last executing test programs: 1m26.471180605s ago: executing program 3 (id=74): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) 1m26.082131685s ago: executing program 3 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f00000004c0), 0x214000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m25.820298489s ago: executing program 3 (id=77): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 1m25.587281831s ago: executing program 3 (id=78): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x2, 0x5505, &(0x7f0000002480)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1m23.547346407s ago: executing program 3 (id=82): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r3, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r3, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom(r2, 0x0, 0x0, 0x10, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="80") preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x8, 0x1) 1m20.860966226s ago: executing program 3 (id=90): r0 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 1m20.150770543s ago: executing program 32 (id=90): r0 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 53.666812217s ago: executing program 1 (id=135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e00003a3a5f5f0c0003"], 0x30}}, 0x0) 53.391034331s ago: executing program 1 (id=136): unshare(0x64000600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 52.651181439s ago: executing program 1 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r7, {0xf}, {0xffff}, {0x2, 0xffec}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0xb, 0x6, 0x2, 0x8, 0x2, 0x40, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd05, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x6], [0xfff1, 0x100, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xfff7, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) 51.293223619s ago: executing program 1 (id=141): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x14100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000000000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f00000001c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@fat=@quiet}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@fat=@flush}]}, 0x29, 0x33e, &(0x7f0000000480)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(r4, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)={0x4, 0x2, 0x100000, {r4}}, 0x20) 49.711033302s ago: executing program 1 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="2e6526f3420fc7fa66baa100b80c7758e4c610c6100fd425d092ca4c2e460f782cfab8010000000f01c1676540ab0fc71ab923020000b840a50000ba000000000f30400f00d0b9d10800000f32", 0x4d}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.179246979s ago: executing program 1 (id=146): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.669869495s ago: executing program 33 (id=146): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.776863387s ago: executing program 5 (id=234): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x247, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) unlinkat(r0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, '\x00', @c}) 17.128140361s ago: executing program 5 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x60c42, 0x5) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) socket$tipc(0x1e, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 16.789814419s ago: executing program 5 (id=238): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x4, &(0x7f0000000140)={0x80000008, 0x8b}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r5) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) 15.337956584s ago: executing program 5 (id=240): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) writev(r0, &(0x7f0000004480)=[{0x0}, {&(0x7f0000002100)='|', 0x1}], 0x2) 15.143166854s ago: executing program 5 (id=241): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x200000b0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = fcntl$dupfd(r2, 0x406, r2) accept4$packet(r3, 0x0, &(0x7f0000000100), 0x80000) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) 13.239150793s ago: executing program 2 (id=250): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e0000000b0020"], 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x1ffff, 0x1c, 0x1, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.795253046s ago: executing program 2 (id=253): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0xfffffffe, 0x4}, 0x48) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x4d3, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209000002"], 0x10}, 0x1, 0xfdffffff}, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) syz_open_pts(r4, 0x34000) 10.265604157s ago: executing program 2 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x2, 0x5001) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000180)) setrlimit(0x2, &(0x7f00000000c0)={0x4000, 0x2400000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x51}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r3, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x880) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 8.849572301s ago: executing program 2 (id=259): r0 = syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e01000606060509000600040007000300390c2402050302060254df000a092402050001031f04092403", @ANYRESHEX=0x0], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000440), &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0xa85}}}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000ac0)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "cf4d3ea7e751e7cfa34e04ac4514a99d909e29032a10161158f2b12c5fcbf3bfa66e4fcf74de4bd7fb47f84cab45d8729e647ce0f4f47cf5942a62d91b585a64dd27d20bd5f94258aaf4a22942"}}}, 0x0) 7.030509515s ago: executing program 0 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f0000000300)={0x0, 0xfb, 0xa2, 0x6, 0xe, "d17edeaeb972280b16412cff26786e08", "8e6b99926578720dd8db4ef1cb439e9dc39f9bd516863292b9f4a2546e2aed96f0058928349a2c0019ddf20d1e00f1528e9abb8e27d992f1aef0f3944edce0b782775765aedc3cfeef1e5d6a87f9c363da3d8be21247b05521a3993fe47c6d0d3ba0e47e8e34940f29b7ed60c58d76f3152435ada22d854c10d7c738fd406e9ea061f87f52eb7c5f9f2c8351c7"}, 0xa2, 0x1) 6.15939959s ago: executing program 0 (id=263): write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b884030002ab087a0100000000481093210001c0f0030584050060100000000000039815fa2c53c2", 0x34) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 5.863250056s ago: executing program 4 (id=264): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) 5.77428206s ago: executing program 2 (id=265): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001ac0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@noblock_validity}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r0, &(0x7f0000000180)=""/103, 0x67) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4.647429108s ago: executing program 0 (id=266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0xf0, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}}, 0xf0}}, 0x40004) 4.647015868s ago: executing program 4 (id=267): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa3) 4.447357169s ago: executing program 0 (id=268): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capget(0x0, 0x0) capget(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4.401503191s ago: executing program 2 (id=269): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xfffffffd}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x5c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4.337572344s ago: executing program 4 (id=270): connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) sched_setaffinity(0x0, 0x0, 0x0) userfaultfd(0x80001) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e27, 0x1000, @empty, 0x5}, 0x1c) pread64(r1, &(0x7f0000000140)=""/245, 0xf5, 0x4) 3.385401744s ago: executing program 0 (id=271): socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 3.183284554s ago: executing program 4 (id=272): syz_emit_ethernet(0xb6, &(0x7f00000004c0)={@link_local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x78, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9b5e, {0xe, 0x6, "90f26f", 0x5, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, [@srh={0x32, 0x8, 0x4, 0x4, 0xd, 0x68, 0x7, [@private2, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0x8}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbfd, {0xa}, [@NDA_VNI={0x8, 0x7, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x30008840}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50083, 0x86c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0x72fa, 0x40, 0xfffffbfe, 0x1bf}) close_range(r2, r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000280), 0x4, 0x0) 2.970162956s ago: executing program 5 (id=273): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x208240, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0xa4b6, 0x1, 0xc}, 0xb, 0x4, 0x32, 0x5, 0xb, 0x7, 0x9, 0x1a, 0x8, 0xffffff5c, {0xffff1c72, 0x23, 0x4, 0x6, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x24044000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.858841543s ago: executing program 0 (id=274): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f0000000800)="$eJzs2M1rXOUeB/DfOZnkpm1uJ733Lm7vphcrtCCdvLWhqSCtC0EQLBRcqRjsJA2ZNCWToskqxaUuXAgqImg3LkSahdCN1IjgH6Ab+y8IoqILF8LImUxeSCcv1qQPTT8feGaelzn5/p4kc5hnAnhk/b94yCJ6IqI/Isqt+Twiupq97oiF5dfdGlq8UrQsGo1LP2XFZXFzaPHKys/KWs+HonlJnIyIp5/J4t9v3Jtbn5ufHK3VqjOtcd/s1LW++tz8qYmp0fHqePXq4ODZMyOnB4aHR3ZtrwN98fLXn59/YeHC9c/6X5yeLOrtaa2t38duytrMlSLipb0IS6CjtZ+OdXNZKWFBAABsqfic/6+IeKz5Ga4cHbH24a0cd79MWhwAAACwKxrHGgAAAMA+l/r7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg6NRhYNAAAAYF9L/f0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl5tDi1dW2oPM/fFCRPQu599qteWVUiw0n7ujMyIO/ppFad11WUT070L+wo2I+G+7/WfN/N7obo425ucRcTFx/iu7kA+PsqXi/nO+3fsvX73/RJv3X2n5sr9t5f53657731p+xyb3v2s7zPjku+ff2jT/RsT/Su3ys9X8bH1+51r+wg7z7zx39P3N1hofR5yI9vkril7f7NS1vvrc/KmJqdHx6nj16uDg2TMjpweGh0f6xiZq1f7lx7YZH3765jdb7f/gZvlZbPn7f3uH+z9+5MkvPtoi/+Txrf/+WZv8oqbFotPYPv+Xbw//sdlakX95k/1vlV/MLW0f3fTs7Yu3d/hSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2iTwieiLLK6v9PK9UIg5FxH/iYF6brs8+MTZ9/erlYi2iNzrzsYlatT8iysvjrBgPNPtr48EN46GIOBIR75QPNMeVV6drl1NvHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFWHIqInsrwSEXlE/FbO80oldVUAAADArutNXQAAAACw55z/AQAAYP/b9vx/56kHUwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD71ZFjS3eziFg4d6DZCl2ttc6klQF7LU9dAJBMR+oCgGRKqQsAknHGB7Jt1rvvYwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/efE0aW7WUQsnDvQbIWu1lpn0sqAvZanLgBIpiN1AUAypdQFAMk44wPZNuvd97ECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP7T02xZXomIvNnP80ol4p8R0Rud2dhErdofEYcj4vty5z+K8UDqogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh19bn5ydFarTqjo/NwdL7yT/sgOqnvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApFCfm58crdWqM/XUlQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJBW/kMWEUU7UX68Z+NqV/Z7ufkcEa99cOnd10dnZ2cGivmfV+dn32vND6aoHwAAANho5Zy+co4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYqfrc/ORorVad2cNO6j0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/NnwEAAP//hsSitA==") chdir(&(0x7f0000000240)='./file0\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x5}, 0x3c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) 1.027349606s ago: executing program 4 (id=275): write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b884030002ab087a0100000000481093210001c0f0030584050060100000000000039815fa2c53c2", 0x34) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 0s ago: executing program 4 (id=276): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 69.391636][ T5757] cgroup: Unknown subsys name 'net' [ 