last executing test programs: 5m32.780488192s ago: executing program 3 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) truncate(&(0x7f0000000380)='./file1\x00', 0x2) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) 5m30.952815989s ago: executing program 3 (id=668): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "81eb3d9c5a1269bca4a0fc44d0fc5b2b4676875dfed5c2d58ce2e342244a28448eb867d3c1d9a754e4424f0a20db1c76ee8ff36252df7800ba1f2cd1d5543f6a", 0x2e}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r4, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, r5) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x2000, 0x0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5248ad423c46950a8589f1558ed048260ed1cba8355ca6f5fb0e9c0dd4aa001ac8b98decffdfcfe2715e40076322fff33cbd6ae888275df694ff32eea5dd1eecd27"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5m29.565919809s ago: executing program 3 (id=673): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "81eb3d9c5a1269bca4a0fc44d0fc5b2b4676875dfed5c2d58ce2e342244a28448eb867d3c1d9a754e4424f0a20db1c76ee8ff36252df7800ba1f2cd1d5543f6a", 0x2e}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r4, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, r5) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x2000, 0x0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5248ad423c46950a8589f1558ed048260ed1cba8355ca6f5fb0e9c0dd4aa001ac8b98decffdfcfe2715e40076322fff33cbd6ae888275df694ff32eea5dd1eecd27"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5m25.296847809s ago: executing program 3 (id=677): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m20.093118032s ago: executing program 3 (id=686): socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001414192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0]) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file2\x00', 0x3000812, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0bffd5ece651e2a4648f9b08ce06626a8efcc3bee3ccef03f1e2279d8dc44bc4bd6a5d445b3f4f75b30ef3cc0a9d3c338a26ff996b57afbe65c46e61b66cf778b449292592952663ac34eb94f6fd4cfbda2af6c85c6e135955ca064c546ab638c56d2432e45e6d333181ee921f9f26a8ef"], 0x11, 0x305, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000380)='./file1\x00', 0x2) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) 5m19.056276282s ago: executing program 3 (id=688): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x18, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x4, 0x70, 0x81, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x4}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x810) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5m3.313540591s ago: executing program 32 (id=688): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x18, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x4, 0x70, 0x81, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x4}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x810) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6.802958553s ago: executing program 1 (id=1217): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000080000000200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 6.196264489s ago: executing program 1 (id=1220): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x306c5000) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 5.965612292s ago: executing program 2 (id=1222): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffc, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) 5.754276224s ago: executing program 2 (id=1224): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 4.981322129s ago: executing program 4 (id=1234): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) 4.846142258s ago: executing program 1 (id=1235): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) recvmmsg(r3, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40008020, 0x0) 4.824839419s ago: executing program 2 (id=1236): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) 4.486252188s ago: executing program 4 (id=1238): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x62, 0x400) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000300)) 4.29208371s ago: executing program 4 (id=1239): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e3f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 4.041056394s ago: executing program 4 (id=1242): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1400c, &(0x7f0000000140), 0xff, 0x470, &(0x7f0000000dc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.921618351s ago: executing program 1 (id=1243): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x47b0, &(0x7f0000000100)={0x0, 0xf0ce, 0x3481, 0xfffffffc, 0x410014}) io_uring_enter(r0, 0x0, 0xcb, 0xf, &(0x7f0000000000)={[0x20]}, 0x18) 3.658311797s ago: executing program 4 (id=1246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x9, 0x20}, 0xc) 3.222278382s ago: executing program 4 (id=1250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0xfd, 0x4) 2.662606075s ago: executing program 2 (id=1254): syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) 2.497912135s ago: executing program 1 (id=1257): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) 2.073997349s ago: executing program 2 (id=1261): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.985246164s ago: executing program 0 (id=1263): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x4e22, 0x800007, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1000000}, 0x1f00, {[0xfffffc01, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0xfffffffd]}}, 0x5c) 1.89122904s ago: executing program 0 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f00006dc000/0x3000)=nil, 0x5000) shmdt(r4) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.834070803s ago: executing program 5 (id=1266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x10, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0xa0001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x46, 0x8, 0x8, 0x1, 0x9, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x3, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0xd, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10003, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x1, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0xfffffff5, 0x53, 0x7, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0xffffffff, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x6, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002000)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {0x10}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x4, 0x10001, 0x8000, 0xf, 0x1, 0x807, 0xd, 0x1, 0x1, 0x1, 0x800, 0x4, 0xffffff00, 0x1000, 0x1, 0x7, 0x5, 0x9, 0xfff, 0x3, 0x1, 0x7, 0x9, 0x3, 0x3, 0x100, 0x4, 0x85b8, 0x10, 0x6, 0x6, 0x8000, 0xad4, 0x80, 0x7, 0x7, 0x3, 0x6, 0x4, 0x8, 0x10000, 0x800, 0x2edf2cbf, 0xfff, 0x5, 0x8, 0x3ff, 0x7f, 0x7ff, 0x5, 0x3, 0x7fffffff, 0x7c, 0x6, 0x7, 0xfffffeff, 0x0, 0x0, 0x4b, 0xfffffffb, 0x6499, 0x3, 0x8, 0x5, 0xd07, 0x80000001, 0x8000, 0xfffffff1, 0x80, 0x0, 0x9, 0x200004, 0x80, 0x2, 0xc0, 0x4, 0x6, 0x9, 0xe, 0x2, 0x1, 0x7, 0x567b, 0xfffffaf5, 0x6, 0x6, 0x73, 0xb2, 0x1, 0xffff0001, 0x5, 0x2, 0x6, 0x4, 0x9, 0x6, 0xd2e3, 0x10000, 0x80000000, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x1, 0x5, 0x3f3a3e7c, 0x3f, 0x4, 0xfffffff8, 0x0, 0x5, 0x7ff, 0x3, 0x7, 0x8, 0xb5c, 0xfffff984, 0x3, 0x18000000, 0x2, 0x3ff, 0xf4, 0x6, 0x4, 0x8, 0x2, 0x6, 0x7, 0x8, 0x2, 0x4, 0x4, 0x7, 0x87, 0x40, 0x5, 0x2, 0x401, 0x4, 0x6, 0x4, 0x10c00, 0x7ff, 0xfffffc00, 0x5, 0xfffffffc, 0xf, 0x3db, 0x6d4, 0x6, 0x7, 0x8, 0x9, 0x42c, 0x8, 0x5, 0x8, 0x1, 0x8, 0x3, 0x1, 0x80000000, 0x3fb, 0x0, 0x1, 0xffffffff, 0xb, 0x2, 0x1, 0x3, 0x10001, 0x9, 0x3, 0x4, 0x8, 0x9, 0x0, 0x1, 0xa93, 0x7, 0x4, 0x5, 0x7f, 0x3c2, 0x0, 0x10001, 0x0, 0x1, 0x2, 0x30, 0x9, 0xffffffff, 0xeb0, 0x4, 0xee, 0x5, 0x12, 0x0, 0x80000000, 0x2, 0x6, 0x3, 0x0, 0x0, 0xe8, 0x4, 0x8, 0x4, 0x7fffffff, 0x6, 0x9, 0x3, 0xe, 0x0, 0xa021, 0xd8fc, 0x8, 0x800, 0x8, 0x800, 0x3, 0x3, 0x9d21, 0x1, 0x1ff, 0xd, 0x7, 0x1, 0x9362, 0x6, 0xc, 0x0, 0xf, 0x8000, 0x0, 0x7, 0x5, 0x0, 0x7, 0x7fffffff, 0xffffffff, 0x3, 0x7b5, 0x0, 0x3ff, 0xffffeffc, 0x7fff, 0xc2, 0x9, 0x7b8, 0x7, 0x2, 0x5, 0x7cd]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x20000040) 1.271662626s ago: executing program 5 (id=1267): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 873.291759ms ago: executing program 0 (id=1268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) close_range(r0, 0xffffffffffffffff, 0x0) 791.044554ms ago: executing program 2 (id=1269): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0x20000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000a80)={0xa402, 0x8, 0xaab, 0x9a52}) 622.365464ms ago: executing