last executing test programs: 6m56.814034869s ago: executing program 3 (id=491): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xc}, 0x20) 6m56.713685795s ago: executing program 3 (id=492): mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) 6m56.62433971s ago: executing program 3 (id=493): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="1500000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m55.482461949s ago: executing program 3 (id=495): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5e7, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@journal_async_commit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x455, &(0x7f0000000580)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x309c00, 0x0) r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 6m54.398129033s ago: executing program 3 (id=499): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}}, {{&(0x7f00000000c0)=@file={0x1, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 6m52.95829767s ago: executing program 3 (id=504): socket$alg(0x26, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) socket$inet(0x2, 0x3, 0x30) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6m52.676913136s ago: executing program 32 (id=504): socket$alg(0x26, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) socket$inet(0x2, 0x3, 0x30) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6m38.62611254s ago: executing program 1 (id=533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) 6m38.4595481s ago: executing program 1 (id=534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="1500000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x98}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x6}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m37.249099122s ago: executing program 1 (id=535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x11, 0x5109, &(0x7f000000f400)="$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") fallocate(0xffffffffffffffff, 0x3, 0x4, 0x10000) lseek(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", '\by\x00', "e4eb37b07ad86ed7"}, 0x28) 6m33.846202456s ago: executing program 1 (id=541): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d63703836322c6e6f71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030312c75737271756f74612c71756f74612c646973636172642c67727071756f74612c003efcb014a7cda3179b00fd24c7b6"], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 6m31.79314042s ago: executing program 1 (id=548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6m27.154149348s ago: executing program 1 (id=559): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m26.517421496s ago: executing program 33 (id=559): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m33.350473662s ago: executing program 5 (id=1545): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x20000000) 1m33.180824542s ago: executing program 5 (id=1548): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x6}]}, {0x0, [0x30, 0x5f, 0x5f, 0x0, 0x5f, 0x0, 0x2e, 0x71]}}, 0x0, 0x2e}, 0x28) 1m32.990116723s ago: executing program 5 (id=1550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="1500000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x98}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000072000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.417994018s ago: executing program 5 (id=1552): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@oldalloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) ftruncate(r0, 0x48000000000000) 1m30.583813287s ago: executing program 5 (id=1558): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 1m29.510273772s ago: executing program 5 (id=1564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff1}, {0x0, 0x2}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) 1m28.394185839s ago: executing program 34 (id=1564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff1}, {0x0, 0x2}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) 9.944578094s ago: executing program 0 (id=1905): socket$netlink(0x10, 0x3, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80001, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7.642273803s ago: executing program 6 (id=1920): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r5], 0x448}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010151, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.473461863s ago: executing program 6 (id=1921): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 5.404705727s ago: executing program 6 (id=1929): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000000ec0)=""/4114, 0x1012) 5.035487379s ago: executing program 2 (id=1931): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='*', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 4.258224736s ago: executing program 0 (id=1932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 4.010247101s ago: executing program 2 (id=1934): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 3.983065162s ago: executing program 2 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x40800) 3.895308617s ago: executing program 4 (id=1936): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000002900"], 0x18}}], 0x1, 0x40052) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x24000000) 3.85026793s ago: executing program 0 (id=1937): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 3.85012136s ago: executing program 6 (id=1938): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.756223966s ago: executing program 4 (id=1939): r0 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, 0x0) 3.616054274s ago: executing program 6 (id=1940): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0xa18c14, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d3836312c757466383d302c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c726f6469722c757466383d302c00532717042f7ca50e22895c2b5d4e569f5eaf155190d8f66862a6e25caf6e3347919a6ebd4864113ab7083ee0c1019f"], 0x81, 0x2b7, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x82142, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1f, 0x1518, &(0x7f0000001040)="$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") creat(0x0, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x10) r5 = openat$cgroup_ro(r0, &(0x7f0000000480)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) fdatasync(r5) 3.35404215s ago: executing program 4 (id=1941): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r5], 0x448}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010151, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.873103178s ago: executing program 0 (id=1942): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='*', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 1.778830004s ago: executing program 4 (id=1943): close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 1.5102871s ago: executing program 0 (id=1944): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r0, 0xb15, 0x0, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000004) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) 331.3687ms ago: executing program 4 (id=1945): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 273.922393ms ago: executing program 6 (id=1946): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000540), 0xfd, 0x46f, &(0x7f0000000bc0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 206.304628ms ago: executing program 2 (id=1947): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000002900"], 0x18}}], 0x1, 0x40052) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x24000000) 174.986579ms ago: executing program 0 (id=1948): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) 119.938313ms ago: executing program 2 (id=1949): r0 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, 0x0) 18.143529ms ago: executing program 4 (id=1950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 2 (id=1951): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) kernel console output (not intermixed with test programs): irectory bread(block 72) failed [ 516.670346][T10628] FAT-fs (loop5): Directory bread(block 73) failed [ 516.716669][T10631] binder: 10630:10631 ioctl c0306201 0 returned -14 [ 516.731016][T10631] binder: BINDER_SET_CONTEXT_MGR already set [ 516.741668][T10631] binder: 10630:10631 ioctl 4018620d 200000000040 returned -16 [ 517.413746][T10627] loop4: detected capacity change from 0 to 512 [ 517.512116][T10627] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 517.620610][T10627] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 517.776782][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 517.776798][ T28] audit: type=1326 audit(2000000357.449:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 517.843921][T10627] FAT-fs (loop4): FAT read failed (blocknr 128) [ 517.863432][ T28] audit: type=1326 audit(2000000357.449:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 517.948872][ T28] audit: type=1326 audit(2000000357.449:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 518.002560][ T28] audit: type=1326 audit(2000000357.449:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 518.098741][ T28] audit: type=1326 audit(2000000357.489:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 518.153917][ T28] audit: type=1326 audit(2000000357.496:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 518.237065][ T28] audit: type=1326 audit(2000000357.496:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 518.315459][T10646] loop5: detected capacity change from 0 to 256 [ 518.344346][ T28] audit: type=1326 audit(2000000357.496:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 518.458764][ T28] audit: type=1326 audit(2000000357.496:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 518.582012][ T28] audit: type=1326 audit(2000000357.506:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 518.697617][T10654] (null): rxe_set_mtu: Set mtu to 1024 [ 518.704086][T10654] rdma_rxe: rxe_newlink: failed to add bond0 [ 518.725607][T10650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.555964][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1140'. [ 519.607600][T10658] netlink: 'syz.2.1140': attribute type 5 has an invalid length. [ 519.645983][T10648] loop4: detected capacity change from 0 to 8192 [ 519.681123][T10660] binder: 10659:10660 ioctl c0306201 0 returned -14 [ 519.706317][T10658] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.716082][T10658] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.725062][T10658] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.733899][T10658] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.831890][T10658] vxlan0: entered promiscuous mode [ 520.224067][T10666] loop2: detected capacity change from 0 to 8192 [ 520.565169][T10677] loop5: detected capacity change from 0 to 1024 [ 520.602031][T10677] EXT4-fs: inline encryption not supported [ 520.622921][T10677] EXT4-fs: Ignoring removed nobh option [ 520.654198][T10677] EXT4-fs: Ignoring removed bh option [ 520.701988][T10677] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 520.812383][T10684] loop4: detected capacity change from 0 to 256 [ 520.819141][T10677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.273634][ T8253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.860910][T10691] binder: 10690:10691 ioctl c0306201 0 returned -14 [ 522.440952][T10706] netlink: 'syz.5.1159': attribute type 13 has an invalid length. [ 523.606234][T10710] loop5: detected capacity change from 0 to 32768 [ 523.641542][T10710] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 523.783267][T10710] XFS (loop5): Ending clean mount [ 523.800280][T10735] loop2: detected capacity change from 0 to 128 [ 523.830361][T10735] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 523.917102][T10735] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 524.106760][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 524.214382][ T5841] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 524.284743][ T5841] XFS (loop5): Unmount and run xfs_repair [ 524.299880][ T5841] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 524.326915][ T5841] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 524.346716][ T5841] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 524.359447][ T5841] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 524.375922][ T5841] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 524.395418][ T5841] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 524.415608][ T5841] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 524.454674][ T5841] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 524.484295][ T5841] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 524.516786][ T7117] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 524.546049][ T7117] XFS (loop5): page discard on page ffffea000144f600, inode 0x180a, pos 0. [ 524.569978][ T5841] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 524.585553][ T5841] XFS (loop5): Unmount and run xfs_repair [ 524.601697][ T5841] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 524.615437][ T5841] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 524.635018][ T5841] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 524.656364][ T5841] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 524.665315][ T5841] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 524.705544][ T5841] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 524.724564][ T5841] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 524.733731][ T5841] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 524.742741][ T5841] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 524.751872][ T7117] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 524.763535][ T7117] XFS (loop5): page discard on page ffffea000144f500, inode 0x180a, pos 32768. [ 524.798632][ T5841] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 524.816417][ T5841] XFS (loop5): Unmount and run xfs_repair [ 524.835443][ T5841] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 524.863491][ T5841] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 524.897591][ T5841] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 524.913228][T10748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.937897][ T5841] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 