last executing test programs: 3m33.53962181s ago: executing program 4 (id=346): setresuid(0xee00, 0xee01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) r0 = syz_clone(0x11, 0x0, 0xfffffffffffffd58, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) 3m33.439224315s ago: executing program 4 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="090000002a0001000049000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 3m30.48277509s ago: executing program 4 (id=350): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001880)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_remount}, {@keep_last_dots}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0xd}}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}}) 3m25.029167992s ago: executing program 4 (id=362): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$eJzs3E9sVEUcAODf27a05Y+siCiIWkRjI7GFgsLBxGA08aCJERP12LSFIIUaWhIhaJbE4NGQeDcevXrwql6I8WTiFY8mhoQYLoCJcc3bfW93u91tadl2wX5fst2ZefvezOy8eTtvprsBrFtD6Z+kGr4WEVsjotD8gqHq0+2bFyfu3Lw4EaVy+dhfSWW3W2k8kx0mNmWR4UJE4fOkvqHB7PkLp8anp6fOZvHRudMfj86ev/DiyYEs5ciRQwcPHH557KXlV6pFfmm9bu36bGb3zjc/vPL2RG+enufWWI9OGYqhVkWpeK7TmXXZloZw0tvFgrAs6fmfNldfpf9vjZ5YrPFKa1gyYLWVy+Vyf/vNpXKzSwtSgAdWEt0uAdAd+Qd9ev+bP1oNBDaszvCj624crd4ApfW+nT0inq4k5vMgfU33t500FBEflP7+On3EKs1DAAA0+vFoPhJsGv8Vqysj/5y7+mr6/FC2hlKMiIcjYltEPBIR2yPi0YjYERGPRcTjTcfviYjyIvk3zzbX8q8tQhWud6iqLaXjv1eyta36+G9eAYo9WWxLRD5gntqfvSfD0dd//OT01IFF8vjp9d++bLetcfyXPtL887FgVo7rvU0TdJPjc+MrrnCTG5cidvU21z/pjUhqbZNExM6I2LWM4xYbwidf+HZ3LdI3/3VL17+i3HIdrQPrTOVvIp6vtn8p5rV/Pcdk3vrk6fETUyemzozV1idHB2J6av9oehbsb5nHL79efqdd/kvW//s/mnd54/APx7Kede/S9t/YcP5Hvn5br38xiUhq67Wzy8/j8u9ftL2nWen5vyF5rxLO70s/GZ+bO3sgYkPy1sL0sfq+eTx9jlK1/sN7W/f/bdk+6TvxRESkJ/GTEfFUVO8Q07LviYhnImLvIvX/+bVnP1p5/VdXWv/JputfteXntX99vb5dIMnWBqspg42bek7tuXanzcXj7tr/UCU0nKUsvP6lJUzmXSLalTT/tEtT/u3IOwgAAAD3v0JEbG6YS9ochcLISHUOaHtsLEzPzM7tOz5z7sxkui2iGH2FfKarOh/cl+Tzn8WG+FhT/GA2b/xVz2AlPjIxMz3Z1ZoDmyp9PimMRLzf09D/U392ZooZuJ/5vhasX4v1/3QQv+PKGhYGWFN3//l/9dNVLQiw5hr6f7tv+JdW8H9fwAPA/T9Qt/QP/bhmwIOvrC/Duras/r/PjwDC/0lvvFsLF7paEmCtGf/DurTk9/rvKVDub71pIBa+OAYWP2BPrKwYgy3y6kogHVl1JffBleyV/5pC29dEYXkH7I/OtOnxe3w3SmdnT+zo+Mlfzv5XvtMt+N2a9NNWga5cjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADruvwAAAP//hS/gCQ==") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3m22.74131759s ago: executing program 4 (id=369): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0xc101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000001040)=[{{&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x80, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000400)}, {&(0x7f00000005c0)="a66998933b53a9f1a591d3a2e3883ea7e45fc483091acbe19fc482b7e36edd90ef2689e212ad93574e9cac116112c5103418141e75b9047b414a40d7946bc57b50a02a6a776420c0ec6381635831c85ab3932de72e99daf6ec719a47ff70fa0cdc447d2ed01b9c00b22d7d91b0924cbac6cc67adeb1cff7a99a313f9f772b99f5a7db84190a045", 0x87}, {&(0x7f0000000680)="5822466e92ba51abcc0a04ae6456ca875c7acce1f47ea458a7e1d9f699e3da749a98b417bf13c1cc52e90e91e450aa22cc5f71d4d99ee511300eed330c81184fc7e262df39db6ba86456741dc500fb99fc0cee90db4111b4a7c410bd971c7c1e3fb7947da6d301b3bd290e98f1d2f41ebab5665e33af6a026bddac13839a1cf2bf0b40ab3e2df522cdac2e9ec931aa3b43175e", 0x93}, {&(0x7f0000000740)="a66fe0d94ef59980f17aa2ea3f25c58d4a7e0eab06535efa94cae1fd", 0x1c}, {&(0x7f0000000780)="88619c66421466eba9492536157dc26765fe13b5b652889a5a064c867c49f0749179d77252140a7b0d6c0db8", 0x2c}], 0x7}}, {{&(0x7f0000000840)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x328}}, {{&(0x7f0000000c40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="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", 0xfc}, {&(0x7f0000000dc0)="a7ea055d9c11641c331c", 0xa}, {&(0x7f0000000e00)="004a2fcd9f337610213e806ef59c5c8c66284cac2ff0becb76dc", 0x1a}], 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="20000000000000001501000002000000d7ab0b2e741d1747a65513330000000090000000000000000a0100000300000048ac1e3524fd71d789307c92b2803c711868ef91e1c268cbe06a4539083f296cb536f7e5aeca14257e7e052a3fd0c5be7b774da1ab7023d33a2529eff7ee000000000000010116e075f59e0d200f"], 0x1a8}}], 0x3, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008000) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000240)='./file0\x00', 0x40) write$binfmt_elf32(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4680400400050000000000000002000600c42f75405f000000380000004600000008000000010020000100050009000000000000000300000004000000050000000900000080"], 0xb0) close(r8) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3m18.776116643s ago: executing program 4 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r3, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x100, 0x40, &(0x7f0000000340)=[0x1, 0xfffffffffffffffd, 0x3, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0xffffffffffffffff, 0xb, 0x3, 0x6, 0x10001, 0xfffffffffffffffb, 0x7, 0x7fffffff, 0x5, 0x26, 0x2, 0x1, 0x7, 0x8, 0x4, 0x4, 0x20000000009, 0x401, 0x9, 0x3, 0x0, 0x4, 0x5, 0x5, 0x4002, 0x501, 0x43, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x4, 0x20008, 0x2e2, 0x3, 0x6, 0x8000000000000001, 0xffffffbffffffff9, 0x2000100000000, 0xfffffffff7fffffd, 0x400, 0x1000009, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0xa, 0xfffffffffffffffe, 0xd, 0x11, 0x6, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x2, 0x7, 0x6, 0xfffffffffffffffc, 0xffffffffffff8001, 0x6, 0x355, 0xdac, 0xe94, 0x7, 0xf39d, 0xa7, 0xba00, 0x2, 0x7ff, 0x8, 0x1, 0x7, 0x4, 0xe, 0xfffff7fffffffffc, 0x80000001, 0x2005, 0x21, 0xfffffffffffffbff, 0xfffffffffffffffd, 0x10000, 0x3, 0x1e4b, 0xbd, 0x79, 0x10, 0x10000, 0x2, 0x10000000002, 0x3, 0x80000003, 0xfffffffffffffff9, 0x0, 0x1, 0xa, 0x6518, 0x8, 0x2, 0x100000001, 0x80, 0x3, 0xd, 0x4, 0xb, 0x9, 0x80000001, 0x14, 0x1, 0x80000000000002, 0x57, 0xea7, 0x1]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x29}) 3m16.574483607s ago: executing program 32 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r3, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x100, 0x40, &(0x7f0000000340)=[0x1, 0xfffffffffffffffd, 0x3, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0xffffffffffffffff, 0xb, 0x3, 0x6, 0x10001, 0xfffffffffffffffb, 0x7, 0x7fffffff, 0x5, 0x26, 0x2, 0x1, 0x7, 0x8, 0x4, 0x4, 0x20000000009, 0x401, 0x9, 0x3, 0x0, 0x4, 0x5, 0x5, 0x4002, 0x501, 0x43, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x4, 0x20008, 0x2e2, 0x3, 0x6, 0x8000000000000001, 0xffffffbffffffff9, 0x2000100000000, 0xfffffffff7fffffd, 0x400, 0x1000009, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0xa, 0xfffffffffffffffe, 0xd, 0x11, 0x6, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x2, 0x7, 0x6, 0xfffffffffffffffc, 0xffffffffffff8001, 0x6, 0x355, 0xdac, 0xe94, 0x7, 0xf39d, 0xa7, 0xba00, 0x2, 0x7ff, 0x8, 0x1, 0x7, 0x4, 0xe, 0xfffff7fffffffffc, 0x80000001, 0x2005, 0x21, 0xfffffffffffffbff, 0xfffffffffffffffd, 0x10000, 0x3, 0x1e4b, 0xbd, 0x79, 0x10, 0x10000, 0x2, 0x10000000002, 0x3, 0x80000003, 0xfffffffffffffff9, 0x0, 0x1, 0xa, 0x6518, 0x8, 0x2, 0x100000001, 0x80, 0x3, 0xd, 0x4, 0xb, 0x9, 0x80000001, 0x14, 0x1, 0x80000000000002, 0x57, 0xea7, 0x1]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x29}) 3m12.982710266s ago: executing program 3 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000600)}}], 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000000c0)='\xb4\x10krB\xeb\xd8\x11\x00l\xfa\x03\x00\x00\x00\x00\x00\x00\x00\x001\x00', 0x4242, 0x0, 0x68, 0x0, &(0x7f00000001c0)=0x19}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x1010000, 0x61, 0x10, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000003c0)={@broadcast, @local, @void, {@can={0xc, {{0x0, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "a95e31fe6a8c57df"}}}}, 0x0) r7 = syz_open_dev$vcsu(0x0, 0x1ff, 0x40000) read$FUSE(r7, 0x0, 0x0) 3m12.053250368s ago: executing program 3 (id=388): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 3m11.011819968s ago: executing program 3 (id=392): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000100)=0x100000b) 3m8.796369943s ago: executing program 3 (id=398): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6c0000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m6.567682674s ago: executing program 3 (id=403): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = creat(0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mkdir(0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c23003f) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) 3m1.965484875s ago: executing program 3 (id=408): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000804) 2m46.421077447s ago: executing program 33 (id=408): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000804) 18.685363447s ago: executing program 1 (id=686): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@oldalloc}, {@acl}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@jqfmt_vfsv0}, {@usrquota}], [], 0x2c}, 0x1, 0x45e, &(0x7f0000000480)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f0000000040)="fc1c079752bb3fdabbed456765a163bb976baf5ba08e0747dbb2d1d303b23c35cc773b74c6ea6569ed8f774c85145970e9aeb976", 0x34) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000580)=ANY=[], 0x152) unshare(0x2040400) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r7, 0xd, 0x0, @void}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r9, 0x301, 0x70bd28, 0x25dfdc06}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x5c, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4bd5ffa8e842cdd19baeb25d342579f7e63d2d1e5317517e", "b1fe94141226cc71e718e86db665dd4fbd49b20523893e8724968b868600ac13"}}}}}}, 0x0) 11.37906343s ago: executing program 0 (id=690): mmap(&(0x7f00004b8000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0xede6000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x208}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4d0, &(0x7f0000019280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 10.822509261s ago: executing program 1 (id=692): openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x591003, 0x1b0, 0xc}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x6, 0x80000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) creat(0x0, 0xdafbe5d6891b6e5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x100c400, &(0x7f0000000080)=ANY=[], 0x85, 0x697, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x128) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 9.332937734s ago: executing program 0 (id=693): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x8}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x0) 9.154816867s ago: executing program 1 (id=694): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) stat(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) chroot(&(0x7f0000000340)='./file0/file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 8.982107321s ago: executing program 0 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mkdir(0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8008743f, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000000000)) 6.82936741s ago: executing program 0 (id=698): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) wait4(r0, 0x0, 0x20000009, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x300) syz_pidfd_open(r0, 0x0) process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/158, 0x9e}], 0x1, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/187, 0xbb}], 0x1, 0x0) 6.72207691s ago: executing program 1 (id=699): inotify_add_watch(0xffffffffffffffff, 0x0, 0x1400037e) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffff"], &(0x7f00000001c0)=""/249, 0x46, 0xf9, 0x6}, 0x28) r4 = socket(0xa, 0x3, 0x87) sendto(r4, 0x0, 0x0, 0x800, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0) 6.392527683s ago: executing program 2 (id=700): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000002000)={0x2020}, 0xfffffc7c) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20008080) 5.372445889s ago: executing program 1 (id=701): mmap(&(0x7f00004b8000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0xede6000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x208}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4d0, &(0x7f0000019280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 4.680337484s ago: executing program 2 (id=702): openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x591003, 0x1b0, 0xc}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x6, 0x80000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) creat(0x0, 0xdafbe5d6891b6e5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x100c400, &(0x7f0000000080)=ANY=[], 0x85, 0x697, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x128) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 3.315721295s ago: executing program 1 (id=703): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) 2.998218285s ago: executing program 2 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000200000003"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 2.38268951s ago: executing program 0 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.326001828s ago: executing program 2 (id=706): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x540, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) timerfd_create(0x7, 0x80000) 1.121281073s ago: executing program 0 (id=707): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) fanotify_init(0x40, 0x40000) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, 0x0, 0x0) fchdir(0xffffffffffffffff) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x200000, 0x0, 0x29}, 0x18) io_uring_setup(0x4dc2, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x801, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) 870.622754ms ago: executing program 2 (id=708): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x48, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@prjquota}, {@minixdf}]}, 0x20, 0x51c, &(0x7f0000000940)="$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") socket$nl_audit(0x10, 0x3, 0x9) 0s ago: executing program 2 (id=709): syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socket$unix(0x1, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x500000b, 0x204031, 0xffffffffffffffff, 0x47aef000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): te with raw_refcnt=0x0, refcnt=1 [ 367.306736][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 367.307123][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 367.418758][ T3578] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 367.423671][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 367.463946][ T5598] usb 3-1: Using ep0 maxpacket: 16 [ 367.469546][ T5598] usb 3-1: unable to get BOS descriptor or descriptor too short [ 367.471675][ T5598] usb 3-1: config 5 has an invalid interface number: 234 but max is 0 [ 367.471699][ T5598] usb 3-1: config 5 has no interface number 0 [ 367.471743][ T5598] usb 3-1: config 5 interface 234 altsetting 8 endpoint 0x3 has an invalid bInterval 