last executing test programs: 4m32.206951948s ago: executing program 0 (id=169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000008500000005000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m32.101318001s ago: executing program 0 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b2388a8", @ANYRES16=0x0, @ANYRES64=r0], 0xffdd) 4m31.933618905s ago: executing program 0 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff21000b0000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, r4}, 0x38) 4m29.785945098s ago: executing program 0 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) 4m22.086235538s ago: executing program 0 (id=185): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f0000000700), 0x0) 4m21.18654349s ago: executing program 0 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b2388a8", @ANYRES16=0x0, @ANYRES64=r0], 0xffdd) 4m20.822581989s ago: executing program 32 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b2388a8", @ANYRES16=0x0, @ANYRES64=r0], 0xffdd) 3m28.929616768s ago: executing program 4 (id=326): pipe2$9p(0x0, 0x80000) write$9p(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f056bbeee, 0x8031, 0xffffffffffffffff, 0x2f3bd000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r1, &(0x7f0000000040)=""/48, 0x30, 0x200087) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], 0x3, 0x23d, &(0x7f0000000300)="$eJzs2k9rHGUcB/DfxNbUlHQj/qMF8UEP6mVocvbQIC2IAUUboQrSqZnVZcfdsLMEVsTuSfHmS/AsHr0J0qOXXHwDevCWS449iCObTbEb1kORNm3z+VzmB898eZ5n5pmH5zB7b3z3ebdd5+1iGAtZFguXYhy3s1iJhbhjHK+/eu3XF9+/9uHb6xsbl99L6cr61dW1lNK5l3756MsfX741PPvBT+d+XozdlY/39tf+3H1+9/ze31c/69SpU6def5iKdKPfHxY3qjJtdepuntK7VVnUZer06nIw096u+tvbo1T0tpaXtgdlXaeiN0rdcpSG/TQcjFLxadHppTzP0/JS8H9s/nC7aWK/OX09mqZ56vs4eyuW/4hWZE+n7JlL2XPXsxfG2fn9pmkd91C5L7z/k+2uTf1MRPXNzubO5vQ6bV9vRyeqKONitOKvmCyTQ9P6ylsbly+mAyvxdXXzMH9zZ/OJ2fxqtGJlfn51mk+z+cVYijgdcZhfi1Y8Oz+/Njd/Jl575a7+82jFb59EP6rYikn23/xXqym9+c7GkfyFg/sAAB43eUrf/j4t557f8jzdcaR9GrqH8+GR89WpuHDqGCfOgXr0RbeoqnLw2BaTWT4EwziBRRb3rYvFuKdUFjGerIOH4rE8+Wh8ese6LfGAzO6TAAAAAAAAAAAAPCoe1B+4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/+WfAAAA//9l+Muc") 3m27.456998324s ago: executing program 4 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)={[{@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@noload}, {@usrquota}, {@data_ordered}, {@dioread_nolock}]}, 0xfe, 0x503, &(0x7f0000001140)="$eJzs3c9vHFcdAPDvjL2x67q1C5UKCKgphYCi7Nqb1qp6KhcQqiohVZw4uMbeWJZ3vZZ3XWoTqfb/gEQlDgi4cOaAxKFSThwR3OCWSzggBYhAMRKHRbM/HMfejU2y2U28n480mnnzZuf7Xlbz3uZre18AI2suIvYj4lJEfBARM+3zSXuLd1pbdt29uzdWDu/eWEmi0Xj/H0mzPjsXx16Teb59z8nsvt+J+GFyOm5td29juVwubbfLhXplq1Db3bu6XlleK62VNovFxYXF+beuvVnsW19frfzmzrfX3/3+p7/70u0/7X/zx1mzptt1x/vRT62u547iZMYj4t0nEWwIxtr9uTTshvBI0oj4TES81nz+Z2Ks+W6eT5fHGgB4BjQaM9GYOV4GAC66tJkDS9J8OxcwHWmaz7dyeC/HVFqu1upXrld3NldbubLZyKXX18ul+XaucDZySVZe+Dg7vl8uxoPlaxHxUkT8ZOK5Zjm/cv48AwDQX8+fmP//PdGa/wGAC27yrAuWBtMOAGBwzpz/AYALx/wPAKPH/A8Ao8f8DwCjx/wPAKPmVmf+Hxt2SwCAgfjee+9lW+Ow/f3Xqx/u7mxUP7y6Wqpt5Cs7K/mV6vZWfq1aXSuX8ivVyln3K1erWwtvxM5HhXqpVi/UdveWKtWdzfpS83u9l0q5gfQKAHiYl169+ZckIvbffq65xbG1HMzVcLGlw24AMDRy/jC6fAs3jC7/xwfOWsuz568If/IIwRofP8KLgH67/Hn5fxhV8v8wuuT/YXTJ/8PoajSSXmv+p0eXAAAXihw/MNCf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAFMd3cZo+V0zSfj3ghImYjl1xfL5fmI+LFiPjzRG4iKy8MtcUAwONL/5a01/+6PPP69MnaS8l/Jpr7iPjRz97/6UfL9fr2Qnb+n0fn65+0zxeH0X4A4Cydebozj3fcu3tjpbMNsj13vtVaXDSLe9jeWjXjMZ7t/jgZuYiY+lfSKrdln1fG+hB//yAiPtet/0kzNzLbXvn0ZPws9gsDjZ8+ED9t1rX22b/FZ0/deaJnzLPWeoVRcTMbf97p9vylMdfcT3Zd/HiyOUI9vs74d3hq/Os875PNsabb+Dd33hhv/P67PesOIr4w3i1+chQ/6RH/9XPGv/XFL7/Wq67xi4jL0T3+8ViFemWrUNvdu7peWV4rrZU2i8XFhcX5t669WSw0c9SFTqb6tL+/feXFnv3/dcRUj/iTZ/T/a/eLc7863bOjAfiX//3gB1/pFf8g4htf7f7+v/yQ+Nmc+PVenTpheeq3PZfvzuKvtvp/8P++/1fOGf/2X/dWz3kpADAAtd29jeVyubTd14Nc9PmGxw6SJ9TmZ/6g85H5aWnP03aQfR5/3Pu80k6Zdb3mDz//9JWscug97cvBUIclYADuP/TDbgkAAAAAAAAAAAAAANDLE/9zonTYPQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAi+18AAAD//zqXyDg=") r2 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x9, 0x8718, 0x0, 'queue1\x00', 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000002900)={[{@orlov}, {@grpid}, {@usrjquota}, {@grpid}, {@noload}, {@block_validity}, {@test_dummy_encryption_v1}, {@init_itable}, {@bsdgroups}, {@grpid}, {@norecovery}]}, 0x0, 0x4a2, &(0x7f0000000440)="$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") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m23.858563542s ago: executing program 4 (id=342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x34}, {0xfe, 0x1000000000400192, 0x8, 0xfffffffffffffffc, 0x4, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9, 0x10}, 0x7e, 0x0, 0x2, 0x1, 0x1, 0x20}}, 0xf0}}, 0x24000844) 3m23.435001873s ago: executing program 4 (id=345): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000001c0)={0x0, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 3m20.073009386s ago: executing program 4 (id=349): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x10, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsmount(r0, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) sendfile(r10, r9, 0x0, 0x7fffffff) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) 3m3.844402186s ago: executing program 33 (id=349): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x10, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsmount(r0, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) sendfile(r10, r9, 0x0, 0x7fffffff) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) 38.134159429s ago: executing program 3 (id=843): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) 35.798156117s ago: executing program 3 (id=845): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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") r0 = creat(&(0x7f0000000040)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b801000018000000640200000a0400000f00200002000500000000020000000051e57464"], 0xa78) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) socket(0x10, 0x3, 0x0) eventfd(0x7e) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000500)={0x0, 0x1, 0x10, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x0, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x7ffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0xa6, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587b, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) 32.183462736s ago: executing program 3 (id=859): socket(0x2, 0xa, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x36, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0xfffffffd, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 31.950938592s ago: executing program 3 (id=861): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) 30.353411881s ago: executing program 3 (id=866): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.478839743s ago: executing program 3 (id=871): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004081}, 0x40000) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00'}) socket(0x25, 0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 29.102153842s ago: executing program 34 (id=871): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004081}, 0x40000) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00'}) socket(0x25, 0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 8.988504508s ago: executing program 1 (id=920): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x20, 0x14, 0x64, 0x0, 0x29, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}}}, 0x0) 8.711582935s ago: executing program 1 (id=921): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) 8.179730308s ago: executing program 1 (id=924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x40, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "fb2c3bac37d8feecc342f8a5ba3f618c"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x3, "91"}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0xfffffff0, 0xfffffffe, 0x10001, 0xc, 0x6]}]}}}}}}}}, 0x0) 7.971465363s ago: executing program 1 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() lgetxattr(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 7.931564814s ago: executing program 2 (id=927): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x5bd1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) 7.28971887s ago: executing program 5 (id=928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in=@multicast2, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@local, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x100000001}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 7.2881545s ago: executing program 2 (id=929): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 6.769321853s ago: executing program 5 (id=930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x25) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x4000000000000000, r1, 'id1\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r8, 0x0, 0xfffffd33) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newsa={0xfc, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1, 0x0, 0x10}, {0x0, 0x2, 0x7, 0xfff}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x3}}]}, 0xfc}}, 0x890) r10 = socket$netlink(0x10, 0x3, 0x8000000004) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x7c2) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100090808004149224e06040800", 0x58}], 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r7, 0xfffffff5, 0x6, r8}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r6}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth1_to_bond\x00', 0x41}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000700)={0x3, 0x0, 0xfec00000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) 6.724272234s ago: executing program 2 (id=931): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 5.602696531s ago: executing program 5 (id=932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 5.26551638s ago: executing program 5 (id=933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x40, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "fb2c3bac37d8feecc342f8a5ba3f618c"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x3, "91"}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0xfffffff0, 0xfffffffe, 0x10001, 0xc, 0x6]}]}}}}}}}}, 0x0) 4.901036469s ago: executing program 5 (id=934): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0100000009000000040000000100000000040000", @ANYRES32, @ANYBLOB="0300000000000000000000000000fbff00000000", @ANYRES32], 0x50) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e0000000048000001a13bd5c510069d9d0000e01f00ff02000000000000000000000000000100", @ANYRESHEX], 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r3, 0x289e0cb5, 0x0) 4.84653115s ago: executing program 2 (id=935): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) bpf$ITER_CREATE(0xb, 0x0, 0x0) tkill(r1, 0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.936157063s ago: executing program 1 (id=936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 3.521201913s ago: executing program 2 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x200c2, 0x40) pwrite64(r3, &(0x7f0000000380)="4b9df8bc", 0x4, 0x4000000003) pread64(0xffffffffffffffff, 0x0, 0x0, 0x22) lsetxattr(0x0, 0x0, &(0x7f0000000740)='net/packet\x00', 0xb, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000680)={0x3, 0x0, &(0x7f00000005c0)=[r3, r2, r2, r3]}, 0x4) unlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = socket(0x2, 0x3, 0x6) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) 2.03368389s ago: executing program 5 (id=938): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1f7) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x497, &(0x7f0000000280)="$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") setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@sysvgroups}, {@grpjquota}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@nodioread_nolock}]}, 0x81, 0xbf2, &(0x7f0000001c40)="$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") connect$can_bcm(0xffffffffffffffff, &(0x7f0000000400), 0x10) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 2.03325655s ago: executing program 1 (id=939): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000600000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.476405304s ago: executing program 6 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() lgetxattr(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 0s ago: executing program 2 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) kernel console output (not intermixed with test programs): d filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.057355][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.262690][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.514030][ T6288] loop0: detected capacity change from 0 to 256 [ 141.059549][ T6298] loop2: detected capacity change from 0 to 256 [ 143.306646][ T6298] FAT-fs (loop2): Directory bread(block 64) failed [ 143.353892][ T6298] FAT-fs (loop2): Directory bread(block 65) failed [ 143.391605][ T6298] FAT-fs (loop2): Directory bread(block 66) failed [ 143.424654][ T6298] FAT-fs (loop2): Directory bread(block 67) failed [ 143.431355][ T6298] FAT-fs (loop2): Directory bread(block 68) failed [ 143.456578][ T6304] loop3: detected capacity change from 0 to 512 [ 143.484652][ T6298] FAT-fs (loop2): Directory bread(block 69) failed [ 143.491334][ T6298] FAT-fs (loop2): Directory bread(block 70) failed [ 143.498616][ T6298] FAT-fs (loop2): Directory bread(block 71) failed [ 143.508541][ T6298] FAT-fs (loop2): Directory bread(block 72) failed [ 143.515657][ T6298] FAT-fs (loop2): Directory bread(block 73) failed [ 143.546634][ T6304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.139514][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.219878][ T6312] loop1: detected capacity change from 0 to 256 [ 145.382348][ T6312] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 145.392671][ T6316] 8021q: VLANs not supported on ip_vti0 [ 145.698764][ T6316] zram0: detected capacity change from 0 to 8 [ 148.338058][ T6331] loop2: detected capacity change from 0 to 128 [ 148.872094][ T6345] loop3: detected capacity change from 0 to 2048 [ 148.992145][ T28] audit: type=1804 audit(1786329158.587:30): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.181" name="/newroot/52/file0/bus" dev="loop2" ino=1048649 res=1 errno=0 [ 149.058317][ T6345] loop3: p1 < > p4 [ 149.158010][ T28] audit: type=1804 audit(1786329158.647:31): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.181" name="/newroot/52/file0/bus" dev="loop2" ino=1048649 res=1 errno=0 [ 149.186873][ T28] audit: type=1804 audit(1786329158.667:32): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.181" name="/newroot/52/file0/bus" dev="loop2" ino=1048649 