524.984466][ T5841] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 525.029927][ T5841] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 525.065006][T10748] (null): rxe_set_mtu: Set mtu to 1024 [ 525.070880][ T5841] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 525.091893][T10748] rdma_rxe: rxe_newlink: failed to add bond0 [ 525.106217][ T5841] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 525.117879][T10753] loop2: detected capacity change from 0 to 1024 [ 525.125265][ T5841] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 525.135426][ T7117] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 525.183228][ T7117] XFS (loop5): page discard on page ffffea000144f480, inode 0x180a, pos 49152. [ 525.212772][T10753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.241865][ T787] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 525.310251][ T787] XFS (loop5): Unmount and run xfs_repair [ 525.335098][ T787] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 525.384771][ T787] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 525.405145][ T787] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 525.422791][ T787] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 525.444731][ T787] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 525.466576][ T787] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 525.485987][ T787] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 525.505759][ T787] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 525.525377][ T787] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 525.534360][ T7117] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 525.553488][ T7117] XFS (loop5): page discard on page ffffea0001692780, inode 0x180a, pos 57344. [ 525.704373][ T5841] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 525.735141][ T5841] XFS (loop5): Unmount and run xfs_repair [ 525.760346][ T5841] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 525.790279][ T5841] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 525.824731][ T5841] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 525.868936][ T5841] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 525.903968][ T5841] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 525.938323][ T5841] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 525.981138][ T5841] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 526.021033][ T5841] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 526.054925][ T5841] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 526.115292][ T7117] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 526.126856][ T8] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 526.135075][ T7117] XFS (loop5): page discard on page ffffea00014aef00, inode 0x180a, pos 61440. [ 526.154295][ T8253] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 526.353483][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.389697][ T8] usb 3-1: config 0 has no interfaces? [ 526.401353][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.444025][ T8] usb 3-1: config 0 has no interfaces? [ 526.463417][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.518886][ T8] usb 3-1: config 0 has no interfaces? [ 526.528940][ T8] usb 3-1: string descriptor 0 read error: -22 [ 526.554352][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 526.573168][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.597391][ T8] usb 3-1: config 0 descriptor?? [ 526.701703][T10764] loop4: detected capacity change from 0 to 512 [ 526.763696][T10764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.847078][T10753] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4047: comm syz.2.1176: Allocating blocks 497-513 which overlap fs metadata [ 526.861625][T10764] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 526.887052][T10753] EXT4-fs (loop2): pa ffff888059eb42b8: logic 128, phys. 385, len 8 [ 526.895375][T10753] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 527.036440][T10773] loop0: detected capacity change from 0 to 128 [ 527.044307][T10773] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 527.074950][T10773] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 527.727154][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.944594][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 527.944609][ T28] audit: type=1800 audit(2000000367.631:543): pid=10753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1176" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 527.992158][ T5841] usb 3-1: USB disconnect, device number 13 [ 528.025016][ T6136] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 528.178755][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'. [ 528.736022][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.892103][T10794] loop2: detected capacity change from 0 to 1024 [ 528.915919][T10794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 528.952365][T10794] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 529.005166][T10794] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 529.062082][T10794] System zones: 0-1, 3-36 [ 529.106252][T10794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.658097][T10812] loop5: detected capacity change from 0 to 256 [ 531.658928][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.060420][T10805] loop4: detected capacity change from 0 to 32768 [ 532.148244][T10828] loop2: detected capacity change from 0 to 1024 [ 532.169515][T10805] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 532.246984][T10828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.281489][T10805] XFS (loop4): Ending clean mount [ 532.392258][ T7920] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 532.681956][ T5827] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 532.889035][ T5827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.919267][ T5827] usb 3-1: config 0 has no interfaces? [ 532.935837][ T5827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.966652][ T5827] usb 3-1: config 0 has no interfaces? [ 532.980409][ T5827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.002689][ T5827] usb 3-1: config 0 has no interfaces? [ 533.022454][ T5827] usb 3-1: string descriptor 0 read error: -22 [ 533.039126][ T5827] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 533.062551][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.088156][ T5827] usb 3-1: config 0 descriptor?? [ 533.200252][T10849] loop4: detected capacity change from 0 to 1024 [ 533.235051][T10849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.289465][T10849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 533.341770][T10849] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 533.370526][T10849] System zones: 0-1, 3-36 [ 533.394142][T10849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.470297][T10828] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4047: comm syz.2.1194: Allocating blocks 497-513 which overlap fs metadata [ 533.509541][T10828] EXT4-fs (loop2): pa ffff888059c0b1d0: logic 128, phys. 385, len 8 [ 533.518124][T10828] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 533.950417][T10858] hsr1: left promiscuous mode [ 534.280362][ T5756] usb 3-1: USB disconnect, device number 14 [ 535.076655][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.098522][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.426166][T10868] loop5: detected capacity change from 0 to 32768 [ 535.645500][T10868] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 536.655182][T10868] XFS (loop5): Ending clean mount [ 536.801475][T10903] infiniband syz0: set active [ 536.825040][T10903] vxlan0: left promiscuous mode [ 537.280581][ T8253] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 537.701856][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 537.999048][ T5756] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 538.218839][ T5756] usb 1-1: Using ep0 maxpacket: 8 [ 538.257316][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.313086][ T5756] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.340614][ T5756] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 538.350495][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 538.359319][ T5756] usb 1-1: Product: syz [ 538.363655][ T5756] usb 1-1: Manufacturer: syz [ 538.368303][ T5756] usb 1-1: SerialNumber: syz [ 538.386468][ T5756] usb 1-1: config 0 descriptor?? [ 539.258656][T10923] loop2: detected capacity change from 0 to 256 [ 540.550123][ T5841] usb 1-1: USB disconnect, device number 20 [ 540.927159][T10937] loop4: detected capacity change from 0 to 8192 [ 541.249071][T10946] loop5: detected capacity change from 0 to 1024 [ 541.290559][T10946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.638671][ T5756] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 541.828722][ T5756] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.850003][ T5756] usb 6-1: config 0 has no interfaces? [ 541.875147][ T5756] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.893945][ T5756] usb 6-1: config 0 has no interfaces? [ 541.909969][ T5756] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.930711][ T5756] usb 6-1: config 0 has no interfaces? [ 541.954661][ T5756] usb 6-1: string descriptor 0 read error: -22 [ 541.961278][ T5756] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 541.980637][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.008497][ T5756] usb 6-1: config 0 descriptor?? [ 542.071287][T10958] loop4: detected capacity change from 0 to 256 [ 542.306839][T10946] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4047: comm syz.5.1227: Allocating blocks 497-513 which overlap fs metadata [ 542.336069][T10946] EXT4-fs (loop5): pa ffff888059eb4bc8: logic 128, phys. 385, len 8 [ 542.344310][T10946] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 543.266825][ T23] usb 6-1: USB disconnect, device number 10 [ 544.068338][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 544.255863][ T5756] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 544.370281][T10975] loop4: detected capacity change from 0 to 256 [ 544.476845][ T5756] usb 1-1: Using ep0 maxpacket: 8 [ 544.512653][T10975] FAT-fs (loop4): Directory bread(block 64) failed [ 544.519454][T10975] FAT-fs (loop4): Directory bread(block 65) failed [ 544.526288][T10975] FAT-fs (loop4): Directory bread(block 66) failed [ 544.532870][T10975] FAT-fs (loop4): Directory bread(block 67) failed [ 544.539696][T10975] FAT-fs (loop4): Directory bread(block 68) failed [ 544.546315][T10975] FAT-fs (loop4): Directory bread(block 69) failed [ 544.552992][T10975] FAT-fs (loop4): Directory bread(block 70) failed [ 544.559671][T10975] FAT-fs (loop4): Directory bread(block 71) failed [ 544.566697][T10975] FAT-fs (loop4): Directory bread(block 72) failed [ 544.573306][T10975] FAT-fs (loop4): Directory bread(block 73) failed [ 544.591203][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.662325][ T5756] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 544.675095][ T5756] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 544.689085][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 544.697657][ T5756] usb 1-1: Product: syz [ 544.701969][ T5756] usb 1-1: Manufacturer: syz [ 544.712661][ T5756] usb 1-1: SerialNumber: syz [ 544.756931][ T5756] usb 1-1: config 0 descriptor?? [ 545.070587][ T8253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.631107][T10992] loop5: detected capacity change from 0 to 1024 [ 545.640450][T10992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 545.828239][T10992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 546.090696][T10992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 546.170090][T10992] System zones: 0-1, 3-36 [ 546.320349][ T966] usb 1-1: USB disconnect, device number 21 [ 546.461596][T10992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.654261][T11001] loop2: detected capacity change from 0 to 128 [ 546.674884][T11001] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 546.740150][T11001] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 546.784780][T11001] ext2 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.796328][T11004] binder: 11003:11004 ioctl 4018620d 0 returned -22 [ 547.006118][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 547.073753][T11008] xfrm0: left promiscuous mode [ 547.309413][T11016] loop2: detected capacity change from 0 to 256 [ 547.341212][T11016] FAT-fs (loop2): Directory bread(block 64) failed [ 547.348087][T11016] FAT-fs (loop2): Directory bread(block 65) failed [ 547.354880][T11016] FAT-fs (loop2): Directory bread(block 66) failed [ 547.361466][T11016] FAT-fs (loop2): Directory bread(block 67) failed [ 547.368218][T11016] FAT-fs (loop2): Directory bread(block 68) failed [ 547.374865][T11016] FAT-fs (loop2): Directory bread(block 69) failed [ 547.381578][T11016] FAT-fs (loop2): Directory bread(block 70) failed [ 547.388329][T11016] FAT-fs (loop2): Directory bread(block 71) failed [ 547.395228][T11016] FAT-fs (loop2): Directory bread(block 72) failed [ 547.401810][T11016] FAT-fs (loop2): Directory bread(block 73) failed [ 548.228081][T11020] loop0: detected capacity change from 0 to 8192 [ 549.317401][ T8253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.518465][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 550.543910][T11041] binder: 11040:11041 ioctl 4018620d 0 returned -22 [ 550.551944][T11039] loop5: detected capacity change from 0 to 512 [ 550.593064][T11039] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 550.680112][ T28] audit: type=1326 audit(2000000390.372:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf88f9aeb9 code=0x7ffc0000 [ 550.739270][ T28] audit: type=1326 audit(2000000390.372:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf88f9aeb9 code=0x7ffc0000 [ 550.815902][ T28] audit: type=1326 audit(2000000390.372:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf88f9aeb9 code=0x7ffc0000 [ 550.899499][T11049] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1256'. [ 550.918923][ T28] audit: type=1326 audit(2000000390.372:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbf88f9aeb9 code=0x7ffc0000 [ 550.966445][T11049] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1256'. [ 551.002791][ T28] audit: type=1326 