255, changing to 7 [ 367.471779][ T5598] usb 3-1: config 5 interface 234 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 367.471806][ T5598] usb 3-1: config 5 interface 234 altsetting 8 has an invalid endpoint descriptor of length 6, skipping [ 367.471829][ T5598] usb 3-1: config 5 interface 234 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 367.471856][ T5598] usb 3-1: config 5 interface 234 has no altsetting 0 [ 367.480987][ T5598] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0bce, bcdDevice=5c.ad [ 367.481015][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.481035][ T5598] usb 3-1: Product: syz [ 367.481049][ T5598] usb 3-1: Manufacturer: syz [ 367.481064][ T5598] usb 3-1: SerialNumber: syz [ 367.587983][ T8060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 367.879690][ T5598] usb 3-1: USB disconnect, device number 8 [ 368.444700][ T8087] loop2: detected capacity change from 0 to 128 [ 368.449908][ T8087] vfat: Unknown parameter 'un]_xlate90' [ 368.450330][ T8087] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 368.503588][ T5625] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 368.886647][ T5625] Bluetooth: hci3: command tx timeout [ 369.686032][ T6735] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 369.865978][ T6735] usb 3-1: Using ep0 maxpacket: 8 [ 369.901250][ T6735] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 369.901278][ T6735] usb 3-1: config 179 has no interface number 0 [ 369.901321][ T6735] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 369.901356][ T6735] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 369.901382][ T6735] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.901406][ T6735] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 369.901431][ T6735] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 369.901471][ T6735] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 369.901495][ T6735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.915851][ T8095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.352492][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 370.481417][ T5598] usb 3-1: USB disconnect, device number 9 [ 370.481413][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 370.481822][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 370.981685][ T5625] Bluetooth: hci3: command tx timeout [ 371.134522][ T6735] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 371.284508][ T6735] usb 2-1: Using ep0 maxpacket: 32 [ 371.286937][ T6735] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 371.286964][ T6735] usb 2-1: config 0 has no interface number 0 [ 371.334082][ T6735] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 371.334114][ T6735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.334135][ T6735] usb 2-1: Product: syz [ 371.334150][ T6735] usb 2-1: Manufacturer: syz [ 371.334166][ T6735] usb 2-1: SerialNumber: syz [ 371.456980][ T6735] usb 2-1: config 0 descriptor?? [ 371.874816][ T6735] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 371.874849][ T6735] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 374.110809][ T6735] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 374.111125][ T6735] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 374.171360][ T6735] usb 2-1: USB disconnect, device number 14 [ 374.246852][ T8132] loop1: detected capacity change from 0 to 128 [ 374.293344][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.293863][ T7873] udevd[7873]: setting mode of /dev/bus/usb/002/014 to 020664 failed: No such file or directory [ 374.294003][ T7873] udevd[7873]: setting owner of /dev/bus/usb/002/014 to uid=0, gid=0 failed: No such file or directory [ 374.298355][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.313294][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.313338][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.313371][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.313396][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.313878][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 374.320722][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.327351][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.329130][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.332064][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.335835][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.335878][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.345720][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.357103][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 374.412088][ T8132] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.474778][ T6030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 374.476106][ T8132] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 375.144571][ T8132] fscrypt (loop1, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 375.342725][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 375.343018][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 375.343250][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 375.385776][ T5610] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.398455][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 375.436068][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 375.481123][ T8151] loop2: detected capacity change from 0 to 2048 [ 375.553813][ T8151] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 375.592870][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.635327][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.635464][ T8151] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 375.636840][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.639127][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.640694][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.642246][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.652530][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.652997][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.653437][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.653638][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.654241][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.656835][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.656967][ T8151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.657361][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.662772][ T8155] loop1: detected capacity change from 0 to 8 [ 375.740635][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.754796][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.761413][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.924025][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.925205][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.926291][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.926937][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.927563][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.930612][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.933505][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.936687][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.939508][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.943791][ T8155] SQUASHFS error: Failed to read block 0x4de: -5 [ 375.946030][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.946696][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.946917][ T8155] SQUASHFS error: Failed to read block 0x4de: -5 [ 375.947189][ T38] kauditd_printk_skb: 23 callbacks suppressed [ 375.947202][ T38] audit: type=1800 audit(1778441156.766:111): pid=8155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.555" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 375.954571][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 375.961200][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 377.645280][ T7898] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 377.690452][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 378.797362][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.797466][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.844606][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 382.012579][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 382.012607][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.012625][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 382.012645][ T9] usb 1-1: config 1 has no interface number 1 [ 382.012682][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 382.023703][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.023731][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.023751][ T9] usb 1-1: Product: syz [ 382.023765][ T9] usb 1-1: Manufacturer: syz [ 382.023780][ T9] usb 1-1: SerialNumber: syz [ 382.551678][ T9] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 382.551743][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 382.610475][ T8224] loop1: detected capacity change from 0 to 4096 [ 382.637075][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.641059][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.655651][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.657954][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.658074][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.658167][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.678766][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.678825][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.679646][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.680305][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.681418][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.688581][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.689596][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.693681][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.694867][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.704586][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.705249][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.712704][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.715929][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.718388][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.718428][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.718453][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.809990][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.823803][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.848953][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.861175][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.879017][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.885248][ T8224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.885430][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.888549][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.913119][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.921359][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.929741][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.949354][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 382.970085][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 383.076912][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 383.084193][ T8224] EXT4-fs error (device loop1): ext4_readdir:265: inode #12: block 80: comm syz.1.567: path /141/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 383.093148][ T8230] loop2: detected capacity change from 0 to 512 [ 383.095668][ T8230] EXT4-fs: Ignoring removed nobh option [ 383.156532][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 383.162872][ T8230] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 383.173303][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 383.183161][ T8230] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 383.199612][ T8230] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 383.530065][ T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 384.137565][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 384.217757][ T3327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.488471][ T9] usb 1-1: USB disconnect, device number 11 [ 384.846159][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.810790][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 386.250979][ T6735] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 386.425347][ T6735] usb 2-1: Using ep0 maxpacket: 32 [ 386.433064][ T6735] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 386.433079][ T6735] usb 2-1: config 0 has no interface number 0 [ 386.435858][ T6735] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 386.435884][ T6735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.435904][ T6735] usb 2-1: Product: syz [ 386.435919][ T6735] usb 2-1: Manufacturer: syz [ 386.435934][ T6735] usb 2-1: SerialNumber: syz [ 386.441724][ T3327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.504918][ T6735] usb 2-1: config 0 descriptor?? [ 386.543753][ T8264] udevd[8264]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.685975][ T6735] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 387.686007][ T6735] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 387.736235][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.736643][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.736969][ T8016] bridge_slave_0: entered allmulticast mode [ 387.796766][ T8016] bridge_slave_0: entered promiscuous mode [ 387.935298][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.935512][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.935765][ T8016] bridge_slave_1: entered allmulticast mode [ 387.963388][ T8016] bridge_slave_1: entered promiscuous mode [ 389.843875][ T6735] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 389.844155][ T6735] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 389.874541][ T6735] usb 2-1: USB disconnect, device number 15 [ 390.845603][ T8281] loop1: detected capacity change from 0 to 1024 [ 390.957441][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 390.967172][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.412212][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.412268][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.412294][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.412317][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.419144][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.419195][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.419220][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.419243][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.424542][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.424581][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.424605][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.424627][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.427311][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.427341][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.427365][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.427387][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.431810][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.431843][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.431866][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.431888][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.438012][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 