last executing test programs: 54.806332098s ago: executing program 3 (id=1225): remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000880)={[{@noquota}, {@nodiscard}, {@noquota}, {@init_itable}, {@oldalloc}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}], [{@appraise}, {@flag='silent'}]}, 0x10, 0x4dc, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRES32], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 9.736544775s ago: executing program 1 (id=1296): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@local}, &(0x7f0000000380)=0x14) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 9.332042657s ago: executing program 2 (id=1297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x9}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 8.454726617s ago: executing program 2 (id=1298): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85000000750000008500000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c000310"], 0xf) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 8.134237033s ago: executing program 1 (id=1300): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026f0002010000000904000001020d0000052406000105240001000d240f0100000000000000000006241a0000000724140100000008241c0800e8d9000424020f090581030002ff00000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x80, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) open(0x0, 0x14113e, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000240)=0xff, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) 7.628000661s ago: executing program 2 (id=1301): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.737054932s ago: executing program 4 (id=1302): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0xc000) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2", 0xc}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.705119689s ago: executing program 0 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 5.710330305s ago: executing program 0 (id=1304): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2a9, &(0x7f0000000500)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) sync() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 5.710063391s ago: executing program 4 (id=1305): mkdir(&(0x7f0000000280)='./file1\x00', 0x1b) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.939152839s ago: executing program 4 (id=1306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x9}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 4.713516826s ago: executing program 3 (id=1235): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e20, 0x0, @private0}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r1, 0x0, 0x0) 4.045746676s ago: executing program 2 (id=1307): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x3000490, &(0x7f0000000180)={[{@dioread_lock}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@noload}, {@jqfmt_vfsold}]}, 0x45, 0x7ba, &(0x7f0000002200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe00], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xe, 0x80, 0x0, 0x0, 0x0, 0x20000, 0xfffffffe, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc29], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, 0x45c) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800003, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) gettid() 3.997513059s ago: executing program 0 (id=1308): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@local}, &(0x7f0000000380)=0x14) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 3.74433133s ago: executing program 3 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, 0x0) 3.634608167s ago: executing program 4 (id=1310): syz_emit_ethernet(0x4e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpid() ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.489601645s ago: executing program 1 (id=1311): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='ext4_da_reserve_space\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) 2.700397194s ago: executing program 3 (id=1312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000680)="66420f3841c5b9f60200000f3266baf80cb870047a85ef66bafc0c66ed66b80c008ee80fe9b300000100b9220000400f322e0f211c26460fc7b0003000000f78e2b8010000000f01c1", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.434515564s ago: executing program 4 (id=1313): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.advise\x00') 2.224732574s ago: executing program 0 (id=1314): quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.204371779s ago: executing program 2 (id=1315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000af0100000000000001000040"]) 2.050843047s ago: executing program 1 (id=1316): open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 1.660269839s ago: executing program 4 (id=1317): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.584207428s ago: executing program 3 (id=1318): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2a9, &(0x7f0000000500)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) sync() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.303038271s ago: executing program 0 (id=1319): io_setup(0xb3, &(0x7f0000000300)=0x0) io_submit(r0, 0x0, 0x0) 992.678965ms ago: executing program 2 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x9}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 811.93457ms ago: executing program 1 (id=1321): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xc4, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}, "00060088bb35"}}}}}, 0x0) 651.219536ms ago: executing program 0 (id=1322): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x80, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000007640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/211, 0xd3}}], 0x1, 0x2020, 0x0) 171.934481ms ago: executing program 1 (id=1323): syz_emit_ethernet(0x4e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpid() ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1324): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xa) close(r2) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) kernel console output (not intermixed with test programs): [ 1519.111366][T11627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.372786][T12354] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1519.406403][T12354] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1519.446527][T12354] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1519.600777][T12354] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1519.843274][T11976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.142292][T12449] loop3: detected capacity change from 0 to 512 [ 1520.275819][T12449] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1520.362776][T12452] loop2: detected capacity change from 0 to 128 [ 1520.428747][T12452] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1520.459469][T12449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1520.696143][T12449] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1111: corrupted inode contents [ 1520.762401][T12458] loop0: detected capacity change from 0 to 256 [ 1520.819807][T12449] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.1111: mark_inode_dirty error [ 1520.936177][T12449] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1111: corrupted inode contents [ 1521.033679][ T34] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1521.368461][T11627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.751066][T12354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.050522][T12354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.140568][ T3140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.149436][ T3140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.293434][ T3140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.301447][ T3140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.614579][ T29] audit: type=1800 audit(1727441649.296:161): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1118" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1525.180210][T12490] loop2: detected capacity change from 0 to 1024 [ 1525.332947][T12354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1525.439331][T12490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1525.852617][T12502] loop3: detected capacity change from 0 to 128 [ 1525.933634][T12502] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1526.149732][ T3896] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1526.262947][ T3896] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1526.276431][ T3896] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1526.276431][ T3896] [ 1526.287351][ T3896] EXT4-fs (loop2): Total free blocks count 0 [ 1526.294040][ T3896] EXT4-fs (loop2): Free/Dirty block details [ 1526.303604][ T3896] EXT4-fs (loop2): free_blocks=68451041280 [ 1526.310466][ T3896] EXT4-fs (loop2): dirty_blocks=64 [ 1526.315870][ T3896] EXT4-fs (loop2): Block reservation details [ 1526.322109][ T3896] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 1526.540166][T12043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.009768][ T7347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1527.052929][ T7347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1527.062398][ T7347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1527.103456][ T7347] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1527.138724][ T7347] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1527.155347][ T7347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1527.399307][ T3140] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1527.823130][T12511] loop2: detected capacity change from 0 to 512 [ 1527.978093][T12511] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1528.208436][T12511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.627055][T12511] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1124: corrupted inode contents [ 1528.749907][T12511] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.1124: mark_inode_dirty error [ 1528.850200][T12511] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1124: corrupted inode contents [ 1529.206144][ T7347] Bluetooth: hci4: command tx timeout [ 1529.378202][T12043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1529.457651][T12508] chnl_net:caif_netlink_parms(): no params data found [ 1530.563068][T12534] loop2: detected capacity change from 0 to 256 [ 1530.761299][T12354] veth0_vlan: entered promiscuous mode [ 1530.990032][T12354] veth1_vlan: entered promiscuous mode [ 1531.285971][ T7347] Bluetooth: hci4: command tx timeout [ 1531.741677][T12354] veth0_macvtap: entered promiscuous mode [ 1531.895531][T12354] veth1_macvtap: entered promiscuous mode [ 1532.353275][T12508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.363362][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.375857][T12508] bridge_slave_0: entered allmulticast mode [ 1532.388046][T12508] bridge_slave_0: entered promiscuous mode [ 1532.588865][T12508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.600150][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.608237][T12508] bridge_slave_1: entered allmulticast mode [ 1532.617666][T12508] bridge_slave_1: entered promiscuous mode [ 1532.718418][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.730641][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.741034][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.755240][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.766644][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.777587][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.787889][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.798840][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.809106][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.820107][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.836865][T12354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1533.181150][T12508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.289794][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.301359][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.311996][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.322898][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.333271][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.344350][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.354697][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.369840][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.381092][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.392013][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.405332][ T7347] Bluetooth: hci4: command tx timeout [ 1533.409190][T12354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1533.436686][T12354] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.445887][T12354] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.455013][T12354] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.464050][T12354] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.560337][T12508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.224548][T12557] loop3: detected capacity change from 0 to 128 [ 1534.273192][T12508] team0: Port device team_slave_0 added [ 1534.324157][T12557] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1534.433935][T12508] team0: Port device team_slave_1 added [ 1534.487178][T12558] loop2: detected capacity change from 0 to 1024 [ 1534.683522][T12558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1534.847009][T12562] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1535.050445][T10709] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1535.087064][ T79] bridge_slave_1: left allmulticast mode [ 1535.093034][ T79] bridge_slave_1: left promiscuous mode [ 1535.100760][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.229545][ T79] bridge_slave_0: left allmulticast mode [ 1535.236019][ T79] bridge_slave_0: left promiscuous mode [ 1535.242911][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.445265][ T7347] Bluetooth: hci4: command tx timeout [ 1535.628518][ T34] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1535.641237][ T34] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1535.641237][ T34] [ 1535.651364][ T34] EXT4-fs (loop2): Total free blocks count 0 [ 1535.657712][ T34] EXT4-fs (loop2): Free/Dirty block details [ 1535.663854][ T34] EXT4-fs (loop2): free_blocks=68451041280 [ 1535.669941][ T34] EXT4-fs (loop2): dirty_blocks=64 [ 1535.675312][ T34] EXT4-fs (loop2): Block reservation details [ 1535.681460][ T34] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 1535.979099][T12043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.267372][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.411111][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.512585][ T79] bond0 (unregistering): Released all slaves [ 1536.683021][T12508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.690490][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.717404][T12508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.885782][T12508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.893028][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.919833][T12508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.269299][T12574] loop2: detected capacity change from 0 to 512 [ 1537.388761][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 1537.422952][T12574] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1537.984668][T12574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1538.052154][T12508] hsr_slave_0: entered promiscuous mode [ 1538.227627][T12508] hsr_slave_1: entered promiscuous mode [ 1538.245672][T12574] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1135: corrupted inode contents [ 1538.338550][T12508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1538.346547][T12508] Cannot create hsr debugfs directory [ 1538.372439][T12574] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.1135: mark_inode_dirty error [ 1538.496379][ T79] hsr_slave_0: left promiscuous mode [ 1538.563280][ T79] hsr_slave_1: left promiscuous mode [ 1538.591441][T12574] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1135: corrupted inode contents [ 1538.626080][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1538.635324][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1538.739478][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1538.749430][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.963209][ T79] veth1_macvtap: left promiscuous mode [ 1538.969227][ T79] veth0_macvtap: left promiscuous mode [ 1538.975518][ T79] veth1_vlan: left promiscuous mode [ 1538.981178][ T79] veth0_vlan: left promiscuous mode [ 1539.216016][T12043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.182360][T12592] loop3: detected capacity change from 0 to 256 [ 1540.976703][ T79] team0 (unregistering): Port device team_slave_1 removed [ 1541.113433][ T79] team0 (unregistering): Port device team_slave_0 removed [ 1542.358068][T12416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.512791][T12416] bio_check_eod: 8 callbacks suppressed [ 1542.512857][T12416] syz.1.1106: attempt to access beyond end of device [ 1542.512857][T12416] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1542.533726][T12416] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1542.542256][T12416] EXT4-fs (loop1): I/O error while writing superblock [ 1543.014600][T12603] loop2: detected capacity change from 0 to 128 [ 1543.148646][T12603] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1543.574289][T12606] loop0: detected capacity change from 0 to 1024 [ 1543.676093][T12508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.827495][T12606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1544.063482][T12508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.105737][T11333] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1544.333355][T12508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.652714][T12508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.776065][ T79] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1544.855566][ T79] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1544.868686][ T79] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1544.868686][ T79] [ 1544.878760][ T79] EXT4-fs (loop0): Total free blocks count 0 [ 1544.885231][ T79] EXT4-fs (loop0): Free/Dirty block details [ 1544.891379][ T79] EXT4-fs (loop0): free_blocks=68451041280 [ 1544.898352][ T79] EXT4-fs (loop0): dirty_blocks=64 [ 1544.903639][ T79] EXT4-fs (loop0): Block reservation details [ 1544.909918][ T79] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 1545.321611][T11976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.546937][T12508] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1545.706815][T12508] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1545.889517][T12508] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1546.106344][T12508] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1546.336186][T12624] loop0: detected capacity change from 0 to 512 [ 1546.402855][T12624] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1546.422110][ T7347] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1546.431132][ T7347] Bluetooth: hci0: Injecting HCI hardware error event [ 1546.446760][ T7347] Bluetooth: hci0: hardware error 0x00 [ 1546.615772][T12624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1546.718240][T12624] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1147: corrupted inode contents [ 1546.735848][T12624] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.1147: mark_inode_dirty error [ 1546.817543][T12624] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1147: corrupted inode contents [ 1547.299435][T11976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.343252][T12508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.530987][T12508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.664237][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.672210][T11333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1547.825883][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.833695][T11333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1548.496019][ T7347] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1548.805916][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.814071][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.064494][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.073066][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.344042][T12508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.454121][T12647] loop4: detected capacity change from 0 to 2048 [ 1550.737806][T12647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1550.853951][T12645] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1550.912824][T12651] loop3: detected capacity change from 0 to 512 [ 1550.941809][T12651] EXT4-fs: Ignoring removed oldalloc option [ 1550.952434][T12645] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 31 with max blocks 2 with error 28 [ 1550.966349][T12645] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1550.966349][T12645] [ 1550.978887][T12645] EXT4-fs (loop4): Total free blocks count 0 [ 1550.985939][T12645] EXT4-fs (loop4): Free/Dirty block details [ 1550.992124][T12645] EXT4-fs (loop4): free_blocks=2415919104 [ 1550.998252][T12645] EXT4-fs (loop4): dirty_blocks=128 [ 1551.003733][T12645] EXT4-fs (loop4): Block reservation details [ 1551.010132][T12645] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 1551.057374][T12651] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1151: Parent and EA inode have the same ino 15 [ 1551.122845][T12655] loop0: detected capacity change from 0 to 256 [ 1551.152790][T12651] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1151: Parent and EA inode have the same ino 15 [ 1551.178373][ T3624] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 1551.213275][T12651] EXT4-fs (loop3): 1 orphan inode deleted [ 1551.221298][T12651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1551.250185][T12508] veth0_vlan: entered promiscuous mode [ 1551.396476][T12508] veth1_vlan: entered promiscuous mode [ 1551.863438][T12508] veth0_macvtap: entered promiscuous mode [ 1552.036355][T12508] veth1_macvtap: entered promiscuous mode [ 1552.203486][T12660] loop4: detected capacity change from 0 to 128 [ 1552.292738][T12660] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1552.361506][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.372703][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.383382][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.394473][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.404715][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.419067][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.429738][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.440958][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.451248][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.461952][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.476451][T12508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.633658][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.644486][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.657827][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.669365][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.679600][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.690385][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.700740][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.711595][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.727561][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.739765][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.753986][T12508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.003834][T12508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.013593][T12508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.023630][T12508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.038713][T12508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.058257][T12658] loop3: detected capacity change from 512 to 0 [ 1553.082237][T12661] syz.3.1151: attempt to access beyond end of device [ 1553.082237][T12661] loop3: rw=12288, sector=510, nr_sectors = 2 limit=0 [ 1553.150595][T12661] EXT4-fs error (device loop3): __ext4_find_entry:1641: inode #12: comm syz.3.1151: reading directory lblock 1 [ 1553.163682][T12661] syz.3.1151: attempt to access beyond end of device [ 1553.163682][T12661] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1553.177620][T12661] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1553.186321][T12661] EXT4-fs (loop3): I/O error while writing superblock [ 1553.220391][ T3624] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1553.257619][T12658] syz.3.1151: attempt to access beyond end of device [ 1553.257619][T12658] loop3: rw=12288, sector=510, nr_sectors = 2 limit=0 [ 1553.271664][T12658] EXT4-fs warning (device loop3): ext4_dx_find_entry:1753: inode #12: lblock 1: comm syz.3.1151: error -5 reading directory block [ 1554.597981][T12669] loop0: detected capacity change from 0 to 1024 [ 1554.785218][T12669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1555.402335][T11976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.483615][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 1556.487027][T10522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1556.590303][T10522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1556.638424][T10522] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1556.681949][T10522] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1556.696965][T10522] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1556.718010][T10522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1558.770414][T12687] chnl_net:caif_netlink_parms(): no params data found [ 1558.887890][ T7347] Bluetooth: hci5: command tx timeout [ 1560.771937][T12704] loop4: detected capacity change from 0 to 2048 [ 1560.853596][ T79] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.960540][T12704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.976934][ T7347] Bluetooth: hci5: command tx timeout [ 1561.130483][ T79] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.238815][T12703] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1561.370099][ T79] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.445353][ T7347] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1561.454286][ T7347] Bluetooth: hci3: Injecting HCI hardware error event [ 1561.464362][ T7347] Bluetooth: hci3: hardware error 0x00 [ 1561.544433][T12703] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 31 with max blocks 2 with error 28 [ 1561.557984][T12703] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1561.557984][T12703] [ 1561.568878][T12703] EXT4-fs (loop4): Total free blocks count 0 [ 1561.575537][T12703] EXT4-fs (loop4): Free/Dirty block details [ 1561.581710][T12703] EXT4-fs (loop4): free_blocks=2415919104 [ 1561.588132][T12703] EXT4-fs (loop4): dirty_blocks=128 [ 1561.593763][T12703] EXT4-fs (loop4): Block reservation details [ 1561.600648][T12703] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 1561.756870][ T79] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.218110][T12687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.229350][T12687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.239265][T12687] bridge_slave_0: entered allmulticast mode [ 1562.251705][T12687] bridge_slave_0: entered promiscuous mode [ 1562.670882][T12687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.678835][T12687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.687531][T12687] bridge_slave_1: entered allmulticast mode [ 1562.696889][T12687] bridge_slave_1: entered promiscuous mode [ 1562.776362][ T3896] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 