res=1 errno=0 [ 149.226738][ T6345] loop3: p4 size 8388608 extends beyond EOD, truncated [ 151.640450][ T6349] loop2: detected capacity change from 0 to 512 [ 151.743888][ T6349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.754998][ T5769] syz-executor (5769) used greatest stack depth: 20936 bytes left [ 151.766953][ T6349] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.936633][ T6151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.089237][ T6151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.178607][ T6151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.238120][ T6364] loop3: detected capacity change from 0 to 512 [ 152.248357][ T6364] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.279369][ T6364] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 154.465421][ T6151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.629658][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.165454][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.186099][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.195423][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.210944][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.224754][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.233291][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.998972][ T6384] chnl_net:caif_netlink_parms(): no params data found [ 156.202030][ T6411] loop2: detected capacity change from 0 to 512 [ 156.245144][ T6411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.279243][ T6411] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 158.259602][ T5086] Bluetooth: hci2: command tx timeout [ 158.592154][ T6421] loop3: detected capacity change from 0 to 8192 [ 158.884924][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.903708][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.911782][ T6430] capability: warning: `syz.1.206' uses deprecated v2 capabilities in a way that may be insecure [ 158.936138][ T6384] bridge_slave_0: entered allmulticast mode [ 158.947868][ T6384] bridge_slave_0: entered promiscuous mode [ 159.215484][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.262774][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.286672][ T6384] bridge_slave_1: entered allmulticast mode [ 159.325949][ T6384] bridge_slave_1: entered promiscuous mode [ 159.430327][ T6441] xt_hashlimit: size too large, truncated to 1048576 [ 159.593711][ T6445] loop1: detected capacity change from 0 to 512 [ 159.628168][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.674245][ T6445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.689051][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.705910][ T6445] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.806775][ T6445] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.210: iget: bad i_size value: 2533274857506816 [ 159.877735][ T6445] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.210: iget: bad i_size value: 2533274857506816 [ 159.912127][ T6151] hsr_slave_0: left promiscuous mode [ 159.921734][ T6445] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.210: iget: bad i_size value: 2533274857506816 [ 159.941892][ T6151] hsr_slave_1: left promiscuous mode [ 159.950405][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.965830][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.080858][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.125690][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.173166][ T6151] bridge_slave_1: left allmulticast mode [ 160.189301][ T6151] bridge_slave_1: left promiscuous mode [ 160.217233][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.419244][ T6452] xt_TCPMSS: Only works on TCP SYN packets [ 160.431701][ T5086] Bluetooth: hci2: command tx timeout [ 160.442535][ T6457] loop2: detected capacity change from 0 to 512 [ 160.457102][ T6457] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.489682][ T6151] bridge_slave_0: left allmulticast mode [ 160.495706][ T6151] bridge_slave_0: left promiscuous mode [ 160.503635][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.518130][ T6457] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 162.464673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 162.557441][ T5086] Bluetooth: hci2: command tx timeout [ 162.738038][ T6151] veth1_macvtap: left promiscuous mode [ 162.744002][ T6151] veth0_macvtap: left promiscuous mode [ 162.764645][ T6151] veth1_vlan: left promiscuous mode [ 162.770326][ T6151] veth0_vlan: left promiscuous mode [ 163.860866][ T6471] loop2: detected capacity change from 0 to 512 [ 163.951675][ T6471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.009124][ T6471] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.177221][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 164.236690][ T6471] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #2: block 18: comm syz.2.215: lblock 23 mapped to illegal pblock 18 (length 1) [ 164.278338][ T6471] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.215: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 164.301593][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 164.311782][ T6471] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.215: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 164.367200][ T6471] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.215: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 164.398654][ T6471] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 14: comm syz.2.215: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 164.419892][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.426505][ T6471] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 15: comm syz.2.215: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 164.456253][ T6471] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.215: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 164.479942][ T6471] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 17: comm syz.2.215: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 164.535656][ T6471] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #2: block 18: comm syz.2.215: lblock 23 mapped to illegal pblock 18 (length 1) [ 164.552011][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.559736][ T6471] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 19: comm syz.2.215: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 164.584583][ T5086] Bluetooth: hci2: command tx timeout [ 164.788417][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.160409][ T6151] bond0 (unregistering): Released all slaves [ 165.261670][ T6384] team0: Port device team_slave_0 added [ 165.273432][ T6384] team0: Port device team_slave_1 added [ 165.302319][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.309390][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.345396][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.364243][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.372255][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.403882][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.422309][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.554386][ T6384] hsr_slave_0: entered promiscuous mode [ 165.593411][ T6384] hsr_slave_1: entered promiscuous mode [ 165.611057][ T6384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.628904][ T6384] Cannot create hsr debugfs directory [ 166.158862][ T6508] loop1: detected capacity change from 0 to 2048 [ 166.192218][ T6384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.220803][ T6508] loop1: p1 < > p3 < > p4 < > [ 166.229058][ T6508] loop1: partition table partially beyond EOD, truncated [ 166.229228][ T6384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.264634][ T6508] loop1: p1 start 3405774849 is beyond EOD, truncated [ 166.288651][ T6384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.292129][ T6508] loop1: p3 start 4284289 is beyond EOD, truncated [ 166.322082][ T6384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.374331][ T6514] loop3: detected capacity change from 0 to 128 [ 166.502128][ T6514] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.581729][ T6514] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.653725][ T6514] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 20: comm syz.3.228: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 166.720116][ T6514] EXT4-fs (loop3): Remounting filesystem read-only [ 166.751004][ T6384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.815812][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.853266][ T6384] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.921256][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.928581][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.966139][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.973337][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.346255][ T6538] loop2: detected capacity change from 0 to 256 [ 167.568279][ T6540] loop1: detected capacity change from 0 to 512 [ 167.619381][ T6540] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.245234][ T6538] FAT-fs (loop2): Directory bread(block 64) failed [ 170.251822][ T6538] FAT-fs (loop2): Directory bread(block 65) failed [ 170.899441][ T6538] FAT-fs (loop2): Directory bread(block 66) failed [ 170.924838][ T6538] FAT-fs (loop2): Directory bread(block 67) failed [ 170.938852][ T6538] FAT-fs (loop2): Directory bread(block 68) failed [ 171.043654][ T6538] FAT-fs (loop2): Directory bread(block 69) failed [ 171.067477][ T6538] FAT-fs (loop2): Directory bread(block 70) failed [ 171.100436][ T6538] FAT-fs (loop2): Directory bread(block 71) failed [ 171.116443][ T6538] FAT-fs (loop2): Directory bread(block 72) failed [ 171.132262][ T6538] FAT-fs (loop2): Directory bread(block 73) failed [ 171.341754][ T6384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.827248][ T6574] loop2: detected capacity change from 0 to 512 [ 171.852239][ T6574] EXT4-fs: Ignoring removed i_version option [ 171.880526][ T6553] loop3: detected capacity change from 0 to 128 [ 171.896815][ T6574] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.943511][ T6574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.030522][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.094941][ T6574] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.237209][ T6384] veth0_vlan: entered promiscuous mode [ 172.281306][ T6384] veth1_vlan: entered promiscuous mode [ 172.458632][ T6384] veth0_macvtap: entered promiscuous mode [ 172.507786][ T6384] veth1_macvtap: entered promiscuous mode [ 172.528162][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.538823][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.554660][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.574577][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.584690][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.614718][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.636547][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.680667][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.717225][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.735656][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.750008][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.760571][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.775773][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.789605][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.946980][ T6384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.983863][ T6384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.038356][ T6384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.077996][ T6384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.143879][ T6587] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 173.157449][ T6587] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 173.166709][ T6587] overlayfs: failed to verify upper root origin [ 174.696533][ T6266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.720582][ T6266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.829370][ T6151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.864533][ T6151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.922638][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.560936][ T6627] loop3: detected capacity change from 0 to 512 [ 178.617586][ T6627] EXT4-fs: inline encryption not supported [ 178.730025][ T6627] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 178.832997][ T6627] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.254: corrupted in-inode xattr: e_value size too large [ 178.926239][ T6627] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.254: couldn't read orphan inode 15 (err -117) [ 178.958707][ T6627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.961937][ T6639] vti0: entered promiscuous mode [ 179.047617][ T6627] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 13: comm syz.3.254: lblock 0 mapped to illegal pblock 13 (length 1) [ 179.111911][ T6627] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 13: comm syz.3.254: lblock 0 mapped to illegal pblock 13 (length 1) [ 179.142797][ T6639] syz.1.257 (6639) used greatest stack depth: 20808 bytes left [ 179.205482][ T6627] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #2: lblock 0: comm syz.3.254: error -117 reading directory block [ 181.581507][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.725806][ T6675] loop1: detected capacity change from 0 to 256 [ 182.765691][ T6675] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.060371][ T6681] loop4: detected capacity change from 0 to 512 [ 183.077989][ T6681] EXT4-fs: Ignoring removed nobh option [ 183.161269][ T6681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.195829][ T6681] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.260051][ T6681] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.265: corrupted inode contents [ 183.296417][ T6681] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #2: comm syz.4.265: mark_inode_dirty error [ 183.341969][ T6681] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.265: corrupted inode contents [ 183.391919][ T6681] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #2: comm syz.4.265: mark_inode_dirty error [ 185.504653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 185.770760][ T6681] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.265: corrupted inode contents [ 185.810054][ T6681] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.265: mark_inode_dirty error [ 185.867718][ T6681] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 186.107341][ T6681] process 'syz.4.265' launched './file0' with NULL argv: empty string added [ 