391.460650][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.460691][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.460715][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.460737][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.484516][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.484554][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.484579][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.484602][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.490863][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.501420][ T38] audit: type=1804 audit(1778441172.316:112): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.581" name="/newroot/143/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 391.509444][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.541295][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.545273][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.551612][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.570430][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.589859][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.597717][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.599976][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.607055][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.620678][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.646034][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.653100][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 391.668840][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 392.068374][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.069950][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.082421][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.082554][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.082601][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.082778][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.082832][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.082939][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.082969][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.172073][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.304086][ T3327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.361957][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 392.384073][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 392.453591][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.494211][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.505576][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.511260][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.511941][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.826599][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.888470][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.335340][ T3327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.636947][ T61] Bluetooth: hci5: command tx timeout [ 394.762083][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 397.629099][ T61] Bluetooth: hci5: command tx timeout [ 397.718768][ T8016] team0: Port device team_slave_0 added [ 397.807935][ T8016] team0: Port device team_slave_1 added [ 399.674492][ T61] Bluetooth: hci5: command tx timeout [ 399.794600][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.794616][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.794647][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.802806][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.802821][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.802847][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.821742][ T8340] loop1: detected capacity change from 0 to 128 [ 400.910045][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 400.946234][ T8340] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 400.950254][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.033883][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.034016][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.037687][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.039993][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.049332][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.050007][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.056390][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.063304][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.064603][ T5745] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 401.072439][ T8349] syz.2.590 uses obsolete (PF_INET,SOCK_PACKET) [ 401.128784][ T1491] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 401.224996][ T5745] usb 1-1: Using ep0 maxpacket: 32 [ 401.227553][ T5745] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 401.227580][ T5745] usb 1-1: config 0 has no interface number 0 [ 401.230944][ T5745] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 401.230970][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.230989][ T5745] usb 1-1: Product: syz [ 401.231003][ T5745] usb 1-1: Manufacturer: syz [ 401.231018][ T5745] usb 1-1: SerialNumber: syz [ 401.320999][ T8340] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.342474][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 401.343560][ T8340] ext2 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.422383][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.422432][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 401.448138][ T5745] usb 1-1: config 0 descriptor?? [ 401.650771][ T8016] hsr_slave_0: entered promiscuous mode [ 401.668441][ T8016] hsr_slave_1: entered promiscuous mode [ 401.670656][ T8016] debugfs: 'hsr0' already exists in 'hsr' [ 401.670678][ T8016] Cannot create hsr debugfs directory [ 401.764691][ T61] Bluetooth: hci5: command tx timeout [ 401.898399][ T5745] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 401.898429][ T5745] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 402.823049][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 402.982737][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 402.982825][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 402.982871][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 403.389238][ T5610] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.574885][ T1171] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 403.659175][ T3327] bridge_slave_1: left allmulticast mode [ 403.659269][ T3327] bridge_slave_1: left promiscuous mode [ 403.789643][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.859683][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 403.890368][ T3327] bridge_slave_0: left allmulticast mode [ 403.890946][ T3327] bridge_slave_0: left promiscuous mode [ 403.892199][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.201771][ T5745] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 404.202070][ T5745] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 404.262571][ T5745] usb 1-1: USB disconnect, device number 12 [ 404.433483][ T3327] bridge_slave_1: left allmulticast mode [ 404.433519][ T3327] bridge_slave_1: left promiscuous mode [ 404.433776][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.510727][ T3327] bridge_slave_0: left allmulticast mode [ 404.510763][ T3327] bridge_slave_0: left promiscuous mode [ 404.511025][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.986392][ T8415] loop2: detected capacity change from 0 to 512 [ 406.000941][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.001477][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.001771][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.002084][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.002299][ T1190] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 406.014627][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.037341][ T1319] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 406.046770][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.046818][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.052930][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 406.053491][ T8415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 406.053595][ T8415] System zones: 0-2, 18-18, 34-34 [ 406.055753][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.057233][ T8415] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=5 [ 406.057359][ T8415] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 406.097634][ T8415] EXT4-fs (loop2): mount failed [ 406.145598][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 406.256522][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.257061][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.257675][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.259673][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.273018][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.395165][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.396623][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.397206][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 406.462810][ T7873] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 406.555001][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.743165][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.201946][ T3327] bond0 (unregistering): Released all slaves [ 408.716150][ T8434] loop1: detected capacity change from 0 to 512 [ 408.718331][ T8434] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.718353][ T8434] EXT4-fs: Ignoring removed bh option [ 408.730004][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.734480][ T8434] EXT4-fs (loop1): Test dummy encryption mode enabled [ 408.734498][ T8434] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 408.735491][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.742533][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.742572][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.748646][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.749765][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.750113][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.750321][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.751011][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.751625][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.754020][ T3578] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 408.754082][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.756823][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.760880][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.761545][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 408.885673][ T8434] EXT4-fs (loop1): 1 truncate cleaned up [ 408.889562][ T8434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.955723][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.015573][ T3578] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 409.015837][ T3578] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 409.019830][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.051711][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.058300][ T3578] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 409.065956][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 409.092150][ T3327] bond0 (unregistering): Released all slaves [ 409.292850][ T61] Bluetooth: hci1: unexpected event 0x06 length: 13 > 3 [ 409.435665][ T8448] fuse: Bad value for 'fd' [ 410.337230][ T7792] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 410.384410][ T8446] loop1: detected capacity change from 0 to 1024 [ 410.396184][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.442142][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.479799][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.479846][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.504014][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.504057][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.518178][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.518223][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.564247][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.567401][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.571873][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.576424][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.580141][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.585520][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.592299][ T8451] loop2: detected capacity change from 0 to 512 [ 410.593300][ T8451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.597471][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.597526][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.600765][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.603754][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.614682][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.620594][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.626036][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.626072][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.626096][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.635577][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.695778][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.706152][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.706206][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.713164][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.717990][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.729013][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.729065][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 410.750431][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.774600][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.774750][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.774851][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.775383][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.775485][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 410.800361][ T8451] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.610: bg 0: block 5: invalid block bitmap [ 410.804533][ T8451] loop2: lost filesystem error report for type 5 error -117 [ 410.807743][ T1190] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 410.814363][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 410.814381][ C0] EXT4-fs (loop2): initial error at time 1778441191: ext4_validate_block_bitmap:432 [ 410.814402][ C0] EXT4-fs (loop2): last error at time 1778441191: ext4_validate_block_bitmap:432 [ 410.884107][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.884193][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 410.885273][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 410.892913][ T8451] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 410.892944][ T8451] loop2: lost filesystem error report for type 5 error -117 [ 410.893095][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 410.893396][ T8451] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.610: invalid indirect mapped block 3 (level 2) [ 410.893425][ T8451] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 410.941898][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 410.945465][ T8451] EXT4-fs (loop2): 2 truncates cleaned up [ 411.076354][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 411.076491][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 411.084692][ T8451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.087297][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 411.087565][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 411.240493][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 411.302960][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 411.567835][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 411.631957][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 411.632036][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 411.652938][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.731957][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 411.751495][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 411.876586][ T8462] loop2: detected capacity change from 0 to 128 [ 411.878888][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 411.879877][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 411.888836][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 411.888889][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 411.890734][ T1491] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 411.894170][ T8462] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.904741][ T1491] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 411.904986][ T8462] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 412.149181][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.154563][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.167125][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.174664][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.175355][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.176023][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.176060][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.176083][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.177532][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.178203][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 412.274714][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.288183][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.291963][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.330379][ T6030] hfsplus: found bad thread record in catalog [ 412.397222][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 412.397281][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 412.397319][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 412.397350][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 412.397393][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.407646][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 412.407699][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 412.456966][ T6030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 412.459342][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.460197][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.461065][ T38] audit: type=1800 audit(1778441193.276:113): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.612" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 412.566077][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 412.614547][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 412.777813][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.778051][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.778176][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.793420][ T5611] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.798497][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 412.832824][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 416.835101][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 417.087548][ T61] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 417.277202][ T38] audit: type=1326 audit(1778441198.096:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.1.619" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9eecdd9 code=0x7ffc0000 [ 417.277253][ T38] audit: type=1326 audit(1778441198.096:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.1.619" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9eecdd9 code=0x7ffc0000 [ 417.277295][ T38] audit: type=1326 audit(1778441198.096:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.1.619" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9eecdd9 code=0x7ffc0000 [ 417.277343][ T38] audit: type=1326 audit(1778441198.096:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.1.619" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c9eecdd9 code=0x7ffc0000 [ 417.277386][ T38] audit: type=1326 audit(1778441198.096:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.1.619" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9eecdd9 code=0x7ffc0000 [ 417.282804][ T38] audit: type=1326 audit(1778441198.096:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.1.619" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f15c9eecdd9 code=0x7ffc0000 [ 417.282986][ T38] audit: type=1326 audit(1778441198.096:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.1.619" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9eecdd9 code=0x7ffc0000 [ 417.312694][ T38] audit: type=1326 audit(1778441198.096:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.1.619" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9eecdd9 code=0x7ffc0000 [ 417.312742][ T38] audit: type=1326 audit(1778441198.126:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.1.619" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9eecdd9 code=0x7ffc0000 [ 419.017036][ T8527] loop1: detected capacity change from 0 to 128 [ 419.022499][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.022766][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.023333][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 419.046413][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.046461][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.046483][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.046505][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.046527][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.046549][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.047488][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.049936][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.052109][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.052796][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 419.383790][ T1491] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 419.404415][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 420.186826][ T8538] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8540] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8538] [ 421.295985][ T3327] hsr_slave_0: left promiscuous mode [ 421.387907][ T3327] hsr_slave_1: left promiscuous mode [ 421.388952][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.398550][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.425627][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.490983][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.516537][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.524635][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.528444][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.812830][ T3327] hsr_slave_0: left promiscuous mode [ 421.857926][ T3327] hsr_slave_1: left promiscuous mode [ 421.859049][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.859073][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.908857][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.908883][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.173399][ T5625] Bluetooth: latency 37305 > 499 [ 422.181241][ T3327] veth1_macvtap: left promiscuous mode [ 422.181345][ T3327] veth0_macvtap: left promiscuous mode [ 422.184959][ T3327] veth1_vlan: left promiscuous mode [ 422.185036][ T3327] veth0_vlan: left promiscuous mode [ 422.504194][ T5724] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 423.184451][ T8579] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8580] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8579] [ 423.972931][ T5625] Bluetooth: hci2: command tx timeout [ 423.995170][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 424.000794][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.000831][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.000870][ T5724] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 424.000893][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.017412][ T5724] usb 3-1: config 0 descriptor?? [ 424.026649][ T5724] hub 3-1:0.0: USB hub found [ 424.172663][ T5744] kernel write not supported for file /input/event3 (pid: 5744 comm: kworker/1:4) [ 424.234409][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 424.297450][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.298222][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.302706][ T5724] hub 3-1:0.0: 1 port detected [ 425.682834][ T8592] loop1: detected capacity change from 0 to 256 [ 425.686054][ T8592] exfat: Deprecated parameter 'utf8' [ 425.808894][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 425.835475][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 425.838935][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 425.838970][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 425.838987][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 425.839004][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 425.839020][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 425.839036][ T1491] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.004433][ T5625] Bluetooth: hci2: command tx timeout [ 426.070682][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.099023][ T68] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.117161][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.126919][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.129207][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.131742][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.133684][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.135567][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.154812][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.158396][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.163695][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.165288][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.166977][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.168023][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.169752][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.170909][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.171906][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.172823][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.173809][ T8592] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x19f22bfb, utbl_chksum : 0xe619d30d) [ 426.175949][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.333304][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.336691][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.336729][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.336752][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.453450][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.455260][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.457530][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.458984][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.459014][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.459036][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.459057][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.459078][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.459099][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.459121][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.467937][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.482343][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.486392][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.491730][ T5744] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 426.580668][ T5724] usb 3-1: USB disconnect, device number 10 [ 426.697674][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.698828][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.706328][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.716430][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.717151][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.720501][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.731733][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.743318][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.748446][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.773173][ T8597] loop2: detected capacity change from 0 to 512 [ 426.782218][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 426.784192][ T8597] EXT4-fs: Ignoring removed i_version option [ 426.784214][ T8597] EXT4-fs: Ignoring removed bh option [ 426.786748][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 426.788759][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 426.793762][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 426.799817][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 426.800576][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 426.815741][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 426.829453][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 426.938950][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 426.950502][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 426.951175][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 426.975275][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 426.986390][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.000983][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.001035][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.007930][ T3578] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 427.036705][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.052541][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.060248][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.075527][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.190143][ T8597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.193208][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 427.194567][ T8597] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 