1562.794703][T12689] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1562.850476][T12689] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1562.877304][T12689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1562.919762][T12689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1562.950947][ T79] bridge_slave_1: left allmulticast mode [ 1562.960826][ T79] bridge_slave_1: left promiscuous mode [ 1562.969176][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.986568][T12689] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1563.037223][T12689] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1563.052917][T12689] Bluetooth: hci5: command tx timeout [ 1563.321822][ T79] bridge_slave_0: left allmulticast mode [ 1563.329250][ T79] bridge_slave_0: left promiscuous mode [ 1563.340532][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.746364][ T7347] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1564.049261][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1564.118197][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.198424][ T79] bond0 (unregistering): Released all slaves [ 1564.474285][T12687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.515236][T12687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.128908][ T7347] Bluetooth: hci0: command tx timeout [ 1565.134665][ T7347] Bluetooth: hci5: command tx timeout [ 1565.194529][T12687] team0: Port device team_slave_0 added [ 1565.249128][ T79] hsr_slave_0: left promiscuous mode [ 1565.286683][ T79] hsr_slave_1: left promiscuous mode [ 1565.317258][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.325232][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.362450][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.370859][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.411316][T12726] loop4: detected capacity change from 0 to 256 [ 1565.433360][ T79] veth1_macvtap: left promiscuous mode [ 1565.439518][ T79] veth0_macvtap: left promiscuous mode [ 1565.445443][ T79] veth1_vlan: left promiscuous mode [ 1565.450927][ T79] veth0_vlan: left promiscuous mode [ 1565.840220][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.840220][ T3556] loop3: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 1565.854548][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.854548][ T3556] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1565.868702][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.868702][ T3556] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 1565.882681][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.882681][ T3556] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1565.896950][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.896950][ T3556] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 1565.910941][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.910941][ T3556] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 1565.925631][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.925631][ T3556] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 1565.945461][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.945461][ T3556] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 1565.960945][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.960945][ T3556] loop3: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 1565.974750][ T3556] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #12: block 7: comm kworker/u8:22: unable to read itable block [ 1565.989137][ T3556] kworker/u8:22: attempt to access beyond end of device [ 1565.989137][ T3556] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1566.002982][ T3556] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1566.012015][ T3556] EXT4-fs (loop3): I/O error while writing superblock [ 1567.138027][ T79] team0 (unregistering): Port device team_slave_1 removed [ 1567.206665][ T8277] Bluetooth: hci0: command tx timeout [ 1567.253470][ T79] team0 (unregistering): Port device team_slave_0 removed [ 1567.640038][T12689] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1567.651296][T12689] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1567.662006][T12689] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1567.685404][T12689] Bluetooth: hci2: command 0x0406 tx timeout [ 1567.730622][T12687] team0: Port device team_slave_1 added [ 1567.936709][ T7347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1567.948602][ T7347] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1567.957965][ T7347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1568.335317][T12687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.342905][T12687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.369436][T12687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.582453][T12687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.597977][T12687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.626393][T12687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.286479][ T7347] Bluetooth: hci0: command tx timeout [ 1569.336271][T12687] hsr_slave_0: entered promiscuous mode [ 1569.445294][T12687] hsr_slave_1: entered promiscuous mode [ 1570.040258][ T7347] Bluetooth: hci6: command tx timeout [ 1570.304425][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.313075][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.622773][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.632266][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.672715][T12715] chnl_net:caif_netlink_parms(): no params data found [ 1570.967792][T12734] chnl_net:caif_netlink_parms(): no params data found [ 1571.110918][T12747] loop4: detected capacity change from 0 to 1024 [ 1571.299020][T12747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1571.375303][ T7347] Bluetooth: hci0: command tx timeout [ 1572.041321][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.086180][ T7347] Bluetooth: hci6: command tx timeout [ 1572.883142][T12757] loop1: detected capacity change from 0 to 2048 [ 1573.146682][T12757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1573.177009][T12687] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1573.330487][T12687] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1573.573498][T12687] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1573.657517][T12757] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1122: bg 0: block 234: padding at end of block bitmap is not set [ 1573.708175][T12687] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1573.947827][T12757] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 150 with error 28 [ 1573.961852][T12757] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1573.961852][T12757] [ 1573.971978][T12757] EXT4-fs (loop1): Total free blocks count 0 [ 1573.978256][T12757] EXT4-fs (loop1): Free/Dirty block details [ 1573.984313][T12757] EXT4-fs (loop1): free_blocks=0 [ 1573.989766][T12757] EXT4-fs (loop1): dirty_blocks=160 [ 1573.995281][T12757] EXT4-fs (loop1): Block reservation details [ 1574.001514][T12757] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 1574.165708][ T7347] Bluetooth: hci6: command tx timeout [ 1574.592115][T12715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.599898][T12715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.607942][T12715] bridge_slave_0: entered allmulticast mode [ 1574.616777][T12715] bridge_slave_0: entered promiscuous mode [ 1574.913832][T12715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.921898][T12715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.940820][T12715] bridge_slave_1: entered allmulticast mode [ 1574.951226][T12715] bridge_slave_1: entered promiscuous mode [ 1575.027811][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.292827][T12734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.300625][T12734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.308534][T12734] bridge_slave_0: entered allmulticast mode [ 1575.317189][T12734] bridge_slave_0: entered promiscuous mode [ 1575.870805][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1575.878055][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.040719][T12734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.048451][T12734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.056868][T12734] bridge_slave_1: entered allmulticast mode [ 1576.074638][T12734] bridge_slave_1: entered promiscuous mode [ 1576.246853][ T7347] Bluetooth: hci6: command tx timeout [ 1576.834510][T12715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.923178][T12734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.147484][T12715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.326693][T12734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.668868][T12715] team0: Port device team_slave_0 added [ 1577.860908][T12715] team0: Port device team_slave_1 added [ 1577.904632][T12687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.944320][T12734] team0: Port device team_slave_0 added [ 1578.065476][T12734] team0: Port device team_slave_1 added [ 1578.304719][T12715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.312092][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.343607][T12715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.470618][T12687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.491811][T12734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.500086][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.531885][T12734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.604454][ T3140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.612192][ T3140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.635150][T12715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.643067][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.671778][T12715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.738097][ T3140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.745964][ T3140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.900731][T12734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.908953][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.940621][T12734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.706135][T12734] hsr_slave_0: entered promiscuous mode [ 1579.793297][T12734] hsr_slave_1: entered promiscuous mode [ 1579.840195][T12734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1579.848287][T12734] Cannot create hsr debugfs directory [ 1579.869400][ T7347] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1579.878293][ T7347] Bluetooth: hci4: Injecting HCI hardware error event [ 1579.894348][T12689] Bluetooth: hci4: hardware error 0x00 [ 1580.498904][T12792] loop1: detected capacity change from 0 to 16 [ 1580.579978][T12715] hsr_slave_0: entered promiscuous mode [ 1580.653843][T12715] hsr_slave_1: entered promiscuous mode [ 1580.685974][T12792] erofs: (device loop1): mounted with root inode @ nid 36. [ 1580.708998][T12715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1580.717074][T12715] Cannot create hsr debugfs directory [ 1581.184131][T12788] loop4: detected capacity change from 0 to 2048 [ 1581.217024][T12792] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1581.817581][T12788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1581.930684][T12689] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1582.419092][T12786] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1582.757694][T12786] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 33 with error 28 [ 1582.770553][T12786] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1582.770553][T12786] [ 1582.780870][T12786] EXT4-fs (loop4): Total free blocks count 0 [ 1582.787311][T12786] EXT4-fs (loop4): Free/Dirty block details [ 1582.793481][T12786] EXT4-fs (loop4): free_blocks=2415919104 [ 1582.799803][T12786] EXT4-fs (loop4): dirty_blocks=48 [ 1582.805311][T12786] EXT4-fs (loop4): Block reservation details [ 1582.811561][T12786] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 1582.994237][T12806] loop1: detected capacity change from 0 to 16 [ 1583.158745][T12806] erofs: (device loop1): mounted with root inode @ nid 36. [ 1583.275975][T12734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.573926][T12734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.789729][T12806] syz.1.1173: attempt to access beyond end of device [ 1583.789729][T12806] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1583.803815][T12806] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 1584.191300][T12734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.210428][T12814] syz.1.1173: attempt to access beyond end of device [ 1584.210428][T12814] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1584.224551][T12814] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 1584.437486][T12734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.490764][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1584.525337][T12813] syz.1.1173: attempt to access beyond end of device [ 1584.525337][T12813] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1584.539426][T12813] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 1584.661704][T12687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.778380][T12815] syz.1.1173: attempt to access beyond end of device [ 1584.778380][T12815] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1584.792143][T12815] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 1584.813198][T12806] syz.1.1173: attempt to access beyond end of device [ 1584.813198][T12806] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1584.826793][T12806] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 1585.002288][T12816] syz.1.1173: attempt to access beyond end of device [ 1585.002288][T12816] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1585.016099][T12816] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 1585.257457][T12715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.404408][T12651] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.453336][T12651] syz.3.1151: attempt to access beyond end of device [ 