186.154627][ T5849] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.384609][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 186.396232][ T5849] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.449812][ T5849] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.464979][ T5849] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 186.474063][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.517243][ T5849] usb 4-1: config 0 descriptor?? [ 186.627546][ T6384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.957380][ T5849] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 186.986024][ T5849] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 186.993479][ T5849] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 187.025434][ T5849] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 187.046624][ T5849] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 187.066642][ T5849] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 187.081022][ T6730] loop1: detected capacity change from 0 to 1024 [ 187.115080][ T6730] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131071)! [ 187.145850][ T6730] EXT4-fs (loop1): group descriptors corrupted! [ 187.183126][ C1] usb 4-1: input irq status -75 received [ 187.950635][ T5773] usb 4-1: USB disconnect, device number 13 [ 187.988147][ T6751] loop4: detected capacity change from 0 to 512 [ 188.096473][ T6730] loop1: detected capacity change from 0 to 256 [ 188.108443][ T6751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.168220][ T6730] exfat: Deprecated parameter 'utf8' [ 188.246900][ T6384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.276470][ T6730] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 190.624668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 192.032646][ T6792] syzkaller0: entered promiscuous mode [ 192.039193][ T6793] random: crng reseeded on system resumption [ 192.054935][ T6792] syzkaller0: entered allmulticast mode [ 192.083818][ T6792] tipc: Started in network mode [ 192.104884][ T6792] tipc: Node identity 4229d2a5483d, cluster identity 4711 [ 192.112404][ T6792] tipc: Enabled bearer , priority 0 [ 194.394977][ T6791] tipc: Resetting bearer [ 194.441007][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.447958][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.556686][ T6791] tipc: Disabling bearer [ 194.580120][ T6808] loop4: detected capacity change from 0 to 2048 [ 194.588720][ T788] tipc: Node number set to 169136805 [ 194.682868][ T6808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.940527][ T4384] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 194.951848][ T6813] loop3: detected capacity change from 0 to 256 [ 194.984837][ T4384] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 195.030328][ T4384] EXT4-fs (loop4): This should not happen!! Data will be lost [ 195.030328][ T4384] [ 195.084602][ T4384] EXT4-fs (loop4): Total free blocks count 0 [ 195.090649][ T4384] EXT4-fs (loop4): Free/Dirty block details [ 195.109589][ T4384] EXT4-fs (loop4): free_blocks=66060288 [ 195.128323][ T4384] EXT4-fs (loop4): dirty_blocks=32 [ 195.133975][ T4384] EXT4-fs (loop4): Block reservation details [ 195.144773][ T4384] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 195.183295][ T6266] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 197.747559][ T6839] loop2: detected capacity change from 0 to 16 [ 197.819208][ T6839] erofs: (device loop2): mounted with root inode @ nid 36. [ 197.923373][ T6845] loop3: detected capacity change from 0 to 512 [ 198.037563][ T6845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.115798][ T6845] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.399717][ T6861] Bluetooth: MGMT ver 1.22 [ 198.423151][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.429144][ T6861] loop1: detected capacity change from 0 to 256 [ 198.533322][ T6861] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 201.024186][ T6876] loop1: detected capacity change from 0 to 256 [ 201.814352][ T6892] netlink: 72 bytes leftover after parsing attributes in process `syz.4.297'. [ 202.698638][ T6900] loop2: detected capacity change from 0 to 128 [ 202.735835][ T6900] FAT-fs (loop2): Unrecognized mount option "0x0000000000000003" or missing value [ 202.757676][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 202.764048][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 202.764117][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 203.206575][ T6915] loop4: detected capacity change from 0 to 512 [ 203.219749][ T6915] EXT4-fs: Ignoring removed bh option [ 203.280856][ T6915] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 203.403434][ T6915] EXT4-fs (loop4): 1 truncate cleaned up [ 203.421874][ T6915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.917841][ T6931] loop3: detected capacity change from 0 to 512 [ 203.945082][ T6931] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 204.077108][ T6931] EXT4-fs (loop3): 1 truncate cleaned up [ 204.079047][ T6931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.110284][ T6384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.843042][ T6958] loop2: detected capacity change from 0 to 16 [ 204.862105][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.888895][ T6958] erofs: (device loop2): mounted with root inode @ nid 36. [ 204.978543][ T6958] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 205.035830][ T6942] loop4: detected capacity change from 0 to 128 [ 205.157589][ T6958] syz.2.331: attempt to access beyond end of device [ 205.157589][ T6958] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 205.256945][ T6958] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 205.285899][ T6958] syz.2.331: attempt to access beyond end of device [ 205.285899][ T6958] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 205.344366][ T6973] loop3: detected capacity change from 0 to 512 [ 205.365895][ T6958] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 205.410546][ T6973] EXT4-fs: Ignoring removed bh option [ 205.475467][ T28] audit: type=1800 audit(1786329215.047:33): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.331" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 205.511213][ T6973] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 205.545107][ T6958] syz.2.331 (6958) used greatest stack depth: 18728 bytes left [ 205.591963][ T6973] EXT4-fs (loop3): 1 truncate cleaned up [ 205.622388][ T6973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.785857][ T6984] loop4: detected capacity change from 0 to 512 [ 205.957571][ T6984] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.053504][ T6984] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 206.426240][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.597629][ T7001] loop3: detected capacity change from 0 to 512 [ 206.611352][ T7001] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.635551][ T7001] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 206.679090][ T5762] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.689613][ T7030] loop2: detected capacity change from 0 to 512 [ 210.705359][ T7030] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.746217][ T7030] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 210.777758][ T7032] loop4: detected capacity change from 0 to 512 [ 211.620540][ T7032] EXT4-fs: Ignoring removed bh option [ 211.836099][ T7032] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 211.984894][ T7032] EXT4-fs (loop4): 1 truncate cleaned up [ 212.085512][ T7032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.920213][ T6384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.118213][ T7067] loop1: detected capacity change from 0 to 256 [ 213.147161][ T7067] exfat: Deprecated parameter 'utf8' [ 213.185013][ T7067] exfat: Deprecated parameter 'namecase' [ 213.212957][ T7067] exfat: Deprecated parameter 'utf8' [ 213.229898][ T7067] exfat: Deprecated parameter 'namecase' [ 213.251971][ T7067] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 216.003327][ T28] audit: type=1804 audit(1786329225.587:34): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.349" name="bus" dev="ramfs" ino=10945 res=1 errno=0 [ 216.999872][ T28] audit: type=1804 audit(1786329225.667:35): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.349" name="bus" dev="ramfs" ino=10945 res=1 errno=0 [ 217.275852][ T7103] loop2: detected capacity change from 0 to 512 [ 217.283175][ T7103] EXT4-fs: Ignoring removed bh option [ 217.362177][ T7103] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 217.469105][ T7103] EXT4-fs (loop2): 1 truncate cleaned up [ 217.483611][ T7103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.108533][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.192845][ T7173] random: crng reseeded on system resumption [ 230.965461][ T7232] xt_hashlimit: size too large, truncated to 1048576 [ 231.588075][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.599237][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.609014][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.619407][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.627836][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.638916][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.935602][ T7241] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 232.069410][ T3501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.272551][ T3501] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.420974][ T3501] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.459275][ T7235] chnl_net:caif_netlink_parms(): no params data found [ 232.677382][ T3501] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.752206][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.815587][ T5086] Bluetooth: hci4: command tx timeout [ 234.864613][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.871872][ T7235] bridge_slave_0: entered allmulticast mode [ 234.936301][ T7235] bridge_slave_0: entered promiscuous mode [ 234.955944][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.972368][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.979810][ T7235] bridge_slave_1: entered allmulticast mode [ 234.994807][ T7235] bridge_slave_1: entered promiscuous mode [ 235.115787][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.151335][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.334058][ T7235] team0: Port device team_slave_0 added [ 235.375471][ T7235] team0: Port device team_slave_1 added [ 235.464201][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.487326][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.536436][ T7235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.568994][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.584617][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.644315][ T7235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.007234][ T7235] hsr_slave_0: entered promiscuous mode [ 236.036886][ T7235] hsr_slave_1: entered promiscuous mode [ 236.064887][ T7235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.072502][ T7235] Cannot create hsr debugfs directory [ 236.141137][ T7266] loop2: detected capacity change from 0 to 512 [ 236.163359][ T7266] EXT4-fs: Ignoring removed nobh option [ 236.222760][ T7266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.275488][ T7266] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.344139][ T7266] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.385: corrupted inode contents [ 236.387040][ T7266] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz.2.385: mark_inode_dirty error [ 236.444612][ T7266] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.385: corrupted inode contents [ 236.531895][ T7266] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #2: comm syz.2.385: mark_inode_dirty error [ 236.589069][ T7277] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.385: corrupted inode contents [ 236.630549][ T7277] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.385: mark_inode_dirty error [ 236.719173][ T7277] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 236.828959][ T5785] Bluetooth: hci4: command tx timeout [ 237.375635][ T7289] input: syz1 as /devices/virtual/input/input10 [ 238.904577][ T5785] Bluetooth: hci4: command tx timeout [ 239.616522][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.474064][ T7299] loop3: detected capacity change from 0 to 4096 [ 240.490859][ T7299] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.752601][ T7299] EXT4-fs (loop3): Test dummy encryption mode enabled [ 240.985501][ T5785] Bluetooth: hci4: command tx timeout [ 241.477062][ T7299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.843124][ T7305] loop2: detected capacity change from 0 to 4096 [ 242.913857][ T7296] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 243.066455][ T7305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.101430][ T7315] loop1: detected capacity change from 0 to 4096 [ 243.128906][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.263864][ T7315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.528721][ T7327] loop3: detected capacity change from 0 to 128 [ 243.562346][ T7327] FAT-fs (loop3): Unrecognized mount option "˙˙˙˙˙˙˙˙" or missing value [ 243.602525][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.870844][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.928702][ T7337] loop3: detected capacity change from 0 to 512 [ 244.037185][ T7235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.075760][ T7337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.138159][ T7235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.156064][ T7337] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.807045][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.981763][ T7235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.024035][ T7235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.047263][ T3501] hsr_slave_0: left promiscuous mode [ 247.082462][ T3501] hsr_slave_1: left promiscuous mode [ 247.098156][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.129509][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.165455][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.185115][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.201352][ T3501] bridge_slave_1: left allmulticast mode [ 247.211714][ T3501] bridge_slave_1: left promiscuous mode [ 247.226569][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.281981][ T3501] bridge_slave_0: left allmulticast mode [ 247.306175][ T3501] bridge_slave_0: left promiscuous mode [ 247.311951][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.395309][ T3501] veth1_macvtap: left promiscuous mode [ 247.400887][ T3501] veth0_macvtap: left promiscuous mode [ 247.441417][ T3501] veth1_vlan: left promiscuous mode [ 247.451625][ T3501] veth0_vlan: left promiscuous mode [ 252.009343][ T5100] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 252.043563][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 252.088246][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 252.130212][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.170447][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.218998][ T5100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.234508][ T5100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.245703][ T5100] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.259237][ T5100] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.268794][ T5100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.285855][ T5100] usb 2-1: config 0 descriptor?? [ 252.557818][ T3501] bond0 (unregistering): Released all slaves [ 252.724851][ T5100] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 252.759435][ T5100] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 252.890623][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.960842][ T7235] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.027589][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.034812][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.125800][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.132981][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.459856][ T7416] loop2: detected capacity change from 0 to 128 [ 253.510478][ T7416] FAT-fs (loop2): bogus number of reserved sectors [ 253.524057][ T7416] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 253.557509][ T7416] FAT-fs (loop2): Can't find a valid FAT filesystem [ 253.614213][ T5814] usb 2-1: USB disconnect, device number 9 [ 253.897375][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.000333][ T7433] loop2: detected capacity change from 0 to 512 [ 255.020851][ T7433] EXT4-fs: quotafile must be on filesystem root [ 255.690612][ T7441] loop1: detected capacity change from 0 to 512 [ 255.782631][ T7441] EXT4-fs (loop1): 1 truncate cleaned up [ 256.145736][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.180019][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.475721][ T7441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.841661][ T7235] veth0_vlan: entered promiscuous mode [ 257.873018][ T7235] veth1_vlan: entered promiscuous mode [ 258.051644][ T7235] veth0_macvtap: entered promiscuous mode [ 258.107022][ T7235] veth1_macvtap: entered promiscuous mode [ 258.163437][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.229974][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.304564][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.337917][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.389246][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.430650][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.474116][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.567068][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.629281][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.634162][ T5100] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 258.648883][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.660341][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.670248][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.680737][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.692297][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.704712][ T7235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.713448][ T7235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.722635][ T7235] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.732747][ T7235] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.737368][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.842740][ T5100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.864213][ T5100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.895663][ T5100] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.949303][ T5100] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.994522][ T5100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.017571][ T6233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.038375][ T5100] usb 4-1: config 0 descriptor?? [ 259.057151][ T6233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.190808][ T7485] loop1: detected capacity change from 0 to 512 [ 259.213428][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.241011][ T7485] EXT4-fs: Ignoring removed bh option [ 259.265114][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.356815][ T7485] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 260.080143][ T5100] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 260.093790][ T7485] EXT4-fs (loop1): 1 truncate cleaned up [ 260.108605][ T5100] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 260.133984][ T7485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.293802][ T7505] loop2: detected capacity change from 0 to 512 [ 261.307395][ T7505] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 261.329266][ T7505] EXT4-fs (loop2): 1 truncate cleaned up [ 261.336311][ T7505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.618069][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.645616][ T5849] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 261.767417][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.775649][ T7513] loop3: detected capacity change from 0 to 512 [ 261.821069][ T7513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.859278][ T7513] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.972306][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.527760][ T27] usb 4-1: USB disconnect, device number 14 [ 263.904856][ T788] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 264.687996][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.792155][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.841331][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.877606][ T7533] loop5: detected capacity change from 0 to 40427 [ 264.893835][ T788] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.924968][ T7533] F2FS-fs (loop5): inline encryption not supported [ 264.934226][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.963961][ T7533] F2FS-fs (loop5): invalid crc value [ 264.973275][ T788] usb 2-1: config 0 descriptor?? [ 265.019447][ T7533] F2FS-fs (loop5): Found nat_bits in checkpoint [ 265.215351][ T7533] F2FS-fs (loop5): Start checkpoint disabled! [ 265.290367][ T7533] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 265.443707][ T788] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 265.478174][ T788] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 267.367825][ T788] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 267.903809][ T7617] loop3: detected capacity change from 0 to 1024 [ 268.005413][ T7617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 268.060202][ T7617] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.266138][ T5814] usb 2-1: USB disconnect, device number 10 [ 268.504182][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 268.775431][ T7602] loop5: detected capacity change from 0 to 40427 [ 268.821627][ T7602] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12 [ 268.829325][ T7602] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 268.912387][ T7602] F2FS-fs (loop5): invalid crc value [ 268.979485][ T7602] F2FS-fs (loop5): Wrong journal entry on segno 33 [ 269.005374][ T7602] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 270.582502][ T7659] loop3: detected capacity change from 0 to 512 [ 270.640031][ T7659] EXT4-fs: Ignoring removed nobh option [ 270.720658][ T7659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.752765][ T7659] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.767378][ T2132] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.826274][ T7659] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.464: corrupted inode contents [ 270.873001][ T7659] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz.3.464: mark_inode_dirty error [ 270.965860][ T2132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.973937][ T7659] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.464: corrupted inode contents [ 270.982694][ T2132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.037568][ T2132] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.047917][ T7659] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.464: mark_inode_dirty error [ 271.081254][ T2132] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.098457][ T7668] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.464: corrupted inode contents [ 271.120188][ T2132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.142943][ T2132] usb 6-1: config 0 descriptor?? [ 271.230930][ T7668] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.464: mark_inode_dirty error [ 271.303083][ T7668] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 271.615872][ T2132] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 271.646824][ T2132] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 271.691077][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.126123][ T23] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 274.316757][ T7716] loop1: detected capacity change from 0 to 16 [ 274.356145][ T7716] erofs: (device loop1): mounted with root inode @ nid 36. [ 274.703925][ T5778] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 274.923693][ T5778] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.969617][ T5778] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.988983][ T7736] loop3: detected capacity change from 0 to 512 [ 274.994014][ T5778] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 275.021230][ T7736] EXT4-fs: Ignoring removed nobh option [ 275.041961][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.052091][ T2132] usb 6-1: USB disconnect, device number 2 [ 275.278023][ T5778] hub 2-1:4.0: USB hub found [ 275.311969][ T7738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.525655][ T7736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.569739][ T7751] usb usb8: usbfs: process 7751 (syz.2.483) did not claim interface 0 before use [ 276.122927][ T7736] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.123757][ T5778] hub 2-1:4.0: 2 ports detected [ 276.147227][ T5778] usb 2-1: selecting invalid altsetting 1 [ 276.160421][ T7736] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.480: corrupted inode contents [ 276.206470][ T7736] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz.3.480: mark_inode_dirty error [ 276.230575][ T5778] hub 2-1:4.0: Using single TT (err -22) [ 276.309108][ T7736] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.480: corrupted inode contents [ 276.386610][ T7736] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.480: mark_inode_dirty error [ 276.404742][ T5778] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 276.427525][ T7761] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.480: corrupted inode contents [ 276.435277][ T5778] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 276.483592][ T7761] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.480: mark_inode_dirty error [ 276.522406][ T5778] usb 2-1: USB disconnect, device number 11 [ 276.605658][ T7761] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 276.689823][ T7770] input: syz1 as /devices/virtual/input/input11 [ 276.790498][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.167299][ T788] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 277.951835][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.962856][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.973849][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.987421][ T788] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.028991][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.063429][ T788] usb 3-1: config 0 descriptor?? [ 278.273940][ T7802] loop3: detected capacity change from 0 to 512 [ 278.302697][ T7802] EXT4-fs: Ignoring removed nobh option [ 278.399503][ T7802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.412582][ T7802] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.496076][ T7802] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.497: corrupted inode contents [ 278.515379][ T7802] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz.3.497: mark_inode_dirty error [ 278.543831][ T788] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 278.566835][ T7802] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.497: corrupted inode contents [ 278.579975][ T788] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 278.611776][ T7802] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.497: mark_inode_dirty error [ 278.721613][ T7802] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.497: corrupted inode contents [ 278.765506][ T7802] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.497: mark_inode_dirty error [ 278.794736][ T7802] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 278.811282][ T7822] capability: warning: `syz.5.502' uses 32-bit capabilities (legacy support in use) [ 278.824513][ T7819] loop1: detected capacity change from 0 to 128 [ 278.842648][ T7822] overlayfs: upper fs does not support file handles, falling back to index=off. [ 278.849202][ T7819] FAT-fs (loop1): Unrecognized mount option "0x0000000000000003" or missing value [ 279.188150][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.918966][ T788] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 281.248359][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 281.258942][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 281.565450][ T9] usb 3-1: USB disconnect, device number 11 [ 284.358386][ T7902] loop2: detected capacity change from 0 to 256 [ 284.427330][ T7902] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.475411][ T7902] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 284.544046][ T7902] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 284.585150][ T7902] exFAT-fs (loop2): failed to load alloc-bitmap [ 284.614793][ T7902] exFAT-fs (loop2): failed to recognize exfat type [ 284.975774][ T7918] loop1: detected capacity change from 0 to 256 [ 285.278017][ T7931] loop2: detected capacity change from 0 to 1024 [ 285.321883][ T7931] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 285.363465][ T7931] JBD2: no valid journal superblock found [ 285.380644][ T7931] EXT4-fs (loop2): Could not load journal inode [ 286.180807][ T7898] loop3: detected capacity change from 0 to 40427 [ 286.219968][ T7898] F2FS-fs (loop3): invalid crc value [ 286.276381][ T7898] F2FS-fs (loop3): Found nat_bits in checkpoint [ 286.385994][ T7898] F2FS-fs (loop3): Start checkpoint disabled! [ 286.515118][ T7898] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 286.638052][ T7945] loop2: detected capacity change from 0 to 512 [ 286.698502][ T7945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.114516][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 288.653497][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.032026][ T7961] loop1: detected capacity change from 0 to 8192 [ 289.049824][ T7961] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.070041][ T7961] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 289.077983][ T7961] FAT-fs (loop1): Filesystem has been set read-only [ 289.617057][ T7968] futex_wake_op: syz.3.538 tries to shift op by 144; fix this program [ 290.303829][ T7964] block device autoloading is deprecated and will be removed. [ 290.316932][ T7967] loop3: detected capacity change from 0 to 256 [ 290.556259][ T7967] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 290.584631][ T28] audit: type=1800 audit(1786329300.580:36): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.538" name="file1" dev="loop3" ino=1048736 res=0 errno=0 [ 291.737591][ T7986] loop3: detected capacity change from 0 to 512 [ 291.796585][ T7986] EXT4-fs: Ignoring removed nobh option [ 291.814082][ T7993] loop1: detected capacity change from 0 to 512 [ 291.857662][ T7982] loop2: detected capacity change from 0 to 512 [ 291.874056][ T7993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.938635][ T7986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.973478][ T7982] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.366736][ T7986] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.819443][ T7986] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.541: corrupted inode contents [ 293.845877][ T7986] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz.3.541: mark_inode_dirty error [ 293.857429][ T7982] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 293.906522][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 293.928058][ T7986] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.541: corrupted inode contents [ 293.963648][ T7982] Quota error (device loop2): write_blk: dquota write failed [ 293.979248][ T7986] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.541: mark_inode_dirty error [ 293.998225][ T7982] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 294.022171][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.031883][ T8006] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.541: corrupted inode contents [ 294.052595][ T7982] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.543: Failed to acquire dquot type 0 [ 294.125924][ T8006] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.541: mark_inode_dirty error [ 294.150243][ T7982] EXT4-fs (loop2): 1 truncate cleaned up [ 294.178269][ T7982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.192049][ T8006] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 294.341318][ T8014] loop5: detected capacity change from 0 to 512 [ 294.355398][ T8014] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 294.381101][ T8014] EXT4-fs (loop5): required journal recovery suppressed and not mounted read-only [ 296.621640][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.050450][ T8036] futex_wake_op: syz.2.549 tries to shift op by 144; fix this program [ 297.068551][ T8036] loop2: detected capacity change from 0 to 256 [ 297.197167][ T8036] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 297.225341][ T28] audit: type=1800 audit(1786329307.241:37): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.549" name="file1" dev="loop2" ino=1048750 res=0 errno=0 [ 298.298407][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.337240][ T8046] loop1: detected capacity change from 0 to 512 [ 298.436037][ T8046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.831789][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 300.671930][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.137550][ T8079] loop1: detected capacity change from 0 to 512 [ 301.152908][ T8079] EXT4-fs: Ignoring removed nobh option [ 301.219572][ T8079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.247702][ T8079] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.318683][ T8079] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.560: corrupted inode contents [ 301.342083][ T8079] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #2: comm syz.1.560: mark_inode_dirty error [ 301.378831][ T8079] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.560: corrupted inode contents [ 301.414027][ T8079] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #2: comm syz.1.560: mark_inode_dirty error [ 301.457699][ T8091] sit0: entered promiscuous mode [ 301.501665][ T8091] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 301.526461][ T8079] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.560: corrupted inode contents [ 301.546635][ T8091] netlink: 1 bytes leftover after parsing attributes in process `syz.3.562'. [ 301.558258][ T8079] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.560: mark_inode_dirty error [ 301.607785][ T8079] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 301.823344][ T8107] loop2: detected capacity change from 0 to 512 [ 301.852502][ T8112] loop3: detected capacity change from 0 to 16 [ 301.870876][ T8107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.885032][ T8112] erofs: (device loop3): mounted with root inode @ nid 36. [ 302.014470][ T8112] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 302.080089][ T8112] syz.3.565: attempt to access beyond end of device [ 302.080089][ T8112] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 302.130705][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.148289][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 302.181034][ T8112] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 302.200364][ T8112] syz.3.565: attempt to access beyond end of device [ 302.200364][ T8112] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 302.234105][ T8112] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 302.342683][ T28] audit: type=1800 audit(1786329312.388:38): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.565" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 302.529355][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.851159][ T8144] futex_wake_op: syz.1.570 tries to shift op by 144; fix this program [ 302.980957][ T8144] loop1: detected capacity change from 0 to 256 [ 303.252046][ T8144] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 303.537146][ T28] audit: type=1800 audit(1786329313.521:39): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.570" name="file1" dev="loop1" ino=1048751 res=0 errno=0 [ 303.695418][ T8139] loop3: detected capacity change from 0 to 4096 [ 303.763552][ T8139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.055599][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.297188][ T8172] loop1: detected capacity change from 0 to 512 [ 304.368223][ T8172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.382304][ T28] audit: type=1326 audit(1786329314.433:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470119e0d9 code=0x7fc00000 [ 304.407528][ T28] audit: type=1326 audit(1786329314.453:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.576" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f470119e0d9 code=0x7fc00000 [ 304.458071][ T8170] fuse: Bad value for 'rootmode' [ 304.549033][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 308.094388][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.394036][ T5778] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 308.453675][ T8202] futex_wake_op: syz.3.581 tries to shift op by 144; fix this program [ 308.472020][ T8202] loop3: detected capacity change from 0 to 256 [ 308.558579][ T5100] hid-generic 0003:046D:1234.000B: hidraw0: USB HID v0.00 Device [ūk] on syz1 [ 308.590557][ T8202] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 308.624555][ T28] audit: type=1800 audit(1786329318.672:42): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.581" name="file1" dev="loop3" ino=1048752 res=0 errno=0 [ 308.850738][ T5778] usb 6-1: device descriptor read/64, error -71 [ 309.311336][ T8200] loop2: detected capacity change from 0 to 512 [ 309.383007][ T5778] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 309.495461][ T8200] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 309.944111][ T8217] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 309.969263][ T8220] loop3: detected capacity change from 0 to 512 [ 310.016562][ T8220] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 310.051798][ T8220] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 312.730938][ T8242] loop5: detected capacity change from 0 to 512 [ 312.742144][ T8241] loop1: detected capacity change from 0 to 512 [ 312.765234][ T8241] EXT4-fs: Ignoring removed nobh option [ 312.772487][ T8242] EXT4-fs: Ignoring removed bh option [ 312.797751][ T8242] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 312.879537][ T8242] EXT4-fs (loop5): 1 truncate cleaned up [ 312.898871][ T8241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.922442][ T8242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.974308][ T8241] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.066388][ T8241] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.589: corrupted inode contents [ 313.164973][ T8241] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #2: comm syz.1.589: mark_inode_dirty error [ 313.296932][ T8241] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.589: corrupted inode contents [ 313.349791][ T8241] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #2: comm syz.1.589: mark_inode_dirty error [ 313.440622][ T8260] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.589: corrupted inode contents [ 313.563382][ T8275] futex_wake_op: syz.2.592 tries to shift op by 144; fix this program [ 313.741461][ T8275] loop2: detected capacity change from 0 to 256 [ 313.836634][ T8260] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.589: mark_inode_dirty error [ 314.242642][ T8260] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 314.247344][ T8275] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 314.284670][ T28] audit: type=1800 audit(1786329324.360:43): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.592" name="file1" dev="loop2" ino=1048766 res=0 errno=0 [ 314.344631][ T7235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.615305][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.874759][ T8305] loop2: detected capacity change from 0 to 256 [ 314.949869][ T8305] FAT-fs (loop2): Directory bread(block 64) failed [ 314.967446][ T8305] FAT-fs (loop2): Directory bread(block 65) failed [ 314.979267][ T8305] FAT-fs (loop2): Directory bread(block 66) failed [ 314.990366][ T8305] FAT-fs (loop2): Directory bread(block 67) failed [ 314.997498][ T8305] FAT-fs (loop2): Directory bread(block 68) failed [ 315.004600][ T8305] FAT-fs (loop2): Directory bread(block 69) failed [ 315.011761][ T8305] FAT-fs (loop2): Directory bread(block 70) failed [ 315.018902][ T8305] FAT-fs (loop2): Directory bread(block 71) failed [ 315.025998][ T8305] FAT-fs (loop2): Directory bread(block 72) failed [ 315.036968][ T8305] FAT-fs (loop2): Directory bread(block 73) failed [ 315.658054][ T8312] loop1: detected capacity change from 0 to 512 [ 315.675821][ T8312] EXT4-fs: Ignoring removed bh option [ 315.739225][ T8314] futex_wake_op: syz.2.602 tries to shift op by 144; fix this program [ 315.910894][ T8314] loop2: detected capacity change from 0 to 256 [ 316.377618][ T8314] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 316.422836][ T28] audit: type=1800 audit(1786329326.493:44): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.602" name="file1" dev="loop2" ino=1048768 res=0 errno=0 [ 316.444564][ T8312] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 316.490123][ T8312] EXT4-fs (loop1): 1 truncate cleaned up [ 316.497069][ T8312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.758358][ T9] hid-generic 0003:046D:1234.000C: hidraw0: USB HID v0.00 Device [ūk] on syz1 [ 316.835449][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.842290][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.854757][ T8329] loop3: detected capacity change from 0 to 512 [ 316.961331][ T8329] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 317.044525][ T8334] loop2: detected capacity change from 0 to 512 [ 317.056936][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.103167][ T8334] EXT4-fs: Ignoring removed nobh option [ 317.234889][ T8334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.315827][ T8334] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.409058][ T8334] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.606: corrupted inode contents [ 317.445953][ T8334] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz.2.606: mark_inode_dirty error [ 317.532388][ T8334] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.606: corrupted inode contents [ 317.603062][ T8334] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #2: comm syz.2.606: mark_inode_dirty error [ 318.349185][ T8340] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.606: corrupted inode contents [ 318.395485][ T8340] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.606: mark_inode_dirty error [ 318.413240][ T8350] loop3: detected capacity change from 0 to 512 [ 318.434630][ T8350] EXT4-fs: inline encryption not supported [ 318.487322][ T8350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.495847][ T8350] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 318.545811][ T8340] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 318.622761][ T8350] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 318.647174][ T8350] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 318.657592][ T8350] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.609: Failed to acquire dquot type 1 [ 318.716956][ T8350] EXT4-fs (loop3): Remounting filesystem read-only [ 318.723619][ T8350] EXT4-fs (loop3): 1 truncate cleaned up [ 318.758373][ T8350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.800259][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.952490][ T8361] loop2: detected capacity change from 0 to 512 [ 318.963603][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.104579][ T8364] loop1: detected capacity change from 0 to 512 [ 319.158638][ T8364] EXT4-fs: Ignoring removed bh option [ 319.169457][ T8364] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 319.240132][ T8364] EXT4-fs (loop1): 1 truncate cleaned up [ 319.292089][ T8364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.125528][ T8380] random: crng reseeded on system resumption [ 320.244717][ T8383] loop5: detected capacity change from 0 to 256 [ 321.017678][ T8383] exfat: Deprecated parameter 'utf8' [ 321.023076][ T8383] exfat: Deprecated parameter 'namecase' [ 321.030455][ T8383] exfat: Deprecated parameter 'namecase' [ 321.075901][ T8383] exfat: Deprecated parameter 'utf8' [ 321.188271][ T8383] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 321.320389][ T8397] loop3: detected capacity change from 0 to 512 [ 321.350321][ T8397] EXT4-fs: Ignoring removed nobh option [ 321.364811][ T28] audit: type=1326 audit(1786329331.437:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.5.