255.255.255 [ 79.441116][ T7179] tipc: Enabled bearer , priority 10 [ 79.719696][ T7184] team0: No ports can be present during mode change [ 79.971430][ T4396] 8021q: adding VLAN 0 to HW filter on device eth1 [ 80.299678][ T7202] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 80.568536][ T1091] tipc: Node number set to 2886997007 [ 80.591388][ T4713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.592557][ T4713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.593056][ T4713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.593891][ T4713] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.595515][ T4713] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.746864][ T50] hsr_slave_0: left promiscuous mode [ 80.786083][ T50] hsr_slave_1: left promiscuous mode [ 80.786930][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.786993][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.811702][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.813901][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.879463][ T50] veth1_macvtap: left promiscuous mode [ 80.879560][ T50] veth0_macvtap: left promiscuous mode [ 80.879702][ T50] veth1_vlan: left promiscuous mode [ 80.879827][ T50] veth0_vlan: left promiscuous mode [ 81.218047][ T4720] Bluetooth: hci4: command tx timeout [ 81.331844][ T7244] Injecting memory failure for pfn 0x120f88 at process virtual address 0x20162000 [ 81.359295][ T7244] Memory failure: 0x120f88: recovery action for clean LRU page: Recovered [ 81.361057][ T7244] Injecting memory failure for pfn 0x121e43 at process virtual address 0x20163000 [ 81.379901][ T7244] Memory failure: 0x121e43: recovery action for clean LRU page: Recovered [ 81.379976][ T7244] Injecting memory failure for pfn 0x121e42 at process virtual address 0x20164000 [ 81.380072][ T7244] Memory failure: 0x121e42: recovery action for clean LRU page: Recovered [ 81.688026][ T50] team0 (unregistering): Port device team_slave_1 removed [ 81.706585][ T50] team0 (unregistering): Port device team_slave_0 removed [ 82.196754][ T7275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 82.196778][ T7275] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 82.201924][ T7275] vhci_hcd vhci_hcd.0: Device attached [ 82.361974][ T4396] 8021q: adding VLAN 0 to HW filter on device eth2 [ 82.476248][ T865] usb 7-1: SetAddress Request (2) to port 0 [ 82.476366][ T865] usb 7-1: new SuperSpeed USB device number 2 using vhci_hcd [ 82.657008][ T4720] Bluetooth: hci5: command tx timeout [ 82.883448][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.883713][ T50] IPVS: stop unused estimator thread 0... [ 82.888799][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.890583][ T7099] bridge_slave_0: entered allmulticast mode [ 82.905143][ T7099] bridge_slave_0: entered promiscuous mode [ 82.919393][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.919464][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.919601][ T7099] bridge_slave_1: entered allmulticast mode [ 82.921481][ T7099] bridge_slave_1: entered promiscuous mode [ 83.031025][ T7277] vhci_hcd: connection reset by peer [ 83.034046][ T93] vhci_hcd vhci_hcd.2: stop threads [ 83.034540][ T93] vhci_hcd vhci_hcd.2: release socket [ 83.035056][ T93] vhci_hcd vhci_hcd.2: disconnect device [ 83.070848][ T7306] team_slave_0: entered allmulticast mode [ 83.073170][ T7310] team_slave_0: entered promiscuous mode [ 83.116977][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.119913][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.296120][ T4720] Bluetooth: hci4: command tx timeout [ 83.433332][ T903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.499979][ T7099] team0: Port device team_slave_0 added [ 83.513724][ T7215] lo speed is unknown, defaulting to 1000 [ 83.524467][ T13] IPVS: starting estimator thread 0... [ 83.537591][ T7323] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 83.538963][ T7099] team0: Port device team_slave_1 added [ 83.626298][ T7325] IPVS: using max 12 ests per chain, 28800 per kthread [ 83.692166][ T903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.722224][ T4396] 8021q: adding VLAN 0 to HW filter on device eth3 [ 83.855162][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.855202][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.855242][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.867703][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.869244][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.876919][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.969484][ T903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.174169][ T7338] bond0: option arp_validate: invalid value (a) [ 84.184219][ T7099] hsr_slave_0: entered promiscuous mode [ 84.184954][ T7099] hsr_slave_1: entered promiscuous mode [ 84.185426][ T7099] debugfs: 'hsr0' already exists in 'hsr' [ 84.185445][ T7099] Cannot create hsr debugfs directory [ 84.261055][ T903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.573295][ T7349] loop4: detected capacity change from 0 to 4096 [ 84.618954][ T7349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.642264][ T7349] EXT4-fs error (device loop4): ext4_get_first_dir_block:3559: inode #12: block 80: comm syz.4.1064: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 84.647233][ T7349] EXT4-fs error (device loop4): ext4_get_first_dir_block:3562: inode #12: comm syz.4.1064: directory missing '..' [ 84.740583][ T4720] Bluetooth: hci5: command tx timeout [ 84.841563][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.990192][ T7358] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1067'. [ 85.170147][ T7364] loop2: detected capacity change from 0 to 128 [ 85.171041][ T7364] EXT4-fs: Ignoring removed nobh option [ 85.244574][ T7364] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.267173][ T7365] tap0: tun_chr_ioctl cmd 35108 [ 85.285233][ T903] bridge_slave_1: left allmulticast mode [ 85.287037][ T903] bridge_slave_1: left promiscuous mode [ 85.288627][ T903] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.293381][ T903] bridge_slave_0: left allmulticast mode [ 85.303285][ T903] bridge_slave_0: left promiscuous mode [ 85.303460][ T903] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.321764][ T7364] fscrypt (loop2, inode 12): Reserved bits set in encryption policy [ 85.374573][ T4704] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.375961][ T4720] Bluetooth: hci4: command tx timeout [ 85.559688][ T903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.570955][ T903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.608898][ T903] bond0 (unregistering): Released all slaves [ 86.043366][ T7391] loop2: detected capacity change from 0 to 512 [ 86.067813][ T7391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.067880][ T7391] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.102751][ T7391] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 1 [ 86.102894][ T7391] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 86.102927][ T7391] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1077: Failed to acquire dquot type 1 [ 86.102941][ T7391] loop2: lost filesystem error report for type 5 error -5 [ 86.106576][ T7391] EXT4-fs (loop2): Remounting filesystem read-only [ 86.106694][ T7391] EXT4-fs (loop2): 1 truncate cleaned up [ 86.120709][ T7391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.193966][ T7391] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.279197][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.442783][ T7406] loop2: detected capacity change from 0 to 512 [ 86.504799][ T7406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.539920][ T4396] 8021q: adding VLAN 0 to HW filter on device eth4 [ 86.609198][ T7406] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.629757][ T7406] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 86.701076][ T7099] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.704834][ T7099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.705473][ T7099] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.728008][ T7099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.806336][ T4720] Bluetooth: hci5: command tx timeout [ 86.850098][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.877994][ T7099] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.908960][ T7099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.909606][ T7099] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.923489][ T7099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.304276][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.304359][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.304520][ T7215] bridge_slave_0: entered allmulticast mode [ 87.331744][ T7215] bridge_slave_0: entered promiscuous mode [ 87.345353][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.348828][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.348970][ T7215] bridge_slave_1: entered allmulticast mode [ 87.387022][ T7215] bridge_slave_1: entered promiscuous mode [ 87.526654][ T865] usb 7-1: device descriptor read/8, error -110 [ 87.532924][ T903] hsr_slave_0: left promiscuous mode [ 87.534562][ T903] hsr_slave_1: left promiscuous mode [ 87.540681][ T903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.540736][ T903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.544011][ T903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.544054][ T903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.555285][ T903] veth1_macvtap: left promiscuous mode [ 87.557114][ T903] veth0_macvtap: left promiscuous mode [ 87.558505][ T903] veth1_vlan: left promiscuous mode [ 87.559670][ T903] veth0_vlan: left promiscuous mode [ 87.879732][ T903] team0 (unregistering): Port device team_slave_1 removed [ 87.903054][ T903] team0 (unregistering): Port device team_slave_0 removed [ 87.920638][ T865] usb usb7-port1: attempt power cycle [ 88.119633][ T93] smc: removing ib device syz0 [ 88.189585][ T7215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.212275][ T7215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.213265][ T4396] 8021q: adding VLAN 0 to HW filter on device eth5 [ 88.373570][ T7479] syz.2.1099 uses obsolete (PF_INET,SOCK_PACKET) [ 88.435547][ T7476] C: renamed from veth1_to_team (while UP) [ 88.485437][ T7476] netlink: 'syz.4.1098': attribute type 4 has an invalid length. [ 88.485703][ T7476] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1098'. [ 88.485715][ T7476] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 88.497401][ T865] usb usb7-port1: unable to enumerate USB device [ 88.515197][ T7215] team0: Port device team_slave_0 added [ 88.558864][ T7215] team0: Port device team_slave_1 added [ 88.799846][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.800597][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.800639][ T7215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.887084][ T4720] Bluetooth: hci5: command tx timeout [ 88.925401][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.925457][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.925494][ T7215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.118773][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.309755][ T7215] hsr_slave_0: entered promiscuous mode [ 89.325302][ T7215] hsr_slave_1: entered promiscuous mode [ 89.330280][ T7215] debugfs: 'hsr0' already exists in 'hsr' [ 89.330340][ T7215] Cannot create hsr debugfs directory [ 89.790202][ T4396] 8021q: adding VLAN 0 to HW filter on device eth6 [ 89.798262][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.932682][ T7523] loop2: detected capacity change from 0 to 512 [ 89.935162][ T7523] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 89.958798][ T7523] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1113: bg 0: block 104: invalid block bitmap [ 89.958864][ T7523] loop2: lost filesystem error report for type 5 error -117 [ 89.959925][ T7523] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 89.959941][ T7523] loop2: lost filesystem error report for type 5 error -117 [ 89.960305][ T7523] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1113: invalid indirect mapped block 1 (level 1) [ 89.960322][ T7523] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.962148][ T7523] EXT4-fs (loop2): 1 truncate cleaned up [ 90.030980][ T7523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.059910][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.059997][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.092663][ T7523] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 90.175074][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.568459][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.568537][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.999492][ T7539] : renamed from vlan0 (while UP) [ 91.338953][ T7215] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 91.387659][ T7215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.403241][ T7215] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 91.448467][ T7215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.449096][ T7215] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 91.466438][ T7215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.469677][ T7215] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 91.517134][ T7215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.519333][ T7551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1123'. [ 91.550490][ T7561] loop4: detected capacity change from 0 to 256 [ 91.791112][ T7215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.844737][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'. [ 91.868054][ T7215] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.911806][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.911888][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.912942][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.912975][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.942945][ T7215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.945436][ T7215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.295330][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.394135][ T4396] 8021q: adding VLAN 0 to HW filter on device eth7 [ 92.551964][ T7613] loop2: detected capacity change from 0 to 512 [ 92.582365][ T903] IPVS: stop unused estimator thread 0... [ 92.650966][ T7613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.669257][ T7215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.812309][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.834727][ T7099] veth0_vlan: entered promiscuous mode [ 92.865201][ T7099] veth1_vlan: entered promiscuous mode [ 92.960802][ T7099] veth0_macvtap: entered promiscuous mode [ 92.969866][ T7099] veth1_macvtap: entered promiscuous mode [ 93.008638][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.011116][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.137802][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.142619][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.142851][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.142898][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.209185][ T7642] loop2: detected capacity change from 0 to 256 [ 93.250163][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'. [ 93.253988][ T7215] veth0_vlan: entered promiscuous mode [ 93.287055][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 93.315590][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.315632][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.334884][ T7215] veth1_vlan: entered promiscuous mode [ 93.394263][ T7647] netlink: 'syz.4.1140': attribute type 2 has an invalid length. [ 93.429938][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.429988][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.493159][ T7215] veth0_macvtap: entered promiscuous mode [ 93.509655][ T7215] veth1_macvtap: entered promiscuous mode [ 93.564363][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.600442][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.676628][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.676712][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.676775][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.676818][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.784000][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.784046][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.824432][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.824475][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.851421][ T7662] loop4: detected capacity change from 0 to 512 [ 93.865754][ T7662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.914139][ T7662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.050207][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.955286][ T7706] Injecting memory failure for pfn 0x138da5 at process virtual address 0x20a07000 [ 94.983151][ T7706] Memory failure: 0x138da5: Sending SIGBUS to syz.4.1156:7706 due to hardware memory corruption [ 94.983307][ T7706] Memory failure: 0x138da5: recovery action for dirty LRU page: Recovered [ 95.025399][ T7709] loop5: detected capacity change from 0 to 512 [ 95.073904][ T7709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.100638][ T7709] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1164: corrupted xattr block 33: invalid header [ 95.107798][ T7709] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1164: corrupted xattr block 33: invalid header [ 95.118152][ T7709] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1164: corrupted xattr block 33: invalid header [ 95.130248][ T7709] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1164: corrupted xattr block 33: invalid header [ 95.214438][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 60 seconds [ 95.266160][ T7099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.481792][ T7724] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1169'. [ 95.637081][ T7727] loop2: detected capacity change from 0 to 4096 [ 95.642359][ T7727] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.642439][ T7727] EXT4-fs (loop2): Test dummy encryption mode enabled [ 95.647554][ T7727] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 95.647654][ T7727] System zones: 0-5 [ 95.653557][ T7727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.891535][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.946165][ T7739] loop6: detected capacity change from 0 to 2048 [ 95.949654][ T7739] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 96.327068][ T7757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.328983][ T7757] bond0: (slave bond1): Enslaving as an active interface with an up link [ 96.598074][ T7772] netlink: 'syz.4.1188': attribute type 6 has an invalid length. [ 97.749359][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1208'. [ 98.494843][ T1181] IPVS: starting estimator thread 0... [ 98.506674][ T7863] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 98.597503][ T7864] IPVS: using max 12 ests per chain, 28800 per kthread [ 98.655671][ T7867] loop6: detected capacity change from 0 to 512 [ 98.712253][ T7867] EXT4-fs: Ignoring removed i_version option [ 98.715786][ T7867] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 98.780686][ T7867] EXT4-fs (loop6): 1 truncate cleaned up [ 98.799248][ T7867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.869521][ T7880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.872984][ T7880] bond0: (slave bond1): Enslaving as an active interface with an up link [ 98.877033][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1223'. [ 99.000449][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.215444][ T7898] loop4: detected capacity change from 0 to 512 [ 99.337487][ T7898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.594768][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.231261][ T7951] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 100.332679][ T4898] atkbd serio1: keyboard reset failed on [ 100.782311][ T7975] loop4: detected capacity change from 0 to 128 [ 101.033820][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1260'. [ 101.033876][ T7985] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1260'. [ 101.033887][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1260'. [ 101.033898][ T7985] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1260'. [ 102.287604][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1281'. [ 102.359452][ T8033] loop4: detected capacity change from 0 to 128 [ 102.752243][ T8040] loop2: detected capacity change from 0 to 8192 [ 102.762909][ T8040] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.064501][ T8049] rnbd_client L213: map_device: Parameters missing [ 103.326464][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1293'. [ 103.734865][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 103.898905][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.902010][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.244930][ T8092] : renamed from vlan0 (while UP) [ 105.478251][ T12] IPVS: starting estimator thread 0... [ 105.482585][ T8134] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 