427.241128][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.244970][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.252844][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 427.416208][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 427.461522][ T3578] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 427.771941][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 428.015930][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 428.084695][ T5625] Bluetooth: hci2: command tx timeout [ 428.101767][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 428.204161][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 428.204233][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 428.204277][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 428.206913][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 428.288047][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.338722][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 428.388156][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 428.390951][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 429.718146][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 430.166536][ T5625] Bluetooth: hci2: command tx timeout [ 430.169305][ T8630] loop1: detected capacity change from 0 to 512 [ 430.172522][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.172829][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.180360][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.180427][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.247001][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.262491][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 430.289133][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.289340][ T8630] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.656: inode has both inline data and extents flags [ 430.289359][ T8630] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 430.289505][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 430.289678][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.291516][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.291617][ T8630] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.656: couldn't read orphan inode 15 (err -117) [ 430.291637][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.291646][ T8630] loop1: lost filesystem error report for type 5 error -117 [ 430.291780][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 430.292791][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.302439][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.303133][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.309358][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.310917][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.314768][ T3578] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 430.332724][ T8630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.394549][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 430.396245][ T3578] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 430.491362][ T1134] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 430.662535][ T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 430.688012][ T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 430.883704][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 430.883722][ T38] audit: type=1804 audit(1778441211.656:137): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.656" name="/newroot/169/file1/bus" dev="loop1" ino=19 res=1 errno=0 [ 431.125512][ T1134] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 431.172332][ T3578] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 431.259689][ T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 431.259761][ T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 431.273388][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.326208][ T1134] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 431.353105][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 431.418653][ T8638] loop2: detected capacity change from 0 to 2048 [ 431.429309][ T8638] EXT4-fs: Ignoring removed nobh option [ 431.433310][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.433836][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.434090][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.436371][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.436560][ T3578] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 431.445103][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.446972][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 431.462076][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.462138][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.462411][ T8638] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.653: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 431.462452][ T8638] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 431.464045][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 431.464406][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 431.464423][ C1] EXT4-fs (loop2): initial error at time 1778441212: ext4_ext_check_inode:521: inode 2 [ 431.464450][ C1] EXT4-fs (loop2): last error at time 1778441212: ext4_ext_check_inode:521: inode 2 [ 431.464843][ T8638] EXT4-fs (loop2): Remounting filesystem read-only [ 431.464935][ T8638] EXT4-fs (loop2): get root inode failed [ 431.464948][ T8638] EXT4-fs (loop2): mount failed [ 431.465836][ T3578] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 431.529495][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.537649][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.543836][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.552774][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.556449][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.558560][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.560659][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.561844][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.562501][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.570764][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.574586][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 431.607310][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 431.673613][ T7898] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 431.899936][ T8643] loop1: detected capacity change from 0 to 512 [ 431.908812][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.910126][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.911049][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.913733][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.913956][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 431.918768][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.923188][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.924619][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.926976][ T1171] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 431.963352][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.964238][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.965605][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.968442][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.968572][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.968619][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.971543][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.971588][ T1134] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 431.995960][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 431.996870][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.067848][ T8643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.067995][ T8643] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.078731][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 432.099406][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.099939][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.133869][ T1171] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.179411][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.265285][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 432.373835][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.373907][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.373953][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.374006][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.385676][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.471440][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.514575][ T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.528715][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 432.885694][ T8651] loop1: detected capacity change from 0 to 512 [ 432.939037][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.939183][ T8651] EXT4-fs (loop1): Test dummy encryption mode enabled [ 432.939334][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.981522][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.981959][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.982874][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.982919][ T1134] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.983084][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.983700][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 432.983903][ T8651] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.660: inode has both inline data and extents flags [ 432.983932][ T8651] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 432.984027][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 432.984219][ T8651] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.660: couldn't read orphan inode 15 (err -117) [ 432.984246][ T8651] loop1: lost filesystem error report for type 5 error -117 [ 432.984408][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 432.984424][ C1] EXT4-fs (loop1): initial error at time 1778441213: ext4_orphan_get:1397: inode 15 [ 432.984450][ C1] EXT4-fs (loop1): last error at time 1778441213: ext4_orphan_get:1402 [ 433.064426][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 433.095840][ T8651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.105435][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 433.105487][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 433.110593][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 433.116350][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 433.117011][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 433.120106][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 433.123112][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 433.123769][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 434.729687][ T1134] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 434.738011][ T1134] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 434.866091][ T8667] loop2: detected capacity change from 0 to 512 [ 434.871117][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.871790][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.872055][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.872445][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.872835][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 434.876024][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.879800][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 434.889909][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.889967][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.890376][ T13] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 434.973267][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.974087][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.988738][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.989787][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.992092][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.996089][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 434.997085][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.001515][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.007894][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.011979][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.034622][ T8667] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.665: bad orphan inode 11862016 [ 435.034651][ T8667] loop2: lost filesystem error report for type 5 error -117 [ 435.036644][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 435.040045][ T8667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 435.040186][ T8667] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.233084][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.233383][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.233679][ T8289] bridge_slave_0: entered allmulticast mode [ 435.269629][ T8289] bridge_slave_0: entered promiscuous mode [ 435.408916][ T1134] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 435.447662][ T1134] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 435.477290][ T1171] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 435.607267][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 435.611017][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 435.613694][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 435.641616][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 435.687428][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 435.788398][ T8680] loop2: detected capacity change from 0 to 256 [ 