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7ffc0000 [ 321.448912][ T28] audit: type=1326 audit(1786329331.437:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.5.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7ffc0000 [ 321.487102][ T28] audit: type=1326 audit(1786329331.447:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.5.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ff26e99e0d9 code=0x7ffc0000 [ 321.512285][ T28] audit: type=1326 audit(1786329331.447:48): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=8398 comm="syz.5.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7ffc0000 [ 321.515695][ T8397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.580171][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.612231][ T8397] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.674728][ T8397] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.621: corrupted inode contents [ 321.721589][ T8405] random: crng reseeded on system resumption [ 321.753421][ T8397] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz.3.621: mark_inode_dirty error [ 321.802200][ T8397] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.621: corrupted inode contents [ 321.841513][ T8397] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.621: mark_inode_dirty error [ 321.997020][ T8406] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.621: corrupted inode contents [ 322.024437][ T8406] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.621: mark_inode_dirty error [ 322.060517][ T8406] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 322.101082][ T8416] loop2: detected capacity change from 0 to 256 [ 322.115157][ T8424] loop1: detected capacity change from 0 to 512 [ 322.197425][ T8424] EXT4-fs (loop1): 1 truncate cleaned up [ 322.215924][ T8424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.201840][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.941135][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.215998][ T8438] loop5: detected capacity change from 0 to 512 [ 325.239658][ T8438] EXT4-fs: Ignoring removed bh option [ 325.285922][ T8438] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 325.327713][ T8438] EXT4-fs (loop5): 1 truncate cleaned up [ 325.349235][ T8438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.668852][ T8449] random: crng reseeded on system resumption [ 326.585301][ T7235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.849518][ T8481] loop1: detected capacity change from 0 to 512 [ 327.858486][ T8481] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.884091][ T8481] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 330.033030][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.350042][ T8494] random: crng reseeded on system resumption [ 331.852114][ T8510] loop2: detected capacity change from 0 to 8192 [ 331.888047][ T8510] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 332.059346][ T8520] loop1: detected capacity change from 0 to 256 [ 333.310256][ T8537] loop2: detected capacity change from 0 to 512 [ 333.334110][ T8537] EXT4-fs (loop2): 1 truncate cleaned up [ 333.349643][ T8537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.957777][ T28] audit: type=1326 audit(1786329345.024:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.053465][ T28] audit: type=1326 audit(1786329345.024:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.191576][ T28] audit: type=1326 audit(1786329345.024:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.314881][ T28] audit: type=1326 audit(1786329345.024:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.409585][ T28] audit: type=1326 audit(1786329345.024:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.483945][ T28] audit: type=1326 audit(1786329345.024:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.542137][ T28] audit: type=1326 audit(1786329345.024:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.604725][ T28] audit: type=1326 audit(1786329345.024:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.667057][ T28] audit: type=1326 audit(1786329345.024:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.714175][ T28] audit: type=1326 audit(1786329345.024:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.1.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 335.874522][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.879786][ T8555] loop5: detected capacity change from 0 to 256 [ 337.636145][ T8586] loop1: detected capacity change from 0 to 256 [ 339.446703][ T8641] loop2: detected capacity change from 0 to 512 [ 339.458891][ T8641] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 339.481571][ T8641] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 339.529060][ T5762] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.584383][ T8641] loop2: detected capacity change from 0 to 512 [ 339.591267][ T8641] EXT4-fs: Ignoring removed orlov option [ 339.614601][ T8641] EXT4-fs: test_dummy_encryption requires encrypt feature [ 341.707152][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 341.707166][ T28] audit: type=1326 audit(1786329351.796:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.703" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 341.841461][ T28] audit: type=1326 audit(1786329351.916:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.703" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 342.449870][ T8668] loop5: detected capacity change from 0 to 512 [ 342.460863][ T8668] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 342.476666][ T8668] EXT4-fs (loop5): required journal recovery suppressed and not mounted read-only [ 344.736613][ T8678] fuse: Bad value for 'fd' [ 344.799937][ T8678] loop1: detected capacity change from 0 to 1024 [ 344.815303][ T28] audit: type=1326 audit(1786329354.897:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.3.716" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 344.816399][ T8678] EXT4-fs: Ignoring removed oldalloc option [ 344.886342][ T8678] ext4: Unknown parameter 'fsname' [ 345.224448][ T28] audit: type=1326 audit(1786329355.307:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 345.296641][ T28] audit: type=1326 audit(1786329355.347:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 345.356476][ T28] audit: type=1326 audit(1786329355.347:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 345.388191][ T28] audit: type=1326 audit(1786329355.347:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 345.438377][ T28] audit: type=1326 audit(1786329355.347:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 345.503152][ T28] audit: type=1326 audit(1786329355.347:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 345.579898][ T28] audit: type=1326 audit(1786329355.347:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 346.844501][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 346.844516][ T28] audit: type=1326 audit(1786329356.927:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 346.979073][ T28] audit: type=1326 audit(1786329356.927:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 347.029211][ T28] audit: type=1326 audit(1786329356.927:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 347.078095][ T28] audit: type=1326 audit(1786329356.927:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 347.112423][ T28] audit: type=1326 audit(1786329356.927:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 347.162196][ T28] audit: type=1326 audit(1786329356.927:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 347.229446][ T28] audit: type=1326 audit(1786329356.927:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 347.294993][ T28] audit: type=1326 audit(1786329356.927:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 347.335480][ T28] audit: type=1326 audit(1786329356.927:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 347.390234][ T28] audit: type=1326 audit(1786329356.927:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.728" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e7f9e0d9 code=0x7fc00000 [ 349.481704][ T5814] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 349.725084][ T5814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.754099][ T5814] usb 2-1: not running at top speed; connect to a high speed hub [ 349.783053][ T5814] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 349.821254][ T5814] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 349.880601][ T8774] loop2: detected capacity change from 0 to 256 [ 349.914305][ T5814] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 349.964480][ T5814] usb 2-1: config 1 interface 0 has no altsetting 0 [ 350.017118][ T5814] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.053376][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.080498][ T5814] usb 2-1: Product: syz [ 350.101397][ T5814] usb 2-1: Manufacturer: syz [ 350.108197][ T5814] usb 2-1: SerialNumber: syz [ 350.132651][ T8765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.154446][ T8765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.165077][ T8774] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 350.228383][ T8774] loop2: Can't mount, would change RO state [ 350.406171][ T5814] usb 2-1: bad CDC descriptors [ 350.441141][ T5814] usb 2-1: USB disconnect, device number 12 [ 351.725238][ T8803] loop3: detected capacity change from 0 to 512 [ 351.741967][ T8803] EXT4-fs (loop3): 1 truncate cleaned up [ 351.749655][ T8803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.595161][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.040243][ T8831] loop3: detected capacity change from 0 to 512 [ 355.061771][ T8831] EXT4-fs: quotafile must be on filesystem root [ 355.085976][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 356.024957][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 356.024972][ T28] audit: type=1326 audit(1786329366.118:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.059395][ T28] audit: type=1326 audit(1786329366.118:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.105191][ T28] audit: type=1326 audit(1786329366.118:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.148542][ T28] audit: type=1326 audit(1786329366.118:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.210671][ T28] audit: type=1326 audit(1786329366.118:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.266776][ T28] audit: type=1326 audit(1786329366.118:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.440768][ T8860] loop5: detected capacity change from 0 to 512 [ 356.456675][ T28] audit: type=1326 audit(1786329366.118:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.526912][ T8860] EXT4-fs: Ignoring removed nobh option [ 356.635200][ T8860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.688354][ T28] audit: type=1326 audit(1786329366.118:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.703896][ T8860] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.772298][ T28] audit: type=1326 audit(1786329366.118:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.800414][ T28] audit: type=1326 audit(1786329366.118:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 356.848777][ T8860] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.777: corrupted inode contents [ 357.093050][ T8870] loop1: detected capacity change from 0 to 512 [ 357.100419][ T8870] EXT4-fs: quotafile must be on filesystem root [ 357.633724][ T8860] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #2: comm syz.5.777: mark_inode_dirty error [ 357.751636][ T8860] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.777: corrupted inode contents [ 357.797461][ T8860] EXT4-fs error (device loop5): __ext4_ext_dirty:208: inode #2: comm syz.5.777: mark_inode_dirty error [ 357.832651][ T8876] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.777: corrupted inode contents [ 358.125791][ T8876] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.777: mark_inode_dirty error [ 358.586550][ T8876] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 358.862074][ T7235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.942700][ T8915] loop3: detected capacity change from 0 to 512 [ 361.995040][ T8915] EXT4-fs: quotafile must be on filesystem root [ 362.902946][ T8928] loop2: detected capacity change from 0 to 512 [ 362.911643][ T8928] EXT4-fs: Ignoring removed nobh option [ 362.933048][ T8928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.946170][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 362.955769][ T8928] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.983657][ T8928] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.794: corrupted inode contents [ 362.997176][ T8928] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz.2.794: mark_inode_dirty error [ 363.012892][ T8928] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.794: corrupted inode contents [ 363.029011][ T8928] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #2: comm syz.2.794: mark_inode_dirty error [ 363.070448][ T8928] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.794: corrupted inode contents [ 363.082686][ T8928] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.794: mark_inode_dirty error [ 363.094139][ T8928] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 363.141702][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.161422][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 363.169877][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 363.180517][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.192413][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 363.209275][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 363.218343][ T9] usb 2-1: SerialNumber: syz [ 363.239018][ T9] usb 2-1: 0:2 : does not exist [ 363.382748][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 363.382762][ T28] audit: type=1326 