105.576121][ T8139] IPVS: using max 12 ests per chain, 28800 per kthread [ 105.992555][ T8159] bond0: option arp_validate: invalid value (a) [ 106.387888][ T8178] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1335'. [ 106.783138][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 106.914056][ T8199] fuse: Bad value for 'fd' [ 108.436328][ T8246] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.709231][ T8256] loop4: detected capacity change from 0 to 2048 [ 108.753617][ T8256] loop4: p1 < > p4 [ 108.753617][ T8256] p4: [ 108.758540][ T8256] loop4: p4 size 722688 extends beyond EOD, truncated [ 108.986138][ T8262] 9p: Bad value for 'rfdno' [ 109.617723][ T8282] ./file0: Can't lookup blockdev [ 109.845438][ T8292] loop6: detected capacity change from 0 to 1024 [ 109.922812][ T8291] loop2: detected capacity change from 0 to 4096 [ 109.939236][ T8291] EXT4-fs (loop2): Test dummy encryption mode enabled [ 109.957783][ T8292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.986826][ T8291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.011550][ T8292] EXT4-fs error (device loop6): ext4_free_blocks:6719: comm syz.6.1376: Freeing blocks not in datazone - block = 0, count = 16 [ 110.204597][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.430904][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.546591][ T8320] i2c i2c-0: delete_device: Extra parameters [ 110.666346][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 111.204657][ T8345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.213596][ T8345] bond0: (slave bond2): Enslaving as an active interface with an up link [ 111.275488][ T4720] block nbd1: Receive control failed (result -32) [ 111.388720][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 111.588109][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 111.590595][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 111.592473][ T8368] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 111.606866][ T8366] loop4: detected capacity change from 0 to 512 [ 111.609051][ T8366] EXT4-fs: Ignoring removed orlov option [ 111.612762][ T8370] loop6: detected capacity change from 0 to 256 [ 111.616509][ T8366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.626675][ T8366] EXT4-fs (loop4): 1 truncate cleaned up [ 111.629117][ T8366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.639699][ T8370] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.676187][ T8366] EXT4-fs (loop4): shut down requested (2) [ 111.751558][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.751657][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.751705][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.752100][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.752201][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.752299][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.752396][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.752497][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.752593][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.752688][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.915600][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.927445][ T8381] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1416'. [ 111.938960][ T8378] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1416'. [ 111.986050][ T8380] loop2: detected capacity change from 0 to 512 [ 112.010169][ T8380] EXT4-fs (loop2): 1 truncate cleaned up [ 112.012607][ T8380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.114057][ T8386] loop4: detected capacity change from 0 to 128 [ 112.278355][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.943879][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1428'. [ 112.946205][ T8412] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1428'. [ 112.948380][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1428'. [ 112.950469][ T8412] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.023817][ T8416] loop2: detected capacity change from 0 to 256 [ 113.518297][ T8433] loop7: detected capacity change from 0 to 7 [ 113.521654][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.521731][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.521921][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.521957][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.522115][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.522149][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.522297][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.522367][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.526389][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.526455][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.532976][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.533030][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.534026][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.534065][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.536112][ T8433] ldm_validate_partition_table(): Disk read failed. [ 113.536343][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.536391][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.537945][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.537987][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.538145][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.538181][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.538386][ T8433] Dev loop7: unable to read RDB block 0 [ 113.539070][ T8433] loop7: unable to read partition table [ 113.539247][ T8433] loop7: partition table beyond EOD, truncated [ 113.539260][ T8433] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 113.590446][ T8433] ldm_validate_partition_table(): Disk read failed. [ 113.591139][ T8433] Dev loop7: unable to read RDB block 0 [ 113.597187][ T8433] loop7: unable to read partition table [ 113.597393][ T8433] loop7: partition table beyond EOD, truncated [ 113.647208][ T8438] netlink: 'syz.6.1443': attribute type 14 has an invalid length. [ 114.288357][ T8466] loop6: detected capacity change from 0 to 2048 [ 114.335691][ T8466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.586266][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.070555][ T8493] netlink: 'syz.6.1466': attribute type 2 has an invalid length. [ 115.994309][ T8530] __nla_validate_parse: 7 callbacks suppressed [ 115.994372][ T8530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'. [ 116.152162][ T8536] loop5: detected capacity change from 0 to 1024 [ 116.153000][ T8536] EXT4-fs: Ignoring removed orlov option [ 116.163988][ T8536] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 116.197827][ T8536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.279304][ T8551] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 116.480614][ T7099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.637459][ T8564] fuse: Bad value for 'fd' [ 116.656253][ T8559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.668996][ T8559] bond0: (slave bond2): Enslaving as an active interface with an up link [ 116.844075][ T8570] loop4: detected capacity change from 0 to 128 [ 116.848043][ T8570] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.125054][ T8576] loop6: detected capacity change from 0 to 4096 [ 117.128649][ T8576] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.128682][ T8576] EXT4-fs (loop6): Test dummy encryption mode enabled [ 117.145765][ T8576] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 117.146188][ T8576] System zones: 0-5 [ 117.151959][ T8576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.204343][ T8584] loop7: detected capacity change from 0 to 7 [ 117.232480][ T8584] ldm_validate_partition_table(): Disk read failed. [ 117.239936][ T8584] Dev loop7: unable to read RDB block 0 [ 117.250161][ T8584] loop7: unable to read partition table [ 117.250360][ T8584] loop7: partition table beyond EOD, truncated [ 117.250433][ T8584] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 117.276318][ T8586] ldm_validate_partition_table(): Disk read failed. [ 117.279066][ T8586] Dev loop7: unable to read RDB block 0 [ 117.280658][ T8586] loop7: unable to read partition table [ 117.280830][ T8586] loop7: partition table beyond EOD, truncated [ 117.409244][ T4339] ldm_validate_partition_table(): Disk read failed. [ 117.411329][ T4339] Dev loop7: unable to read RDB block 0 [ 117.427305][ T4339] loop7: unable to read partition table [ 117.427514][ T4339] loop7: partition table beyond EOD, truncated [ 117.497593][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.633785][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 117.706409][ T8602] sch_fq: defrate 0 ignored. [ 118.259525][ T8628] loop4: detected capacity change from 0 to 2048 [ 118.312784][ T8628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 118.401187][ T8634] 9p: Bad value for 'rfdno' [ 118.543374][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.196881][ T8656] dlm: non-version read from control device 4096 [ 119.422071][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 119.913566][ T8684] loop5: detected capacity change from 0 to 256 [ 119.914770][ T8684] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.929992][ T8684] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.390302][ T8699] loop4: detected capacity change from 0 to 256 [ 120.441041][ T8699] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.813958][ T8714] netlink: 752 bytes leftover after parsing attributes in process `syz.5.1564'. [ 121.383555][ T8728] loop2: detected capacity change from 0 to 8192 [ 121.412741][ T8727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.417774][ T8727] bond0: (slave bond1): Enslaving as an active interface with an up link [ 121.423784][ T8728] loop2: p1[EZD] p3 p4 [ 121.423840][ T8728] loop2: partition table partially beyond EOD, truncated [ 121.451928][ T8728] loop2: p3 start 150994944 is beyond EOD, truncated [ 121.458986][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1570'. [ 121.893671][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 121.899394][ T5817] udevd[5817]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.381009][ T8752] loop2: detected capacity change from 0 to 1024 [ 122.442905][ T8752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 122.445546][ T8752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.580718][ T8752] EXT4-fs: Ignoring removed bh option [ 122.616535][ T8752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a047c01c, mo2=0002] [ 122.631186][ T8752] System zones: 0-1, 3-12 [ 122.632169][ T8752] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 122.744579][ T4704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.841566][ T8797] logitech-hidpp-device 0005:046D:B012.0002: received hid++ report of bad size (22) [ 123.843707][ T4812] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 124.011745][ T8798] fido_id[8798]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 124.144547][ T8806] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 124.398053][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 124.450795][ T8818] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 124.522824][ T8820] netlink: 'syz.3.1613': attribute type 12 has an invalid length. [ 124.522875][ T8820] netlink: 'syz.3.1613': attribute type 29 has an invalid length. [ 124.522915][ T8820] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1613'. [ 124.773876][ T8830] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 125.297812][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 90 seconds [ 125.386745][ T8851] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 125.927727][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.929064][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.030687][ T8897] loop4: detected capacity change from 0 to 8192 [ 127.056082][ T8897] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.691884][ T8908] loop5: detected capacity change from 0 to 2048 [ 127.777755][ T8908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.143231][ T7099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.409653][ T8924] loop5: detected capacity change from 0 to 512 [ 128.435232][ T8924] EXT4-fs (loop5): Test dummy encryption mode enabled [ 128.458350][ T8924] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1658: inode has both inline data and extents flags [ 128.458404][ T8924] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.475879][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 128.475913][ C0] EXT4-fs (loop5): initial error at time 128: ext4_orphan_get:1403: inode 15 [ 128.475975][ C0] EXT4-fs (loop5): last error at time 128: ext4_orphan_get:1403: inode 15 [ 128.482904][ T8924] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1658: couldn't read orphan inode 15 (err -117) [ 128.482954][ T8924] loop5: lost filesystem error report for type 5 error -117 [ 128.499951][ T8924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.702069][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1661'. [ 128.702123][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1661'. [ 128.702155][ T8929] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 128.800715][ T7099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.057837][ T8955] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1675'. [ 131.301310][ T8994] loop4: detected capacity change from 0 to 2048 [ 131.303442][ T8994] EXT4-fs: Ignoring removed i_version option [ 131.360211][ T8994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.540059][ T8999] loop6: detected capacity change from 0 to 4096 [ 131.559929][ T8999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.567156][ T8999] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 131.590580][ T8999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.651662][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.815008][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.856627][ T9011] ima: policy update failed [ 131.866250][ T30] audit: type=1802 audit(131.840:22): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.1700" res=0 errno=0 [ 132.413138][ T9036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.417044][ T9036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.426780][ T4720] Bluetooth: hci5: Dropping invalid advertising data [ 132.426834][ T4720] Bluetooth: hci5: Malformed LE Event: 0x02 [ 132.928116][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 133.069491][ T30] audit: type=1807 audit(133.050:23): func=FILE_CHECK res=0 [ 133.070206][ T9053] ima: policy update failed [ 133.072064][ T30] audit: type=1802 audit(133.050:24): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.4.1719" res=0 errno=0 [ 133.075519][ T30] audit: type=1802 audit(133.050:25): pid=9053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.1719" res=0 errno=0 [ 133.176953][ T30] audit: type=1807 audit(133.160:26): UNKNOWN=? res=0 [ 133.177650][ T9056] ima: policy update failed [ 133.179551][ T30] audit: type=1802 audit(133.160:27): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.6.1720" res=0 errno=0 [ 133.183239][ T30] audit: type=1802 audit(133.160:28): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.6.1720" res=0 errno=0 [ 135.275482][ T9119] mmap: syz.6.1743 (9119) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.408650][ T9126] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 135.841041][ T9140] Soft offlining pfn 0x14ce59 at process virtual address 0x20000000 [ 135.871947][ T9138] input: syz1 as /devices/virtual/input/input6 [ 135.880345][ T9140] Soft offlining pfn 0x14cf89 at process virtual address 0x20001000 [ 135.882352][ T9140] Soft offlining pfn 0x14cf9d at process virtual address 0x20002000 [ 136.126239][ T9143] loop2: detected capacity change from 0 to 8192 [ 136.430945][ T9152] loop6: detected capacity change from 0 to 1024 [ 136.446873][ T9152] EXT4-fs: Ignoring removed orlov option [ 136.462068][ T9152] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 136.470527][ T9152] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 136.474146][ T9152] EXT4-fs (loop6): orphan cleanup on readonly fs [ 136.478718][ T9152] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz.6.1763: Invalid inode table block 0 in block_group 0 [ 136.478759][ T9152] loop6: lost filesystem error report for type 5 error -117 [ 136.483647][ T9152] EXT4-fs (loop6): Remounting filesystem read-only [ 136.483698][ T9152] Quota error (device loop6): write_blk: dquota write failed [ 136.486100][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 136.486115][ C1] EXT4-fs (loop6): initial error at time 136: __ext4_get_inode_loc:4916 [ 136.486133][ C1] EXT4-fs (loop6): last error at time 136: __ext4_get_inode_loc:4916 [ 136.494791][ T9152] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 136.494974][ T9152] EXT4-fs (loop6): 1 truncate cleaned up [ 136.520562][ T9152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.607429][ T9152] EXT4-fs (loop6): shut down requested (0) [ 136.610099][ T9161] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1767'. [ 136.766623][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.916597][ T9173] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1772'. [ 136.966490][ T9163] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 137.389416][ T9192] tipc: Started in network mode [ 137.390750][ T9192] tipc: Node identity ac14140f, cluster identity 4711 [ 137.392735][ T9192] tipc: New replicast peer: 255.255.255.255 [ 137.395703][ T9192] tipc: Enabled bearer , priority 10 [ 137.808071][ T4704] cgroup: fork rejected by pids controller in /syz2 [ 137.931102][ T9215] batadv_slave_1: entered promiscuous mode [ 137.933202][ T9214] batadv_slave_1: left promiscuous mode [ 138.036430][ T9219] loop5: detected capacity change from 0 to 512 [ 138.074733][ T9219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.098687][ T9217] dlm: non-version read from control device 4096 [ 138.114617][ T4704] bridge0: port 3(syz_tun) entered disabled state [ 138.124042][ T4704] syz_tun (unregistering): left allmulticast mode [ 138.124099][ T4704] syz_tun (unregistering): left promiscuous mode [ 138.124164][ T4704] bridge0: port 3(syz_tun) entered disabled state [ 138.222578][ T7099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.480110][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.510176][ T4898] tipc: Node number set to 2886997007 [ 138.619097][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.747099][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1804'. [ 138.781535][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.800883][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1804'. [ 138.858838][ T9240] n: the hash_elasticity option has been deprecated and is always 16 [ 138.858889][ T9240] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 138.862574][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.865145][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.867652][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.874557][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.877530][ T9246] n: the hash_elasticity option has been deprecated and is always 16 [ 138.877569][ T9246] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 138.888180][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.054909][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.350174][ T30] audit: type=1400 audit(139.330:29): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="er" requested=r pid=9268 comm="syz.5.1814" path="/143/file1" dev="tmpfs" ino=762 [ 139.531268][ T12] bridge_slave_1: left allmulticast mode [ 139.531318][ T12] bridge_slave_1: left promiscuous mode [ 139.531493][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.550045][ T12] bridge_slave_0: left allmulticast mode [ 139.550096][ T12] bridge_slave_0: left promiscuous mode [ 139.550705][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.570973][ T9277] loop4: detected capacity change from 0 to 8 [ 140.011628][ T30] audit: type=1400 audit(139.990:30): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=7099 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 140.027489][ T30] audit: type=1400 audit(140.010:31): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 140.037653][ T30] audit: type=1400 audit(140.020:32): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=4339 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 140.090221][ T30] audit: type=1400 audit(140.070:33): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9293 comm="syz.5.1825" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 140.115754][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.142383][ T30] audit: type=1400 audit(140.120:34): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=4339 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 140.150877][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.183350][ T12] bond0 (unregistering): (slave bond1): Releasing backup interface [ 140.209183][ T12] bond0 (unregistering): (slave bond2): Releasing backup interface [ 140.236474][ T30] audit: type=1400 audit(140.220:35): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=5817 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 