435.790934][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.792640][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.793184][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.822704][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.822740][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.826536][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.827639][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.828199][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.830034][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.830691][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.830734][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.831431][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.831475][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.832888][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.832935][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.833634][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.833679][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.837195][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.841381][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.841425][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.844620][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.845203][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.845885][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.848979][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.850609][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.851767][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.853515][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.853741][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.867693][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.868614][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.870219][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.900708][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.902503][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.906683][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.918109][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.921369][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.924527][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.926134][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.926747][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.927020][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.928619][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.939152][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.940825][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.944101][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.949056][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.952349][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.960405][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.962061][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.963692][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.969909][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.975644][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.976328][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.985172][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.986407][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.986998][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.987516][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.988283][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.992902][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.994670][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.996882][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 435.997093][ T8680] FAT-fs (loop2): Directory bread(block 64) failed [ 435.997121][ T8680] FAT-fs (loop2): Directory bread(block 65) failed [ 435.997217][ T8680] FAT-fs (loop2): Directory bread(block 66) failed [ 435.997238][ T8680] FAT-fs (loop2): Directory bread(block 67) failed [ 435.997330][ T8680] FAT-fs (loop2): Directory bread(block 68) failed [ 435.997353][ T8680] FAT-fs (loop2): Directory bread(block 69) failed [ 435.997616][ T8680] FAT-fs (loop2): Directory bread(block 70) failed [ 435.997637][ T8680] FAT-fs (loop2): Directory bread(block 71) failed [ 435.997754][ T8680] FAT-fs (loop2): Directory bread(block 72) failed [ 435.997776][ T8680] FAT-fs (loop2): Directory bread(block 73) failed [ 436.027063][ T1171] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 436.160530][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 436.303382][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 436.324702][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.324978][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.325292][ T8289] bridge_slave_1: entered allmulticast mode [ 436.340869][ T8289] bridge_slave_1: entered promiscuous mode [ 436.501150][ T7873] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 436.556930][ T8690] loop2: detected capacity change from 0 to 256 [ 436.557725][ T8690] exfat: Deprecated parameter 'namecase' [ 436.557828][ T8690] exfat: Deprecated parameter 'namecase' [ 436.559451][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.623184][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.623316][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.623350][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.623374][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.623655][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.623748][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.623777][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.637266][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.637871][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.685476][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.708371][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.709131][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.709896][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.709931][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.709953][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.709975][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.710004][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.710025][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.710046][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.718175][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.722026][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.780395][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.789941][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.817490][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 436.845528][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.856451][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.856860][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.863224][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.866730][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.866978][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.867160][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.867329][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.898912][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.899216][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.899426][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.899621][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 436.899743][ T8690] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 436.907788][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 437.021135][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.031306][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 437.066703][ T1134] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 437.090012][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 437.118827][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.148099][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.256746][ T8289] team0: Port device team_slave_0 added [ 437.262404][ T8289] team0: Port device team_slave_1 added [ 437.327800][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.327817][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.327843][ T8289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.331054][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.331068][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.331093][ T8289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.363611][ T8695] loop1: detected capacity change from 0 to 8 [ 437.400186][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 437.400252][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 437.415886][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 437.425887][ T8695] SQUASHFS error: lzo decompression failed, data probably corrupt [ 437.425915][ T8695] SQUASHFS error: Failed to read block 0x91: -5 [ 437.425930][ T8695] SQUASHFS error: Unable to read metadata cache entry [8f] [ 437.425946][ T8695] SQUASHFS error: Unable to read inode 0x11f [ 437.437421][ T7873] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 438.972977][ T7898] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 439.474662][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 439.587026][ T8289] hsr_slave_0: entered promiscuous mode [ 439.596179][ T8289] hsr_slave_1: entered promiscuous mode [ 440.084911][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.085014][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.353874][ T8707] loop2: detected capacity change from 0 to 1024 [ 440.412711][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.416514][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.482053][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.482274][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.482397][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.482504][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.533221][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.533476][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.533602][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.533700][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.553656][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.553905][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.554026][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.554163][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.567535][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.567754][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.567886][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.567985][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.612296][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.612548][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.612669][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.612803][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.658989][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 440.779769][ T38] audit: type=1804 audit(1778441221.596:138): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.673" name="/newroot/159/file1/file1" dev="loop2" ino=20 res=1 errno=0 [ 440.974604][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.974674][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.974699][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.974730][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.974754][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.976363][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.978186][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.981202][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.981242][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.981267][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.981290][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.993083][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.993123][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 440.993955][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 441.005023][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 441.011499][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 441.013306][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 441.016039][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 441.033517][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 441.052454][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 441.064974][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 441.065787][ T1134] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 441.369545][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 441.369759][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 441.369881][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 441.369999][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 441.464667][ T1134] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 441.465034][ T13] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 441.466607][ T13] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 441.473051][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 443.067558][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.676'. [ 443.201325][ T8724] loop1: detected capacity change from 0 to 8 [ 443.215134][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 443.216542][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 443.288764][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 443.456044][ T5745] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 443.636630][ T5745] usb 2-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 443.636657][ T5745] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.639943][ T5745] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.639971][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.639992][ T5745] usb 2-1: Product: syz [ 443.640007][ T5745] usb 2-1: Manufacturer: syz [ 443.640022][ T5745] usb 2-1: SerialNumber: syz [ 443.730820][ T5745] usb 2-1: 0:2 : does not exist [ 444.833870][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 445.924624][ T3327] bridge_slave_1: left allmulticast mode [ 445.924657][ T3327] bridge_slave_1: left promiscuous mode [ 445.924905][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.515130][ T8760] loop2: detected capacity change from 0 to 2048 [ 446.713209][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.713266][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.735219][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.735694][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.736437][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.736569][ T8760] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 446.738172][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.739721][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.739940][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.740149][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.764605][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.765112][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.766553][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.766867][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.767424][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.767818][ T8760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.767983][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 446.769328][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.840429][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.842807][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.917214][ T5744] usb 2-1: USB disconnect, device number 16 [ 446.920915][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.921139][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.926476][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.926524][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.926549][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.926572][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.926595][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.926617][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.929659][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.929701][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.929725][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.929747][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.929769][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.929792][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.930812][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.930848][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.930871][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.930894][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.930916][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.930938][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.930962][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.938123][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.939339][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.943926][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.953021][ T1171] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.955807][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.966574][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.966617][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.966641][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.966664][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.966687][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.966710][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 446.966732][ T1319] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 447.042969][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 447.211727][ T3327] bridge_slave_0: left allmulticast mode [ 447.211761][ T3327] bridge_slave_0: left promiscuous mode [ 447.235396][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.337516][ T1319] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 447.337570][ T1319] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 447.337613][ T1319] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 447.342227][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 447.402158][ T1319] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 447.403333][ T8771] loop1: detected capacity change from 0 to 512 [ 447.439951][ T8771] EXT4-fs: Ignoring removed nobh option [ 447.439973][ T8771] EXT4-fs: Ignoring removed oldalloc option [ 447.442168][ T8595] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.464433][ T8595] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.475112][ T8595] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.475150][ T8595] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.482909][ T8595] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.486062][ T8595] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.495075][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 447.515113][ T1319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.519716][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.520642][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.539885][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.542769][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.548189][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.590673][ T8771] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 447.599289][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.599354][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 447.637794][ T3327] bridge_slave_1: left allmulticast mode [ 447.637828][ T3327] bridge_slave_1: left promiscuous mode [ 447.658510][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.796211][ T8771] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.686: invalid indirect mapped block 256 (level 1) [ 447.796251][ T8771] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 448.898802][ T1190] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 449.058534][ T8771] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.686: invalid indirect mapped block 2683928664 (level 1) [ 449.058561][ T8771] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 449.105671][ T1190] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 449.848051][ T8771] EXT4-fs (loop1): 1 truncate cleaned up [ 449.894753][ T8771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.895848][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 449.896154][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 450.167074][ T8773] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 450.250296][ T1190] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 450.253488][ T8773] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 450.290882][ T3327] bridge_slave_0: left allmulticast mode [ 450.290916][ T3327] bridge_slave_0: left promiscuous mode [ 450.291172][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.335913][ T1190] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 452.441778][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.483611][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.490869][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.497297][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.500647][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.611056][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.774935][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.859738][ T3327] bond0 (unregistering): Released all slaves [ 454.284924][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.406994][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.489821][ T3327] bond0 (unregistering): Released all slaves [ 454.554471][ T5625] Bluetooth: hci3: command tx timeout [ 454.571953][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 454.861446][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 454.880134][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 454.926774][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 454.957873][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.983341][ T1319] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 454.998383][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.998668][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.998948][ T8550] bridge_slave_0: entered allmulticast mode [ 455.031108][ T8550] bridge_slave_0: entered promiscuous mode [ 455.039344][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 455.067824][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.069702][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.070039][ T8550] bridge_slave_1: entered allmulticast mode [ 455.140462][ T8550] bridge_slave_1: entered promiscuous mode [ 456.104954][ T8816] loop1: detected capacity change from 0 to 1024 [ 456.142445][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.143518][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.151981][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.152029][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.152055][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.152320][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.153526][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.153559][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.153583][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.153623][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.154817][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.154853][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.154878][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.154902][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.155924][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.155955][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.155980][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.156012][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.159628][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.159660][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.159685][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.159708][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.160300][ T1190] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.169954][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.169999][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.170024][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.170048][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.170697][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.170725][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.170748][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.170770][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.171405][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.176223][ T38] audit: type=1804 audit(1778441236.986:139): pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.692" name="/newroot/178/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 456.176295][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.428757][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.435123][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.448621][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.465445][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.484450][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.494012][ T1171] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.503231][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.505693][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.510551][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.516270][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.526924][ T2242] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.534609][ T1190] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 456.635629][ T5625] Bluetooth: hci3: command tx timeout [ 456.779007][ T3327] hsr_slave_0: left promiscuous mode [ 456.804262][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.804465][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.804549][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.804641][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.804684][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.804853][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.804904][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.805013][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.879489][ T3327] hsr_slave_1: left promiscuous mode [ 456.880239][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.939472][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 456.946298][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.971434][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 457.055778][ T6030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 457.090341][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 457.169237][ T8811] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 457.208516][ T8829] loop1: detected capacity change from 0 to 8 [ 457.223430][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 457.236927][ T8595] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 457.243126][ T8829] SQUASHFS error: Failed to read block 0x4de: -5 [ 457.243653][ T8829] SQUASHFS error: Failed to read block 0x4de: -5 [ 457.243976][ T38] audit: type=1800 audit(1778441238.056:140): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.694" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 457.336853][ T8829] SQUASHFS error: Failed to read block 0x4de: -5 [ 457.337369][ T8829] SQUASHFS error: Failed to read block 0x4de: -5 [ 457.338799][ T8829] SQUASHFS error: Failed to read block 0x4de: -5 [ 457.339285][ T8829] SQUASHFS error: Failed to read block 0x4de: -5 [ 457.343680][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 457.382681][ T8829] SQUASHFS error: Failed to read block 0x4de: -5 [ 457.383007][ T8829] SQUASHFS error: Failed to read block 0x4de: -5 [ 457.545855][ T3327] hsr_slave_0: left promiscuous mode [ 458.495595][ T3327] hsr_slave_1: left promiscuous mode [ 458.530090][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.590819][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.714739][ T5625] Bluetooth: hci3: command tx timeout [ 458.785688][ T8833] loop2: detected capacity change from 0 to 1024 [ 458.794099][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.800706][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.801299][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.801336][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.801361][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.801383][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.802443][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.805389][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.807105][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.807144][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.810864][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.810903][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.810927][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.810950][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.811556][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.813488][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.813533][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.813557][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.827035][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.882137][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.882307][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.883455][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.886274][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.887594][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.890335][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.892278][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.897807][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.901114][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.901776][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.902769][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.904879][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.925826][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.965152][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 458.979315][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.979363][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 458.979890][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 459.041749][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 459.056610][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 459.060064][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 459.060208][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 459.063728][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 459.063766][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 459.063797][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 459.063820][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 459.147174][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 459.147223][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 