audit(2000000390.388:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf88f9aeb9 code=0x7ffc0000 [ 551.088221][ T28] audit: type=1326 audit(2000000390.388:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf88f9aeb9 code=0x7ffc0000 [ 551.162134][T11051] loop4: detected capacity change from 0 to 512 [ 551.182506][ T28] audit: type=1326 audit(2000000390.388:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf88f5b78e code=0x7ffc0000 [ 551.209263][T11051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 551.241556][T11051] EXT4-fs: Ignoring removed bh option [ 551.266419][ T28] audit: type=1326 audit(2000000390.408:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf88f5b78e code=0x7ffc0000 [ 551.327161][ T28] audit: type=1326 audit(2000000390.408:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf88f5b78e code=0x7ffc0000 [ 551.506176][ T28] audit: type=1326 audit(2000000390.418:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf88f5b78e code=0x7ffc0000 [ 551.554759][T11051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.663178][T11051] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.164198][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.656234][T11067] loop2: detected capacity change from 0 to 256 [ 552.856447][T11067] FAT-fs (loop2): Directory bread(block 64) failed [ 552.912632][T11067] FAT-fs (loop2): Directory bread(block 65) failed [ 552.963127][T11067] FAT-fs (loop2): Directory bread(block 66) failed [ 552.969766][T11067] FAT-fs (loop2): Directory bread(block 67) failed [ 553.045808][T11067] FAT-fs (loop2): Directory bread(block 68) failed [ 553.059353][T11067] FAT-fs (loop2): Directory bread(block 69) failed [ 553.069809][T11067] FAT-fs (loop2): Directory bread(block 70) failed [ 553.077165][T11067] FAT-fs (loop2): Directory bread(block 71) failed [ 553.092104][T11067] FAT-fs (loop2): Directory bread(block 72) failed [ 553.125586][T11067] FAT-fs (loop2): Directory bread(block 73) failed [ 553.507110][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 554.419302][T11096] loop4: detected capacity change from 0 to 256 [ 556.159859][T11108] loop4: detected capacity change from 0 to 512 [ 556.182125][T11108] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 556.317188][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 556.317206][ T28] audit: type=1326 audit(2000000396.011:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 556.449501][ T28] audit: type=1326 audit(2000000396.011:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 556.549491][ T28] audit: type=1326 audit(2000000396.041:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 556.667325][ T28] audit: type=1326 audit(2000000396.041:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 556.777409][ T28] audit: type=1326 audit(2000000396.041:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 556.867353][ T28] audit: type=1326 audit(2000000396.057:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 556.919931][ T28] audit: type=1326 audit(2000000396.057:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 557.010060][ T28] audit: type=1326 audit(2000000396.057:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 557.087562][ T28] audit: type=1326 audit(2000000396.057:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 557.177179][ T28] audit: type=1326 audit(2000000396.067:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 557.932426][T11128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.039944][T11128] (null): rxe_set_mtu: Set mtu to 1024 [ 558.053133][T11128] rdma_rxe: rxe_newlink: failed to add bond0 [ 558.493879][T11134] loop0: detected capacity change from 0 to 8192 [ 558.877157][T11141] loop4: detected capacity change from 0 to 1024 [ 558.901710][T11141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.959482][T11141] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 559.021172][T11141] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 559.069540][T11141] System zones: 0-1, 3-36 [ 559.113867][T11141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.633437][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.680300][ T966] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 560.698948][T11155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 560.900366][ T966] usb 3-1: Using ep0 maxpacket: 8 [ 560.922535][ T966] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 560.952093][ T966] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 560.979873][ T966] usb 3-1: Product: syz [ 560.992468][ T966] usb 3-1: Manufacturer: syz [ 560.997641][ T966] usb 3-1: SerialNumber: syz [ 561.102613][T11170] loop5: detected capacity change from 0 to 512 [ 561.110311][T11170] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 561.244238][ T966] usb 3-1: config 0 descriptor?? [ 561.440630][T11175] loop0: detected capacity change from 0 to 256 [ 561.613566][T11175] FAT-fs (loop0): Directory bread(block 64) failed [ 561.660380][T11175] FAT-fs (loop0): Directory bread(block 65) failed [ 561.676118][T11175] FAT-fs (loop0): Directory bread(block 66) failed [ 561.699294][T11175] FAT-fs (loop0): Directory bread(block 67) failed [ 561.711676][T11175] FAT-fs (loop0): Directory bread(block 68) failed [ 561.741590][T11175] FAT-fs (loop0): Directory bread(block 69) failed [ 561.774409][T11175] FAT-fs (loop0): Directory bread(block 70) failed [ 561.818054][T11175] FAT-fs (loop0): Directory bread(block 71) failed [ 561.824812][T11175] FAT-fs (loop0): Directory bread(block 72) failed [ 561.880747][T11175] FAT-fs (loop0): Directory bread(block 73) failed [ 562.184216][T11181] loop5: detected capacity change from 0 to 256 [ 562.225753][T11181] FAT-fs (loop5): Directory bread(block 64) failed [ 562.232599][T11181] FAT-fs (loop5): Directory bread(block 65) failed [ 562.239414][T11181] FAT-fs (loop5): Directory bread(block 66) failed [ 562.246010][T11181] FAT-fs (loop5): Directory bread(block 67) failed [ 562.252775][T11181] FAT-fs (loop5): Directory bread(block 68) failed [ 562.259453][T11181] FAT-fs (loop5): Directory bread(block 69) failed [ 562.266144][T11181] FAT-fs (loop5): Directory bread(block 70) failed [ 562.272865][T11181] FAT-fs (loop5): Directory bread(block 71) failed [ 562.279715][T11181] FAT-fs (loop5): Directory bread(block 72) failed [ 562.286302][T11181] FAT-fs (loop5): Directory bread(block 73) failed [ 562.508715][ T8] usb 3-1: USB disconnect, device number 15 [ 562.746868][T11191] loop5: detected capacity change from 0 to 1024 [ 562.799215][T11191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 562.826651][T11191] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 562.860125][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.866530][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.919240][T11191] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 562.942720][T11191] System zones: 0-1, 3-36 [ 562.952583][T11192] loop2: detected capacity change from 0 to 8192 [ 562.994894][T11191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.980936][ T8253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.388951][T11203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1301'. [ 564.656934][T11207] loop4: detected capacity change from 0 to 2048 [ 564.703774][T11207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.917698][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.400068][T11217] loop4: detected capacity change from 0 to 256 [ 565.547331][T11217] syz.4.1307: attempt to access beyond end of device [ 565.547331][T11217] loop4: rw=0, sector=260, nr_sectors = 4 limit=256 [ 565.905773][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 565.950512][T11226] loop5: detected capacity change from 0 to 1024 [ 565.979074][T11226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.019151][T11226] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 566.111595][T11226] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 566.138422][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'. [ 566.172136][T11226] System zones: 0-1, 3-36 [ 566.246314][T11226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.118829][T11241] loop2: detected capacity change from 0 to 128 [ 568.256751][ T8253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.412334][T11243] loop4: detected capacity change from 0 to 512 [ 568.460186][T11243] EXT4-fs: Ignoring removed bh option [ 568.669740][T11243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.794800][T11243] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 569.160593][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.306925][ T5756] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 571.533078][ T5756] usb 5-1: Using ep0 maxpacket: 8 [ 571.560444][ T5756] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 571.597106][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 571.636222][ T5756] usb 5-1: Product: syz [ 571.661375][ T5756] usb 5-1: Manufacturer: syz [ 571.682244][ T5756] usb 5-1: SerialNumber: syz [ 571.730127][ T5756] usb 5-1: config 0 descriptor?? [ 571.999141][T11277] loop5: detected capacity change from 0 to 8192 [ 572.244156][T11284] loop2: detected capacity change from 0 to 256 [ 572.315638][T11284] FAT-fs (loop2): Directory bread(block 64) failed [ 572.322514][T11284] FAT-fs (loop2): Directory bread(block 65) failed [ 572.329292][T11284] FAT-fs (loop2): Directory bread(block 66) failed [ 572.336026][T11284] FAT-fs (loop2): Directory bread(block 67) failed [ 572.342897][T11284] FAT-fs (loop2): Directory bread(block 68) failed [ 572.349605][T11284] FAT-fs (loop2): Directory bread(block 69) failed [ 572.356492][T11284] FAT-fs (loop2): Directory bread(block 70) failed [ 572.365219][T11284] FAT-fs (loop2): Directory bread(block 71) failed [ 572.372066][T11284] FAT-fs (loop2): Directory bread(block 72) failed [ 572.378831][T11284] FAT-fs (loop2): Directory bread(block 73) failed [ 573.346740][ T23] usb 5-1: USB disconnect, device number 4 [ 575.479062][T11295] loop5: detected capacity change from 0 to 8192 [ 576.649685][T11309] loop2: detected capacity change from 0 to 1024 [ 576.721421][T11309] EXT4-fs: Ignoring removed orlov option [ 576.727176][T11309] EXT4-fs: inline encryption not supported [ 576.792922][T11315] : renamed from bond_slave_0 (while UP) [ 576.816250][T11317] loop0: detected capacity change from 0 to 512 [ 576.827730][T11309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.983131][T11317] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.1337: inode has both inline data and extents flags [ 577.036036][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.072821][T11317] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1337: couldn't read orphan inode 15 (err -117) [ 577.092422][T11317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.193531][T11324] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1339'. [ 577.205148][T11324] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1339'. [ 577.413760][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.525402][T11333] loop4: detected capacity change from 0 to 512 [ 577.533751][T11333] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 577.911376][T11337] loop0: detected capacity change from 0 to 8192 [ 577.933807][ T5996] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 577.961261][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 577.961277][ T28] audit: type=1326 audit(2000000417.677:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 578.147663][ T28] audit: type=1326 audit(2000000417.677:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 578.269706][ T28] audit: type=1326 audit(2000000417.677:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 578.316382][T11342] loop2: detected capacity change from 0 to 256 [ 578.332959][ T28] audit: type=1326 audit(2000000417.677:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 578.418835][T11341] (null): rxe_set_mtu: Set mtu to 1024 [ 578.427866][ T28] audit: type=1326 audit(2000000417.680:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 578.446911][T11341] rdma_rxe: rxe_newlink: failed to add bond0 [ 578.519758][ T28] audit: type=1326 audit(2000000417.680:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 578.642058][ T28] audit: type=1326 audit(2000000417.680:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 578.742093][ T28] audit: type=1326 audit(2000000417.680:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 578.765020][ T28] audit: type=1326 audit(2000000417.680:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 579.253182][ T28] audit: type=1326 audit(2000000417.680:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 579.729404][T11352] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1350'. [ 579.767895][T11352] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1350'. [ 579.793840][T11358] loop0: detected capacity change from 0 to 512 [ 579.837487][T11358] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 580.175602][T11367] loop2: detected capacity change from 0 to 512 [ 580.183487][T11367] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 580.220449][ T5994] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 580.587607][T11372] loop5: detected capacity change from 0 to 8192 [ 583.760131][T11410] loop0: detected capacity change from 0 to 8192 [ 585.111039][T11426] program syz.5.1378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.425237][T11441] loop4: detected capacity change from 0 to 8192 [ 586.698958][T11451] loop2: detected capacity change from 0 to 8192 [ 587.191496][T11457] loop0: detected capacity change from 0 to 256 [ 587.320399][T11457] FAT-fs (loop0): Directory bread(block 64) failed [ 587.327142][T11457] FAT-fs (loop0): Directory bread(block 65) failed [ 587.333817][T11457] FAT-fs (loop0): Directory bread(block 66) failed [ 587.340522][T11457] FAT-fs (loop0): Directory bread(block 67) failed [ 587.347244][T11457] FAT-fs (loop0): Directory bread(block 68) failed [ 587.353862][T11457] FAT-fs (loop0): Directory bread(block 69) failed [ 587.360665][T11457] FAT-fs (loop0): Directory bread(block 70) failed [ 587.367324][T11457] FAT-fs (loop0): Directory bread(block 71) failed [ 587.374001][T11457] FAT-fs (loop0): Directory bread(block 72) failed [ 587.383548][T11457] FAT-fs (loop0): Directory bread(block 73) failed [ 587.548723][T11461] loop5: detected