audit(1786329373.469:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.2.795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470119e0d9 code=0x7fc00000 [ 363.437207][ T28] audit: type=1326 audit(1786329373.469:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.2.795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f470119e0d9 code=0x7fc00000 [ 363.471708][ T28] audit: type=1326 audit(1786329373.469:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.2.795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470119e0d9 code=0x7fc00000 [ 363.501694][ T8937] loop2: detected capacity change from 0 to 1024 [ 363.505076][ T28] audit: type=1326 audit(1786329373.469:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.2.795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470119e0d9 code=0x7fc00000 [ 363.509111][ T8937] EXT4-fs: Ignoring removed bh option [ 363.537635][ T8937] EXT4-fs: Ignoring removed bh option [ 363.545159][ T8937] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 363.574926][ T8937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.639157][ T8942] loop3: detected capacity change from 0 to 128 [ 363.726648][ T8942] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.768245][ T8942] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.841623][ T9] usb 2-1: 5:0: failed to get current value for ch 2 (-22) [ 363.921078][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.950302][ T9] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 367.368675][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.963510][ T9] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 369.081974][ T9] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 369.121712][ T9] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 369.139192][ T8963] loop5: detected capacity change from 0 to 512 [ 369.151413][ T9] usb 2-1: USB disconnect, device number 13 [ 369.164204][ T8963] EXT4-fs: Ignoring removed nobh option [ 369.185878][ T8967] loop2: detected capacity change from 0 to 512 [ 369.192533][ T28] audit: type=1326 audit(1786329379.279:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 369.214008][ T8967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.248743][ T8967] EXT4-fs: inline encryption not supported [ 369.262707][ T28] audit: type=1326 audit(1786329379.279:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 369.265698][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.316879][ T8967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.325904][ T8967] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 369.373735][ T28] audit: type=1326 audit(1786329379.279:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 369.410897][ T8963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.413321][ T28] audit: type=1326 audit(1786329379.279:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 369.448397][ T28] audit: type=1326 audit(1786329379.279:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 369.473742][ T28] audit: type=1326 audit(1786329379.279:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 369.492167][ T8963] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.499079][ T28] audit: type=1326 audit(1786329379.279:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 369.531439][ T8967] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 1 [ 369.559246][ T8963] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.803: corrupted inode contents [ 369.571378][ T28] audit: type=1326 audit(1786329379.279:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.3.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff476d9e0d9 code=0x7fc00000 [ 369.581663][ T8967] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 369.595645][ T8963] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #2: comm syz.5.803: mark_inode_dirty error [ 369.619819][ T8967] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.802: Failed to acquire dquot type 1 [ 369.632093][ T8963] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.803: corrupted inode contents [ 369.646781][ T8967] EXT4-fs (loop2): Remounting filesystem read-only [ 369.651876][ T8963] EXT4-fs error (device loop5): __ext4_ext_dirty:208: inode #2: comm syz.5.803: mark_inode_dirty error [ 369.661866][ T8967] EXT4-fs (loop2): 1 truncate cleaned up [ 369.683733][ T8967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.814060][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.037375][ T8986] loop2: detected capacity change from 0 to 256 [ 370.156605][ T7235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.894587][ T9009] loop5: detected capacity change from 0 to 512 [ 370.902222][ T9009] EXT4-fs: Ignoring removed nobh option [ 370.924143][ T9009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.937200][ T9009] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.956394][ T9009] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.819: corrupted inode contents [ 370.969462][ T9009] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #2: comm syz.5.819: mark_inode_dirty error [ 370.993307][ T9009] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.819: corrupted inode contents [ 371.006053][ T9009] EXT4-fs error (device loop5): __ext4_ext_dirty:208: inode #2: comm syz.5.819: mark_inode_dirty error [ 371.361681][ T9024] loop2: detected capacity change from 0 to 256 [ 371.936589][ T9034] Illegal XDP return value 4294967294 on prog (id 178) dev syz_tun, expect packet loss! [ 373.120755][ T7235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.588466][ T9092] loop5: detected capacity change from 0 to 2048 [ 377.687347][ T9092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.777026][ T9100] loop2: detected capacity change from 0 to 512 [ 377.830037][ T9100] EXT4-fs (loop2): 1 truncate cleaned up [ 377.870002][ T9100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.895327][ T7235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.535797][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.563143][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.138182][ T9108] loop3: detected capacity change from 0 to 512 [ 379.184210][ T9108] EXT4-fs: Ignoring removed nobh option [ 380.129956][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.183245][ T9108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.282936][ T9108] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.364797][ T9108] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.845: corrupted inode contents [ 380.412144][ T9108] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz.3.845: mark_inode_dirty error [ 380.444359][ T9108] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.845: corrupted inode contents [ 380.460990][ T9108] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.845: mark_inode_dirty error [ 380.787746][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.066853][ T9131] loop3: detected capacity change from 0 to 1024 [ 381.092906][ T9131] EXT4-fs: Ignoring removed bh option [ 381.123849][ T9131] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 381.163037][ T9131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.509793][ T9131] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.861: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 381.595545][ T9131] EXT4-fs (loop3): Remounting filesystem read-only [ 382.437135][ T9138] overlayfs: failed to get metacopy (-5) [ 382.544975][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 382.884059][ T9148] loop2: detected capacity change from 0 to 512 [ 382.905495][ T9148] EXT4-fs: Ignoring removed nobh option [ 383.143780][ T9148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.210435][ T9148] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.345655][ T7876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.453448][ T9148] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.868: corrupted inode contents [ 383.519907][ T9148] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz.2.868: mark_inode_dirty error [ 383.570756][ T9148] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.868: corrupted inode contents [ 383.773358][ T9148] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #2: comm syz.2.868: mark_inode_dirty error [ 383.863608][ T6266] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.883553][ T9148] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.868: corrupted inode contents [ 385.943377][ T9148] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.868: mark_inode_dirty error [ 386.688159][ T9148] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 386.755252][ T9169] loop5: detected capacity change from 0 to 256 [ 386.888979][ T6266] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.029169][ T6266] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.031590][ T9169] FAT-fs (loop5): Directory bread(block 64) failed [ 387.073796][ T9169] FAT-fs (loop5): Directory bread(block 65) failed [ 387.080474][ T9169] FAT-fs (loop5): Directory bread(block 66) failed [ 387.100524][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.112631][ T9169] FAT-fs (loop5): Directory bread(block 67) failed [ 387.119329][ T9169] FAT-fs (loop5): Directory bread(block 68) failed [ 387.134465][ T9169] FAT-fs (loop5): Directory bread(block 69) failed [ 387.190482][ T9169] FAT-fs (loop5): Directory bread(block 70) failed [ 387.203840][ T9169] FAT-fs (loop5): Directory bread(block 71) failed [ 387.210523][ T9169] FAT-fs (loop5): Directory bread(block 72) failed [ 387.226477][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.238845][ T6266] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.250554][ T9169] FAT-fs (loop5): Directory bread(block 73) failed [ 387.257820][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.267194][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.276905][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.286004][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 387.361070][ T9178] loop2: detected capacity change from 0 to 8192 [ 387.369606][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.409733][ T9178] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.429936][ T9178] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 387.437599][ T9178] FAT-fs (loop2): Filesystem has been set read-only [ 388.848280][ T6266] tipc: Left network mode [ 389.267666][ T9175] chnl_net:caif_netlink_parms(): no params data found [ 389.452562][ T5086] Bluetooth: hci2: command tx timeout [ 391.236359][ T9215] loop5: detected capacity change from 0 to 256 [ 391.457396][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.489087][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.502848][ T9175] bridge_slave_0: entered allmulticast mode [ 391.532884][ T9175] bridge_slave_0: entered promiscuous mode [ 391.533857][ T5086] Bluetooth: hci2: command tx timeout [ 391.698736][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.706703][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.720542][ T9175] bridge_slave_1: entered allmulticast mode [ 391.731852][ T9175] bridge_slave_1: entered promiscuous mode [ 391.837072][ T9175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.889935][ T9175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.011533][ T9175] team0: Port device team_slave_0 added [ 392.125769][ T9175] team0: Port device team_slave_1 added [ 392.274655][ T9175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.291042][ T9175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.369573][ T9175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.461905][ T9175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.482737][ T9175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.524634][ T9175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.799097][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 392.799111][ T28] audit: type=1326 audit(1786329402.889:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.5.885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 392.862005][ T28] audit: type=1326 audit(1786329402.919:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.5.885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 392.918814][ T9175] hsr_slave_0: entered promiscuous mode [ 392.940997][ T9175] hsr_slave_1: entered promiscuous mode [ 392.951509][ T9175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.961757][ T9175] Cannot create hsr debugfs directory [ 393.024481][ T6266] hsr_slave_0: left promiscuous mode [ 393.044103][ T6266] hsr_slave_1: left promiscuous mode [ 393.072760][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.102628][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.123423][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.130877][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.170879][ T6266] bridge_slave_1: left allmulticast mode [ 393.178152][ T6266] bridge_slave_1: left promiscuous mode [ 393.193353][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.219064][ T6266] bridge_slave_0: left allmulticast mode [ 393.232511][ T6266] bridge_slave_0: left promiscuous mode [ 393.239207][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.352850][ T6266] veth1_macvtap: left promiscuous mode [ 393.358453][ T6266] veth0_macvtap: left promiscuous mode [ 393.383990][ T6266] veth1_vlan: left promiscuous mode [ 393.389361][ T6266] veth0_vlan: left promiscuous mode [ 394.281737][ T5086] Bluetooth: hci2: command tx timeout [ 394.423554][ T9254] loop5: detected capacity change from 0 to 512 [ 394.689452][ T9254] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.890: invalid indirect mapped block 256 (level 2) [ 394.731944][ T9254] EXT4-fs (loop5): 2 truncates cleaned up [ 394.753779][ T9254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.333651][ T5086] Bluetooth: hci2: command tx timeout [ 396.744472][ T7235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.108106][ T9274] loop2: detected capacity change from 0 to 2048 [ 397.150626][ T9274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.367529][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.418755][ T28] audit: type=1326 audit(1786329407.509:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.5.898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 397.487957][ T28] audit: type=1326 audit(1786329407.509:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.5.898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff26e99e0d9 code=0x7fc00000 [ 399.574898][ T9296] loop2: detected capacity change from 0 to 512 [ 399.636455][ T9296] EXT4-fs (loop2): 1 truncate cleaned up [ 399.670754][ T9296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.027593][ T6266] team0 (unregistering): Port device team_slave_1 removed [ 400.622696][ T6266] team0 (unregistering): Port