460.049425][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.049497][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.050581][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.050693][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.050785][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.050828][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.126679][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.126753][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.126857][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.209294][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.241290][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 460.299973][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 460.537393][ T8843] loop1: detected capacity change from 0 to 512 [ 460.572855][ T6030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.586457][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.586517][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.588114][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.592574][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.592613][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.634622][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.642162][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.663231][ T108] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 460.663297][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.667336][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.668369][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.673604][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.678164][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.692802][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.693116][ T108] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 460.693223][ T8843] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.701: iget: bad i_size value: 38620345925642 [ 460.693252][ T8843] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 460.693702][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 460.694416][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 460.694432][ C0] EXT4-fs (loop1): initial error at time 1778441241: ext4_orphan_get:1397: inode 15 [ 460.694458][ C0] EXT4-fs (loop1): last error at time 1778441241: ext4_orphan_get:1397: inode 15 [ 460.701738][ T8843] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.701: couldn't read orphan inode 15 (err -117) [ 460.701767][ T8843] loop1: lost filesystem error report for type 5 error -117 [ 460.703391][ T6030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 460.794609][ T5625] Bluetooth: hci3: command tx timeout [ 460.936444][ T8843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.954564][ T8847] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 460.954869][ T8595] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 462.086846][ T8853] loop2: detected capacity change from 0 to 1024 [ 462.107220][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.108073][ T3578] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.118343][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.118384][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.118410][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.118434][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.140190][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.140231][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.140257][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.140281][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.156035][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.156074][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.156099][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.156122][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.162151][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.162183][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.162208][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.162231][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.165156][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.165215][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.165259][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.280948][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.286650][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.290798][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.297510][ T1190] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.302802][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.306498][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.310537][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.312773][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.315925][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.325095][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.325148][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.325758][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.334083][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.340074][ T2242] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.340164][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.340190][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.340213][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.345739][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.345800][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.345827][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.345850][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.347298][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.348114][ T6030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.349569][ T38] audit: type=1804 audit(1778441243.166:141): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.702" name="/newroot/168/file1/file1" dev="loop2" ino=20 res=1 errno=0 [ 462.358297][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.372507][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.372553][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.372579][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.372607][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 462.617292][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 462.640522][ T2242] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 462.644279][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.644470][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.644518][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.644585][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.644627][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.644679][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.644720][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.644763][ T108] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.831743][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.831922][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.832111][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.832481][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.832858][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.832980][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.833574][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.833753][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.892412][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.955794][ T3578] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 462.962954][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.963175][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.963364][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.969862][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.969924][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.970754][ T8595] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 462.987922][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 463.092069][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 463.157411][ T2242] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 463.174082][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 464.845172][ T8868] loop2: detected capacity change from 0 to 2048 [ 465.144011][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.147849][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.152645][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.154854][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.155106][ T68] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 465.170261][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.183454][ T68] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 465.183698][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.183932][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.184221][ T68] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 465.209005][ T8868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.227715][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.229645][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.247694][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.251945][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.253946][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.258172][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.269805][ T108] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.270574][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.274729][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.280741][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.286380][ T8595] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 465.346663][ T8868] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 465.381823][ T6030] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 465.662959][ T8595] ------------[ cut here ]------------ [ 465.662972][ T8595] kernel BUG at fs/ext4/inode.c:2826! [ 465.663020][ T8595] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 465.663043][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: kworker/u8:17 Tainted: G L [ 465.663043][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.663062][ T8595] Tainted: [L]=SOFTLOCKUP [ 465.663068][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.663077][ T8595] Workqueue: writeback wb_workfn (flush-7:2) [ 465.663117][ T8595] RIP: 0010:ext4_do_writepages+0x4662/0x4670 [ 465.663135][ T8595] Code: c6 e0 e0 63 8b e8 de cd a7 fe 90 0f 0b e8 06 de 44 ff 4c 89 f7 48 c7 c6 c0 e5 63 8b e8 c7 cd a7 fe 90 0f 0b e8 ef dd 44 ff 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 465.663147][ T8595] RSP: 0018:ffffc900053e6d60 EFLAGS: 00010293 [ 465.663158][ T8595] RAX: ffffffff827fee31 RBX: 0000006210000000 RCX: ffff88803e80bd80 [ 465.663170][ T8595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 465.663179][ T8595] RBP: ffffc900053e7170 R08: 0000000000000000 R09: 0000000000000000 [ 465.663188][ T8595] R10: dffffc0000000000 R11: ffffed100c2b0bdb R12: dffffc0000000000 [ 465.663198][ T8595] R13: 0000000000000001 R14: 0000004000000000 R15: 1ffff1100c8378f3 [ 465.663209][ T8595] FS: 0000000000000000(0000) GS:ffff88812601f000(0000) knlGS:0000000000000000 [ 465.663220][ T8595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.663230][ T8595] CR2: 0000001b33817ff8 CR3: 0000000055e2c000 CR4: 00000000003526f0 [ 465.663244][ T8595] Call Trace: [ 465.663250][ T8595] [ 465.663266][ T8595] ? ktime_get+0x45/0x220 [ 465.663282][ T8595] ? look_up_lock_class+0x57/0x110 [ 465.663300][ T8595] ? register_lock_class+0x31/0x2e0 [ 465.663316][ T8595] ? __pfx_ext4_do_writepages+0x10/0x10 [ 465.663330][ T8595] ? __lock_acquire+0x6b5/0x2d10 [ 465.663346][ T8595] ? __lock_acquire+0x6b5/0x2d10 [ 465.663364][ T8595] ? __lock_acquire+0x6b5/0x2d10 [ 465.663381][ T8595] ? ext4_writepages+0x205/0x3b0 [ 465.663401][ T8595] ? ext4_writepages+0x205/0x3b0 [ 465.663428][ T8595] ext4_writepages+0x241/0x3b0 [ 465.663454][ T8595] ? __pfx_ext4_writepages+0x10/0x10 [ 465.663476][ T8595] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 465.663508][ T8595] ? rt_spin_unlock+0x14f/0x200 [ 465.663537][ T8595] ? rt_spin_unlock+0x160/0x200 [ 465.663562][ T8595] ? __pfx_ext4_writepages+0x10/0x10 [ 465.663585][ T8595] do_writepages+0x32e/0x550 [ 465.663610][ T8595] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 465.663637][ T8595] ? reacquire_held_locks+0x104/0x190 [ 465.663659][ T8595] ? rt_spin_lock+0x1e0/0x400 [ 465.663690][ T8595] __writeback_single_inode+0x133/0x10e0 [ 465.663716][ T8595] ? rt_spin_unlock+0x160/0x200 [ 465.663744][ T8595] writeback_sb_inodes+0x97f/0x1980 [ 465.663773][ T8595] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.663797][ T8595] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 465.663835][ T8595] ? rcu_is_watching+0x15/0xb0 [ 465.663860][ T8595] wb_writeback+0x445/0xb00 [ 465.663881][ T8595] ? queue_io+0x281/0x440 [ 465.663904][ T8595] ? __pfx_wb_writeback+0x10/0x10 [ 465.663932][ T8595] wb_workfn+0x3fd/0xf20 [ 465.663958][ T8595] ? look_up_lock_class+0x57/0x110 [ 465.663987][ T8595] ? __pfx_wb_workfn+0x10/0x10 [ 465.664015][ T8595] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.664042][ T8595] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 465.664069][ T8595] ? process_one_work+0x8be/0x1630 [ 465.664095][ T8595] ? process_one_work+0x8be/0x1630 [ 465.664131][ T8595] ? process_one_work+0x8be/0x1630 [ 465.664156][ T8595] process_one_work+0x98b/0x1630 [ 465.664189][ T8595] ? __pfx_process_one_work+0x10/0x10 [ 465.664214][ T8595] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.664247][ T8595] worker_thread+0xb49/0x1140 [ 465.664277][ T8595] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 465.664304][ T8595] kthread+0x388/0x470 [ 465.664323][ T8595] ? __pfx_worker_thread+0x10/0x10 [ 465.664345][ T8595] ? __pfx_kthread+0x10/0x10 [ 465.664364][ T8595] ret_from_fork+0x514/0xb70 [ 465.664385][ T8595] ? __pfx_ret_from_fork+0x10/0x10 [ 465.664406][ T8595] ? __switch_to+0xc79/0x1410 [ 465.664424][ T8595] ? __pfx_kthread+0x10/0x10 [ 465.664443][ T8595] ret_from_fork_asm+0x1a/0x30 [ 465.664474][ T8595] [ 465.664488][ T8595] Modules linked in: [ 465.664541][ T8595] ---[ end trace 0000000000000000 ]--- [ 465.688814][ T8595] RIP: 0010:ext4_do_writepages+0x4662/0x4670 [ 465.688845][ T8595] Code: c6 e0 e0 63 8b e8 de cd a7 fe 90 0f 0b e8 06 de 44 ff 4c 89 f7 48 c7 c6 c0 e5 63 8b e8 c7 cd a7 fe 90 0f 0b e8 ef dd 44 ff 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 465.688863][ T8595] RSP: 0018:ffffc900053e6d60 EFLAGS: 00010293 [ 465.688880][ T8595] RAX: ffffffff827fee31 RBX: 0000006210000000 RCX: ffff88803e80bd80 [ 465.688896][ T8595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 465.688908][ T8595] RBP: ffffc900053e7170 R08: 0000000000000000 R09: 0000000000000000 [ 465.688921][ T8595] R10: dffffc0000000000 R11: ffffed100c2b0bdb R12: dffffc0000000000 [ 465.688935][ T8595] R13: 0000000000000001 R14: 0000004000000000 R15: 1ffff1100c8378f3 [ 465.688949][ T8595] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 465.688964][ T8595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.688978][ T8595] CR2: 00007f15c7ce0ff8 CR3: 0000000055d62000 CR4: 00000000003526f0 [ 465.689002][ T8595] Kernel panic - not syncing: Fatal exception [ 465.689167][ T8595] Kernel Offset: disabled