140.256884][ T12] bond0 (unregistering): Released all slaves [ 140.278588][ T12] bond1 (unregistering): Released all slaves [ 140.318235][ T30] audit: type=1400 audit(140.300:36): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=5817 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 140.322431][ T12] bond2 (unregistering): Released all slaves [ 140.447361][ T12] tipc: Disabling bearer [ 140.449001][ T12] tipc: Left network mode [ 140.466952][ T4812] hsr0: entered promiscuous mode [ 140.666509][ T30] audit: type=1400 audit(140.650:37): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 140.785808][ T30] audit: type=1400 audit(140.760:38): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=7099 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 140.966938][ T4720] Bluetooth: hci0: command tx timeout [ 141.250418][ T4396] 8021q: adding VLAN 0 to HW filter on device eth9 [ 141.257580][ T12] hsr_slave_0: left promiscuous mode [ 141.258816][ T12] hsr_slave_1: left promiscuous mode [ 141.259438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.259456][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.263486][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.263514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.271134][ T12] veth1_macvtap: left promiscuous mode [ 141.271204][ T12] veth0_macvtap: left promiscuous mode [ 141.271309][ T12] veth1_vlan: left promiscuous mode [ 141.271406][ T12] veth0_vlan: left promiscuous mode [ 141.562382][ T12] team0 (unregistering): Port device team_slave_1 removed [ 141.579104][ T12] team0 (unregistering): Port device team_slave_0 removed [ 141.861054][ T9248] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.862652][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.862812][ T9248] bridge_slave_0: entered allmulticast mode [ 141.868909][ T9248] bridge_slave_0: entered promiscuous mode [ 141.872378][ T9248] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.873972][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.875803][ T9248] bridge_slave_1: entered allmulticast mode [ 141.879373][ T9248] bridge_slave_1: entered promiscuous mode [ 141.915225][ T9248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.921741][ T9248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.975468][ T9248] team0: Port device team_slave_0 added [ 141.977432][ T9248] team0: Port device team_slave_1 added [ 142.008878][ T9248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.008922][ T9248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.008939][ T9248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.011274][ T9248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.011281][ T9248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.011293][ T9248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.021605][ T12] IPVS: stop unused estimator thread 0... [ 142.065111][ T9248] hsr_slave_0: entered promiscuous mode [ 142.066475][ T9248] hsr_slave_1: entered promiscuous mode [ 142.070276][ T9248] debugfs: 'hsr0' already exists in 'hsr' [ 142.071507][ T9248] Cannot create hsr debugfs directory [ 142.252953][ T4396] 8021q: adding VLAN 0 to HW filter on device eth8 [ 142.698927][ T9248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.702511][ T9248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.703594][ T9248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.706252][ T9248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.706849][ T9248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.713706][ T9248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.714297][ T9248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.717554][ T9248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.732963][ T9248] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.733044][ T9248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.733217][ T9248] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.733288][ T9248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.773988][ T9248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.784407][ T9248] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.790851][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.792595][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.815604][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.815669][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.821809][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.821890][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.850671][ T9248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.046341][ T4720] Bluetooth: hci0: command tx timeout [ 143.129242][ T9248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.158294][ T9248] veth0_vlan: entered promiscuous mode [ 143.165504][ T9248] veth1_vlan: entered promiscuous mode [ 143.192887][ T9248] veth0_macvtap: entered promiscuous mode [ 143.200981][ T9248] veth1_macvtap: entered promiscuous mode [ 143.213310][ T9248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.215759][ T9248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.251357][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.254302][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.254374][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.254421][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.288208][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.288254][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.324343][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.324399][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.126158][ T4720] Bluetooth: hci0: command tx timeout [ 146.726843][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 146.726897][ T30] audit: type=1400 audit(146.710:43): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=1379 comm="kworker/u8:7" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 147.215961][ T4720] Bluetooth: hci0: command tx timeout [ 147.295992][ T4339] udevd[4339]: worker [4727] /devices/virtual/block/nbd0 is taking a long time [ 147.370450][ T30] audit: type=1400 audit(147.350:44): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 154.088269][ T30] audit: type=1400 audit(154.070:45): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=1379 comm="kworker/u8:7" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 154.794279][ T30] audit: type=1400 audit(154.770:46): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 155.368162][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 120 seconds [ 168.168163][ T30] audit: type=1400 audit(168.150:47): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=1379 comm="kworker/u8:7" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 169.387632][ T30] audit: type=1400 audit(169.370:48): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 185.446204][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 150 seconds [ 187.377178][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.378608][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.697161][ T30] audit: type=1400 