capacity change from 0 to 1024 [ 587.564653][T11461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 587.613925][T11461] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 587.656003][T11461] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 587.685034][T11461] System zones: 0-1, 3-36 [ 587.722583][T11461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.015040][T11468] loop2: detected capacity change from 0 to 1024 [ 589.463267][ T8253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.483891][T11468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.586476][ T28] kauditd_printk_skb: 500 callbacks suppressed [ 589.586493][ T28] audit: type=1800 audit(2000000429.300:1273): pid=11468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1391" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 590.078241][ T28] audit: type=1800 audit(2000000429.300:1274): pid=11468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1391" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 590.536619][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.658569][T11488] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1397'. [ 590.844304][T11493] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1397'. [ 590.964778][T11492] loop4: detected capacity change from 0 to 8192 [ 592.842945][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 594.920703][T11542] loop2: detected capacity change from 0 to 8192 [ 595.163928][T11551] loop4: detected capacity change from 0 to 512 [ 595.171722][T11551] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 595.204787][ T5994] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 595.238502][ T28] audit: type=1326 audit(2000000434.953:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 595.290744][ T28] audit: type=1326 audit(2000000434.953:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 595.356123][ T28] audit: type=1326 audit(2000000434.953:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 595.386877][ T28] audit: type=1326 audit(2000000434.953:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 595.436230][ T28] audit: type=1326 audit(2000000434.953:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 595.468774][ T28] audit: type=1326 audit(2000000434.964:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 595.492463][ T28] audit: type=1326 audit(2000000434.964:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 595.580257][ T28] audit: type=1326 audit(2000000434.964:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 595.609564][ T28] audit: type=1326 audit(2000000434.964:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 595.637917][ T28] audit: type=1326 audit(2000000434.984:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 595.708794][T11543] loop5: detected capacity change from 0 to 32768 [ 595.770637][T11543] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 595.880486][T11543] XFS (loop5): Ending clean mount [ 596.009023][T11563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.051500][ T966] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 596.283694][ T966] XFS (loop5): Unmount and run xfs_repair [ 596.290138][ T966] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 596.297638][ T966] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 596.306619][ T966] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 596.315657][ T966] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 596.325319][ T966] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 596.334346][ T966] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 596.343406][ T966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 596.360032][ T966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.088002][ T966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.097364][T11543] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 597.111025][T11543] XFS (loop5): page discard on page ffffea0001336e00, inode 0x180a, pos 0. [ 597.134607][ T5840] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 597.179781][ T5840] XFS (loop5): Unmount and run xfs_repair [ 597.190008][T11578] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1422'. [ 597.215574][ T5840] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 597.253182][ T5840] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 597.268081][ T5840] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 597.281905][T11582] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1422'. [ 597.293001][ T5840] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 597.304970][T11573] bond0: (slave bond_slave_1): Releasing backup interface [ 597.330224][ T5840] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 597.349521][ T5840] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 597.375850][ T5840] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.395340][ T5840] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.416360][ T5840] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.433873][T11543] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 597.463757][T11543] XFS (loop5): page discard on page ffffea0001347900, inode 0x180a, pos 32768. [ 597.490773][ T966] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 597.536344][ T966] XFS (loop5): Unmount and run xfs_repair [ 597.752963][ T966] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 597.761201][ T966] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 597.770584][ T966] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 597.780193][ T966] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 597.789205][ T966] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 597.798925][ T966] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 597.807911][ T966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.816914][ T966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.845276][ T966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.986940][T11543] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 598.165546][T11543] XFS (loop5): page discard on page ffffea00015d7100, inode 0x180a, pos 49152. [ 598.498694][T11543] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 598.531180][T11543] XFS (loop5): Unmount and run xfs_repair [ 598.541304][T11543] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 598.561541][T11543] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 598.583810][T11597] loop2: detected capacity change from 0 to 512 [ 598.591506][T11597] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 598.634378][T11543] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 598.679682][ T5996] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 598.697945][T11543] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 598.708069][T11543] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 598.722567][T11543] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 598.745284][T11543] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 598.755957][T11543] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 598.769082][T11543] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 598.812842][T11543] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 598.832473][T11543] XFS (loop5): page discard on page ffffea000151ed40, inode 0x180a, pos 57344. [ 598.852514][T11592] loop4: detected capacity change from 0 to 8192 [ 598.869139][ T5840] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 598.898464][ T5840] XFS (loop5): Unmount and run xfs_repair [ 598.921906][ T5840] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 598.947678][ T5840] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 598.962247][ T5840] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 598.994547][ T5840] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 599.004536][ T5840] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 599.017180][ T5840] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 599.055621][ T5840] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.083605][ T5840] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.105024][ T5840] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.116841][T11543] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 599.139766][T11543] XFS (loop5): page discard on page ffffea0001560d80, inode 0x180a, pos 61440. [ 599.292184][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 599.341445][ T8253] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 599.450103][T11612] infiniband syz0: set active [ 600.429704][T11618] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1432'. [ 600.481160][T11618] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1432'. [ 600.667103][T11621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1433'. [ 601.635512][T11632] : renamed from bond_slave_0 (while UP) [ 601.921823][T11646] loop4: detected capacity change from 0 to 512 [ 601.929855][T11646] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 602.051514][T11648] infiniband syz0: set active [ 602.269286][ T28] kauditd_printk_skb: 467 callbacks suppressed [ 602.269326][ T28] audit: type=1326 audit(2000000441.912:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 602.832318][ T28] audit: type=1326 audit(2000000441.912:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 602.906270][ T28] audit: type=1326 audit(2000000441.912:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 602.957291][T11643] loop5: detected capacity change from 0 to 8192 [ 602.963997][ T28] audit: type=1326 audit(2000000441.912:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 603.018922][ T28] audit: type=1326 audit(2000000441.912:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 603.097370][ T28] audit: type=1326 audit(2000000441.929:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 603.131774][ T28] audit: type=1326 audit(2000000441.929:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 603.162569][ T28] audit: type=1326 audit(2000000441.929:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 603.199268][ T28] audit: type=1326 audit(2000000441.929:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 603.223680][ T28] audit: type=1326 audit(2000000441.929:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11640 comm="syz.4.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 603.671712][T11639] loop0: detected capacity change from 0 to 32768 [ 603.762696][T11639] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 603.830729][T11659] loop5: detected capacity change from 0 to 8192 [ 603.982444][T11639] XFS (loop0): Ending clean mount [ 605.051904][ T5766] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 606.565979][T11693] loop2: detected capacity change from 0 to 8192 [ 606.576731][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1454'. [ 607.658547][T11710] loop5: detected capacity change from 0 to 256 [ 607.727719][T11712] loop4: detected capacity change from 0 to 128 [ 607.758214][T11710] syz.5.1455: attempt to access beyond end of device [ 607.758214][T11710] loop5: rw=0, sector=272, nr_sectors = 4 limit=256 [ 607.835486][T11710] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 607.890389][T11710] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 608.987858][T11722] loop4: detected capacity change from 0 to 8192 [ 609.197149][T11730] loop2: detected capacity change from 0 to 512 [ 609.292399][T11730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.324857][T11730] ext4 filesystem being mounted at /372/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.641576][T11725] loop5: detected capacity change from 0 to 32768 [ 610.542176][T11725] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 610.632949][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.972237][T11725] XFS (loop5): Ending clean mount [ 611.834498][ T8253] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 611.870125][T11751] loop0: detected capacity change from 0 to 8192 [ 612.078059][T11759] netlink: 'syz.4.1468': attribute type 39 has an invalid length. [ 612.545617][T11764] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1467'. [ 612.587612][T11763] loop0: detected capacity change from 0 to 1024 [ 612.617779][T11763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 612.641991][T11763] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 612.673461][T11763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 612.707921][T11763] System zones: 0-1, 3-36 [ 612.798993][T11772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1471'. [ 612.820530][T11763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.049760][T11775] loop5: detected capacity change from 0 to 512 [ 613.316042][T11775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.486528][T11775] ext4 filesystem being mounted at /218/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.835768][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.856056][ T8253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.109342][T11793] loop0: detected capacity change from 0 to 8192 [ 616.255778][T11783] loop4: detected capacity change from 0 to 32768 [ 616.323893][T11783] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 616.555229][T11783] XFS (loop4): Ending clean mount [ 616.675575][ T7920] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 616.998537][T11812] loop2: detected capacity change from 0 to 256 [ 617.122943][T11812] FAT-fs (loop2): Directory bread(block 64) failed [ 617.129763][T11812] FAT-fs (loop2): Directory bread(block 65) failed [ 617.137086][T11812] FAT-fs (loop2): Directory bread(block 66) failed [ 617.144866][T11812] FAT-fs (loop2): Directory bread(block 67) failed [ 617.152281][T11812] FAT-fs (loop2): Directory bread(block 68) failed [ 617.158970][T11812] FAT-fs (loop2): Directory bread(block 69) failed [ 617.166284][T11812] FAT-fs (loop2): Directory bread(block 70) failed [ 617.173035][T11812] FAT-fs (loop2): Directory bread(block 71) failed [ 617.180441][T11812] FAT-fs (loop2): Directory bread(block 72) failed [ 617.187122][T11812] FAT-fs (loop2): Directory bread(block 73) failed [ 617.678083][T11814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1482'. [ 620.790462][T11839] loop4: detected capacity change from 0 to 1024 [ 620.797918][T11839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 620.879451][T11839] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 