1585.453336][T12651] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1585.467662][T12651] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1585.476875][T12651] EXT4-fs (loop3): I/O error while writing superblock [ 1585.513792][T12687] veth0_vlan: entered promiscuous mode [ 1585.635227][T12715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.936135][T12715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.027074][T12687] veth1_vlan: entered promiscuous mode [ 1586.123530][T12820] loop4: detected capacity change from 0 to 1024 [ 1586.165710][T12715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.368014][T12820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1587.069712][T12734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1587.177483][T12687] veth0_macvtap: entered promiscuous mode [ 1587.195141][T12715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1587.279123][T12734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1587.306309][T11333] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1587.392115][T12734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1587.442849][T12734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1587.469278][T11333] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1587.482073][T11333] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1587.482073][T11333] [ 1587.492431][T11333] EXT4-fs (loop4): Total free blocks count 0 [ 1587.498857][T11333] EXT4-fs (loop4): Free/Dirty block details [ 1587.505121][T11333] EXT4-fs (loop4): free_blocks=68451041280 [ 1587.511113][T11333] EXT4-fs (loop4): dirty_blocks=64 [ 1587.516531][T11333] EXT4-fs (loop4): Block reservation details [ 1587.522666][T11333] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 1587.555367][T12687] veth1_macvtap: entered promiscuous mode [ 1587.569565][T12715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1587.670458][T12715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1587.762301][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.795990][T12715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1588.209969][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.220937][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.231228][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.242166][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.257374][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.269470][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.279700][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.290560][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.300912][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.311845][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.328241][T12687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.432336][T12828] loop1: detected capacity change from 0 to 2048 [ 1588.689108][T12828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1589.112874][T12828] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1176: bg 0: block 234: padding at end of block bitmap is not set [ 1589.167108][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1589.186149][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.198013][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1589.208992][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.219650][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1589.230611][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.241113][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1589.252515][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.263210][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1589.281245][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.299661][T12687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.355712][T12828] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 60 with error 28 [ 1589.369179][T12828] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1589.369179][T12828] [ 1589.384259][T12828] EXT4-fs (loop1): Total free blocks count 0 [ 1589.391902][T12828] EXT4-fs (loop1): Free/Dirty block details [ 1589.398076][T12828] EXT4-fs (loop1): free_blocks=0 [ 1589.403474][T12828] EXT4-fs (loop1): dirty_blocks=64 [ 1589.408848][T12828] EXT4-fs (loop1): Block reservation details [ 1589.415206][T12828] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 1589.723797][T12687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.733131][T12687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.742467][T12687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.751683][T12687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.114170][T12715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.441430][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.541741][T12715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.675999][ T2816] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1590.786294][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.794059][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.822334][ T34] bridge_slave_1: left allmulticast mode [ 1590.828929][ T34] bridge_slave_1: left promiscuous mode [ 1590.835813][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.886164][ T2816] usb 5-1: Using ep0 maxpacket: 32 [ 1590.936594][ T2816] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1590.946717][ T2816] usb 5-1: config 0 has no interface number 0 [ 1590.947529][ T34] bridge_slave_0: left allmulticast mode [ 1590.959183][ T34] bridge_slave_0: left promiscuous mode [ 1590.967841][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.041979][ T2816] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1591.051640][ T2816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.060263][ T2816] usb 5-1: Product: syz [ 1591.064747][ T2816] usb 5-1: Manufacturer: syz [ 1591.069798][ T2816] usb 5-1: SerialNumber: syz [ 1591.418107][ T2816] usb 5-1: config 0 descriptor?? [ 1591.474358][ T2816] smsc95xx v2.0.0 [ 1591.978459][ T2816] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1591.989965][ T2816] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1592.027027][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.086485][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.140535][ T34] bond0 (unregistering): Released all slaves [ 1592.284303][T12734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.419994][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.427897][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1592.640283][T12734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.864506][ T2816] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1592.876973][ T2816] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1592.953649][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.961554][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.164393][ T2816] usb 5-1: USB disconnect, device number 4 [ 1593.544508][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.557463][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.841902][ T34] hsr_slave_0: left promiscuous mode [ 1593.897060][ T34] hsr_slave_1: left promiscuous mode [ 1593.946905][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1593.961929][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1594.063361][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1594.072072][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.218538][ T34] veth1_macvtap: left promiscuous mode [ 1594.224406][ T34] veth0_macvtap: left promiscuous mode [ 1594.230973][ T34] veth1_vlan: left promiscuous mode [ 1594.237244][ T34] veth0_vlan: left promiscuous mode [ 1595.291484][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1595.326760][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1595.599207][T12853] loop4: detected capacity change from 0 to 2048 [ 1595.792877][T12853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1596.039162][T12857] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1596.094094][T12849] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 31 with max blocks 2 with error 28 [ 1596.108492][T12849] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1596.108492][T12849] [ 1596.119083][T12849] EXT4-fs (loop4): Total free blocks count 0 [ 1596.125567][T12849] EXT4-fs (loop4): Free/Dirty block details [ 1596.131751][T12849] EXT4-fs (loop4): free_blocks=2415919104 [ 1596.143796][T12849] EXT4-fs (loop4): dirty_blocks=128 [ 1596.150950][T12849] EXT4-fs (loop4): Block reservation details [ 1596.157376][T12849] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 1596.840524][T11333] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 1597.851420][T12872] loop4: detected capacity change from 0 to 1024 [ 1598.118390][T12872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1598.254345][T12715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.746504][ T3140] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1598.760944][T12715] veth0_vlan: entered promiscuous mode [ 1598.826605][T12715] veth1_vlan: entered promiscuous mode [ 1598.876839][ T3140] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1598.890495][ T3140] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1598.890495][ T3140] [ 1598.903960][ T3140] EXT4-fs (loop4): Total free blocks count 0 [ 1598.910788][ T3140] EXT4-fs (loop4): Free/Dirty block details [ 1598.917048][ T3140] EXT4-fs (loop4): free_blocks=68451041280 [ 1598.923168][ T3140] EXT4-fs (loop4): dirty_blocks=64 [ 1598.928686][ T3140] EXT4-fs (loop4): Block reservation details [ 1598.935060][ T3140] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 1599.064606][T12734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.093969][T12715] veth0_macvtap: entered promiscuous mode [ 1599.096303][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.123413][T12882] loop1: detected capacity change from 0 to 2048 [ 1599.170031][T12715] veth1_macvtap: entered promiscuous mode [ 1599.267743][T12882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1599.609291][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.629513][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.646208][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.661872][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.668248][T12882] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1186: bg 0: block 234: padding at end of block bitmap is not set [ 1599.677703][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.677820][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.738840][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.757630][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.773968][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.789360][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.809186][T12715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.914159][T12882] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 68 with error 117 [ 1599.939880][T12882] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1599.939880][T12882] [ 1599.996694][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.011751][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.025482][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.040789][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.055146][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.066784][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.081693][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.095725][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.113133][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.130567][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.147174][T12715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1600.345869][T12734] veth0_vlan: entered promiscuous mode [ 1600.493627][T12715] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.503046][T12715] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.512446][T12715] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.521789][T12715] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.579021][T12734] veth1_vlan: entered promiscuous mode [ 1600.662848][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.943561][T12734] veth0_macvtap: entered promiscuous mode [ 1601.078367][T12734] veth1_macvtap: entered promiscuous mode [ 1601.375588][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.386743][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.397267][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.408141][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.418391][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.430714][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.441077][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.565961][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.597640][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.610634][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.622606][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.633863][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.649831][T12734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.960995][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.974802][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.985738][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.996614][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.007766][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.019147][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.030057][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.040911][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.051257][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.062226][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.072722][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.084763][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.108563][T12734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1602.146953][T12734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.157092][T12734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.167211][T12734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.178460][T12734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.952125][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.961312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.187998][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.197708][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.538926][T12912] loop4: detected capacity change from 0 to 2048 [ 1603.707228][T12912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1603.950106][T12910] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1604.045916][T12910] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 31 with max blocks 2 with error 28 [ 1604.059384][T12910] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1604.059384][T12910] [ 1604.070328][T12910] EXT4-fs (loop4): Total free blocks count 0 [ 1604.076748][T12910] EXT4-fs (loop4): Free/Dirty block details [ 1604.082946][T12910] EXT4-fs (loop4): free_blocks=2415919104 [ 1604.089191][T12910] EXT4-fs (loop4): dirty_blocks=80 [ 1604.094669][T12910] EXT4-fs (loop4): Block reservation details [ 1604.101079][T12910] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 1604.168144][ T34] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 4095 with max blocks 33 with error 28 [ 1604.535433][T12925] loop2: detected capacity change from 0 to 512 [ 1604.605094][T12925] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1604.769047][T12925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1604.927496][T12925] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1156: corrupted inode contents [ 1605.035971][T12925] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.1156: mark_inode_dirty error [ 1605.121053][T12925] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1156: corrupted inode contents [ 1605.547490][T12687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.584814][T12938] loop1: detected capacity change from 0 to 1024 [ 1605.755321][T12938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1606.427624][T11333] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1606.469290][T12944] loop4: detected capacity change from 0 to 2048 [ 1606.638429][T11333] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1606.672605][T11333] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1606.672605][T11333] [ 1606.694721][T11333] EXT4-fs (loop1): Total free blocks count 0 [ 1606.707229][T11333] EXT4-fs (loop1): Free/Dirty block details [ 1606.718194][T11333] EXT4-fs (loop1): free_blocks=68451041280 [ 1606.732251][T11333] EXT4-fs (loop1): dirty_blocks=64 [ 1606.739544][T11333] EXT4-fs (loop1): Block reservation details [ 1606.748653][T11333] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 1606.867714][T12944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1607.006885][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.036159][T12919] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 1607.238506][ T3624] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 562 with error 28 [ 1607.255791][ T3624] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1607.255791][ T3624] [ 1607.271824][ T3624] EXT4-fs (loop4): Total free blocks count 0 [ 1607.278954][ T3624] EXT4-fs (loop4): Free/Dirty block details [ 1607.288443][ T3624] EXT4-fs (loop4): free_blocks=0 [ 1607.298866][ T3624] EXT4-fs (loop4): dirty_blocks=576 [ 1607.306837][ T3624] EXT4-fs (loop4): Block reservation details [ 1607.315413][ T3624] EXT4-fs (loop4): i_reserved_data_blocks=36 [ 1608.018310][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1608.466539][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1608.666118][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1608.689439][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.711782][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1608.738853][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1608.757112][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.943628][ T8] usb 3-1: config 0 descriptor?? [ 1609.072365][T12972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1609.223805][T12970] loop1: detected capacity change from 0 to 2048 [ 1609.430048][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.440121][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.456758][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.464245][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.474457][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.482684][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.490333][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.498248][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.505850][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.513290][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.520840][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.528448][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.536000][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.543451][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.560535][ T8] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1609.683120][T12975] loop4: detected capacity change from 0 to 128 [ 1609.728656][T12970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1609.733013][ T8] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 1609.794487][T12975] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1609.833168][ T8] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1609.846634][ T8] microsoft 0003:045E:07DA.0003: no inputs found [ 1609.853294][ T8] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 1609.914155][T12968] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1609.974524][T12968] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 31 with max blocks 2 with error 28 [ 1609.988058][T12968] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1609.988058][T12968] [ 1609.998158][T12968] EXT4-fs (loop1): Total free blocks count 0 [ 1610.004307][T12968] EXT4-fs (loop1): Free/Dirty block details [ 1610.010513][T12968] EXT4-fs (loop1): free_blocks=2415919104 [ 1610.016561][T12968] EXT4-fs (loop1): dirty_blocks=80 [ 1610.021890][T12968] EXT4-fs (loop1): Block reservation details [ 1610.028223][T12968] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 1610.123651][ T8] usb 3-1: USB disconnect, device number 6 [ 1610.307198][T10709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.316622][T10709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.502716][T10709] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4095 with max blocks 33 with error 28 [ 1610.708758][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.717764][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.868895][T12989] loop3: detected capacity change from 0 to 128 [ 1611.945273][T12989] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1612.507977][T12994] loop1: detected capacity change from 0 to 512 [ 1612.566752][T12994] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1612.682944][T12994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1612.835620][ T34] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1612.910716][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.919251][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.060075][T12994] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1204: corrupted inode contents [ 1613.100230][T12994] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.1204: mark_inode_dirty error [ 1613.148619][T12994] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1204: corrupted inode contents [ 1613.232529][T11333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.245289][T11333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.600372][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.798570][T13001] loop2: detected capacity change from 0 to 128 [ 1613.915621][T13002] loop3: detected capacity change from 0 to 1024 [ 1614.076892][T13002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1614.768153][T10709] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1614.960055][T10709] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1614.990157][T10709] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1614.990157][T10709] [ 1615.008930][T10709] EXT4-fs (loop3): Total free blocks count 0 [ 1615.021327][T10709] EXT4-fs (loop3): Free/Dirty block details [ 1615.030296][T10709] EXT4-fs (loop3): free_blocks=68451041280 [ 1615.040614][T10709] EXT4-fs (loop3): dirty_blocks=64 [ 1615.054611][T10709] EXT4-fs (loop3): Block reservation details [ 1615.062061][T10709] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1615.204082][T13008] loop1: detected capacity change from 0 to 2048 [ 1615.327958][T12715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1615.401701][T13008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1615.448982][T12689] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1615.457931][T12689] Bluetooth: hci5: Injecting HCI hardware error event [ 1615.471698][T12689] Bluetooth: hci5: hardware error 0x00 [ 1615.679328][T13008] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1208: bg 0: block 234: padding at end of block bitmap is not set [ 1615.810165][T13008] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 240 with error 117 [ 1615.823578][T13008] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1615.823578][T13008] [ 1616.560654][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.865781][T10709] bridge_slave_1: left allmulticast mode [ 1616.871671][T10709] bridge_slave_1: left promiscuous mode [ 1616.878473][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.088190][T10709] bridge_slave_0: left allmulticast mode [ 1617.094276][T10709] bridge_slave_0: left promiscuous mode [ 1617.101238][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.534465][T12689] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1617.799456][T13025] loop0: detected capacity change from 0 to 128 [ 1618.042319][T10709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.169971][T10709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.263677][T10709] bond0 (unregistering): Released all slaves [ 1622.322301][T10709] hsr_slave_0: left promiscuous mode [ 1622.375385][T10709] hsr_slave_1: left promiscuous mode [ 1622.407357][T10709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.415790][T10709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.446130][T13032] loop2: detected capacity change from 0 to 512 [ 1622.468618][T10709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.476964][T10709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.525133][T13032] EXT4-fs: Ignoring removed nobh option [ 1622.550946][T13034] loop0: detected capacity change from 0 to 512 [ 1622.595997][T10709] veth1_macvtap: left promiscuous mode [ 1622.601933][T10709] veth0_macvtap: left promiscuous mode [ 1622.608293][T10709] veth1_vlan: left promiscuous mode [ 1622.613923][T10709] veth0_vlan: left promiscuous mode [ 1622.678249][T13034] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1622.757508][T13032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1622.776511][T13032] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1622.981828][T13034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1623.202332][T13034] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1217: corrupted inode contents [ 1623.327445][T13034] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.1217: mark_inode_dirty error [ 1623.358054][T11748] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1623.465597][T13034] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1217: corrupted inode contents [ 1623.584372][T13043] loop3: detected capacity change from 0 to 1024 [ 1623.585472][ T7347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1623.613572][ T7347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1623.635607][ T7347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1623.670479][T11748] usb 2-1: Using ep0 maxpacket: 32 [ 1623.827762][ T7347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1623.859892][ T7347] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1623.882817][ T7347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1623.900383][T11748] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1623.912308][T11748] usb 2-1: config 0 has no interface number 0 [ 1623.984719][T13043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1624.064281][T11748] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1624.073969][T11748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.082692][T11748] usb 2-1: Product: syz [ 1624.087356][T11748] usb 2-1: Manufacturer: syz [ 1624.095143][T11748] usb 2-1: SerialNumber: syz [ 1624.116839][T11748] usb 2-1: config 0 descriptor?? [ 1624.205916][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1624.260336][T11748] smsc95xx v2.0.0 [ 1624.492118][T10709] team0 (unregistering): Port device team_slave_1 removed [ 1624.631914][T10709] team0 (unregistering): Port device team_slave_0 removed [ 1624.661287][T11748] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1624.672758][T11748] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1625.005844][T12687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.198746][ T34] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1625.279370][ T34] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1625.294477][ T34] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1625.294477][ T34] [ 1625.304969][ T34] EXT4-fs (loop3): Total free blocks count 0 [ 1625.311406][ T34] EXT4-fs (loop3): Free/Dirty block details [ 1625.318023][ T34] EXT4-fs (loop3): free_blocks=68451041280 [ 1625.329961][ T34] EXT4-fs (loop3): dirty_blocks=64 [ 1625.335910][ T34] EXT4-fs (loop3): Block reservation details [ 1625.342310][ T34] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1625.672035][T12715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.861182][T11748] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1625.880799][T11748] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1625.955671][ T7347] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1625.964514][ T7347] Bluetooth: hci0: Injecting HCI hardware error event [ 1625.975301][ T7347] Bluetooth: hci0: hardware error 0x00 [ 1626.008662][T12689] Bluetooth: hci1: command tx timeout [ 1626.010008][T11748] usb 2-1: USB disconnect, device number 7 [ 1626.703663][T10709] bridge_slave_1: left allmulticast mode [ 1626.709829][T10709] bridge_slave_1: left promiscuous mode [ 1626.716820][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.774277][T10709] bridge_slave_0: left allmulticast mode [ 1626.781007][T10709] bridge_slave_0: left promiscuous mode [ 1626.788350][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.077134][T13060] loop2: detected capacity change from 0 to 2048 [ 1627.333123][T13060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1627.854730][T13060] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1221: bg 0: block 234: padding at end of block bitmap is not set [ 1627.904382][T10709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1627.946313][T10709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1627.965950][T13060] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 76 with error 117 [ 1627.979491][T13060] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1627.979491][T13060] [ 1628.028046][T10709] bond0 (unregistering): Released all slaves [ 1628.056586][T13071] loop3: detected capacity change from 0 to 512 [ 1628.076410][T13071] EXT4-fs: Ignoring removed oldalloc option [ 1628.089161][ T7347] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1628.096783][ T7347] Bluetooth: hci1: command tx timeout [ 1628.231616][T13071] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1225: Parent and EA inode have the same ino 15 [ 1628.253361][T13071] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1225: Parent and EA inode have the same ino 15 [ 1628.272107][T13071] EXT4-fs (loop3): 1 orphan inode deleted [ 1628.280255][T13071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1628.580622][T13060] syz.2.1221 (13060) used greatest stack depth: 4832 bytes left [ 1628.696651][T12687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.967434][T13047] chnl_net:caif_netlink_parms(): no params data found [ 1629.256366][T10709] hsr_slave_0: left promiscuous mode [ 1629.340381][T10709] hsr_slave_1: left promiscuous mode [ 1629.406735][T10709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.414496][T10709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.513242][T10709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.523799][T10709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.845777][T10709] veth1_macvtap: left promiscuous mode [ 1629.852162][T10709] veth0_macvtap: left promiscuous mode [ 1629.859121][T10709] veth1_vlan: left promiscuous mode [ 1629.865512][T10709] veth0_vlan: left promiscuous mode [ 1630.287134][ T7347] Bluetooth: hci1: command tx timeout [ 1630.357253][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 1630.411814][T13083] loop2: detected capacity change from 0 to 128 [ 1630.869629][T13083] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1630.891959][T13083] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1631.798051][T10709] team0 (unregistering): Port device team_slave_1 removed [ 1632.016140][T10709] team0 (unregistering): Port device team_slave_0 removed [ 1632.346913][ T7347] Bluetooth: hci1: command tx timeout [ 1632.355396][T13087] loop1: detected capacity change from 0 to 512 [ 1632.611416][T13087] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1632.902143][T13087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.968655][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.320290][T12687] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1634.764750][T13095] loop0: detected capacity change from 0 to 1024 [ 1635.008360][T13047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.016198][T13047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.023888][T13047] bridge_slave_0: entered allmulticast mode [ 1635.033187][T13047] bridge_slave_0: entered promiscuous mode [ 1635.071922][T13047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.079971][T13047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.087881][T13047] bridge_slave_1: entered allmulticast mode [ 1635.096574][T13047] bridge_slave_1: entered promiscuous mode [ 1635.244241][T13095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1635.787331][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1635.814334][T13047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1636.003853][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1636.026578][T13047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.102502][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1636.112500][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.121177][ T8] usb 1-1: Product: syz [ 1636.126530][ T8] usb 1-1: Manufacturer: syz [ 1636.131571][ T8] usb 1-1: SerialNumber: syz [ 1636.170720][ T7591] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1636.415948][ T7591] usb 2-1: Using ep0 maxpacket: 32 [ 1636.531764][ T7591] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1636.540597][ T7591] usb 2-1: config 0 has no interface number 0 [ 1636.818911][ T7591] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1636.828842][ T7591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.837487][ T7591] usb 2-1: Product: syz [ 1636.842663][ T7591] usb 2-1: Manufacturer: syz [ 1636.850507][ T7591] usb 2-1: SerialNumber: syz [ 1636.901458][T13047] team0: Port device team_slave_0 added [ 1637.032248][T13047] team0: Port device team_slave_1 added [ 1637.325229][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.332071][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1637.358072][ T8] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1637.364761][ T8] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1637.372753][ T8] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1637.460626][T13047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.470062][T13047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1637.475728][ T7591] usb 2-1: config 0 descriptor?? [ 1637.497523][T13047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.585890][ T8] cdc_ncm 1-1:1.0: setting tx_max = 36 [ 1637.601647][ T8] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1637.690344][T13047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.697856][T13047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1637.726953][T13047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.838056][ T7591] smsc95xx v2.0.0 [ 1638.081766][ T7591] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1638.093238][ T7591] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1638.484591][T13047] hsr_slave_0: entered promiscuous mode [ 1638.578483][T13047] hsr_slave_1: entered promiscuous mode [ 1638.661136][T13047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1638.669315][T13047] Cannot create hsr debugfs directory [ 1638.901780][T13100] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1638.957995][ T7591] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1638.970945][ T7591] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1639.070598][ T8] usb 1-1: USB disconnect, device number 3 [ 1639.078224][ T8] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1639.236302][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.505729][ T7591] usb 2-1: USB disconnect, device number 8 [ 1639.948286][T13112] loop2: detected capacity change from 0 to 2048 [ 1640.041658][T13114] loop0: detected capacity change from 0 to 8 [ 1640.185253][T13114] SQUASHFS error: Failed to read block 0x4de: -5 [ 1640.192655][T13114] SQUASHFS error: Failed to read block 0x4de: -5 [ 1640.236543][ T29] audit: type=1800 audit(1727441764.896:162): pid=13114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1237" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1640.307917][T12689] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1640.334219][T12689] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1640.358848][T12689] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1640.405995][T12689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1640.417330][T13112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1640.498690][T12689] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1640.517841][T12689] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1640.847244][T13047] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.129424][T12687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.259461][T13047] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.617416][T13047] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.655609][T13126] loop0: detected capacity change from 0 to 512 [ 1641.762389][T13126] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1641.920879][T13047] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.998703][T13126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1642.316300][T13126] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1240: corrupted inode contents [ 1642.615711][T13126] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.1240: mark_inode_dirty error [ 1642.655372][ T7347] Bluetooth: hci2: command tx timeout [ 1642.790889][T13126] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1240: corrupted inode contents [ 1643.581361][T13047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1643.748347][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.807255][T13047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1644.207046][T13115] chnl_net:caif_netlink_parms(): no params data found [ 1644.526589][T13047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1644.700625][T13047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1644.735677][ T7347] Bluetooth: hci2: command tx timeout [ 1645.648817][ T3896] bridge_slave_1: left allmulticast mode [ 1645.654801][ T3896] bridge_slave_1: left promiscuous mode [ 1645.662104][ T3896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.813514][ T3896] bridge_slave_0: left allmulticast mode [ 1645.820487][ T3896] bridge_slave_0: left promiscuous mode [ 1645.827587][ T3896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.865532][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1646.080262][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1646.149050][ T8] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1646.158109][ T8] usb 2-1: config 0 has no interface number 0 [ 1646.293264][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1646.303128][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.315298][ T8] usb 2-1: Product: syz [ 1646.319711][ T8] usb 2-1: Manufacturer: syz [ 1646.324474][ T8] usb 2-1: SerialNumber: syz [ 1646.431493][ T8] usb 2-1: config 0 descriptor?? [ 1646.471168][ T8] smsc95xx v2.0.0 [ 1646.480728][T13160] loop0: detected capacity change from 0 to 2048 [ 1646.648838][T13160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1646.840878][ T7347] Bluetooth: hci2: command tx timeout [ 1646.895726][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1646.908139][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1646.957111][ T3896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.003372][ T3896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1647.033511][ T3896] bond0 (unregistering): Released all slaves [ 1647.186751][T13156] syzkaller0: entered promiscuous mode [ 1647.192874][T13156] syzkaller0: entered allmulticast mode [ 1647.285769][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1647.664115][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1647.676019][ T8] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1647.859807][ T8] usb 2-1: USB disconnect, device number 9 [ 1648.648446][ T3896] hsr_slave_0: left promiscuous mode [ 1648.716503][ T3896] hsr_slave_1: left promiscuous mode [ 1648.747982][ T3896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1648.760394][ T3896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.862982][ T3896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.876160][ T3896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.915911][ T7347] Bluetooth: hci2: command tx timeout [ 1649.086537][ T3896] veth1_macvtap: left promiscuous mode [ 1649.092504][ T3896] veth0_macvtap: left promiscuous mode [ 1649.099976][ T3896] veth1_vlan: left promiscuous mode [ 1649.108442][ T3896] veth0_vlan: left promiscuous mode [ 1649.206520][T13171] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1649.484377][T13173] loop0: detected capacity change from 0 to 512 [ 1649.564445][T13173] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1649.928567][T13173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1650.011548][T13173] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1251: corrupted inode contents [ 1650.091032][T11748] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1650.113081][T13173] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.1251: mark_inode_dirty error [ 1650.154081][T13173] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1251: corrupted inode contents [ 1650.532976][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.649810][ T3896] team0 (unregistering): Port device team_slave_1 removed [ 1650.668286][T11748] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1650.680484][T11748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.699059][T11748] usb 3-1: config 0 descriptor?? [ 1650.840186][ T3896] team0 (unregistering): Port device team_slave_0 removed [ 1651.583478][T13115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.592026][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.600807][T13115] bridge_slave_0: entered allmulticast mode [ 1651.612463][T13115] bridge_slave_0: entered promiscuous mode [ 1651.705446][T13115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.713366][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.722406][T13115] bridge_slave_1: entered allmulticast mode [ 1651.732153][T13115] bridge_slave_1: entered promiscuous mode [ 1652.072583][T11748] asix 3-1:0.