audit(195.680:49): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=1379 comm="kworker/u8:7" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 199.686052][ T4713] Bluetooth: hci4: command 0x0406 tx timeout [ 200.107261][ T30] audit: type=1400 audit(200.090:50): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 215.546985][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 180 seconds [ 217.856795][ T4339] udevd[4339]: worker [4727] /devices/virtual/block/nbd0 timeout; kill it [ 217.858084][ T4339] udevd[4339]: seq 10425 '/devices/virtual/block/nbd0' killed [ 235.525989][ T4720] Bluetooth: hci5: command 0x0406 tx timeout [ 245.616305][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 210 seconds [ 248.807137][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.808489][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.885942][ T4713] Bluetooth: hci2: command 0x0406 tx timeout [ 253.927108][ T30] audit: type=1400 audit(253.910:51): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 259.498959][ T30] audit: type=1400 audit(259.480:52): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=1379 comm="kworker/u8:7" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 261.126915][ T4713] Bluetooth: hci0: command 0x0406 tx timeout [ 275.686283][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 240 seconds [ 305.776315][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 270 seconds [ 310.247729][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.247811][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.178576][ T30] audit: type=1400 audit(328.160:53): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=39890 daddr=10.128.0.31 dest=22 netif=enp0s0 [ 328.394263][ T30] audit: type=1400 audit(328.370:54): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=39890 daddr=10.128.0.31 dest=22 netif=enp0s0 [ 328.610271][ T30] audit: type=1400 audit(328.590:55): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=39890 daddr=10.128.0.31 dest=22 netif=enp0s0 [ 329.066245][ T30] audit: type=1400 audit(329.050:56): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13 comm="kworker/u8:1" saddr=10.128.0.169 src=39890 daddr=10.128.0.31 dest=22 netif=enp0s0 [ 329.930243][ T30] audit: type=1400 audit(329.910:57): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=39890 daddr=10.128.0.31 dest=22 netif=enp0s0 [ 331.658241][ T30] audit: type=1400 audit(331.640:58): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=39890 daddr=10.128.0.31 dest=22 netif=enp0s0 [ 335.274688][ T30] audit: type=1400 audit(335.250:59): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=39890 daddr=10.128.0.31 dest=22 netif=enp0s0 [ 335.847597][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 300 seconds [ 342.186709][ T30] audit: type=1400 audit(342.170:60): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=39890 daddr=10.128.0.31 dest=22 netif=enp0s0 [ 356.010618][ T30] audit: type=1400 audit(355.990:61): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=39890 daddr=10.128.0.31 dest=22 netif=enp0s0 [ 365.936265][ T11] block nbd0: Possible stuck request 00000000852483a0: control (read@0,4096B). Runtime 330 seconds [ 366.567525][ T30] audit: type=1400 audit(366.550:62): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=4812 comm="kworker/0:5" saddr=10.128.0.169 src=30028 daddr=10.128.0.31 dest=40730 netif=enp0s0 [ 371.687886][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.687969][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.176077][ T31] INFO: task udevd:4727 blocked in I/O wait for more than 143 s ** replaying previous printk message ** [ 376.176077][ T31] INFO: task udevd:4727 blocked in I/O wait for more than 143 seconds. [ 376.176757][ T31] Tainted: G L syzkaller #0 [ 376.176769][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.176775][ T31] task:udevd state:D stack:0 pid:4727 tgid:4727 ppid:4339 task_flags:0x400140 flags:0x00800011 [ 376.176796][ T31] Call trace: [ 376.176802][ T31] __switch_to+0x2b4/0x6e4 (T) [ 376.176821][ T31] __schedule+0x1370/0x2d80 [ 376.176834][ T31] schedule+0x13c/0x20c [ 376.176846][ T31] io_schedule+0x1c/0xe0 [ 376.176858][ T31] folio_wait_bit_common+0x6b8/0xa30 [ 376.176875][ T31] do_read_cache_folio+0x23c/0x5a8 [ 376.176890][ T31] read_cache_folio+0x68/0x88 [ 376.176904][ T31] read_part_sector+0xcc/0x708 [ 376.176917][ T31] adfspart_check_POWERTEC+0x94/0x5b8 [ 376.176930][ T31] bdev_disk_changed+0x6e4/0x1224 [ 376.176942][ T31] blkdev_get_whole+0x15c/0x240 [ 376.176958][ T31] bdev_open+0x2b4/0x880 [ 376.176973][ T31] blkdev_open+0x2d4/0x408 [ 376.176985][ T31] do_dentry_open+0x5c4/0xfc0 [ 376.177000][ T31] vfs_open+0x44/0x2dc [ 376.177014][ T31] path_openat+0x1084/0x18f4 [ 376.177027][ T31] do_file_open+0x1c8/0x2e8 [ 376.177041][ T31] do_sys_openat2+0x114/0x1e8 [ 376.177055][ T31] do_sys_open+0xb0/0xe0 [ 376.177069][ T31] __arm64_sys_openat+0xa8/0xc4 [ 376.177083][ T31] invoke_syscall+0x98/0x244 [ 376.177099][ T31] el0_svc_common+0xec/0x23c [ 376.177114][ T31] do_el0_svc+0x4c/0x5c [ 376.177128][ T31] el0_svc+0x64/0x260 [ 376.177141][ T31] el0t_64_sync_handler+0x44/0x104 [ 376.177155][ T31] el0t_64_sync+0x198/0x19c [ 376.177214][ T31] [ 376.177214][ T31] Showing all locks held in the system: [ 376.177223][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 376.177231][ T31] #0: ffff800088de2060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 376.177270][ T31] locks held by pr/ttyAMA-1/41: 2, last CPU#1: [ 376.177277][ T31] #0: ffff800088cbf158 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x4c/0x68 [ 376.177312][ T31] #1: ffff0000c2ea7098 (&port_lock_key){....}-{3:3}, at: pl011_console_device_lock+0x90/0xe4 [ 376.177365][ T31] locks held by getty/4488: 2, on CPU#0: [ 376.177373][ T31] #0: ffff0000d02430a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 376.177406][ T31] #1: ffff8000925de2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 376.177451][ T31] locks held by udevd/4727: 1, on CPU#0: [ 376.177459][ T31] #0: ffff0000c7118350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 376.177498][ T31] [ 376.177502][ T31] ============================================= [ 376.177502][ T31] [ 376.177509][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 376.226606][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 376.228407][ T31] Tainted: [L]=SOFTLOCKUP [ 376.229205][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 376.231089][ T31] Call trace: [ 376.231609][ T31] show_stack+0x2c/0x3c (C) [ 376.232368][ T31] __dump_stack+0x30/0x40 [ 376.233142][ T31] dump_stack_lvl+0x30/0x12c [ 376.234073][ T31] dump_stack+0x1c/0x28 [ 376.234837][ T31] vpanic+0x594/0xaf8 [ 376.235580][ T31] vpanic+0x0/0xaf8 [ 376.236275][ T31] hung_task_panic+0x0/0x2c [ 376.237112][ T31] kthread+0x304/0x3d4 [ 376.237928][ T31] ret_from_fork+0x10/0x20 [ 376.238768][ T31] SMP: stopping secondary CPUs [ 376.239726][ T31] Kernel Offset: disabled [ 376.240503][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 376.241863][ T31] Memory Limit: none [ 376.619687][ T31] Rebooting in 86400 seconds..