620.936071][T11839] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 620.956085][T11839] System zones: 0-1, 3-36 [ 620.960808][T11843] loop2: detected capacity change from 0 to 512 [ 620.973177][T11837] loop0: detected capacity change from 0 to 8192 [ 620.980743][T11839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.008211][T11843] EXT4-fs (loop2): 1 truncate cleaned up [ 621.095589][T11843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.142563][T11843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1492: bg 0: block 465: padding at end of block bitmap is not set [ 621.190397][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 621.190412][ T28] audit: type=1800 audit(2000000460.868:1823): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1492" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 621.231107][T11837] loop0: p1 < > p3 < > p4 [ 621.242855][T11837] loop0: partition table partially beyond EOD, truncated [ 621.268796][T11837] loop0: p1 start 4294967040 is beyond EOD, truncated [ 621.291770][T11837] loop0: p4 start 4227858432 is beyond EOD, truncated [ 621.675898][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.029629][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.053919][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 622.306572][T11857] loop0: detected capacity change from 0 to 512 [ 622.581478][T11857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.824829][T11857] ext4 filesystem being mounted at /355/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.373750][T11867] loop4: detected capacity change from 0 to 256 [ 624.327997][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.334361][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.562450][T11867] FAT-fs (loop4): Directory bread(block 64) failed [ 624.569473][T11867] FAT-fs (loop4): Directory bread(block 65) failed [ 624.576613][T11867] FAT-fs (loop4): Directory bread(block 66) failed [ 624.583584][T11867] FAT-fs (loop4): Directory bread(block 67) failed [ 624.590817][T11867] FAT-fs (loop4): Directory bread(block 68) failed [ 624.597580][T11867] FAT-fs (loop4): Directory bread(block 69) failed [ 624.604718][T11867] FAT-fs (loop4): Directory bread(block 70) failed [ 624.611484][T11867] FAT-fs (loop4): Directory bread(block 71) failed [ 624.618622][T11867] FAT-fs (loop4): Directory bread(block 72) failed [ 624.625283][T11867] FAT-fs (loop4): Directory bread(block 73) failed [ 625.679785][T11880] loop5: detected capacity change from 0 to 1024 [ 625.713827][T11880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 625.757265][T11880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 625.828821][T11880] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 625.848108][T11880] System zones: 0-1, 3-36 [ 625.887946][T11880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.403409][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.330053][T11896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1502'. [ 627.367663][T11898] loop2: detected capacity change from 0 to 512 [ 627.394421][T11899] loop4: detected capacity change from 0 to 256 [ 627.467793][T11898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.538488][T11898] ext4 filesystem being mounted at /388/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.861087][T11905] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.886983][T11909] (null): rxe_set_mtu: Set mtu to 1024 [ 627.901998][T11909] rdma_rxe: rxe_newlink: failed to add bond0 [ 628.870903][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.063797][T11916] loop2: detected capacity change from 0 to 512 [ 629.174654][T11916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.308840][ T28] audit: type=1800 audit(2000000469.042:1824): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1514" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 629.341449][T11919] loop0: detected capacity change from 0 to 8192 [ 629.473824][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.679755][ T8253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.261141][T11938] loop5: detected capacity change from 0 to 256 [ 631.667328][T11938] FAT-fs (loop5): Directory bread(block 64) failed [ 631.674427][T11938] FAT-fs (loop5): Directory bread(block 65) failed [ 631.681601][T11938] FAT-fs (loop5): Directory bread(block 66) failed [ 631.688533][T11938] FAT-fs (loop5): Directory bread(block 67) failed [ 631.696427][T11938] FAT-fs (loop5): Directory bread(block 68) failed [ 631.703164][T11938] FAT-fs (loop5): Directory bread(block 69) failed [ 631.710326][T11938] FAT-fs (loop5): Directory bread(block 70) failed [ 631.717283][T11938] FAT-fs (loop5): Directory bread(block 71) failed [ 631.724562][T11938] FAT-fs (loop5): Directory bread(block 72) failed [ 631.731253][T11938] FAT-fs (loop5): Directory bread(block 73) failed [ 632.384633][T11939] loop0: detected capacity change from 0 to 8192 [ 632.758104][T11949] syz0: rxe_newlink: already configured on bond0 [ 632.828927][T11944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 633.308101][T11953] loop0: detected capacity change from 0 to 1024 [ 633.349799][T11953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 633.433394][T11953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 633.530666][T11953] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 633.572593][T11953] System zones: 0-1, 3-36 [ 633.822302][T11953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.956263][T11978] loop4: detected capacity change from 0 to 256 [ 635.580726][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 635.777288][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.836169][T11987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 635.861964][T11987] (null): rxe_set_mtu: Set mtu to 1024 [ 635.867992][T11987] rdma_rxe: rxe_newlink: failed to add bond0 [ 636.297329][T11995] loop0: detected capacity change from 0 to 256 [ 636.410896][T11995] FAT-fs (loop0): Directory bread(block 64) failed [ 636.417704][T11995] FAT-fs (loop0): Directory bread(block 65) failed [ 636.424967][T11995] FAT-fs (loop0): Directory bread(block 66) failed [ 636.431688][T11995] FAT-fs (loop0): Directory bread(block 67) failed [ 636.438912][T11995] FAT-fs (loop0): Directory bread(block 68) failed [ 636.445677][T11995] FAT-fs (loop0): Directory bread(block 69) failed [ 636.452988][T11995] FAT-fs (loop0): Directory bread(block 70) failed [ 636.459711][T11995] FAT-fs (loop0): Directory bread(block 71) failed [ 636.466912][T11995] FAT-fs (loop0): Directory bread(block 72) failed [ 636.473659][T11995] FAT-fs (loop0): Directory bread(block 73) failed [ 637.551818][T12005] loop2: detected capacity change from 0 to 1024 [ 637.604559][T12005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.018412][T12012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1541'. [ 638.037888][T12005] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4047: comm syz.2.1540: Allocating blocks 497-513 which overlap fs metadata [ 638.181906][T12005] EXT4-fs (loop2): pa ffff888076d671d0: logic 128, phys. 385, len 8 [ 638.190206][T12005] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 638.571380][T12018] 8021q: adding VLAN 0 to HW filter on device bond6 [ 638.619371][T12022] (null): rxe_set_mtu: Set mtu to 1024 [ 638.636364][T12022] rdma_rxe: rxe_newlink: failed to add bond0 [ 638.656774][ T5767] EXT4-fs error (device loop2): mb_free_blocks:1954: group 0, inode 27: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 638.691410][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.615538][T12041] loop5: detected capacity change from 0 to 1024 [ 640.652687][T12041] EXT4-fs: Ignoring removed orlov option [ 640.652712][T12041] EXT4-fs: Ignoring removed oldalloc option [ 640.714598][T12041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.746033][T12047] loop4: detected capacity change from 0 to 4096 [ 640.808453][T12047] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0002] [ 640.922850][T12047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.156400][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.255053][T12058] loop2: detected capacity change from 0 to 1024 [ 641.363327][T12058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.593344][T12058] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4047: comm syz.2.1556: Allocating blocks 497-513 which overlap fs metadata [ 641.617033][T12066] loop4: detected capacity change from 0 to 512 [ 641.650440][T12058] EXT4-fs (loop2): pa ffff888059eb40e8: logic 128, phys. 385, len 8 [ 641.658898][T12058] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 641.673851][T12066] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.1560: bad orphan inode 15 [ 641.684861][T12066] ext4_test_bit(bit=14, block=5) = 0 [ 641.700963][T12066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.866276][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.040612][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.105654][T12056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.194240][ T6896] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.371541][T12079] syzkaller1: entered promiscuous mode [ 642.385304][T12079] syzkaller1: entered allmulticast mode [ 642.513948][ T6896] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.523723][ T6896] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.616934][T12090] loop4: detected capacity change from 0 to 1024 [ 643.694785][T12090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.719799][ T6896] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.018066][T12090] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4047: comm syz.4.1570: Allocating blocks 497-513 which overlap fs metadata [ 644.078211][T12101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 644.095886][T12101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 644.115006][T12101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 644.127640][T12101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 644.153621][T12101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 644.162058][T12101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 644.178117][ T6896] tipc: Left network mode [ 644.257573][T12090] EXT4-fs (loop4): pa ffff888059c0b828: logic 128, phys. 385, len 8 [ 644.265656][T12090] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 644.657386][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.746983][T12113] loop2: detected capacity change from 0 to 256 [ 644.997955][T12116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 645.022596][T12116] (null): rxe_set_mtu: Set mtu to 1024 [ 645.029744][T12116] rdma_rxe: rxe_newlink: failed to add bond0 [ 645.745677][T12137] loop0: detected capacity change from 0 to 512 [ 646.261746][ T51] Bluetooth: hci0: command tx timeout [ 646.358986][T12137] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 646.374247][T12137] FAT-fs (loop0): Filesystem has been set read-only [ 646.793181][T12152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1580'. [ 646.823669][T12153] loop2: detected capacity change from 0 to 512 [ 646.846092][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1580'. [ 646.904993][T12153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.935030][T12153] ext4 filesystem being mounted at /410/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.205036][T12163] loop4: detected capacity change from 0 to 512 [ 648.056112][T12163] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1583: inode has both inline data and extents flags [ 648.149340][T12163] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1583: couldn't read orphan inode 15 (err -117) [ 648.242832][T12163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.314545][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.329448][T12100] chnl_net:caif_netlink_parms(): no params data found [ 648.336728][ T51] Bluetooth: hci0: command tx timeout [ 648.572580][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.606260][T12180] syz0: rxe_newlink: already configured on bond0 [ 648.842164][T12100] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.910516][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.925032][T12100] bridge_slave_0: entered allmulticast mode [ 648.972058][T12100] bridge_slave_0: entered promiscuous mode [ 649.592700][T12100] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.644405][T12100] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.651836][T12100] bridge_slave_1: entered allmulticast mode [ 649.660254][T12100] bridge_slave_1: entered promiscuous mode [ 649.863483][T12100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.953440][ T6896] hsr_slave_0: left promiscuous mode [ 649.975767][ T6896] hsr_slave_1: left promiscuous mode [ 650.019235][ T6896] batman_adv: batadv0: Interface deactivated: dummy0 [ 650.030868][ T6896] batman_adv: batadv0: Removing interface: dummy0 [ 650.054874][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.076541][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.095344][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.115608][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.145625][ T6896] bridge_slave_1: left allmulticast mode [ 650.161884][ T6896] bridge_slave_1: left promiscuous mode [ 650.178905][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.200150][ T6896] bridge_slave_0: left allmulticast mode [ 650.209532][T12211] loop4: detected capacity change from 0 to 512 [ 650.212341][ T6896] bridge_slave_0: left promiscuous mode [ 650.232829][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.251600][T12211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.309357][T12211] ext4 filesystem being mounted at /293/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.321717][ T6896] veth1_macvtap: left promiscuous mode [ 650.327667][ T6896] veth0_macvtap: left promiscuous mode [ 650.333490][ T6896] veth1_vlan: left promiscuous mode [ 650.339001][ T6896] veth0_vlan: left promiscuous mode [ 650.413889][ T51] Bluetooth: hci0: command tx timeout [ 651.691135][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.812653][ T6896] bond3 (unregistering): Released all slaves [ 652.157450][ T6896] bond2 (unregistering): Released all slaves [ 652.168544][T12228] (null): rxe_set_mtu: Set mtu to 1024 [ 