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, 76:87:c5:9d:aa:0f [ 1652.186707][T11748] usb 3-1: USB disconnect, device number 7 [ 1652.209652][T11748] asix 3-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 1652.476682][T13115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1652.606181][T13115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1653.018025][T13047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1653.062261][T13115] team0: Port device team_slave_0 added [ 1653.121106][T13115] team0: Port device team_slave_1 added [ 1653.491555][T13190] loop0: detected capacity change from 0 to 2048 [ 1653.639253][T13115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.647010][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1653.673511][T13115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.727471][T13190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1653.783354][T13047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1653.827940][T13115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1653.835718][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1653.862231][T13115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.947774][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.955454][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.124956][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.132834][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1654.300932][ T2816] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1654.398445][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.485306][ T2816] usb 3-1: Using ep0 maxpacket: 32 [ 1654.535326][ T2816] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1654.543895][ T2816] usb 3-1: config 0 has no interface number 0 [ 1654.671512][T13115] hsr_slave_0: entered promiscuous mode [ 1654.703665][ T2816] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1654.715387][ T2816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.723716][ T2816] usb 3-1: Product: syz [ 1654.729239][ T2816] usb 3-1: Manufacturer: syz [ 1654.734146][ T2816] usb 3-1: SerialNumber: syz [ 1654.745221][T13115] hsr_slave_1: entered promiscuous mode [ 1654.779733][T13115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1654.788203][T13115] Cannot create hsr debugfs directory [ 1654.876085][ T2816] usb 3-1: config 0 descriptor?? [ 1654.911869][ T2816] smsc95xx v2.0.0 [ 1655.427158][ T2816] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1655.439905][ T2816] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1655.616668][T13203] loop1: detected capacity change from 0 to 16 [ 1655.704593][T13203] erofs: (device loop1): mounted with root inode @ nid 36. [ 1656.086023][ T2816] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1656.097910][ T2816] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1656.229485][T13071] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.263717][ T2816] usb 3-1: USB disconnect, device number 8 [ 1656.797803][T13209] loop0: detected capacity change from 0 to 512 [ 1656.940071][T13209] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1657.233743][T13209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1657.383634][T13115] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.529003][T13209] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1262: corrupted inode contents [ 1657.599567][T13209] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.1262: mark_inode_dirty error [ 1657.684248][T13215] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.1263'. [ 1657.713313][T13209] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1262: corrupted inode contents [ 1657.789012][T13115] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.163048][T13115] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.387335][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.522039][T13115] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.848004][T13047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1659.380854][T13115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1659.496106][T13115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1659.606347][ T7347] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1659.616331][ T7347] Bluetooth: hci6: Injecting HCI hardware error event [ 1659.628739][ T7347] Bluetooth: hci6: hardware error 0x00 [ 1659.814417][T13115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1659.944571][T13115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1660.126903][T12689] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 1660.181739][T13228] loop2: detected capacity change from 0 to 2048 [ 1660.309151][T13228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1660.706441][T13228] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1268: bg 0: block 234: padding at end of block bitmap is not set [ 1660.743454][T13228] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 76 with error 28 [ 1660.759805][T13228] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1660.759805][T13228] [ 1660.770851][T13228] EXT4-fs (loop2): Total free blocks count 0 [ 1660.777984][T13228] EXT4-fs (loop2): Free/Dirty block details [ 1660.784384][T13228] EXT4-fs (loop2): free_blocks=0 [ 1660.789872][T13228] EXT4-fs (loop2): dirty_blocks=80 [ 1660.795451][T13228] EXT4-fs (loop2): Block reservation details [ 1660.801740][T13228] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 1661.282890][T12687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.339825][ T2816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1661.577862][ T2816] usb 1-1: Using ep0 maxpacket: 32 [ 1661.630000][ T2816] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1661.639558][ T2816] usb 1-1: config 0 has no interface number 0 [ 1661.709364][T13115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.767496][ T2816] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1661.771952][ T7347] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1661.780431][ T2816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.796291][ T2816] usb 1-1: Product: syz [ 1661.800788][ T2816] usb 1-1: Manufacturer: syz [ 1661.805851][ T2816] usb 1-1: SerialNumber: syz [ 1661.858351][T13115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.969754][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.977790][T11333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1662.034052][ T2816] usb 1-1: config 0 descriptor?? [ 1662.109045][ T2816] smsc95xx v2.0.0 [ 1662.142332][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.151179][T11333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1662.156723][T13252] loop2: detected capacity change from 0 to 512 [ 1662.227946][T13252] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1662.369249][T13252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1662.545144][ T2816] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1662.557073][ T2816] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1662.579799][T13252] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1274: corrupted inode contents [ 1662.603447][T13047] veth0_vlan: entered promiscuous mode [ 1662.686809][T13252] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.1274: mark_inode_dirty error [ 1662.741611][T13252] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1274: corrupted inode contents [ 1662.780138][T13047] veth1_vlan: entered promiscuous mode [ 1663.226737][ T2816] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1663.240185][ T2816] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1663.267731][T12687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.273100][T13047] veth0_macvtap: entered promiscuous mode [ 1663.377051][ T2816] usb 1-1: USB disconnect, device number 4 [ 1663.444884][T13047] veth1_macvtap: entered promiscuous mode [ 1663.674542][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.685622][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.695877][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.706837][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.717482][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.730608][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.742554][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.753622][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.770135][T13047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.171837][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.172671][T13265] loop1: detected capacity change from 0 to 256 [ 1664.183756][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.183860][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.183969][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.184075][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.184184][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.184257][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.184359][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.275806][T13047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.626685][T13047] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.636197][T13047] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.650191][T13047] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.660175][T13047] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.391368][T13115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.103935][T13115] veth0_vlan: entered promiscuous mode [ 1666.129557][T13279] loop2: detected capacity change from 0 to 2048 [ 1666.240583][T13115] veth1_vlan: entered promiscuous mode [ 1666.350546][T13279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.593432][T13279] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1282: bg 0: block 234: padding at end of block bitmap is not set [ 1666.687327][T13279] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 176 with error 28 [ 1666.703776][T13279] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1666.703776][T13279] [ 1666.710139][T13115] veth0_macvtap: entered promiscuous mode [ 1666.714618][T13279] EXT4-fs (loop2): Total free blocks count 0 [ 1666.728943][T13279] EXT4-fs (loop2): Free/Dirty block details [ 1666.737934][T13279] EXT4-fs (loop2): free_blocks=0 [ 1666.743168][T13279] EXT4-fs (loop2): dirty_blocks=176 [ 1666.749431][T13279] EXT4-fs (loop2): Block reservation details [ 1666.756920][T13279] EXT4-fs (loop2): i_reserved_data_blocks=11 [ 1666.811305][T13115] veth1_macvtap: entered promiscuous mode [ 1666.856915][T13292] loop1: detected capacity change from 0 to 512 [ 1666.908616][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1666.920063][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.931415][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1666.942509][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.952946][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1666.963965][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.975227][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1666.976109][T13292] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1666.986893][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.009977][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1667.020870][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.037242][T13115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1667.145943][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.157377][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.167813][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.178750][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.189116][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.200481][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.216669][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.232276][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.242616][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.253460][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.269516][T13115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.331763][T13292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1667.456242][T12687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.480914][T13115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.484368][T13292] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1285: corrupted inode contents [ 1667.490256][T13115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.490496][T13115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.490769][T13115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.773287][T13292] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.1285: mark_inode_dirty error [ 1667.811894][T13298] loop0: detected capacity change from 0 to 1024 [ 1667.867763][T13292] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1285: corrupted inode contents [ 1668.085858][T13298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1668.412327][ T5240] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1668.417299][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.632623][ T5240] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1668.726668][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1668.748814][ T5240] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1668.758495][ T5240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.767632][ T5240] usb 1-1: Product: syz [ 1668.772091][ T5240] usb 1-1: Manufacturer: syz [ 1668.777237][ T5240] usb 1-1: SerialNumber: syz [ 1668.977079][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1669.050895][ T8] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1669.059814][ T8] usb 3-1: config 0 has no interface number 0 [ 1669.125064][ C0] hrtimer: interrupt took 409926 ns [ 1669.166997][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1669.178250][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.187107][ T8] usb 3-1: Product: syz [ 1669.191751][ T8] usb 3-1: Manufacturer: syz [ 1669.197103][ T8] usb 3-1: SerialNumber: syz [ 1669.297483][ T8] usb 3-1: config 0 descriptor?? [ 1669.333985][ T8] smsc95xx v2.0.0 [ 1669.825917][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1669.837483][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1669.999473][ T5240] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1670.007182][ T5240] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1670.015380][ T5240] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1670.221496][ T5240] cdc_ncm 1-1:1.0: setting tx_max = 36 [ 1670.247928][ T5240] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1670.462735][ T5245] usb 1-1: USB disconnect, device number 5 [ 1670.471375][ T5245] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1670.511909][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1670.523949][ T8] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1670.620755][ T8] usb 3-1: USB disconnect, device number 9 [ 1671.278531][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1671.441869][T13327] loop1: detected capacity change from 0 to 256 [ 1672.879985][T13344] loop1: detected capacity change from 0 to 512 [ 1672.932030][T13344] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1673.139181][T13342] loop0: detected capacity change from 0 to 2048 [ 1673.222678][T13344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1673.226451][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.245968][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.283415][T13342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1673.449737][T13344] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1296: corrupted inode contents [ 1673.476285][T13344] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.1296: mark_inode_dirty error [ 1673.544490][T13344] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1296: corrupted inode contents [ 1673.598401][T11333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.607045][T11333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.828333][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.967362][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.505176][T13362] loop4: detected capacity change from 0 to 128 [ 1674.578001][T13362] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1674.912595][T13370] loop1: detected capacity change from 0 to 1024 [ 1674.961801][ T5245] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1675.030636][T13370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.167380][ T5245] usb 3-1: Using ep0 maxpacket: 32 [ 1675.231160][ T5245] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1675.239732][ T5245] usb 3-1: config 0 has no interface number 0 [ 1675.300390][ T5245] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1675.310008][ T5245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.318522][ T5245] usb 3-1: Product: syz [ 1675.323411][ T5245] usb 3-1: Manufacturer: syz [ 1675.328565][ T5245] usb 3-1: SerialNumber: syz [ 1675.360383][ T3140] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1675.443240][ T5245] usb 3-1: config 0 descriptor?? [ 1675.482258][ T5245] smsc95xx v2.0.0 [ 1675.500720][ T2816] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1675.747846][ T2816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1675.837230][ T2816] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1675.847114][ T2816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.855915][ T2816] usb 2-1: Product: syz [ 1675.860537][ T2816] usb 2-1: Manufacturer: syz [ 1675.865970][ T2816] usb 2-1: SerialNumber: syz [ 1675.985844][ T5245] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1675.997788][ T5245] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1676.223746][ T5245] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1676.236213][ T5245] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1676.513463][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.526176][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.755903][T13381] overlayfs: missing 'workdir' [ 1676.791730][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.800668][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.905977][T13383] loop0: detected capacity change from 0 to 256 [ 1677.215362][ T2816] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1677.222336][ T2816] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1677.230262][ T2816] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1677.465692][ T2816] cdc_ncm 2-1:1.0: setting tx_max = 36 [ 1677.483980][ T2816] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1677.685716][T13350] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1677.709074][ T2816] usb 2-1: USB disconnect, device number 10 [ 1677.716850][ T2816] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1677.924467][ T8] usb 3-1: USB disconnect, device number 10 [ 1678.630360][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.658613][T13392] loop0: detected capacity change from 0 to 512 [ 1678.693743][T13392] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1678.727754][T13395] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1678.756369][T13395] CIFS mount error: No usable UNC path provided in device string! [ 1678.756369][T13395] [ 1678.766902][T13395] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1678.802412][T13396] loop4: detected capacity change from 0 to 16 [ 1678.803368][T13390] loop2: detected capacity change from 0 to 2048 [ 1678.855356][T13396] erofs: (device loop4): mounted with root inode @ nid 36. [ 1678.888277][T13392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1678.968349][T13390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1679.100527][T13392] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1308: corrupted inode contents [ 1679.192589][T13392] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.1308: mark_inode_dirty error [ 1679.240049][T13390] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1307: bg 0: block 234: padding at end of block bitmap is not set [ 1679.259828][T13405] loop1: detected capacity change from 0 to 1024 [ 1679.270220][T13392] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1308: corrupted inode contents [ 1679.337769][T13390] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 106 with error 117 [ 1679.353214][T13390] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1679.353214][T13390] [ 1679.481675][T13405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1679.822560][T12734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.906521][T12687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.019182][ T13] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1680.094650][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1680.112848][ T13] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1680.112848][ T13] [ 1680.125224][ T13] EXT4-fs (loop1): Total free blocks count 0 [ 1680.131512][ T13] EXT4-fs (loop1): Free/Dirty block details [ 1680.138342][ T13] EXT4-fs (loop1): free_blocks=68451041280 [ 1680.144525][ T13] EXT4-fs (loop1): dirty_blocks=64 [ 1680.150119][ T13] EXT4-fs (loop1): Block reservation details [ 1680.156525][ T13] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 1680.398012][T12508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.990572][T13427] loop3: detected capacity change from 0 to 256 [ 1681.076017][ T5240] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1681.345207][ T5240] usb 5-1: Using ep0 maxpacket: 32 [ 1681.375781][ T5240] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1681.384351][ T5240] usb 5-1: config 0 has no interface number 0 [ 1681.473482][ T5240] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1681.483757][ T5240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.492604][ T5240] usb 5-1: Product: syz [ 1681.497593][ T5240] usb 5-1: Manufacturer: syz [ 1681.502461][ T5240] usb 5-1: SerialNumber: syz [ 1681.520595][ T5240] usb 5-1: config 0 descriptor?? [ 1681.559578][ T5240] smsc95xx v2.0.0 [ 1682.035549][ T5240] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1682.047039][ T5240] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1682.071350][T13424] ===================================================== [ 1682.079066][T13424] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 [ 1682.090631][T13424] _copy_to_user+0xbc/0x110 [ 1682.097237][T13424] raw_ioctl+0x3d28/0x5440 [ 1682.101938][T13424] __se_compat_sys_ioctl+0x785/0x1080 [ 1682.107752][T13424] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1682.113296][T13424] ia32_sys_call+0x32a2/0x40d0 [ 1682.118541][T13424] __do_fast_syscall_32+0xb0/0x110 [ 1682.123893][T13424] do_fast_syscall_32+0x38/0x80 [ 1682.129157][T13424] do_SYSENTER_32+0x1f/0x30 [ 1682.133904][T13424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1682.140757][T13424] [ 1682.143215][T13424] Uninit was created at: [ 1682.148425][T13424] __kmalloc_noprof+0x661/0xf30 [ 1682.157591][T13424] raw_ioctl+0x3bc5/0x5440 [ 1682.162295][T13424] __se_compat_sys_ioctl+0x785/0x1080 [ 1682.169517][T13424] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1682.175171][T13424] ia32_sys_call+0x32a2/0x40d0 [ 1682.180246][T13424] __do_fast_syscall_32+0xb0/0x110 [ 1682.185775][T13424] do_fast_syscall_32+0x38/0x80 [ 1682.190847][T13424] do_SYSENTER_32+0x1f/0x30 [ 1682.197218][T13424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1682.204027][T13424] [ 1682.206698][T13424] Bytes 0-3 of 4 are uninitialized [ 1682.211988][T13424] Memory access of size 4 starts at ffff88801b4f6868 [ 1682.218978][T13424] Data copied to user address 00000000f56c4550 [ 1682.225408][T13424] [ 1682.228244][T13424] CPU: 1 UID: 0 PID: 13424 Comm: syz.4.1317 Not tainted 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 1682.239096][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1682.249761][T13424] ===================================================== [ 1682.262118][T13424] Disabling lock debugging due to kernel taint [ 1682.269783][T13424] Kernel panic - not syncing: kmsan.panic set ... [ 1682.276583][T13424] CPU: 1 UID: 0 PID: 13424 Comm: syz.4.1317 Tainted: G B 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 1682.288766][T13424] Tainted: [B]=BAD_PAGE [ 1682.293482][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1682.303811][T13424] Call Trace: [ 1682.307271][T13424] [ 1682.310365][T13424] dump_stack_lvl+0x216/0x2d0 [ 1682.315287][T13424] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1682.321415][T13424] dump_stack+0x1e/0x30 [ 1682.325794][T13424] panic+0x4e2/0xcf0 [ 1682.329968][T13424] ? kmsan_get_metadata+0x61/0x1c0 [ 1682.335406][T13424] kmsan_report+0x2c7/0x2d0 [ 1682.340210][T13424] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1682.346333][T13424] ? kmsan_internal_check_memory+0x48c/0x560 [ 1682.352594][T13424] ? kmsan_copy_to_user+0xd5/0xf0 [ 1682.357900][T13424] ? _copy_to_user+0xbc/0x110 [ 1682.362831][T13424] ? raw_ioctl+0x3d28/0x5440 [ 1682.367773][T13424] ? __se_compat_sys_ioctl+0x785/0x1080 [ 1682.373580][T13424] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 1682.379301][T13424] ? ia32_sys_call+0x32a2/0x40d0 [ 1682.384530][T13424] ? __do_fast_syscall_32+0xb0/0x110 [ 1682.390051][T13424] ? do_fast_syscall_32+0x38/0x80 [ 1682.395314][T13424] ? do_SYSENTER_32+0x1f/0x30 [ 1682.400217][T13424] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1682.407023][T13424] ? kmsan_get_metadata+0x13e/0x1c0 [ 1682.412535][T13424] ? kmsan_get_metadata+0x13e/0x1c0 [ 1682.418035][T13424] ? kmsan_get_metadata+0x13e/0x1c0 [ 1682.423536][T13424] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1682.429647][T13424] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 1682.435298][T13424] ? filter_irq_stacks+0x60/0x1a0 [ 1682.440617][T13424] ? kmsan_get_metadata+0x13e/0x1c0 [ 1682.446108][T13424] ? kmsan_get_metadata+0x13e/0x1c0 [ 1682.451612][T13424] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1682.457747][T13424] kmsan_internal_check_memory+0x48c/0x560 [ 1682.463853][T13424] kmsan_copy_to_user+0xd5/0xf0 [ 1682.468988][T13424] ? should_fail_usercopy+0x2e/0x40 [ 1682.474501][T13424] _copy_to_user+0xbc/0x110 [ 1682.479270][T13424] raw_ioctl+0x3d28/0x5440 [ 1682.483961][T13424] ? kmsan_get_metadata+0x13e/0x1c0 [ 1682.489461][T13424] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1682.495568][T13424] ? do_vfs_ioctl+0x14fc/0x3e80 [ 1682.501053][T13424] ? kmsan_get_metadata+0x60/0x1c0 [ 1682.506481][T13424] ? __pfx_raw_ioctl+0x10/0x10 [ 1682.511516][T13424] __se_compat_sys_ioctl+0x785/0x1080 [ 1682.517241][T13424] ? kmsan_get_metadata+0x13e/0x1c0 [ 1682.522730][T13424] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1682.529351][T13424] ? kmsan_get_metadata+0x13e/0x1c0 [ 1682.534844][T13424] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1682.540398][T13424] ia32_sys_call+0x32a2/0x40d0 [ 1682.545457][T13424] __do_fast_syscall_32+0xb0/0x110 [ 1682.550807][T13424] ? irqentry_exit+0x16/0x60 [ 1682.555671][T13424] do_fast_syscall_32+0x38/0x80 [ 1682.560751][T13424] do_SYSENTER_32+0x1f/0x30 [ 1682.565488][T13424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1682.572118][T13424] RIP: 0023:0xf73dd579 [ 1682.576385][T13424] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1682.596363][T13424] RSP: 002b:00000000f56c4504 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1682.605120][T13424] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0085504 [ 1682.613312][T13424] RDX: 00000000f56c4548 RSI: 00000000f73cbff4 RDI: 00000000f56c4550 [ 1682.621491][T13424] RBP: 00000000f73cbff4 R08: 0000000000000000 R09: 0000000000000000 [ 1682.629670][T13424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1682.637853][T13424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1682.646049][T13424] [ 1682.649571][T13424] Kernel Offset: disabled [ 1682.653992][T13424] Rebooting in 86400 seconds..