69.559794][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.269329][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.755718][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.762240][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.955410][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.972934][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.992718][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.006451][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.014049][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.016772][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.030819][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.039737][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.047403][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.047971][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.062753][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.071257][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.072077][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.080472][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.092116][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.100080][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.107959][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.116403][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.125389][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.134794][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.142314][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.150551][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.158793][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.166551][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.568951][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 73.676802][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 73.720361][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 73.761180][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.769422][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.777085][ T5770] bridge_slave_0: entered allmulticast mode [ 73.784907][ T5770] bridge_slave_0: entered promiscuous mode [ 73.798896][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.806192][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.814028][ T5770] bridge_slave_1: entered allmulticast mode [ 73.821030][ T5770] bridge_slave_1: entered promiscuous mode [ 73.861922][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 73.920520][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.954028][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.032469][ T5770] team0: Port device team_slave_0 added [ 74.050154][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.057454][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.065181][ T5769] bridge_slave_0: entered allmulticast mode [ 74.072269][ T5769] bridge_slave_0: entered promiscuous mode [ 74.086445][ T5770] team0: Port device team_slave_1 added [ 74.103127][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.110279][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.120198][ T5772] bridge_slave_0: entered allmulticast mode [ 74.127185][ T5772] bridge_slave_0: entered promiscuous mode [ 74.136103][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.144694][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.151971][ T5769] bridge_slave_1: entered allmulticast mode [ 74.158746][ T5769] bridge_slave_1: entered promiscuous mode [ 74.194587][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.202060][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.209238][ T5772] bridge_slave_1: entered allmulticast mode [ 74.217186][ T5772] bridge_slave_1: entered promiscuous mode [ 74.246530][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.253842][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.280175][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.293907][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.300910][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.327342][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.347445][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.357263][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.365028][ T5771] bridge_slave_0: entered allmulticast mode [ 74.374650][ T5771] bridge_slave_0: entered promiscuous mode [ 74.384379][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.396731][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.433918][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.441090][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.450946][ T5771] bridge_slave_1: entered allmulticast mode [ 74.458021][ T5771] bridge_slave_1: entered promiscuous mode [ 74.510211][ T5770] hsr_slave_0: entered promiscuous mode [ 74.517071][ T5770] hsr_slave_1: entered promiscuous mode [ 74.528822][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.540741][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.563427][ T5769] team0: Port device team_slave_0 added [ 74.587535][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.599717][ T5769] team0: Port device team_slave_1 added [ 74.617533][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.659629][ T5772] team0: Port device team_slave_0 added [ 74.668854][ T5772] team0: Port device team_slave_1 added [ 74.725148][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.735460][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.761917][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.776177][ T5771] team0: Port device team_slave_0 added [ 74.785681][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.792833][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.819117][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.838399][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.845454][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.871499][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.884194][ T5771] team0: Port device team_slave_1 added [ 74.897393][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.904934][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.930959][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.984709][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.992237][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.018575][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.041288][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.048347][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.074993][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.102780][ T5775] Bluetooth: hci2: command tx timeout [ 75.113305][ T5769] hsr_slave_0: entered promiscuous mode [ 75.119879][ T5769] hsr_slave_1: entered promiscuous mode [ 75.126831][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.134885][ T5769] Cannot create hsr debugfs directory [ 75.181912][ T5775] Bluetooth: hci3: command tx timeout [ 75.246157][ T5772] hsr_slave_0: entered promiscuous mode [ 75.252793][ T5772] hsr_slave_1: entered promiscuous mode [ 75.259317][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.268147][ T5772] Cannot create hsr debugfs directory [ 75.272011][ T5775] Bluetooth: hci1: command tx timeout [ 75.279742][ T5775] Bluetooth: hci0: command tx timeout [ 75.369724][ T5771] hsr_slave_0: entered promiscuous mode [ 75.382446][ T5771] hsr_slave_1: entered promiscuous mode [ 75.389514][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.397403][ T5771] Cannot create hsr debugfs directory [ 75.614143][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.639835][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.667856][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.678851][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.768959][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.781305][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.796591][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.809441][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.905856][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.920612][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.934928][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.946576][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.065695][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.079200][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.090301][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.115992][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.136066][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.184235][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.206318][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.220606][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.227989][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.259855][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.267066][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.333644][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.364261][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.371498][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.401484][ T5769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.414034][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.434179][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.441842][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.474240][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.561541][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.608831][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.616041][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.648031][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.655266][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.740101][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.780579][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.830378][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.880814][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.888077][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.939035][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.953226][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.960346][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.998622][ T5769] veth0_vlan: entered promiscuous mode [ 77.057370][ T5769] veth1_vlan: entered promiscuous mode [ 77.135765][ T5770] veth0_vlan: entered promiscuous mode [ 77.156456][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.182498][ T5775] Bluetooth: hci2: command tx timeout [ 77.189593][ T5770] veth1_vlan: entered promiscuous mode [ 77.215525][ T5769] veth0_macvtap: entered promiscuous mode [ 77.236844][ T5769] veth1_macvtap: entered promiscuous mode [ 77.283449][ T5775] Bluetooth: hci3: command tx timeout [ 77.314668][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.354620][ T5775] Bluetooth: hci0: command tx timeout [ 77.360148][ T5775] Bluetooth: hci1: command tx timeout [ 77.391116][ T5770] veth0_macvtap: entered promiscuous mode [ 77.403579][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.427460][ T5770] veth1_macvtap: entered promiscuous mode [ 77.460590][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.478217][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.489185][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.499844][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.546314][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.562985][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.576393][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.600991][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.615243][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.627698][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.665664][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.687870][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.705520][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.715339][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.724317][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.745216][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.796765][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.826938][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.887756][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.897343][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.970710][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.989599][ T5772] veth0_vlan: entered promiscuous mode [ 77.989672][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.023757][ T5771] veth0_vlan: entered promiscuous mode [ 78.051362][ T5771] veth1_vlan: entered promiscuous mode [ 78.082774][ T5772] veth1_vlan: entered promiscuous mode [ 78.090938][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.113440][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.161768][ T5771] veth0_macvtap: entered promiscuous mode [ 78.235159][ T5833] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.236139][ T5771] veth1_macvtap: entered promiscuous mode [ 78.270333][ T5772] veth0_macvtap: entered promiscuous mode [ 78.293731][ T5772] veth1_macvtap: entered promiscuous mode [ 78.387084][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.409155][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.424260][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.436144][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.455838][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.503156][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.517491][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.528442][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.539069][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.549346][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.554127][ T5838] Zero length message leads to an empty skb [ 78.560296][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.578949][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.590770][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.608885][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.619439][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.630441][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.641549][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.657660][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.669621][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.687757][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.697204][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.771522][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.804825][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.815627][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.826496][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.858367][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.872071][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.892626][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.976869][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.011340][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.025416][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.050598][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.199318][ T5845] ======================================================= [ 79.199318][ T5845] WARNING: The mand mount option has been deprecated and [ 79.199318][ T5845] and is ignored by this kernel. Remove the mand [ 79.199318][ T5845] option from the mount to silence this warning. [ 79.199318][ T5845] ======================================================= [ 79.292055][ T5775] Bluetooth: hci2: command tx timeout [ 79.342697][ T5775] Bluetooth: hci3: command tx timeout [ 79.431983][ T5775] Bluetooth: hci1: command tx timeout [ 79.437806][ T5775] Bluetooth: hci0: command tx timeout [ 79.931992][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.940492][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.077062][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.097483][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.132158][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.144908][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.212748][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.245313][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.492920][ T5853] syz.1.2[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.549395][ T5853] loop1: detected capacity change from 0 to 128 [ 80.671605][ T5853] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.710432][ T5853] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.757720][ T5853] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x1b) [ 81.121455][ T5866] loop2: detected capacity change from 0 to 512 [ 81.129808][ T5866] ext4: Unknown parameter 'uid<00000000000000000000' [ 81.616591][ T5785] Bluetooth: hci3: command tx timeout [ 81.622350][ T5785] Bluetooth: hci0: command tx timeout [ 81.627999][ T5785] Bluetooth: hci1: command tx timeout [ 81.651847][ T5775] Bluetooth: hci2: command tx timeout [ 81.820623][ C0] sched: RT throttling activated [ 83.339083][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.129355][ T5877] loop1: detected capacity change from 0 to 512 [ 84.166752][ T5877] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.237164][ T5877] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 84.263728][ T5877] Quota error (device loop1): write_blk: dquota write failed [ 84.279127][ T5877] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 84.289030][ T5877] Quota error (device loop1): write_blk: dquota write failed [ 84.304915][ T5877] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 84.319600][ T5877] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.11: Failed to acquire dquot type 1 [ 84.337378][ T5877] EXT4-fs (loop1): 1 truncate cleaned up [ 84.347604][ T5877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.530897][ T5881] loop2: detected capacity change from 0 to 128 [ 84.811539][ T5881] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.850124][ T5881] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.244184][ T5887] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.416675][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.817541][ T27] cfg80211: failed to load regulatory.db [ 87.960124][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.276226][ T5900] loop0: detected capacity change from 0 to 16 [ 88.339274][ T5900] erofs: (device loop0): mounted with root inode @ nid 36. [ 88.557847][ T5900] syz.0.19: attempt to access beyond end of device [ 88.557847][ T5900] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 88.683005][ T5900] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 88.774868][ T5909] netlink: 277 bytes leftover after parsing attributes in process `syz.1.18'. [ 88.875826][ T28] audit: type=1800 audit(1776613727.449:2): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.19" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 89.821573][ T5916] loop0: detected capacity change from 0 to 1024 [ 89.826245][ T5918] loop3: detected capacity change from 0 to 128 [ 89.912338][ T5916] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 90.072692][ T5916] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.21: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.154031][ T5916] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 90.171865][ T5916] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.21: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.291457][ T5929] loop2: detected capacity change from 0 to 512 [ 90.355482][ T5929] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.368812][ T5929] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.395798][ T5916] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 90.475578][ T5929] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.24: corrupted xattr entries [ 90.524833][ T5929] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.562426][ T5929] EXT4-fs (loop2): 1 truncate cleaned up [ 90.577726][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.477787][ T5916] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.21: Failed to acquire dquot type 0 [ 91.567737][ T5916] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 91.631583][ T5918] EXT4-fs (loop3): Test dummy encryption mode enabled [ 91.672176][ T5916] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.21: mark_inode_dirty error [ 91.732772][ T5918] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.770930][ T5916] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 91.812418][ T5916] EXT4-fs (loop0): 1 orphan inode deleted [ 91.813617][ T5918] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.820204][ T5916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.218218][ T5918] fscrypt (loop3): Error allocating 'xts(aes)' transform: -4 [ 92.669165][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.679823][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.690035][ T2955] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.707516][ T2955] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 92.716320][ T2955] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 92.739937][ T5769] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 92.756168][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.831871][ T5769] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 92.869806][ T5769] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 93.029694][ T5946] mmap: syz.2.28 (5946): VmData 37859328 exceed data ulimit 16384. Update limits or use boot option ignore_rlimit_data. [ 94.093209][ T5962] loop3: detected capacity change from 0 to 512 [ 94.148987][ T5962] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.201942][ T5962] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.31: dx entry: limit 0 != root limit 125 [ 94.217280][ T5962] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.31: Corrupt directory, running e2fsck is recommended [ 94.236255][ T5962] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 94.239424][ T5969] loop2: detected capacity change from 0 to 512 [ 94.275324][ T5962] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.31: corrupted in-inode xattr: invalid ea_ino [ 94.321073][ T5962] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.31: couldn't read orphan inode 15 (err -117) [ 94.344445][ T5969] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.372037][ T5969] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 94.383016][ T5962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.422131][ T5969] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 94.434295][ T5962] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.464174][ T5969] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 94.494341][ T5969] System zones: 0-2, 18-18, 34-35 [ 94.504099][ T5969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.539885][ T5973] loop1: detected capacity change from 0 to 1024 [ 94.580945][ T5969] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 94.586206][ T5973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.682910][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.745692][ T5973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.839030][ T5979] loop0: detected capacity change from 0 to 4096 [ 94.849503][ T5979] EXT4-fs (loop0): Test dummy encryption mode enabled [ 94.926788][ T5979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.106811][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.803435][ T5869] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.971676][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.035374][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 96.081071][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.106201][ T5869] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.135721][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 96.161651][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.242416][ T5869] usb 3-1: config 0 descriptor?? [ 96.545101][ T5981] kvm: pic: level sensitive irq not supported [ 96.545374][ T5981] kvm: pic: level sensitive irq not supported [ 96.557384][ T5981] kvm: pic: level sensitive irq not supported [ 96.564212][ T5981] kvm: pic: single mode not supported [ 96.580293][ T5981] kvm: pic: single mode not supported [ 96.585874][ T5981] kvm: pic: level sensitive irq not supported [ 96.602346][ T5981] kvm: pic: single mode not supported [ 96.618633][ T5981] kvm: pic: level sensitive irq not supported [ 96.644694][ T5981] kvm: pic: single mode not supported [ 96.650982][ T5981] kvm: pic: single mode not supported [ 96.951319][ T5869] usb 3-1: USB disconnect, device number 2 [ 96.982285][ T6011] loop1: detected capacity change from 0 to 256 [ 97.059213][ T6011] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 97.382064][ T787] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.571990][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 97.585026][ T787] usb 1-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 98.095351][ T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.108600][ T787] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.118218][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.141233][ T787] usb 1-1: Product: syz [ 98.159079][ T787] usb 1-1: Manufacturer: syz [ 98.178975][ T787] usb 1-1: SerialNumber: syz [ 98.400567][ T2129] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.468064][ T6051] loop2: detected capacity change from 0 to 256 [ 98.550302][ T6051] FAT-fs (loop2): Directory bread(block 64) failed [ 98.557671][ T6051] FAT-fs (loop2): Directory bread(block 65) failed [ 98.566823][ T6051] FAT-fs (loop2): Directory bread(block 66) failed [ 98.574210][ T6051] FAT-fs (loop2): Directory bread(block 67) failed [ 98.583123][ T6051] FAT-fs (loop2): Directory bread(block 68) failed [ 98.589706][ T6051] FAT-fs (loop2): Directory bread(block 69) failed [ 98.596931][ T6051] FAT-fs (loop2): Directory bread(block 70) failed [ 98.603887][ T2129] usb 4-1: Using ep0 maxpacket: 32 [ 98.609131][ T6051] FAT-fs (loop2): Directory bread(block 71) failed [ 98.624234][ T2129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.640140][ T6051] FAT-fs (loop2): Directory bread(block 72) failed [ 98.640169][ T787] usb 1-1: 0:2 : does not exist [ 98.652242][ T2129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.667778][ T6051] FAT-fs (loop2): Directory bread(block 73) failed [ 98.681885][ T2129] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.697336][ T6053] loop1: detected capacity change from 0 to 512 [ 98.698175][ T2129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.737457][ T6053] ext4: Unknown parameter 'noacl' [ 98.741261][ T2129] usb 4-1: config 0 descriptor?? [ 98.793270][ T2129] hub 4-1:0.0: USB hub found [ 98.857782][ T787] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 98.986188][ T787] usb 1-1: USB disconnect, device number 2 [ 98.987420][ T2129] hub 4-1:0.0: 1 port detected [ 99.108772][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.161384][ T6059] loop2: detected capacity change from 0 to 256 [ 99.175800][ T6059] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.215538][ T6059] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 99.317368][ T6059] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 99.637801][ T2129] hub 4-1:0.0: activate --> -90 [ 99.838569][ T2129] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 99.853861][ T5869] usb 4-1: Failed to suspend device, error -71 [ 99.860405][ T2129] usb 4-1: USB disconnect, device number 2 [ 100.689942][ T6077] loop3: detected capacity change from 0 to 128 [ 100.755096][ T6077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 100.819171][ T6077] System zones: 1-3, 19-19, 35-36 [ 100.832577][ T6077] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.895669][ T6077] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.501566][ T6085] process 'syz.3.65' launched './file0' with NULL argv: empty string added [ 101.549515][ T6084] xt_TCPMSS: Only works on TCP SYN packets [ 101.601850][ T5773] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.811825][ T5773] usb 3-1: Using ep0 maxpacket: 16 [ 101.823877][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.835746][ T5773] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.873043][ T5773] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.888897][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.915911][ T5773] usb 3-1: config 0 descriptor?? [ 103.151422][ T5773] HID 045e:07da: Invalid code 65791 type 1 [ 103.222530][ T5773] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 103.256657][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.301346][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.302635][ T5773] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 103.532913][ T5773] usb 3-1: USB disconnect, device number 3 [ 103.630761][ T6102] fido_id[6102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 103.963548][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.326891][ T6112] loop3: detected capacity change from 0 to 256 [ 104.414912][ T6112] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 105.805444][ T6127] loop0: detected capacity change from 0 to 128 [ 105.849144][ T6127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 105.887995][ T6127] System zones: 1-3, 19-19, 35-36 [ 105.943875][ T6127] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 106.004510][ T6127] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.209801][ T6122] loop3: detected capacity change from 0 to 40427 [ 106.267777][ T6122] F2FS-fs (loop3): invalid crc value [ 106.322139][ T6122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.562324][ T6122] F2FS-fs (loop3): Start checkpoint disabled! [ 106.590106][ T6122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 107.109404][ T5771] syz-executor: attempt to access beyond end of device [ 107.109404][ T5771] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 107.142806][ T6138] xt_TCPMSS: Only works on TCP SYN packets [ 107.177913][ T5771] syz-executor: attempt to access beyond end of device [ 107.177913][ T5771] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 107.683621][ T49] kworker/u4:3: attempt to access beyond end of device [ 107.683621][ T49] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 107.727223][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 107.749489][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 107.792830][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 107.799803][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 108.125922][ T6142] loop2: detected capacity change from 0 to 1024 [ 108.206254][ T6142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.442351][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.466702][ T6148] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.84: Invalid inode bitmap blk 11525046663240281844 in block_group 0 [ 108.520899][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.474691][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.565345][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.729374][ T6158] loop2: detected capacity change from 0 to 512 [ 109.776480][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.939123][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.608244][ T6154] loop1: detected capacity change from 0 to 40427 [ 110.657556][ T6154] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 110.680983][ T6154] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 110.717693][ T6166] loop2: detected capacity change from 0 to 1024 [ 110.742911][ T6154] F2FS-fs (loop1): invalid crc value [ 110.754004][ T6166] EXT4-fs: Ignoring removed i_version option [ 110.760107][ T6166] EXT4-fs: inline encryption not supported [ 110.821403][ T6154] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.894144][ T6166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.940300][ T6166] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.021180][ T6166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.152180][ T6154] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 111.159312][ T6154] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.201995][ T6166] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.92: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 111.397155][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.673849][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.699031][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.719004][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.736374][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.752810][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 111.762376][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.840011][ T6189] loop2: detected capacity change from 0 to 128 [ 111.918821][ T6189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 111.972261][ T6189] System zones: 1-3, 19-19, 35-36 [ 112.033749][ T6189] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 112.099929][ T6189] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.072921][ T12] hsr_slave_0: left promiscuous mode [ 113.098182][ T12] hsr_slave_1: left promiscuous mode [ 113.142149][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.171974][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.196372][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.214504][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.233763][ T12] bridge_slave_1: left allmulticast mode [ 113.239564][ T12] bridge_slave_1: left promiscuous mode [ 113.257394][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.284083][ T12] bridge_slave_0: left allmulticast mode [ 113.289971][ T12] bridge_slave_0: left promiscuous mode [ 113.320908][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.453173][ T12] veth1_macvtap: left promiscuous mode [ 113.482176][ T12] veth0_macvtap: left promiscuous mode [ 113.488000][ T12] veth1_vlan: left promiscuous mode [ 113.532279][ T12] veth0_vlan: left promiscuous mode [ 113.901964][ T5775] Bluetooth: hci0: command tx timeout [ 115.209737][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.374648][ T6217] sock: sock_set_timeout: `syz.2.98' (pid 6217) tries to set negative timeout [ 115.544335][ T6215] loop0: detected capacity change from 0 to 40427 [ 115.559315][ T6215] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 115.604161][ T6215] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.618400][ T6215] F2FS-fs (loop0): invalid crc value [ 115.673935][ T6215] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.853880][ T6215] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 115.860996][ T6215] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 115.983859][ T5775] Bluetooth: hci0: command tx timeout [ 116.250330][ T6219] loop2: detected capacity change from 0 to 40427 [ 116.277499][ T6219] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 116.296578][ T6219] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 116.312731][ T6219] F2FS-fs (loop2): invalid crc value [ 116.342354][ T12] team0 (unregistering): Port device team_slave_1 removed [ 116.433694][ T12] team0 (unregistering): Port device team_slave_0 removed [ 116.553335][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.574313][ T6219] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 116.581424][ T6219] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.716826][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.952918][ T5770] syz-executor: attempt to access beyond end of device [ 116.952918][ T5770] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.998673][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 117.490986][ T12] bond0 (unregistering): Released all slaves [ 118.063074][ T5775] Bluetooth: hci0: command tx timeout [ 118.829230][ T6185] chnl_net:caif_netlink_parms(): no params data found [ 119.042232][ T6256] loop2: detected capacity change from 0 to 128 [ 119.081394][ T6256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 119.123071][ T6256] System zones: 1-3, 19-19, 35-36 [ 119.175337][ T6256] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 119.245553][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.264354][ T6256] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.275860][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.352039][ T6185] bridge_slave_0: entered allmulticast mode [ 119.383367][ T6185] bridge_slave_0: entered promiscuous mode [ 119.414915][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.441972][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.449279][ T6185] bridge_slave_1: entered allmulticast mode [ 119.463376][ T6185] bridge_slave_1: entered promiscuous mode [ 119.663448][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.713685][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.834290][ T28] audit: type=1107 audit(1776613758.409:3): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 119.920914][ T6185] team0: Port device team_slave_0 added [ 119.953633][ T6185] team0: Port device team_slave_1 added [ 120.067905][ T6246] loop1: detected capacity change from 0 to 40427 [ 120.072168][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.101035][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.115197][ T6246] F2FS-fs (loop1): invalid crc value [ 120.150643][ T5775] Bluetooth: hci0: command tx timeout [ 120.224130][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.242229][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.249411][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.279327][ T6246] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.366162][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.461594][ T6246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.593719][ T6185] hsr_slave_0: entered promiscuous mode [ 120.610835][ T6185] hsr_slave_1: entered promiscuous mode [ 120.648862][ T6185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.662916][ T5772] syz-executor: attempt to access beyond end of device [ 120.662916][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.677450][ T6185] Cannot create hsr debugfs directory [ 120.716624][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 121.201213][ T6299] loop0: detected capacity change from 0 to 512 [ 121.227093][ T6299] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.284221][ T6299] EXT4-fs (loop0): 1 truncate cleaned up [ 121.302252][ T6299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.331215][ T6185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.343272][ T6185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.376359][ T6185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.424605][ T6185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.734245][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.747094][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.828444][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.913409][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.920572][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.082881][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.090152][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.132874][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.368446][ T6316] loop1: detected capacity change from 0 to 512 [ 122.603481][ T6316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 122.617386][ T6316] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.853957][ T6322] loop0: detected capacity change from 0 to 2048 [ 123.909720][ T6322] EXT4-fs: quotafile must be on filesystem root [ 124.744767][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 124.913756][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.486649][ T6345] loop1: detected capacity change from 0 to 512 [ 125.750638][ T6345] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.115: corrupted inode contents [ 125.780496][ T6345] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #16: comm syz.1.115: mark_inode_dirty error [ 125.802035][ T6345] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.115: corrupted inode contents [ 125.823110][ T6345] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.115: mark_inode_dirty error [ 125.837778][ T6345] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.115: corrupted inode contents [ 125.854016][ T6345] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 125.865127][ T6345] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.115: corrupted inode contents [ 125.882697][ T6345] EXT4-fs error (device loop1): ext4_truncate:4301: inode #16: comm syz.1.115: mark_inode_dirty error [ 125.899825][ T6345] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 125.923641][ T6345] EXT4-fs (loop1): 1 truncate cleaned up [ 125.942947][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.956066][ T6345] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.965104][ T1318] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.088921][ T1318] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1 [ 128.008210][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.820937][ T6185] veth0_vlan: entered promiscuous mode [ 128.950569][ T6185] veth1_vlan: entered promiscuous mode [ 128.985067][ T6185] veth0_macvtap: entered promiscuous mode [ 128.997288][ T6185] veth1_macvtap: entered promiscuous mode [ 129.026155][ T6376] loop1: detected capacity change from 0 to 128 [ 129.093219][ T6376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 129.101297][ T6376] System zones: 1-3, 19-19, 35-36 [ 129.399163][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.458253][ T6376] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 129.828080][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.907404][ T6376] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.915003][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.945379][ T6385] loop2: detected capacity change from 0 to 512 [ 129.962093][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.978231][ T6385] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.120: missing EA_INODE flag [ 130.020549][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.023037][ T6385] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.120: error while reading EA inode 12 err=-117 [ 130.044330][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.088303][ T6385] EXT4-fs (loop2): 1 orphan inode deleted [ 130.095700][ T6385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.141316][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.205788][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.280156][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.290242][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.301603][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.311764][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.322942][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.334606][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.526334][ T6185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.597259][ T6185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.606436][ T6185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.624076][ T6185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.558796][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.581269][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.657090][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.682800][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.924315][ T6400] loop0: detected capacity change from 0 to 4096 [ 131.945322][ T6400] EXT4-fs: inline encryption not supported [ 132.017509][ T6400] EXT4-fs (loop0): Test dummy encryption mode enabled [ 132.106531][ T6400] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 132.160340][ T6400] System zones: 0-5 [ 132.199589][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.658356][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.203607][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.210027][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.460830][ T6422] loop4: detected capacity change from 0 to 2048 [ 133.482053][ T6400] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 133.607770][ T6422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.646179][ T6422] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.748374][ T6430] loop2: detected capacity change from 0 to 1024 [ 133.923952][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.054192][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.438702][ T6438] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 134.465245][ T6438] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 134.473001][ T6438] overlayfs: failed to verify upper root origin [ 134.896615][ T6185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.955737][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.640213][ T6452] tipc: Started in network mode [ 135.666126][ T6452] tipc: Node identity , cluster identity 4711 [ 136.759381][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.165276][ T6477] tipc: Started in network mode [ 137.209181][ T6477] tipc: Node identity , cluster identity 4711 [ 137.674709][ T6463] loop2: detected capacity change from 0 to 40427 [ 137.722610][ T6463] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 137.753319][ T6463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.777836][ T6463] F2FS-fs (loop2): Unrecognized mount option "whint_mode=user-based" or missing value [ 139.378163][ T5812] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.603497][ T6507] loop1: detected capacity change from 0 to 256 [ 139.632048][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 139.634736][ T6507] FAT-fs (loop1): Directory bread(block 64) failed [ 139.645067][ T6507] FAT-fs (loop1): Directory bread(block 65) failed [ 139.651789][ T6507] FAT-fs (loop1): Directory bread(block 66) failed [ 139.658354][ T6507] FAT-fs (loop1): Directory bread(block 67) failed [ 139.665091][ T6507] FAT-fs (loop1): Directory bread(block 68) failed [ 139.669757][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.671657][ T6507] FAT-fs (loop1): Directory bread(block 69) failed [ 139.689282][ T6507] FAT-fs (loop1): Directory bread(block 70) failed [ 139.695947][ T6507] FAT-fs (loop1): Directory bread(block 71) failed [ 139.702727][ T6507] FAT-fs (loop1): Directory bread(block 72) failed [ 139.709464][ T6507] FAT-fs (loop1): Directory bread(block 73) failed [ 139.711870][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.789503][ T5812] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 139.807199][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.875520][ T5812] usb 3-1: config 0 descriptor?? [ 140.855620][ T6519] loop4: detected capacity change from 0 to 1024 [ 140.899382][ T6519] EXT4-fs: inline encryption not supported [ 140.949272][ T6519] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 140.971151][ T5772] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 141.003801][ T5812] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 141.031902][ T5772] FAT-fs (loop1): Filesystem has been set read-only [ 141.104493][ T6519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.252308][ T5773] usb 3-1: USB disconnect, device number 4 [ 141.323943][ T6523] fido_id[6523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 141.528024][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.713146][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.916623][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.038730][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.978954][ T6548] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.931811][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.053012][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.063257][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.072060][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.081251][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.089334][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.097411][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.161931][ T5873] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 145.182155][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.231937][ T5873] usb 3-1: config 0 descriptor?? [ 145.904332][ T6564] loop0: detected capacity change from 0 to 512 [ 146.006570][ T6564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 146.045474][ T6564] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.096907][ T6185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.477754][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 146.787564][ T6579] loop0: detected capacity change from 0 to 4096 [ 146.816956][ T6579] ext4: Unknown parameter 'nouser_xattr' [ 146.847469][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 146.946327][ T5873] usb 3-1: Cannot set autoneg [ 146.980006][ T5873] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 147.037588][ T5873] usb 3-1: USB disconnect, device number 5 [ 147.181925][ T5775] Bluetooth: hci1: command tx timeout [ 147.276862][ T6595] loop4: detected capacity change from 0 to 16 [ 147.293409][ T6595] erofs: (device loop4): mounted with root inode @ nid 36. [ 147.316215][ T6595] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 147.564422][ T35] hsr_slave_0: left promiscuous mode [ 147.618585][ T35] hsr_slave_1: left promiscuous mode [ 147.677473][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.690855][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.719626][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.735604][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.755731][ T35] bridge_slave_1: left allmulticast mode [ 147.774244][ T35] bridge_slave_1: left promiscuous mode [ 147.780162][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.809592][ T35] bridge_slave_0: left allmulticast mode [ 147.818783][ T35] bridge_slave_0: left promiscuous mode [ 147.834002][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.876805][ T35] veth1_macvtap: left promiscuous mode [ 147.894652][ T35] veth0_macvtap: left promiscuous mode [ 147.907114][ T35] veth1_vlan: left promiscuous mode [ 147.934866][ T35] veth0_vlan: left promiscuous mode [ 148.513860][ T6606] loop2: detected capacity change from 0 to 40427 [ 148.597514][ T6606] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.754497][ T6606] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.858990][ T6608] loop0: detected capacity change from 0 to 40427 [ 148.866970][ T6606] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0 [ 148.875977][ T6606] CPU: 1 PID: 6606 Comm: syz.2.163 Not tainted syzkaller #0 [ 148.883324][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.893461][ T6606] Call Trace: [ 148.896779][ T6606] [ 148.899761][ T6606] dump_stack_lvl+0x18c/0x250 [ 148.904539][ T6606] ? show_regs_print_info+0x20/0x20 [ 148.909802][ T6606] ? f2fs_get_next_page_offset+0x690/0x690 [ 148.915670][ T6606] f2fs_is_valid_blkaddr+0xe39/0x1580 [ 148.921104][ T6606] f2fs_map_blocks+0xde5/0x3e60 [ 148.926063][ T6606] ? __might_sleep+0xe0/0xe0 [ 148.930710][ T6606] ? f2fs_get_block_locked+0xe0/0xe0 [ 148.936056][ T6606] ? unwind_get_return_address+0x91/0xc0 [ 148.941748][ T6606] ? down_read_killable+0x340/0x340 [ 148.946997][ T6606] ? stack_trace_save+0xaa/0x100 [ 148.951991][ T6606] ? stack_trace_snprint+0xf0/0xf0 [ 148.957165][ T6606] f2fs_fiemap+0x93d/0x16d0 [ 148.961745][ T6606] ? f2fs_overwrite_io+0x200/0x200 [ 148.966924][ T6606] ? __might_fault+0xaa/0x120 [ 148.971655][ T6606] ? __might_fault+0xaa/0x120 [ 148.976365][ T6606] ? __might_fault+0xc6/0x120 [ 148.981141][ T6606] ? __might_fault+0xaa/0x120 [ 148.985840][ T6606] do_vfs_ioctl+0x1505/0x1cc0 [ 148.990547][ T6606] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 148.996216][ T6606] ? tomoyo_path_number_perm+0x217/0x620 [ 149.001873][ T6606] ? __lock_acquire+0x7d40/0x7d40 [ 149.006912][ T6606] ? slab_free_freelist_hook+0x130/0x1a0 [ 149.012592][ T6606] ? tomoyo_path_number_perm+0x500/0x620 [ 149.018336][ T6606] ? __kmem_cache_free+0xba/0x1e0 [ 149.023388][ T6606] ? tomoyo_path_number_perm+0x5b4/0x620 [ 149.029040][ T6606] ? tomoyo_path_number_perm+0x217/0x620 [ 149.034692][ T6606] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 149.040212][ T6606] ? __fget_files+0x28/0x4b0 [ 149.044826][ T6606] ? __fget_files+0x28/0x4b0 [ 149.049461][ T6606] ? bpf_lsm_file_ioctl+0x9/0x10 [ 149.054427][ T6606] ? security_file_ioctl+0x80/0xa0 [ 149.059574][ T6606] __se_sys_ioctl+0x83/0x170 [ 149.064207][ T6606] do_syscall_64+0x55/0xa0 [ 149.068641][ T6606] ? clear_bhb_loop+0x40/0x90 [ 149.073350][ T6606] ? clear_bhb_loop+0x40/0x90 [ 149.078050][ T6606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.083986][ T6606] RIP: 0033:0x7f53da59c819 [ 149.088437][ T6606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.108164][ T6606] RSP: 002b:00007f53db374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.116698][ T6606] RAX: ffffffffffffffda RBX: 00007f53da815fa0 RCX: 00007f53da59c819 [ 149.124687][ T6606] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 149.132678][ T6606] RBP: 00007f53da632c91 R08: 0000000000000000 R09: 0000000000000000 [ 149.140660][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.148646][ T6606] R13: 00007f53da816038 R14: 00007f53da815fa0 R15: 00007ffc18166d78 [ 149.156652][ T6606] [ 149.198204][ T6608] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 149.206482][ T6608] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 149.218719][ T6608] F2FS-fs (loop0): invalid crc value [ 149.225175][ T6608] F2FS-fs (loop0): invalid crc value [ 149.230904][ T6608] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 149.262219][ T5775] Bluetooth: hci1: command tx timeout [ 150.073764][ T35] team0 (unregistering): Port device team_slave_1 removed [ 150.137174][ T35] team0 (unregistering): Port device team_slave_0 removed [ 150.228799][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.327053][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.483150][ T6641] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 150.490689][ T6641] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.342977][ T5775] Bluetooth: hci1: command tx timeout [ 151.399225][ T6643] loop2: detected capacity change from 0 to 512 [ 151.504421][ T6643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.549642][ T6643] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.657637][ T35] bond0 (unregistering): Released all slaves [ 151.666007][ T6643] EXT4-fs error (device loop2): ext4_get_first_dir_block:3584: inode #12: comm syz.2.168: Attempting to read directory block (0) that is past i_size (3) [ 151.727377][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.173398][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.202220][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.209576][ T6552] bridge_slave_0: entered allmulticast mode [ 152.262366][ T6552] bridge_slave_0: entered promiscuous mode [ 152.286063][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.302878][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.310186][ T6552] bridge_slave_1: entered allmulticast mode [ 152.353954][ T6552] bridge_slave_1: entered promiscuous mode [ 152.803858][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.883802][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.019329][ T6652] loop4: detected capacity change from 0 to 40427 [ 153.053364][ T6652] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 153.088596][ T6552] team0: Port device team_slave_0 added [ 153.098031][ T6652] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.126916][ T6552] team0: Port device team_slave_1 added [ 153.145686][ T6652] F2FS-fs (loop4): invalid crc value [ 153.280354][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.322912][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.418402][ T6675] loop0: detected capacity change from 0 to 512 [ 153.425317][ T5775] Bluetooth: hci1: command tx timeout [ 153.430793][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.475543][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.484814][ T6652] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 153.508509][ T6652] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.513984][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.608152][ T6681] loop2: detected capacity change from 0 to 16 [ 153.651463][ T6681] erofs: (device loop2): mounted with root inode @ nid 36. [ 153.813979][ T6675] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 154.440977][ T6675] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 154.451303][ T6675] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.174: Corrupt directory, running e2fsck is recommended [ 154.460302][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.525042][ T6675] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 154.562288][ T6675] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.174: corrupted in-inode xattr: e_name out of bounds [ 154.591613][ T6675] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.174: couldn't read orphan inode 15 (err -117) [ 154.620077][ T6675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.745794][ T6552] hsr_slave_0: entered promiscuous mode [ 154.777163][ T6552] hsr_slave_1: entered promiscuous mode [ 154.841656][ T6552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.851928][ T6552] Cannot create hsr debugfs directory [ 155.579940][ T6552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.622147][ T6552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.675345][ T6552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.716038][ T6552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.071245][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.124018][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.167305][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.174560][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.277924][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.286030][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.473393][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.191462][ T6697] loop4: detected capacity change from 0 to 40427 [ 157.309054][ T6697] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.381868][ T6697] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.460221][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.484666][ T2129] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 157.732971][ T2129] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 157.753829][ T2129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.792087][ T2129] usb 1-1: Product: syz [ 157.797631][ T2129] usb 1-1: Manufacturer: syz [ 157.819668][ T2129] usb 1-1: SerialNumber: syz [ 157.823040][ T6741] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 157.842151][ T2129] r8152-cfgselector 1-1: config 0 descriptor?? [ 157.912056][ T6741] overlayfs: overlapping lowerdir path [ 158.166279][ T2129] r8152-cfgselector 1-1: Unknown version 0x0000 [ 158.177313][ T2129] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 158.328710][ T6750] xt_TCPMSS: Only works on TCP SYN packets [ 159.113730][ T6754] loop4: detected capacity change from 0 to 512 [ 159.173370][ T6756] loop0: detected capacity change from 0 to 512 [ 159.180613][ T6756] EXT4-fs: Ignoring removed nobh option [ 159.253005][ T6756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.279967][ T6754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.296578][ T6552] veth0_vlan: entered promiscuous mode [ 159.353869][ T6756] EXT4-fs (loop0): 1 truncate cleaned up [ 159.360528][ T6756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.362650][ T6754] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.410937][ T6552] veth1_vlan: entered promiscuous mode [ 