652.174775][T12228] rdma_rxe: rxe_newlink: failed to add bond0 [ 652.407553][ T6896] bond1 (unregistering): Released all slaves [ 652.500945][ T51] Bluetooth: hci0: command tx timeout [ 653.161869][ T6896] team0 (unregistering): Port device team_slave_1 removed [ 653.233116][ T6896] team0 (unregistering): Port device team_slave_0 removed [ 653.298037][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.366833][ T6896] bond0 (unregistering): (slave 30): Releasing backup interface [ 653.902834][ T6896] bond0 (unregistering): Released all slaves [ 654.034992][T12100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.044590][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1589'. [ 654.055096][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1589'. [ 654.372847][T12100] team0: Port device team_slave_0 added [ 654.404977][T12100] team0: Port device team_slave_1 added [ 654.503764][T12100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.510789][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.568320][T12100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.625108][T12241] loop2: detected capacity change from 0 to 512 [ 654.651184][T12100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.683568][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.745831][T12100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.783669][T12241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.874002][T12241] ext4 filesystem being mounted at /415/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.149596][T12100] hsr_slave_0: entered promiscuous mode [ 655.209935][T12100] hsr_slave_1: entered promiscuous mode [ 656.309380][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.303693][T12273] syz0: rxe_newlink: already configured on bond0 [ 657.715939][T12100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 657.797478][T12100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 657.832619][T12100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 657.867403][T12100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 658.159190][T12100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.208523][T12100] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.259365][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.266668][ T6896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.320388][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.327635][ T7117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.347477][T12302] loop4: detected capacity change from 0 to 512 [ 658.456129][T12302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.516143][T12302] ext4 filesystem being mounted at /301/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.881141][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.057743][T12100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.164949][T12326] (null): rxe_set_mtu: Set mtu to 1024 [ 660.182939][T12326] rdma_rxe: rxe_newlink: failed to add bond0 [ 660.974619][T12100] veth0_vlan: entered promiscuous mode [ 661.017593][T12100] veth1_vlan: entered promiscuous mode [ 661.103823][T12359] loop4: detected capacity change from 0 to 512 [ 661.147031][T12100] veth0_macvtap: entered promiscuous mode [ 661.175755][T12359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.193415][T12100] veth1_macvtap: entered promiscuous mode [ 661.258460][T12359] ext4 filesystem being mounted at /306/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.282545][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.344175][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.401226][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.468412][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.548904][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.590866][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.620854][T12100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.480166][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.527358][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.546773][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.586109][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.603816][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.626614][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.708852][T12100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.768502][T12100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.778227][T12383] syz0: rxe_newlink: already configured on bond0 [ 662.800811][T12100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.815973][T12100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.825083][T12100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.863343][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.169979][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.193293][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.224246][T12391] loop2: detected capacity change from 0 to 512 [ 663.300473][ T6896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.350015][ T6896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.372229][T12391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.483416][T12391] ext4 filesystem being mounted at /426/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.818409][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.002297][T12416] (null): rxe_set_mtu: Set mtu to 1024 [ 665.030833][T12416] rdma_rxe: rxe_newlink: failed to add bond0 [ 665.195969][T12421] loop2: detected capacity change from 0 to 512 [ 665.262828][T12421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.283127][T12423] loop4: detected capacity change from 0 to 1024 [ 665.309933][T12418] loop0: detected capacity change from 0 to 8192 [ 665.336606][T12421] ext4 filesystem being mounted at /427/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.384680][T12423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.502628][T12423] overlayfs: failed to resolve './file4': -2 [ 666.667643][ T787] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 666.751351][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.932257][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.963298][ T787] usb 5-1: config 0 has no interfaces? [ 666.999587][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.021390][T12451] loop2: detected capacity change from 0 to 512 [ 667.057026][ T787] usb 5-1: config 0 has no interfaces? [ 667.067526][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.103145][ T787] usb 5-1: config 0 has no interfaces? [ 667.126503][ T787] usb 5-1: string descriptor 0 read error: -22 [ 667.129120][T12451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.133012][ T787] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 667.174683][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.191698][T12451] ext4 filesystem being mounted at /428/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.208357][ T787] usb 5-1: config 0 descriptor?? [ 669.578067][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.737120][T12423] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4047: comm syz.4.1639: Allocating blocks 497-513 which overlap fs metadata [ 669.813340][T12423] EXT4-fs (loop4): pa ffff88804f8150e8: logic 128, phys. 449, len 4 [ 669.822109][T12423] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 669.924861][ T23] usb 5-1: USB disconnect, device number 5 [ 670.037568][ T5841] IPVS: starting estimator thread 0... [ 670.118113][T12479] loop2: detected capacity change from 0 to 8192 [ 670.134251][T12485] IPVS: using max 18 ests per chain, 43200 per kthread [ 670.324870][T12492] Set syz1 is full, maxelem 2 reached [ 670.361849][T12492] Set syz1 is full, maxelem 2 reached [ 670.570112][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.633036][T12498] loop6: detected capacity change from 0 to 512 [ 671.253978][T12498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.373607][T12498] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.445931][T12505] loop4: detected capacity change from 0 to 256 [ 671.635051][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'. [ 672.739777][T12100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.003736][T12523] loop0: detected capacity change from 0 to 1024 [ 673.091780][T12523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.113076][T12531] Set syz1 is full, maxelem 2 reached [ 673.191281][T12523] overlayfs: failed to resolve './file4': -2 [ 673.502695][ T23] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 673.566973][T12539] loop4: detected capacity change from 0 to 8192 [ 673.720193][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.855421][ T23] usb 1-1: config 0 has no interfaces? [ 674.001814][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.253517][ T23] usb 1-1: config 0 has no interfaces? [ 674.307120][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.362231][ T23] usb 1-1: config 0 has no interfaces? [ 674.435248][ T23] usb 1-1: string descriptor 0 read error: -22 [ 674.472117][ T23] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 674.505923][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.560071][ T23] usb 1-1: config 0 descriptor?? [ 674.581037][T12551] loop2: detected capacity change from 0 to 512 [ 674.638672][T12551] EXT4-fs: old and new quota format mixing [ 674.821007][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1674'. [ 674.900585][T12523] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4047: comm syz.0.1666: Allocating blocks 497-513 which overlap fs metadata [ 675.039488][T12523] EXT4-fs (loop0): pa ffff888059c0b910: logic 128, phys. 385, len 8 [ 675.047787][T12523] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 676.210453][ T787] usb 1-1: USB disconnect, device number 22 [ 676.565883][T12588] loop4: detected capacity change from 0 to 512 [ 676.579623][T12588] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 676.750293][ T28] audit: type=1326 audit(2000000516.506:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 677.324138][ T28] audit: type=1326 audit(2000000516.506:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 677.429526][ T28] audit: type=1326 audit(2000000516.506:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 677.510198][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.526621][ T28] audit: type=1326 audit(2000000516.506:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 677.577482][T12593] syz0: rxe_newlink: already configured on bond0 [ 677.597792][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1684'. [ 677.601708][ T28] audit: type=1326 audit(2000000516.506:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 677.682189][ T28] audit: type=1326 audit(2000000516.514:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 677.709166][ T28] audit: type=1326 audit(2000000516.514:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 677.811982][ T28] audit: type=1326 audit(2000000516.514:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 677.835389][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 677.874473][ T28] audit: type=1326 audit(2000000516.534:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 677.947033][T12603] loop6: detected capacity change from 0 to 512 [ 677.954143][ T28] audit: type=1326 audit(2000000516.534:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 678.037544][T12603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.057014][T12603] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.292555][T12100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.644577][T12626] loop4: detected capacity change from 0 to 1024 [ 679.738276][T12626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.823872][T12629] syz0: rxe_newlink: already configured on bond0 [ 679.832553][T12626] overlayfs: failed to resolve './file4': -2 [ 680.116598][T12646] loop6: detected capacity change from 0 to 512 [ 680.129733][ T966] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 680.172931][T12646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.202636][T12646] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.554439][ T966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.564705][ T966] usb 5-1: config 0 has no interfaces? [ 680.572326][ T966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.583369][ T966] usb 5-1: config 0 has no interfaces? [ 680.604201][ T966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.639371][ T966] usb 5-1: config 0 has no interfaces? [ 681.456736][ T966] usb 5-1: string descriptor 0 read error: -22 [ 681.463685][ T966] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 681.473396][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.504906][T12100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.517039][ T966] usb 5-1: config 0 descriptor?? [ 681.826443][T12626] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4047: comm syz.4.1692: Allocating blocks 497-513 which overlap fs metadata [ 681.887702][T12626] EXT4-fs (loop4): pa ffff88804f815e80: logic 128, phys. 385, len 8 [ 681.896471][T12626] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 682.112577][ T5841] usb 5-1: USB disconnect, device number 6 [ 682.548234][T12101] Bluetooth: hci4: command 0x1003 tx timeout [ 682.557469][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 682.813264][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.869341][T12674] loop2: detected capacity change from 0 to 512 [ 682.946118][T12674] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.1702: bad orphan inode 15 [ 683.018798][T12674] ext4_test_bit(bit=14, block=5) = 0 [ 683.049106][T12674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.053347][T12679] 8021q: adding VLAN 0 to HW filter on device bond7 [ 683.081036][T12679] (null): rxe_set_mtu: Set mtu to 1024 [ 683.087138][T12679] rdma_rxe: rxe_newlink: failed to add bond0 [ 683.163486][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 683.280846][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.368825][T12689] sg_write: data in/out 156/154 bytes for SCSI command 0x0-- guessing data in; [ 683.368825][T12689] program syz.6.1708 not setting count and/or reply_len properly [ 684.548319][T12704] loop6: detected capacity change from 0 to 1024 [ 684.615149][T12704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.783455][T12713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 