device team_slave_0 removed [ 400.711296][ T6266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.805852][ T6266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.786565][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.021019][ T6266] bond0 (unregistering): Released all slaves [ 402.066111][ T2132] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 402.265275][ T2132] usb 6-1: Using ep0 maxpacket: 32 [ 402.276726][ T2132] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 402.300538][ T2132] usb 6-1: config 0 has no interface number 0 [ 402.334811][ T2132] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 402.353345][ T2132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.361533][ T2132] usb 6-1: Product: syz [ 402.367593][ T2132] usb 6-1: Manufacturer: syz [ 402.372236][ T2132] usb 6-1: SerialNumber: syz [ 402.383797][ T2132] usb 6-1: config 0 descriptor?? [ 402.399365][ T2132] smsc95xx v2.0.0 [ 402.477866][ T9337] loop2: detected capacity change from 0 to 512 [ 402.524971][ T9337] EXT4-fs (loop2): 1 truncate cleaned up [ 402.556377][ T9337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.775937][ T9175] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 403.853744][ T9175] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 403.919576][ T9175] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.975139][ T9175] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.434796][ T9175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.454120][ T2132] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 404.467662][ T2132] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 404.477566][ T2132] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 404.488614][ T2132] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 404.504129][ T2132] usb 6-1: USB disconnect, device number 5 [ 404.768929][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.806051][ T9175] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.850017][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.857240][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.918534][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.925715][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.054163][ T9388] overlayfs: invalid redirect ((null)) [ 406.189133][ T9175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.520009][ T9175] veth0_vlan: entered promiscuous mode [ 407.610092][ T9175] veth1_vlan: entered promiscuous mode [ 407.795993][ T9175] veth0_macvtap: entered promiscuous mode [ 407.866734][ T9175] veth1_macvtap: entered promiscuous mode [ 407.999411][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.043871][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.122387][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.145120][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.162927][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.174657][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.186250][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.216739][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.234758][ T9425] loop5: detected capacity change from 0 to 512 [ 408.258240][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.268745][ T9425] EXT4-fs (loop5): 1 truncate cleaned up [ 408.275232][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.283626][ T9425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.287481][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.308030][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.318782][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.330514][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.348190][ T9175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.357417][ T9175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.366468][ T9175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.375321][ T28] audit: type=1326 audit(1786329418.449:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.2.935" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470119e0d9 code=0x7fc00000 [ 408.382555][ T28] audit: type=1326 audit(1786329418.469:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.2.935" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f470119e0d9 code=0x7fc00000 [ 408.401343][ T9175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.451960][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.566600][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.969111][ T6266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.920867][ T6266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.946996][ T7235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.260519][ T9451] loop5: detected capacity change from 0 to 512 [ 412.549781][ T9451] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 412.962742][ T9451] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 412.978232][ T9451] ------------[ cut here ]------------ [ 412.984301][ T9451] EA inode 11 i_nlink=0 [ 412.986244][ T9451] WARNING: CPU: 1 PID: 9451 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 413.000650][ T9451] Modules linked in: [ 413.004663][ T9451] CPU: 1 PID: 9451 Comm: syz.5.938 Not tainted syzkaller #0 [ 413.012045][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.022215][ T9451] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 413.029105][ T9451] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 f1 f0 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 be 3a 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 e8 04 48 08 [ 413.048833][ T9451] RSP: 0018:ffffc90004387360 EFLAGS: 00010246 [ 413.055446][ T9451] RAX: e51089218501c500 RBX: ffff88807f2340a8 RCX: 0000000000080000 [ 413.065233][ T9451] RDX: ffffc9000f51a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 413.073697][ T9451] RBP: ffffc90004387450 R08: ffffc90004386f67 R09: 1ffff92000870dec [ 413.081691][ T9451] R10: dffffc0000000000 R11: fffff52000870ded R12: ffff88807f233f00 [ 413.089789][ T9451] R13: ffffc900043873c0 R14: dffffc0000000000 R15: 0000000000000000 [ 413.097815][ T9451] FS: 00007ff26f8176c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 413.106840][ T9451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.113473][ T9451] CR2: 000055555778aa38 CR3: 0000000026360000 CR4: 00000000003506e0 [ 413.121468][ T9451] Call Trace: [ 413.124811][ T9451] [ 413.127762][ T9451] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 413.133973][ T9451] ? __ext4_journal_ensure_credits+0x30/0x450 [ 413.140079][ T9451] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 413.146269][ T9451] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 413.151931][ T9451] ? __ext4_journal_ensure_credits+0x450/0x450 [ 413.158226][ T9451] ext4_xattr_delete_inode+0xb3b/0xd00 [ 413.165141][ T9451] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 413.171247][ T9451] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 413.177130][ T9451] ext4_evict_inode+0xa88/0xe70 [ 413.182006][ T9451] ? evict+0x482/0x8a0 [ 413.186216][ T9451] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 413.192136][ T9451] ? do_raw_spin_unlock+0x121/0x230 [ 413.197414][ T9451] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 413.203376][ T9451] evict+0x4b7/0x8a0 [ 413.207288][ T9451] ? __lock_acquire+0x7d80/0x7d80 [ 413.212809][ T9451] ? proc_nr_inodes+0x230/0x230 [ 413.217685][ T9451] ? do_raw_spin_unlock+0x121/0x230 [ 413.223147][ T9451] ? _raw_spin_unlock+0x28/0x40 [ 413.228034][ T9451] ext4_orphan_cleanup+0xc33/0x1470 [ 413.233294][ T9451] ? ext4_orphan_del+0xc90/0xc90 [ 413.238254][ T9451] ? ext4_register_li_request+0x182/0x930 [ 413.244073][ T9451] ? errseq_check_and_advance+0x66/0x120 [ 413.249726][ T9451] ext4_fill_super+0x5fb5/0x6870 [ 413.254771][ T9451] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 413.261034][ T9451] ? __might_sleep+0xe0/0xe0 [ 413.267092][ T9451] ? read_lock_is_recursive+0x20/0x20 [ 413.272700][ T9451] ? snprintf+0xe9/0x140 [ 413.276988][ T9451] ? down_read_killable+0x340/0x340 [ 413.282211][ T9451] ? setup_bdev_super+0x56b/0x660 [ 413.287323][ T9451] get_tree_bdev+0x3e5/0x520 [ 413.291943][ T9451] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 413.299035][ T9451] ? setup_bdev_super+0x660/0x660 [ 413.304153][ T9451] ? apparmor_capable+0x137/0x1a0 [ 413.309195][ T9451] ? bpf_lsm_capable+0x9/0x10 [ 413.313963][ T9451] ? security_capable+0x89/0xb0 [ 413.318842][ T9451] vfs_get_tree+0x8c/0x280 [ 413.323451][ T9451] do_new_mount+0x24a/0xa40 [ 413.327990][ T9451] __se_sys_mount+0x2e7/0x3d0 [ 413.332733][ T9451] ? __x64_sys_mount+0xc0/0xc0 [ 413.337522][ T9451] ? lockdep_hardirqs_on+0x98/0x150 [ 413.342919][ T9451] ? __x64_sys_mount+0x20/0xc0 [ 413.347706][ T9451] do_syscall_64+0x55/0xb0 [ 413.352137][ T9451] ? clear_bhb_loop+0x40/0x90 [ 413.356897][ T9451] ? clear_bhb_loop+0x40/0x90 [ 413.361594][ T9451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.368924][ T9451] RIP: 0033:0x7ff26e99f34a [ 413.374095][ T9451] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.394025][ T9451] RSP: 002b:00007ff26f816e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 413.402508][ T9451] RAX: ffffffffffffffda RBX: 00007ff26f816ee0 RCX: 00007ff26e99f34a [ 413.410494][ T9451] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ff26f816ea0 [ 413.418543][ T9451] RBP: 0000200000000180 R08: 00007ff26f816ee0 R09: 0000000000000000 [ 413.426560][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 413.434614][ T9451] R13: 00007ff26f816ea0 R14: 0000000000000497 R15: 00002000000001c0 [ 413.442649][ T9451] [ 413.445682][ T9451] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 413.452975][ T9451] CPU: 1 PID: 9451 Comm: syz.5.938 Not tainted syzkaller #0 [ 413.460247][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.470289][ T9451] Call Trace: [ 413.473559][ T9451] [ 413.476478][ T9451] dump_stack_lvl+0x18c/0x250 [ 413.481151][ T9451] ? show_regs_print_info+0x20/0x20 [ 413.486339][ T9451] ? load_image+0x420/0x420 [ 413.490852][ T9451] panic+0x2ca/0x720 [ 413.494743][ T9451] ? bpf_jit_dump+0xd0/0xd0 [ 413.499250][ T9451] __warn+0x2e0/0x470 [ 413.503227][ T9451] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 413.509208][ T9451] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 413.515188][ T9451] report_bug+0x2be/0x4f0 [ 413.519511][ T9451] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 413.525488][ T9451] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 413.531462][ T9451] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 413.537435][ T9451] handle_bug+0xcf/0x120 [ 413.541669][ T9451] exc_invalid_op+0x1a/0x50 [ 413.546165][ T9451] asm_exc_invalid_op+0x1a/0x20 [ 413.551026][ T9451] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 413.557611][ T9451] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 f1 f0 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 be 3a 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 e8 04 48 08 [ 413.577211][ T9451] RSP: 0018:ffffc90004387360 EFLAGS: 00010246 [ 413.583269][ T9451] RAX: e51089218501c500 RBX: ffff88807f2340a8 RCX: 0000000000080000 [ 413.591230][ T9451] RDX: ffffc9000f51a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 413.599189][ T9451] RBP: ffffc90004387450 R08: ffffc90004386f67 R09: 1ffff92000870dec [ 413.607149][ T9451] R10: dffffc0000000000 R11: fffff52000870ded R12: ffff88807f233f00 [ 413.615119][ T9451] R13: ffffc900043873c0 R14: dffffc0000000000 R15: 0000000000000000 [ 413.623103][ T9451] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 413.628741][ T9451] ? __ext4_journal_ensure_credits+0x30/0x450 [ 413.634804][ T9451] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 413.640793][ T9451] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 413.646427][ T9451] ? __ext4_journal_ensure_credits+0x450/0x450 [ 413.652603][ T9451] ext4_xattr_delete_inode+0xb3b/0xd00 [ 413.658106][ T9451] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 413.664179][ T9451] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 413.669822][ T9451] ext4_evict_inode+0xa88/0xe70 [ 413.674671][ T9451] ? evict+0x482/0x8a0 [ 413.678742][ T9451] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 413.684654][ T9451] ? do_raw_spin_unlock+0x121/0x230 [ 413.689868][ T9451] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 413.695779][ T9451] evict+0x4b7/0x8a0 [ 413.699691][ T9451] ? __lock_acquire+0x7d80/0x7d80 [ 413.704712][ T9451] ? proc_nr_inodes+0x230/0x230 [ 413.709555][ T9451] ? do_raw_spin_unlock+0x121/0x230 [ 413.714745][ T9451] ? _raw_spin_unlock+0x28/0x40 [ 413.719615][ T9451] ext4_orphan_cleanup+0xc33/0x1470 [ 413.724826][ T9451] ? ext4_orphan_del+0xc90/0xc90 [ 413.729765][ T9451] ? ext4_register_li_request+0x182/0x930 [ 413.735487][ T9451] ? errseq_check_and_advance+0x66/0x120 [ 413.741119][ T9451] ext4_fill_super+0x5fb5/0x6870 [ 413.746069][ T9451] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 413.752311][ T9451] ? __might_sleep+0xe0/0xe0 [ 413.756906][ T9451] ? read_lock_is_recursive+0x20/0x20 [ 413.762273][ T9451] ? snprintf+0xe9/0x140 [ 413.766523][ T9451] ? down_read_killable+0x340/0x340 [ 413.771712][ T9451] ? setup_bdev_super+0x56b/0x660 [ 413.776728][ T9451] get_tree_bdev+0x3e5/0x520 [ 413.781316][ T9451] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 413.787584][ T9451] ? setup_bdev_super+0x660/0x660 [ 413.792597][ T9451] ? apparmor_capable+0x137/0x1a0 [ 413.797612][ T9451] ? bpf_lsm_capable+0x9/0x10 [ 413.802286][ T9451] ? security_capable+0x89/0xb0 [ 413.807133][ T9451] vfs_get_tree+0x8c/0x280 [ 413.811541][ T9451] do_new_mount+0x24a/0xa40 [ 413.816040][ T9451] __se_sys_mount+0x2e7/0x3d0 [ 413.820710][ T9451] ? __x64_sys_mount+0xc0/0xc0 [ 413.825468][ T9451] ? lockdep_hardirqs_on+0x98/0x150 [ 413.830657][ T9451] ? __x64_sys_mount+0x20/0xc0 [ 413.835411][ T9451] do_syscall_64+0x55/0xb0 [ 413.839820][ T9451] ? clear_bhb_loop+0x40/0x90 [ 413.844488][ T9451] ? clear_bhb_loop+0x40/0x90 [ 413.849153][ T9451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.855037][ T9451] RIP: 0033:0x7ff26e99f34a [ 413.859466][ T9451] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.879076][ T9451] RSP: 002b:00007ff26f816e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 413.887484][ T9451] RAX: ffffffffffffffda RBX: 00007ff26f816ee0 RCX: 00007ff26e99f34a [ 413.895442][ T9451] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ff26f816ea0 [ 413.903423][ T9451] RBP: 0000200000000180 R08: 00007ff26f816ee0 R09: 0000000000000000 [ 413.911380][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 413.919347][ T9451] R13: 00007ff26f816ea0 R14: 0000000000000497 R15: 00002000000001c0 [ 413.927324][ T9451] [ 413.930589][ T9451] Kernel Offset: disabled [ 413.935013][ T9451] Rebooting in 86400 seconds..