159.626749][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.788530][ T6552] veth0_macvtap: entered promiscuous mode [ 160.016486][ T6774] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 160.344824][ T6552] veth1_macvtap: entered promiscuous mode [ 160.488517][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.541002][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.552108][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.562790][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.572689][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.583254][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.594905][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.618673][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.635209][ T6185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.646441][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.657061][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.684368][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.729608][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.816961][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.834586][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.877320][ T6552] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.885660][ T6786] loop0: detected capacity change from 0 to 1024 [ 160.916223][ T6786] EXT4-fs: Ignoring removed bh option [ 160.916559][ T6552] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.950431][ T6789] loop4: detected capacity change from 0 to 1024 [ 160.953255][ T6552] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.965600][ T6789] EXT4-fs: Ignoring removed bh option [ 160.987884][ T6786] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 161.012252][ T6552] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.047093][ T6789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.061606][ T6786] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 161.120301][ T6786] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 161.151948][ T6789] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.316372][ T6789] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.191: lblock 0 mapped to illegal pblock 0 (length 6) [ 161.354031][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.385155][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.404416][ T6789] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 161.447445][ T6789] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.447445][ T6789] [ 161.493463][ T6799] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 8: comm syz.4.191: lblock 8 mapped to illegal pblock 8 (length 8) [ 161.507118][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.537564][ T6799] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 161.562346][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.586887][ T6799] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.586887][ T6799] [ 161.597596][ T6786] EXT4-fs (loop0): failed to open journal device unknown-block(0,5) -6 [ 161.633688][ T6802] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.191: bg 0: block 112: padding at end of block bitmap is not set [ 161.862730][ T6185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.050301][ T6782] loop2: detected capacity change from 0 to 40427 [ 162.133217][ T6782] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.312867][ T6824] loop5: detected capacity change from 0 to 4096 [ 162.343921][ T6824] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.400761][ T6782] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.444728][ T6824] EXT4-fs (loop5): Test dummy encryption mode enabled [ 162.523990][ T6824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.680567][ T6824] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 162.883885][ T6552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.933713][ T6836] loop4: detected capacity change from 0 to 1024 [ 163.056578][ T6836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.440817][ T6185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.586304][ T6855] loop2: detected capacity change from 0 to 40427 [ 165.653322][ T6855] F2FS-fs (loop2): invalid crc value [ 165.703162][ T6855] F2FS-fs (loop2): Found nat_bits in checkpoint [ 165.881483][ T6855] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.357681][ T5770] syz-executor: attempt to access beyond end of device [ 167.357681][ T5770] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 167.411659][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.433784][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.647805][ T6877] loop4: detected capacity change from 0 to 40427 [ 167.703767][ T6877] F2FS-fs (loop4): Found nat_bits in checkpoint [ 168.368592][ T6921] loop0: detected capacity change from 0 to 512 [ 168.573692][ T6921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.758044][ T28] audit: type=1800 audit(1776613814.338:4): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.211" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 168.905721][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.114437][ T6943] loop0: detected capacity change from 0 to 512 [ 169.178157][ T6943] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 169.221408][ T6948] netlink: 277 bytes leftover after parsing attributes in process `syz.5.217'. [ 169.231002][ T6943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 169.265694][ T6943] EXT4-fs (loop0): orphan cleanup on readonly fs [ 169.314883][ T6943] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.214: bad orphan inode 3 [ 169.420907][ T6943] EXT4-fs (loop0): Remounting filesystem read-only [ 169.473110][ T6943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 169.597215][ T6943] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.214: dx entry: limit 0 != root limit 125 [ 169.627821][ T6943] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.214: Corrupt directory, running e2fsck is recommended [ 169.747275][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 169.909327][ T6968] loop2: detected capacity change from 0 to 512 [ 169.950868][ T6968] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.152761][ T6968] EXT4-fs (loop2): 1 truncate cleaned up [ 170.193249][ T6968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.993552][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.398804][ T6990] loop4: detected capacity change from 0 to 256 [ 171.448318][ T6989] netlink: 277 bytes leftover after parsing attributes in process `syz.0.226'. [ 171.750694][ T6998] loop4: detected capacity change from 0 to 256 [ 171.793114][ T6998] exfat: Bad value for 'uid' [ 171.808697][ T7002] loop2: detected capacity change from 0 to 512 [ 171.830167][ T7002] EXT4-fs: Ignoring removed nobh option [ 171.846673][ T28] audit: type=1326 audit(1776613817.428:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd2f9c819 code=0x7ffc0000 [ 171.897325][ T28] audit: type=1326 audit(1776613817.428:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd2f9c819 code=0x7ffc0000 [ 171.936404][ T7002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.994064][ T28] audit: type=1326 audit(1776613817.428:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd2f9c819 code=0x7ffc0000 [ 172.025541][ T7002] EXT4-fs (loop2): 1 truncate cleaned up [ 172.026496][ T28] audit: type=1326 audit(1776613817.428:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd2f9c819 code=0x7ffc0000 [ 172.059242][ T7002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.115328][ T7002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.121826][ T5812] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.137037][ T28] audit: type=1326 audit(1776613817.438:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd2f9c819 code=0x7ffc0000 [ 172.161067][ T7011] loop0: detected capacity change from 0 to 512 [ 172.227637][ T28] audit: type=1326 audit(1776613817.438:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dd2f5d04e code=0x7ffc0000 [ 172.270670][ T7011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.321992][ T28] audit: type=1326 audit(1776613817.438:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dd2f9c4ab code=0x7ffc0000 [ 172.347065][ T28] audit: type=1326 audit(1776613817.438:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dd2f9c4ab code=0x7ffc0000 [ 172.371629][ T28] audit: type=1326 audit(1776613817.438:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dd2f9c4ab code=0x7ffc0000 [ 172.397295][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.409202][ T7011] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.231: iget: bad i_size value: 38620345925642 [ 172.409555][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.471990][ T5812] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 172.481116][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.481745][ T7011] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.231: couldn't read orphan inode 15 (err -117) [ 172.504151][ T5812] usb 5-1: config 0 descriptor?? [ 172.548655][ T7020] loop2: detected capacity change from 0 to 128 [ 172.549539][ T7011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.592812][ T7020] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 172.632188][ T7020] System zones: 1-3, 19-19, 35-36 [ 172.639718][ T7020] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 172.666247][ T7020] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.887613][ T7024] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.231: bg 0: block 5: invalid block bitmap [ 172.994678][ T5812] usbhid 5-1:0.0: can't add hid device: -71 [ 173.000763][ T5812] usbhid: probe of 5-1:0.0 failed with error -71 [ 173.010623][ T7024] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 504 with error 28 [ 173.047335][ T5812] usb 5-1: USB disconnect, device number 2 [ 173.077848][ T7024] EXT4-fs (loop0): This should not happen!! Data will be lost [ 173.077848][ T7024] [ 173.086309][ T7028] loop5: detected capacity change from 0 to 128 [ 173.097295][ T7024] EXT4-fs (loop0): Total free blocks count 0 [ 173.119980][ T7024] EXT4-fs (loop0): Free/Dirty block details [ 173.168709][ T7028] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.176977][ T7024] EXT4-fs (loop0): free_blocks=0 [ 173.184498][ T7029] Invalid argument reading file caps for ./file0 [ 173.212353][ T7028] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.232915][ T7024] EXT4-fs (loop0): dirty_blocks=504 [ 173.275367][ T7024] EXT4-fs (loop0): Block reservation details [ 173.291095][ T7024] EXT4-fs (loop0): i_reserved_data_blocks=504 [ 173.415589][ T7028] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 173.504725][ T7011] EXT4-fs (loop0): shut down requested (0) [ 173.599938][ T6552] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.787896][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.236'. [ 175.616163][ T7060] loop5: detected capacity change from 0 to 512 [ 175.652643][ T7060] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.733095][ T7060] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.241: bad orphan inode 131083 [ 175.755998][ T7060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.045075][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.389770][ T7039] loop4: detected capacity change from 0 to 40427 [ 176.467105][ T7039] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 177.065730][ T7093] loop4: detected capacity change from 0 to 1024 [ 177.102897][ T7093] EXT4-fs: Ignoring removed i_version option [ 177.136458][ T7093] EXT4-fs (loop4): Test dummy encryption mode enabled [ 177.184946][ T7093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.540130][ T6185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.766181][ T7106] syzkaller0: entered promiscuous mode [ 177.782978][ T7106] syzkaller0: entered allmulticast mode [ 180.342163][ T2129] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 180.687647][ T7197] overlayfs: missing 