684.920089][T12721] loop4: detected capacity change from 0 to 512 [ 684.932194][T12721] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 685.138110][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 685.138148][ T28] audit: type=1326 audit(2000000524.898:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 685.673849][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.681608][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.694454][ T28] audit: type=1326 audit(2000000524.898:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 685.719325][T12713] syz0: rxe_newlink: already configured on bond0 [ 685.740528][ T28] audit: type=1326 audit(2000000524.898:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 685.767670][ T28] audit: type=1326 audit(2000000524.898:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 685.816547][ T5840] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 685.826997][ T28] audit: type=1326 audit(2000000524.898:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 685.867935][ T28] audit: type=1326 audit(2000000524.905:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 685.892070][ T28] audit: type=1326 audit(2000000524.905:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d39aeb9 code=0x7ffc0000 [ 685.919645][ T28] audit: type=1326 audit(2000000524.905:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 685.961879][ T28] audit: type=1326 audit(2000000524.935:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 686.004170][ T28] audit: type=1326 audit(2000000524.935:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f747d35b78e code=0x7ffc0000 [ 686.082544][ T5840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.096448][ T5840] usb 7-1: config 0 has no interfaces? [ 686.116668][ T5840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.139924][ T5840] usb 7-1: config 0 has no interfaces? [ 686.147330][ T5840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.176703][ T5840] usb 7-1: config 0 has no interfaces? [ 686.189119][ T5840] usb 7-1: string descriptor 0 read error: -22 [ 686.199857][ T5840] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 686.236249][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.276045][ T5840] usb 7-1: config 0 descriptor?? [ 686.296842][T12730] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1721'. [ 686.421813][T12736] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1721'. [ 686.699300][T12704] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4047: comm syz.6.1712: Allocating blocks 497-513 which overlap fs metadata [ 686.738990][T12704] EXT4-fs (loop6): pa ffff88804f815488: logic 128, phys. 385, len 8 [ 686.747479][T12704] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 686.832945][T12750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 686.913731][T12750] (null): rxe_set_mtu: Set mtu to 1024 [ 686.920112][T12750] rdma_rxe: rxe_newlink: failed to add bond0 [ 686.949942][ T5841] usb 7-1: USB disconnect, device number 2 [ 688.468614][T12100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.642014][ T7110] Bluetooth: hci4: Frame reassembly failed (-84) [ 688.692268][T12789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.748181][T12789] syz0: rxe_newlink: already configured on bond0 [ 690.714839][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 690.729704][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 690.844961][T12791] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 691.267926][T12830] 8021q: adding VLAN 0 to HW filter on device bond5 [ 691.328293][T12830] syz0: rxe_newlink: already configured on bond0 [ 693.599072][T12872] C: renamed from team_slave_0 (while UP) [ 693.636247][T12872] netlink: 'syz.2.1763': attribute type 2 has an invalid length. [ 693.680895][T12872] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1763'. [ 693.711971][T12872] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 693.722202][T12877] (null): rxe_set_mtu: Set mtu to 1024 [ 693.751507][T12877] rdma_rxe: rxe_newlink: failed to add bond0 [ 693.892958][T12873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 694.012980][T12882] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 694.170691][T12887] loop2: detected capacity change from 0 to 8192 [ 694.590650][T12904] loop0: detected capacity change from 0 to 512 [ 694.723716][T12904] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #3: comm syz.0.1772: corrupted inode contents [ 694.793012][T12904] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #3: comm syz.0.1772: mark_inode_dirty error [ 694.857974][T12904] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #3: comm syz.0.1772: corrupted inode contents [ 694.895486][T12904] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1772: mark_inode_dirty error [ 695.058836][T12904] __quota_error: 60 callbacks suppressed [ 695.058848][T12904] Quota error (device loop0): write_blk: dquota write failed [ 695.424428][T12904] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 695.791500][T12904] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.1772: Failed to acquire dquot type 0 [ 695.908138][T12904] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #16: comm syz.0.1772: corrupted inode contents [ 695.983408][T12904] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #16: comm syz.0.1772: mark_inode_dirty error [ 696.008706][T12904] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #16: comm syz.0.1772: corrupted inode contents [ 696.043034][T12904] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1772: mark_inode_dirty error [ 696.077194][T12904] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #16: comm syz.0.1772: corrupted inode contents [ 696.120596][T12924] loop6: detected capacity change from 0 to 1024 [ 696.131274][T12904] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 696.167541][T12904] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #16: comm syz.0.1772: corrupted inode contents [ 696.198186][T12924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 696.233946][T12904] EXT4-fs error (device loop0): ext4_truncate:4294: inode #16: comm syz.0.1772: mark_inode_dirty error [ 696.246646][T12924] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.290544][T12904] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 696.356976][T12904] EXT4-fs (loop0): 1 truncate cleaned up [ 696.406705][T12904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.429249][T12904] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.441871][ T7117] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: comm kworker/u4:22: lblock 0 mapped to illegal pblock 0 (length 1) [ 696.488060][ T7117] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 696.531287][ T7117] EXT4-fs (loop6): This should not happen!! Data will be lost [ 696.531287][ T7117] [ 696.565934][T12904] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #12: block 13: comm syz.0.1772: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 696.590737][T12100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 696.750715][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.765830][T12939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1782'. [ 696.850598][T12942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1782'. [ 697.123676][T12941] loop2: detected capacity change from 0 to 8192 [ 699.686840][T12970] loop2: detected capacity change from 0 to 512 [ 699.781387][T12970] EXT4-fs (loop2): 1 orphan inode deleted [ 699.838245][T12970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.136630][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.213741][T12989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1794'. [ 700.312740][T12991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1794'. [ 701.396940][T12993] xt_hashlimit: size too large, truncated to 1048576 [ 701.424508][T12993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.396500][T13038] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1807'. [ 703.539002][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1807'. [ 704.261346][T13042] loop4: detected capacity change from 0 to 2048 [ 704.371584][T13042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.572467][ T28] audit: type=1800 audit(2000000544.335:1965): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1809" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 705.545819][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.726620][T13069] netlink: 'syz.6.1815': attribute type 21 has an invalid length. [ 709.105669][T13137] xt_hashlimit: size too large, truncated to 1048576 [ 709.379363][T13144] loop2: detected capacity change from 0 to 1024 [ 709.387289][T13144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 709.529493][T13144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 709.652593][T13144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 709.722845][T13144] System zones: 0-1, 3-36 [ 709.787159][T13144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.308573][ T28] audit: type=1326 audit(2000000550.078:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.6.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 710.435206][ T28] audit: type=1326 audit(2000000550.108:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.6.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 710.625275][ T28] audit: type=1326 audit(2000000550.128:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.6.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 710.788566][ T28] audit: type=1326 audit(2000000550.128:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.6.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 710.839962][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.947714][T13168] macvlan1: entered promiscuous mode [ 710.953420][T13168] macvlan1: entered allmulticast mode [ 710.959221][T13168] veth1_vlan: entered allmulticast mode [ 710.982873][T13168] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 711.682691][T13189] loop6: detected capacity change from 0 to 1024 [ 711.747715][T13189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 711.795493][T13189] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 711.853377][T13189] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 711.861640][T13189] System zones: 0-1, 3-36 [ 711.956619][T13189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.809396][T12100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.052591][T13216] loop6: detected capacity change from 0 to 512 [ 713.103179][T13218] loop0: detected capacity change from 0 to 1024 [ 713.134342][T13218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 713.155217][T13216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.245738][T13218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.261350][T13216] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.538023][T12100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.554384][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.784797][T13237] loop6: detected capacity change from 0 to 128 [ 714.867171][T13237] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 714.904550][T13237] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 715.133831][T12100] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 715.155822][T13236] loop0: detected capacity change from 0 to 8192 [ 715.360158][T13249] loop6: detected capacity change from 0 to 128 [ 715.761117][ T28] audit: type=1326 audit(2000000555.531:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 715.834465][ T28] audit: type=1326 audit(2000000555.531:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 715.951407][ T28] audit: type=1326 audit(2000000555.531:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 716.048709][ T28] audit: type=1326 audit(2000000555.531:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 716.101324][T13267] sg_write: data in/out 65536/120 bytes for SCSI command 0x0-- guessing data in; [ 716.101324][T13267] program syz.6.1867 not setting count and/or reply_len properly [ 716.132216][T13266] Bluetooth: MGMT ver 1.22 [ 716.169616][ T28] audit: type=1326 audit(2000000555.531:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 716.239807][ T28] audit: type=1326 audit(2000000555.531:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 716.330367][ T28] audit: type=1326 audit(2000000555.531:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 716.449628][ T28] audit: type=1326 audit(2000000555.531:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 716.522194][ T28] audit: type=1326 audit(2000000555.531:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 716.546935][T13277] loop6: detected capacity change from 0 to 512 [ 716.619847][ T28] audit: type=1326 audit(2000000555.531:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc911d9aeb9 code=0x7ffc0000 [ 716.644213][T13277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.690022][T13277] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.754305][T13284] loop4: detected capacity change from 0 to 1024 [ 716.789782][T13284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 716.841532][T13284] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 716.911643][T13284] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 716.922610][T13284] System zones: 0-1, 3-36 [ 716.963246][T13285] loop0: detected capacity change from 0 to 8192 [ 716.983949][T13284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.041345][T12100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.376231][T13294] syzkaller0: entered promiscuous mode [ 717.382221][T13294] syzkaller0: entered allmulticast mode [ 717.648304][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.058701][T13308] loop4: detected capacity change from 0 to 128 [ 718.426580][T13318] loop6: detected capacity change from 0 to 1024 [ 718.461857][T13318] EXT4-fs (loop6): invalid first ino: 1 [ 718.531213][T13321] loop4: detected capacity change from 0 to 1024 [ 718.531864][ T5994] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 718.576271][T13321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 718.603989][T13321] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 718.676499][T13321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 718.758638][T13329] loop0: detected capacity change from 0 to 512 [ 718.768583][T13321] System zones: 0-1, 3-36 [ 718.819175][T13329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.860112][T13329] ext4 filesystem being mounted at /447/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.896049][T13321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.407287][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.512127][T13347] bond6: entered allmulticast mode [ 720.550753][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.888444][T13363] loop2: detected capacity change from 0 to 512 [ 720.984150][T13363] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 721.011783][T13367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1904'. [ 721.711894][T13363] EXT4-fs (loop2): 1 truncate cleaned up [ 721.741008][T13363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.908449][T13374] loop4: detected capacity change from 0 to 1024 [ 721.916280][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 721.916295][ T28] audit: type=1800 audit(2000000561.684:1989): pid=13363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1902" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 721.948366][T13374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 721.975533][T13374] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 722.005680][T13375] xt_hashlimit: size too large, truncated to 1048576 [ 722.027802][T13374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 722.096576][T13374] System zones: 0-1, 3-36 [ 722.144948][T13374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.346966][T13378] loop6: detected capacity change from 0 to 8192 [ 722.406784][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.602621][T12100] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 722.615784][T12100] FAT-fs (loop6): Filesystem has been set read-only [ 722.907688][ T7920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.022513][T13392] loop4: detected capacity change from 0 to 256 [ 725.443524][T13426] loop6: detected capacity change from 0 to 1024 [ 725.471991][T13426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 725.524062][T13426] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 725.558684][T13426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 725.578801][T13426] System zones: 0-1, 3-36 [ 725.625297][T13426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.365503][T12100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.022477][T13465] loop0: detected capacity change from 0 to 1024 [ 728.062225][T13465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 728.099833][T13465] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 728.151429][T13465] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 728.174285][T13465] System zones: 0-1, 3-36 [ 728.184548][T13465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.327084][T13476] loop6: detected capacity change from 0 to 256 [ 729.967395][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.146960][T13460] infiniband syz0: set down [ 730.199207][T13460] batman_adv: batadv0: Interface deactivated: dummy0 [ 730.604998][T13460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.660474][T13460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.127064][T13460] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.136280][T13460] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.145308][T13460] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.154457][T13460] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.258805][T13460] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.268601][T13460] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.277534][T13460] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.286643][T13460] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.334304][T13462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.344317][T13462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.354548][T13462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.363673][T13462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.373040][T13462] geneve2: entered promiscuous mode [ 731.683549][T13499] loop6: detected capacity change from 0 to 512 [ 731.714260][T13499] ------------[ cut here ]------------ [ 731.720601][T13499] EA inode 11 i_nlink=0 [ 731.801412][T13499] WARNING: CPU: 0 PID: 13499 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x570 [ 731.816379][T13499] Modules linked in: [ 731.820254][T13506] loop2: detected capacity change from 0 to 1024 [ 731.820997][T13499] CPU: 0 PID: 13499 Comm: syz.6.1946 Not tainted syzkaller #0 [ 731.833080][T13506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 731.834420][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.851080][T13499] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x570 [ 731.857707][T13499] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 67 ee 98 ff 49 8b 37 48 c7 c7 a0 d4 de 8a 89 da e8 66 8b 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 90 be 3d 08 [ 731.878133][T13499] RSP: 0018:ffffc900055572e0 EFLAGS: 00010246 [ 731.884291][T13499] RAX: 2c81b645b2d96e00 RBX: 0000000000000000 RCX: 0000000000080000 [ 731.893149][T13499] RDX: ffffc9000f673000 RSI: 0000000000015044 RDI: 0000000000015045 [ 731.901377][T13499] RBP: ffffc900055573d0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 731.909720][T13499] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 731.917798][T13499] R13: ffff888059fcf2a8 R14: ffff888059fcf0b0 R15: ffff888059fcf100 [ 731.925934][T13499] FS: 00007fc912b9a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 731.935004][T13499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 731.941696][T13499] CR2: 00007f469728f000 CR3: 000000005d07e000 CR4: 00000000003506f0 [ 731.949822][T13499] Call Trace: [ 731.953170][T13499] [ 731.956160][T13499] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 731.962020][T13499] ? __ext4_journal_ensure_credits+0x30/0x450 [ 731.968807][T13499] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 731.970725][T13506] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 731.974885][T13499] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 731.992084][T13499] ? __ext4_journal_ensure_credits+0x450/0x450 [ 731.998354][T13499] ext4_xattr_delete_inode+0xb3e/0xd10 [ 732.003881][T13499] ? ext4_reserve_inode_write+0x248/0x2a0 [ 732.009734][T13499] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 732.016166][T13499] ext4_evict_inode+0xaaf/0xea0 [ 732.021254][T13499] ? _raw_spin_unlock+0x28/0x40 [ 732.026186][T13499] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 732.032245][T13499] ? do_raw_spin_unlock+0x121/0x230 [ 732.037511][T13499] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 732.043528][T13499] evict+0x4ca/0x8d0 [ 732.047531][T13499] ? proc_nr_inodes+0x230/0x230 [ 732.052557][T13499] ? do_raw_spin_unlock+0x121/0x230 [ 732.057919][T13499] ? _raw_spin_unlock+0x28/0x40 [ 732.062823][T13499] ? iput+0x706/0x920 [ 732.066866][T13499] ext4_orphan_cleanup+0xbec/0x1420 [ 732.072240][T13499] ? ext4_orphan_del+0xbf0/0xbf0 [ 732.077244][T13499] ? ext4_register_li_request+0x183/0x940 [ 732.083133][T13499] ? errseq_check_and_advance+0x66/0x120 [ 732.088919][T13499] ext4_fill_super+0x5ed3/0x6790 [ 732.093949][T13499] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 732.100343][T13499] ? __might_sleep+0xe0/0xe0 [ 732.105014][T13499] ? read_lock_is_recursive+0x20/0x20 [ 732.110562][T13499] ? snprintf+0xe9/0x140 [ 732.115147][T13499] ? down_read_killable+0x340/0x340 [ 732.120556][T13499] ? setup_bdev_super+0x56b/0x660 [ 732.125658][T13499] get_tree_bdev+0x3f3/0x520 [ 732.130392][T13499] ? vfs_parse_fs_string+0x170/0x170 [ 732.135746][T13499] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 732.142150][T13499] ? setup_bdev_super+0x660/0x660 [ 732.147266][T13499] ? apparmor_capable+0x137/0x1a0 [ 732.152457][T13499] ? bpf_lsm_capable+0x9/0x10 [ 732.157206][T13499] ? security_capable+0x89/0xb0 [ 732.162198][T13499] vfs_get_tree+0x8c/0x280 [ 732.166692][T13499] do_new_mount+0x24b/0xa40 [ 732.171385][T13499] __se_sys_mount+0x2e7/0x3d0 [ 732.176141][T13499] ? __x64_sys_mount+0xc0/0xc0 [ 732.181039][T13499] ? lockdep_hardirqs_on+0x98/0x150 [ 732.186301][T13499] ? __x64_sys_mount+0x20/0xc0 [ 732.191223][T13499] do_syscall_64+0x55/0xa0 [ 732.195708][T13499] ? clear_bhb_loop+0x40/0x90 [ 732.200561][T13499] ? clear_bhb_loop+0x40/0x90 [ 732.205304][T13499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.211390][T13499] RIP: 0033:0x7fc911d9c14a [ 732.216113][T13499] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.235954][T13499] RSP: 002b:00007fc912b99e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 732.244509][T13499] RAX: ffffffffffffffda RBX: 00007fc912b99ee0 RCX: 00007fc911d9c14a [ 732.252617][T13499] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 00007fc912b99ea0 [ 732.260737][T13499] RBP: 0000200000000200 R08: 00007fc912b99ee0 R09: 0000000000800700 [ 732.268856][T13499] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 732.276890][T13499] R13: 00007fc912b99ea0 R14: 000000000000046f R15: 0000200000000540 [ 732.285006][T13499] [ 732.288162][T13499] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 732.295507][T13499] CPU: 0 PID: 13499 Comm: syz.6.1946 Not tainted syzkaller #0 [ 732.303010][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 732.313125][T13499] Call Trace: [ 732.316449][T13499] [ 732.319425][T13499] dump_stack_lvl+0x18c/0x250 [ 732.324174][T13499] ? show_regs_print_info+0x20/0x20 [ 732.329427][T13499] ? load_image+0x400/0x400 [ 732.334005][T13499] panic+0x2dc/0x730 [ 732.337957][T13499] ? bpf_jit_dump+0xd0/0xd0 [ 732.342558][T13499] __warn+0x2e0/0x470 [ 732.346590][T13499] ? ext4_xattr_inode_update_ref+0x51a/0x570 [ 732.352626][T13499] ? ext4_xattr_inode_update_ref+0x51a/0x570 [ 732.358652][T13499] report_bug+0x2be/0x4f0 [ 732.363023][T13499] ? ext4_xattr_inode_update_ref+0x51a/0x570 [ 732.369042][T13499] ? ext4_xattr_inode_update_ref+0x51a/0x570 [ 732.375055][T13499] ? ext4_xattr_inode_update_ref+0x51c/0x570 [ 732.381091][T13499] handle_bug+0xcf/0x120 [ 732.385368][T13499] exc_invalid_op+0x1a/0x50 [ 732.389908][T13499] asm_exc_invalid_op+0x1a/0x20 [ 732.394786][T13499] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x570 [ 732.401413][T13499] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 67 ee 98 ff 49 8b 37 48 c7 c7 a0 d4 de 8a 89 da e8 66 8b 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 90 be 3d 08 [ 732.421053][T13499] RSP: 0018:ffffc900055572e0 EFLAGS: 00010246 [ 732.427156][T13499] RAX: 2c81b645b2d96e00 RBX: 0000000000000000 RCX: 0000000000080000 [ 732.435210][T13499] RDX: ffffc9000f673000 RSI: 0000000000015044 RDI: 0000000000015045 [ 732.443206][T13499] RBP: ffffc900055573d0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 732.451203][T13499] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 732.459200][T13499] R13: ffff888059fcf2a8 R14: ffff888059fcf0b0 R15: ffff888059fcf100 [ 732.467218][T13499] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 732.472894][T13499] ? __ext4_journal_ensure_credits+0x30/0x450 [ 732.479012][T13499] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 732.485036][T13499] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 732.490703][T13499] ? __ext4_journal_ensure_credits+0x450/0x450 [ 732.496897][T13499] ext4_xattr_delete_inode+0xb3e/0xd10 [ 732.502404][T13499] ? ext4_reserve_inode_write+0x248/0x2a0 [ 732.508163][T13499] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 732.514368][T13499] ext4_evict_inode+0xaaf/0xea0 [ 732.519242][T13499] ? _raw_spin_unlock+0x28/0x40 [ 732.524154][T13499] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 732.530113][T13499] ? do_raw_spin_unlock+0x121/0x230 [ 732.535373][T13499] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 732.541303][T13499] evict+0x4ca/0x8d0 [ 732.545234][T13499] ? proc_nr_inodes+0x230/0x230 [ 732.550117][T13499] ? do_raw_spin_unlock+0x121/0x230 [ 732.555363][T13499] ? _raw_spin_unlock+0x28/0x40 [ 732.560245][T13499] ? iput+0x706/0x920 [ 732.564267][T13499] ext4_orphan_cleanup+0xbec/0x1420 [ 732.569496][T13499] ? ext4_orphan_del+0xbf0/0xbf0 [ 732.574452][T13499] ? ext4_register_li_request+0x183/0x940 [ 732.580199][T13499] ? errseq_check_and_advance+0x66/0x120 [ 732.585859][T13499] ext4_fill_super+0x5ed3/0x6790 [ 732.590849][T13499] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 732.597121][T13499] ? __might_sleep+0xe0/0xe0 [ 732.601759][T13499] ? read_lock_is_recursive+0x20/0x20 [ 732.607176][T13499] ? snprintf+0xe9/0x140 [ 732.611465][T13499] ? down_read_killable+0x340/0x340 [ 732.616721][T13499] ? setup_bdev_super+0x56b/0x660 [ 732.621768][T13499] get_tree_bdev+0x3f3/0x520 [ 732.626385][T13499] ? vfs_parse_fs_string+0x170/0x170 [ 732.631706][T13499] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 732.637978][T13499] ? setup_bdev_super+0x660/0x660 [ 732.643033][T13499] ? apparmor_capable+0x137/0x1a0 [ 732.648093][T13499] ? bpf_lsm_capable+0x9/0x10 [ 732.652840][T13499] ? security_capable+0x89/0xb0 [ 732.657720][T13499] vfs_get_tree+0x8c/0x280 [ 732.662168][T13499] do_new_mount+0x24b/0xa40 [ 732.666709][T13499] __se_sys_mount+0x2e7/0x3d0 [ 732.671417][T13499] ? __x64_sys_mount+0xc0/0xc0 [ 732.676214][T13499] ? lockdep_hardirqs_on+0x98/0x150 [ 732.681431][T13499] ? __x64_sys_mount+0x20/0xc0 [ 732.686219][T13499] do_syscall_64+0x55/0xa0 [ 732.690700][T13499] ? clear_bhb_loop+0x40/0x90 [ 732.695396][T13499] ? clear_bhb_loop+0x40/0x90 [ 732.700102][T13499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.706028][T13499] RIP: 0033:0x7fc911d9c14a [ 732.710469][T13499] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.730112][T13499] RSP: 002b:00007fc912b99e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 732.738602][T13499] RAX: ffffffffffffffda RBX: 00007fc912b99ee0 RCX: 00007fc911d9c14a [ 732.746599][T13499] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 00007fc912b99ea0 [ 732.754603][T13499] RBP: 0000200000000200 R08: 00007fc912b99ee0 R09: 0000000000800700 [ 732.762612][T13499] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 732.770604][T13499] R13: 00007fc912b99ea0 R14: 000000000000046f R15: 0000200000000540 [ 732.778608][T13499] [ 732.782227][T13499] Kernel Offset: disabled [ 732.786770][T13499] Rebooting in 86400 seconds..