'lowerdir' [ 181.625940][ T2129] usb 1-1: Using ep0 maxpacket: 32 [ 181.680928][ T2129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.701757][ T2129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.711572][ T2129] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.729139][ T2129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.741022][ T2129] usb 1-1: config 0 descriptor?? [ 181.750035][ T2129] hub 1-1:0.0: USB hub found [ 182.008158][ T2129] hub 1-1:0.0: 1 port detected [ 182.341917][ T5813] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.573831][ T5813] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 182.624582][ T5813] usb 3-1: config 0 has no interface number 0 [ 182.635242][ T2129] hub 1-1:0.0: activate --> -90 [ 182.686703][ T5813] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 182.729619][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.791951][ T5813] usb 3-1: Product: syz [ 182.796278][ T5813] usb 3-1: Manufacturer: syz [ 182.887065][ T5813] usb 3-1: SerialNumber: syz [ 182.943200][ T5813] usb 3-1: config 0 descriptor?? [ 183.042112][ T5869] usb 1-1: USB disconnect, device number 4 [ 183.165967][ T7214] loop4: detected capacity change from 0 to 4096 [ 183.195952][ T7214] EXT4-fs (loop4): Test dummy encryption mode enabled [ 183.252975][ T7214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.283322][ T2129] usb 1-1-port1: config error [ 184.120449][ T5813] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 184.187367][ T5813] usb 3-1: No valid video chain found. [ 184.335528][ T5813] usb 3-1: USB disconnect, device number 6 [ 184.416668][ T6185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.648965][ T7237] syzkaller0: entered promiscuous mode [ 184.664284][ T7237] syzkaller0: entered allmulticast mode [ 185.156519][ T7244] loop2: detected capacity change from 0 to 512 [ 185.199013][ T7244] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.228257][ T7244] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.265: iget: bad extra_isize 90 (inode size 256) [ 185.444477][ T7244] EXT4-fs (loop2): Remounting filesystem read-only [ 185.627939][ T7244] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 185.911849][ T7244] EXT4-fs (loop2): 1 orphan inode deleted [ 185.949698][ T7244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.316777][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.411633][ T7264] loop2: detected capacity change from 0 to 2048 [ 187.467823][ T7264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.743954][ T6552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.847237][ T7271] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 189.440246][ T7285] loop0: detected capacity change from 0 to 2048 [ 189.482977][ T7285] EXT4-fs: quotafile must be on filesystem root [ 190.224904][ T5983] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.540036][ T7299] syzkaller0: entered promiscuous mode [ 190.565308][ T7299] syzkaller0: entered allmulticast mode [ 190.922329][ T7167] [ 190.924730][ T7167] ====================================================== [ 190.931775][ T7167] WARNING: possible circular locking dependency detected [ 190.938817][ T7167] syzkaller #0 Not tainted [ 190.943263][ T7167] ------------------------------------------------------ [ 190.950316][ T7167] kworker/u4:16/7167 is trying to acquire lock: [ 190.956590][ T7167] ffff8880775d94c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0 [ 190.966394][ T7167] [ 190.966394][ T7167] but task is already holding lock: [ 190.973790][ T7167] ffff8880762c8c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 190.983855][ T7167] [ 190.983855][ T7167] which lock already depends on the new lock. [ 190.983855][ T7167] [ 190.994288][ T7167] [ 190.994288][ T7167] the existing dependency chain (in reverse order) is: [ 191.003381][ T7167] [ 191.003381][ T7167] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 191.011943][ T7167] percpu_down_read+0x44/0x1a0 [ 191.017286][ T7167] ext4_writepages+0x1a4/0x350 [ 191.022703][ T7167] do_writepages+0x3b3/0x630 [ 191.027864][ T7167] __writeback_single_inode+0x153/0xec0 [ 191.033972][ T7167] writeback_single_inode+0x21f/0x760 [ 191.039918][ T7167] write_inode_now+0x183/0x210 [ 191.045250][ T7167] iput+0x5ae/0x920 [ 191.049629][ T7167] ext4_xattr_block_set+0x273f/0x32b0 [ 191.055571][ T7167] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 191.062122][ T7167] __ext4_expand_extra_isize+0x306/0x400 [ 191.068328][ T7167] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 191.074356][ T7167] ext4_evict_inode+0x7f3/0xea0 [ 191.080105][ T7167] evict+0x4ca/0x8d0 [ 191.084836][ T7167] ext4_orphan_cleanup+0xbec/0x1420 [ 191.090685][ T7167] ext4_fill_super+0x5eea/0x67b0 [ 191.096184][ T7167] get_tree_bdev+0x3f3/0x520 [ 191.101334][ T7167] vfs_get_tree+0x8c/0x280 [ 191.106422][ T7167] do_new_mount+0x24b/0xa40 [ 191.111486][ T7167] __se_sys_mount+0x2e7/0x3d0 [ 191.116984][ T7167] do_syscall_64+0x55/0xa0 [ 191.121960][ T7167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.128522][ T7167] [ 191.128522][ T7167] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 191.136082][ T7167] __lock_acquire+0x2df1/0x7d40 [ 191.141455][ T7167] lock_acquire+0x19e/0x420 [ 191.146505][ T7167] down_write+0x97/0x200 [ 191.151273][ T7167] ext4_destroy_inline_data+0x28/0xe0 [ 191.157194][ T7167] ext4_do_writepages+0x4f0/0x3990 [ 191.162872][ T7167] ext4_writepages+0x1dd/0x350 [ 191.168201][ T7167] do_writepages+0x3b3/0x630 [ 191.173352][ T7167] __writeback_single_inode+0x153/0xec0 [ 191.179636][ T7167] writeback_sb_inodes+0x7cd/0xf50 [ 191.185319][ T7167] wb_writeback+0x46a/0xbf0 [ 191.190393][ T7167] wb_workfn+0x400/0xe60 [ 191.195207][ T7167] process_scheduled_works+0xa5d/0x15d0 [ 191.201321][ T7167] worker_thread+0xa55/0xfc0 [ 191.206473][ T7167] kthread+0x2fa/0x390 [ 191.211103][ T7167] ret_from_fork+0x48/0x80 [ 191.216069][ T7167] ret_from_fork_asm+0x11/0x20 [ 191.221449][ T7167] [ 191.221449][ T7167] other info that might help us debug this: [ 191.221449][ T7167] [ 191.231691][ T7167] Possible unsafe locking scenario: [ 191.231691][ T7167] [ 191.239174][ T7167] CPU0 CPU1 [ 191.244552][ T7167] ---- ---- [ 191.249936][ T7167] rlock(&sbi->s_writepages_rwsem); [ 191.255315][ T7167] lock(&ei->xattr_sem); [ 191.262189][ T7167] lock(&sbi->s_writepages_rwsem); [ 191.269913][ T7167] lock(&ei->xattr_sem); [ 191.274246][ T7167] [ 191.274246][ T7167] *** DEADLOCK *** [ 191.274246][ T7167] [ 191.282478][ T7167] 3 locks held by kworker/u4:16/7167: [ 191.287852][ T7167] #0: ffff888140068138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 191.299164][ T7167] #1: ffffc90003b17d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 191.311604][ T7167] #2: ffff8880762c8c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 191.322316][ T7167] [ 191.322316][ T7167] stack backtrace: [ 191.328205][ T7167] CPU: 0 PID: 7167 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 191.335848][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.345944][ T7167] Workqueue: writeback wb_workfn (flush-7:2) [ 191.352061][ T7167] Call Trace: [ 191.355382][ T7167] [ 191.358340][ T7167] dump_stack_lvl+0x18c/0x250 [ 191.363064][ T7167] ? load_image+0x420/0x420 [ 191.367605][ T7167] ? show_regs_print_info+0x20/0x20 [ 191.372848][ T7167] ? print_circular_bug+0x12b/0x1a0 [ 191.378086][ T7167] check_noncircular+0x2fc/0x400 [ 191.383112][ T7167] ? print_deadlock_bug+0x5d0/0x5d0 [ 191.388522][ T7167] ? lockdep_lock+0xf5/0x230 [ 191.393158][ T7167] ? _find_first_zero_bit+0xd3/0x100 [ 191.398484][ T7167] __lock_acquire+0x2df1/0x7d40 [ 191.403563][ T7167] ? __read_once_word_nocheck+0x9/0x10 [ 191.409070][ T7167] ? verify_lock_unused+0x140/0x140 [ 191.414303][ T7167] ? __read_once_word_nocheck+0x9/0x10 [ 191.419778][ T7167] ? deref_stack_reg+0x1bd/0x240 [ 191.424761][ T7167] ? unwind_next_frame+0x2240/0x2970 [ 191.430263][ T7167] lock_acquire+0x19e/0x420 [ 191.434792][ T7167] ? ext4_destroy_inline_data+0x28/0xe0 [ 191.440365][ T7167] ? __might_sleep+0xe0/0xe0 [ 191.444976][ T7167] ? read_lock_is_recursive+0x20/0x20 [ 191.450373][ T7167] ? __might_sleep+0xe0/0xe0 [ 191.454966][ T7167] ? register_lock_class+0xc4/0x8a0 [ 191.460176][ T7167] down_write+0x97/0x200 [ 191.464463][ T7167] ? ext4_destroy_inline_data+0x28/0xe0 [ 191.470051][ T7167] ? down_read_killable+0x340/0x340 [ 191.475283][ T7167] ? ext4_journal_check_start+0x178/0x250 [ 191.481066][ T7167] ext4_destroy_inline_data+0x28/0xe0 [ 191.486506][ T7167] ext4_do_writepages+0x4f0/0x3990 [ 191.491755][ T7167] ? __stack_depot_save+0x1f/0x630 [ 191.497088][ T7167] ? verify_lock_unused+0x140/0x140 [ 191.502318][ T7167] ? __lock_acquire+0x1347/0x7d40 [ 191.507464][ T7167] ? __kmem_cache_free+0xba/0x1e0 [ 191.512530][ T7167] ? ieee80211_iface_work+0x717/0xc70 [ 191.517944][ T7167] ? kthread+0x2fa/0x390 [ 191.522237][ T7167] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 191.529125][ T7167] ? rcu_read_lock_any_held+0xb4/0x140 [ 191.534614][ T7167] ? __lock_acquire+0x1347/0x7d40 [ 191.539675][ T7167] ext4_writepages+0x1dd/0x350 [ 191.544480][ T7167] ? ext4_read_folio+0x2f0/0x2f0 [ 191.549458][ T7167] ? __rwlock_init+0x150/0x150 [ 191.554260][ T7167] ? do_raw_spin_unlock+0x121/0x230 [ 191.559497][ T7167] ? ext4_read_folio+0x2f0/0x2f0 [ 191.564478][ T7167] do_writepages+0x3b3/0x630 [ 191.569111][ T7167] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 191.574976][ T7167] ? writeback_sb_inodes+0x4b0/0xf50 [ 191.580301][ T7167] ? __lock_acquire+0x7d40/0x7d40 [ 191.585353][ T7167] ? do_raw_spin_lock+0x11f/0x2c0 [ 191.590414][ T7167] __writeback_single_inode+0x153/0xec0 [ 191.596045][ T7167] writeback_sb_inodes+0x7cd/0xf50 [ 191.601195][ T7167] ? move_expired_inodes+0x321/0x730 [ 191.606520][ T7167] ? queue_io+0x550/0x550 [ 191.610949][ T7167] ? rcu_is_watching+0x15/0xb0 [ 191.615769][ T7167] wb_writeback+0x46a/0xbf0 [ 191.620321][ T7167] ? queue_io+0x351/0x550 [ 191.624699][ T7167] ? percpu_ref_tryget+0x250/0x250 [ 191.629850][ T7167] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 191.635863][ T7167] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.641095][ T7167] wb_workfn+0x400/0xe60 [ 191.645558][ T7167] ? inode_wait_for_writeback+0x230/0x230 [ 191.651329][ T7167] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 191.657349][ T7167] ? read_lock_is_recursive+0x20/0x20 [ 191.662757][ T7167] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.668040][ T7167] ? process_scheduled_works+0x96f/0x15d0 [ 191.673801][ T7167] ? process_scheduled_works+0x96f/0x15d0 [ 191.679554][ T7167] process_scheduled_works+0xa5d/0x15d0 [ 191.685147][ T7167] ? worker_attach_to_pool+0x380/0x380 [ 191.690645][ T7167] ? assign_work+0x3d2/0x5d0 [ 191.695266][ T7167] worker_thread+0xa55/0xfc0 [ 191.699898][ T7167] kthread+0x2fa/0x390 [ 191.703998][ T7167] ? pr_cont_work+0x560/0x560 [ 191.708788][ T7167] ? kthread_blkcg+0xd0/0xd0 [ 191.713418][ T7167] ret_from_fork+0x48/0x80 [ 191.717882][ T7167] ? kthread_blkcg+0xd0/0xd0 [ 191.722498][ T7167] ret_from_fork_asm+0x11/0x20 [ 191.727303][ T7167] [ 193.024832][ T7167] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 193.037602][ T7167] EXT4-fs (loop2): This should not happen!! Data will be lost [ 193.037602][ T7167] [ 193.053575][ T7167] EXT4-fs (loop2): Total free blocks count 0 [ 193.076361][ T7167] EXT4-fs (loop2): Free/Dirty block details [ 193.090374][ T7167] EXT4-fs (loop2): free_blocks=2415919504 [ 193.103924][ T7167] EXT4-fs (loop2): dirty_blocks=48 [ 193.119326][ T7167] EXT4-fs (loop2): Block reservation details [ 193.139496][ T7167] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 193.217556][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.626560][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.633504][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.702845][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 196.702852][ T5780] Bluetooth: hci3: command 0x0406 tx timeout