program 0 (id=1270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="ac160b", 0x3}], 0x1}}], 0x1, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 542.293478ms ago: executing program 5 (id=1271): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xe827, 0x80, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x655d, 0xe, 0x0, 0x0) 453.190954ms ago: executing program 0 (id=1272): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x100000001, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4000000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x4, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 369.309528ms ago: executing program 5 (id=1273): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x10001, 0x2, 0x5, 0x1, 0x8, 0xa7c, 0x40, {0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3bd}}, 0x8, 0x5, 0xd, 0x5, 0xebec}}, &(0x7f0000000280)=0xb0) 290.923113ms ago: executing program 0 (id=1274): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000002280)={[{@bsdgroups}, {@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}, {@nodioread_nolock}, {@noblock_validity}, {@bsdgroups}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) 238.280626ms ago: executing program 5 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x810}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 141.076772ms ago: executing program 1 (id=1276): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000280)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@resgid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x8042, 0x0) unshare(0x22020600) read$hiddev(r0, &(0x7f0000000540)=""/129, 0x81) 0s ago: executing program 5 (id=1277): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000003400)='\v', 0x1}], 0x1, 0x0, 0x538}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x441, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) fdatasync(r0) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x60, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) kernel console output (not intermixed with test programs): ity change from 0 to 64 [ 321.778753][ T4318] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 323.833986][ T6672] netlink: 72 bytes leftover after parsing attributes in process `syz.2.608'. [ 323.944689][ T6666] loop2: detected capacity change from 0 to 64 [ 323.970271][ T4318] usb 1-1: Using ep0 maxpacket: 16 [ 324.072452][ T6683] netlink: 72 bytes leftover after parsing attributes in process `syz.1.615'. [ 324.192687][ T6686] loop1: detected capacity change from 0 to 64 [ 324.290755][ T4318] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 325.707351][ T6686] autofs4:pid:6686:autofs_fill_super: called with bogus options [ 325.724695][ T6684] netlink: 'syz.3.614': attribute type 1 has an invalid length. [ 325.753482][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.026244][ T4318] usb 1-1: Product: syz [ 326.048664][ T4318] usb 1-1: Manufacturer: syz [ 326.073453][ T4318] usb 1-1: SerialNumber: syz [ 326.079978][ T4318] usb 1-1: config 0 descriptor?? [ 326.099240][ T6689] device macvlan2 entered promiscuous mode [ 326.101844][ T4318] usb 1-1: can't set config #0, error -71 [ 326.112537][ T4318] usb 1-1: USB disconnect, device number 12 [ 326.124214][ T6689] device bond5 entered promiscuous mode [ 326.130805][ T6689] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 326.139805][ T6689] device bond5 left promiscuous mode [ 326.224208][ T6696] netlink: 72 bytes leftover after parsing attributes in process `syz.4.616'. [ 326.303116][ T6699] loop4: detected capacity change from 0 to 64 [ 327.173001][ T6705] netlink: 72 bytes leftover after parsing attributes in process `syz.2.617'. [ 327.210638][ T6695] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 327.248842][ T6707] loop2: detected capacity change from 0 to 64 [ 328.078804][ T6707] autofs4:pid:6707:autofs_fill_super: called with bogus options [ 328.161296][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 328.540766][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.621'. [ 328.549897][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.621'. [ 328.618189][ T6716] netlink: 72 bytes leftover after parsing attributes in process `syz.3.623'. [ 328.695526][ T6717] loop3: detected capacity change from 0 to 64 [ 330.178140][ T6719] netlink: 72 bytes leftover after parsing attributes in process `syz.4.620'. [ 331.312273][ T6726] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 332.020221][ T4318] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 332.290447][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 332.625246][ T4318] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 332.853146][ T6756] netlink: 72 bytes leftover after parsing attributes in process `syz.2.630'. [ 332.929777][ T6758] loop2: detected capacity change from 0 to 64 [ 335.326690][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.335674][ T4318] usb 4-1: Product: syz [ 335.340068][ T4318] usb 4-1: Manufacturer: syz [ 335.345239][ T4318] usb 4-1: SerialNumber: syz [ 335.351927][ T4318] usb 4-1: config 0 descriptor?? [ 336.450391][ T4318] usb 4-1: can't set config #0, error -71 [ 336.457400][ T4318] usb 4-1: USB disconnect, device number 9 [ 336.566161][ T6769] netlink: 72 bytes leftover after parsing attributes in process `syz.1.633'. [ 336.642293][ T6771] loop1: detected capacity change from 0 to 64 [ 339.650351][ T6777] netlink: 72 bytes leftover after parsing attributes in process `syz.3.635'. [ 339.723341][ T6779] loop3: detected capacity change from 0 to 64 [ 341.603156][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.636'. [ 341.655093][ T6783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.636'. [ 344.237983][ T6803] netlink: 72 bytes leftover after parsing attributes in process `syz.1.641'. [ 344.314139][ T6809] loop1: detected capacity change from 0 to 64 [ 344.834975][ T6814] netlink: 72 bytes leftover after parsing attributes in process `syz.2.646'. [ 344.914464][ T6816] loop2: detected capacity change from 0 to 64 [ 345.825547][ T6823] netlink: 72 bytes leftover after parsing attributes in process `syz.4.648'. [ 345.901417][ T6825] loop4: detected capacity change from 0 to 64 [ 347.976974][ T6827] netlink: 72 bytes leftover after parsing attributes in process `syz.3.647'. [ 348.051931][ T6828] loop3: detected capacity change from 0 to 64 [ 352.137757][ T6836] netlink: 72 bytes leftover after parsing attributes in process `syz.0.650'. [ 352.215468][ T6838] loop0: detected capacity change from 0 to 64 [ 353.701704][ T6840] autofs4:pid:6840:autofs_fill_super: called with bogus options [ 353.809812][ T6845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 353.820839][ T6845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.652'. [ 355.291221][ T6847] netlink: 72 bytes leftover after parsing attributes in process `syz.3.653'. [ 355.365218][ T6853] loop3: detected capacity change from 0 to 64 [ 356.222137][ T6866] netlink: 72 bytes leftover after parsing attributes in process `syz.0.654'. [ 356.302939][ T6869] loop0: detected capacity change from 0 to 64 [ 358.917101][ T6882] netlink: 72 bytes leftover after parsing attributes in process `syz.1.661'. [ 359.650710][ T6884] loop1: detected capacity change from 0 to 64 [ 361.758950][ T6894] netlink: 72 bytes leftover after parsing attributes in process `syz.4.662'. [ 361.838852][ T6896] loop4: detected capacity change from 0 to 64 [ 361.930677][ T6893] autofs4:pid:6893:autofs_fill_super: called with bogus options [ 362.651335][ T6905] netlink: 72 bytes leftover after parsing attributes in process `syz.0.663'. [ 362.730057][ T6907] loop0: detected capacity change from 0 to 64 [ 362.857154][ T6907] autofs4:pid:6907:autofs_fill_super: called with bogus options [ 363.172706][ T6908] netlink: 72 bytes leftover after parsing attributes in process `syz.2.665'. [ 363.252494][ T6910] loop2: detected capacity change from 0 to 64 [ 363.640039][ T6904] device syzkaller0 entered promiscuous mode [ 364.969079][ T6926] netlink: 72 bytes leftover after parsing attributes in process `syz.4.669'. [ 365.056597][ T6928] loop4: detected capacity change from 0 to 64 [ 365.810760][ T6914] loop1: detected capacity change from 0 to 8192 [ 366.187963][ T6925] netlink: 72 bytes leftover after parsing attributes in process `syz.0.670'. [ 366.269328][ T6932] autofs4:pid:6932:autofs_fill_super: called with bogus options [ 369.297495][ T6948] autofs4:pid:6948:autofs_fill_super: called with bogus options [ 369.548119][ T6949] autofs4:pid:6949:autofs_fill_super: called with bogus options [ 371.683717][ T6965] netlink: 72 bytes leftover after parsing attributes in process `syz.1.681'. [ 371.759509][ T6966] loop1: detected capacity change from 0 to 64 [ 373.715588][ T6971] netlink: 72 bytes leftover after parsing attributes in process `syz.2.683'. [ 373.796697][ T6974] loop2: detected capacity change from 0 to 64 [ 373.969846][ T6974] autofs4:pid:6974:autofs_fill_super: called with bogus options [ 374.433164][ T6978] netlink: 72 bytes leftover after parsing attributes in process `syz.3.686'. [ 374.510362][ T6980] loop3: detected capacity change from 0 to 64 [ 374.633270][ T6980] autofs4:pid:6980:autofs_fill_super: called with bogus options [ 375.487380][ T6985] netlink: 72 bytes leftover after parsing attributes in process `syz.1.685'. [ 375.562440][ T6988] loop1: detected capacity change from 0 to 64 [ 377.063884][ T6988] autofs4:pid:6988:autofs_fill_super: called with bogus options [ 377.395561][ T6991] loop3: detected capacity change from 0 to 8192 [ 377.406338][ T6983] tipc: Enabling of bearer rejected, failed to enable media [ 377.612228][ T6996] netlink: 72 bytes leftover after parsing attributes in process `syz.0.690'. [ 377.689792][ T6998] loop0: detected capacity change from 0 to 64 [ 377.822408][ T6998] autofs4:pid:6998:autofs_fill_super: called with bogus options [ 378.576615][ T7004] netlink: 72 bytes leftover after parsing attributes in process `syz.1.701'. [ 378.651016][ T7006] loop1: detected capacity change from 0 to 64 [ 378.664113][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.672270][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.778021][ T7010] netlink: 72 bytes leftover after parsing attributes in process `syz.2.691'. [ 380.851901][ T7011] loop2: detected capacity change from 0 to 64 [ 382.359682][ T7013] netlink: 72 bytes leftover after parsing attributes in process `syz.4.692'. [ 387.425975][ T7037] netlink: 72 bytes leftover after parsing attributes in process `syz.1.697'. [ 387.437814][ T7038] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 387.509115][ T7041] loop1: detected capacity change from 0 to 64 [ 387.648778][ T7041] autofs4:pid:7041:autofs_fill_super: called with bogus options [ 388.377181][ T7048] netlink: 72 bytes leftover after parsing attributes in process `syz.0.699'. [ 388.450718][ T7050] loop0: detected capacity change from 0 to 64 [ 389.639747][ T7059] netlink: 72 bytes leftover after parsing attributes in process `syz.0.702'. [ 389.713255][ T7061] loop0: detected capacity change from 0 to 64 [ 389.794252][ T7061] autofs4:pid:7061:autofs_fill_super: called with bogus options [ 391.133097][ T7066] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 391.259093][ T7071] tipc: Enabling of bearer rejected, failed to enable media [ 391.280425][ T7071] device syzkaller0 entered promiscuous mode [ 391.323065][ T7072] Zero length message leads to an empty skb [ 392.593336][ T7076] netlink: 72 bytes leftover after parsing attributes in process `syz.0.707'. [ 392.643403][ T7082] netlink: 72 bytes leftover after parsing attributes in process `syz.2.710'. [ 392.681644][ T7076] loop0: detected capacity change from 0 to 64 [ 392.906709][ T7082] loop2: detected capacity change from 0 to 64 [ 392.921492][ T7076] autofs4:pid:7076:autofs_fill_super: called with bogus options [ 396.029914][ T7112] netlink: 72 bytes leftover after parsing attributes in process `syz.2.717'. [ 396.105940][ T7114] loop2: detected capacity change from 0 to 64 [ 396.316149][ T7114] autofs4:pid:7114:autofs_fill_super: called with bogus options [ 396.957881][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.071507][ T7111] tipc: Started in network mode [ 397.076468][ T7111] tipc: Node identity 8ef44e515375, cluster identity 4711 [ 398.511383][ T5617] Bluetooth: hci1: command 0x0409 tx timeout [ 398.555681][ T7111] tipc: Enabled bearer , priority 0 [ 399.640404][ T7128] netlink: 72 bytes leftover after parsing attributes in process `syz.1.721'. [ 399.665482][ T7128] loop1: detected capacity change from 0 to 64 [ 400.001941][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.188335][ T7128] autofs4:pid:7128:autofs_fill_super: called with bogus options [ 400.598632][ T6485] Bluetooth: hci1: command 0x041b tx timeout [ 401.150058][ T7111] tipc: Disabling bearer [ 402.049833][ T4270] tipc: Node number set to 3716238929 [ 402.723752][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.015881][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 403.181276][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.862765][ T7154] netlink: 72 bytes leftover after parsing attributes in process `syz.1.722'. [ 403.946785][ T7157] loop1: detected capacity change from 0 to 64 [ 404.365523][ T7155] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 404.561445][ T7093] chnl_net:caif_netlink_parms(): no params data found [ 404.744194][ T7169] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 404.937980][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.952462][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.073084][ T7093] device bridge_slave_0 entered promiscuous mode [ 405.140797][ T5617] Bluetooth: hci1: command 0x0419 tx timeout [ 406.011067][ T7183] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 406.114792][ T7189] netlink: 72 bytes leftover after parsing attributes in process `syz.2.733'. [ 406.139517][ T7189] loop2: detected capacity change from 0 to 64 [ 408.192268][ T7195] netlink: 72 bytes leftover after parsing attributes in process `syz.4.732'. [ 408.219300][ T7195] loop4: detected capacity change from 0 to 64 [ 409.119565][ T7191] loop0: detected capacity change from 0 to 64 [ 409.386464][ T7195] autofs4:pid:7195:autofs_fill_super: called with bogus options [ 410.127078][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.182666][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.195052][ T7093] device bridge_slave_1 entered promiscuous mode [ 410.533945][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.626393][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.636140][ T7219] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 412.705181][ T7093] team0: Port device team_slave_0 added [ 412.855734][ T7224] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 412.867691][ T7222] netlink: 60 bytes leftover after parsing attributes in process `syz.4.736'. [ 412.885830][ T7093] team0: Port device team_slave_1 added [ 412.912625][ T7219] device macvlan2 entered promiscuous mode [ 412.926984][ T7219] device bond3 entered promiscuous mode [ 412.953049][ T7219] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.992741][ T7230] loop1: detected capacity change from 0 to 64 [ 413.046007][ T7219] device bond3 left promiscuous mode [ 413.215289][ T7238] loop2: detected capacity change from 0 to 64 [ 413.336725][ T4318] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 415.052047][ T7238] autofs4:pid:7238:autofs_fill_super: called with bogus options [ 415.191421][ T7229] autofs4:pid:7229:autofs_fill_super: called with bogus options [ 415.220371][ T4318] usb 1-1: device descriptor read/64, error -71 [ 415.364344][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.403329][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.443232][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.456051][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.464192][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.490331][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.600376][ T4318] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 415.850439][ T4318] usb 1-1: device descriptor read/64, error -71 [ 416.030223][ T4318] usb usb1-port1: attempt power cycle [ 416.099012][ T7093] device hsr_slave_0 entered promiscuous mode [ 418.069662][ T7093] device hsr_slave_1 entered promiscuous mode [ 418.212677][ T7261] loop0: detected capacity change from 0 to 64 [ 418.394461][ T7093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.512318][ T7093] Cannot create hsr debugfs directory [ 418.519850][ T7260] autofs4:pid:7260:autofs_fill_super: called with bogus options [ 419.240649][ T154] bond1: (slave gretap1): Releasing backup interface [ 419.295762][ T7246] device syzkaller0 entered promiscuous mode [ 420.381946][ T7297] loop1: detected capacity change from 0 to 64 [ 421.790966][ T7299] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 422.103897][ T7310] loop4: detected capacity change from 0 to 64 [ 422.242148][ T7310] autofs4:pid:7310:autofs_fill_super: called with bogus options [ 423.037020][ T7312] tipc: Enabled bearer , priority 0 [ 423.060238][ T4318] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 423.118227][ T7312] tipc: Resetting bearer [ 423.125998][ T7093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.349061][ T7311] tipc: Disabling bearer [ 423.369689][ T7093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.387266][ T154] device team0 left promiscuous mode [ 423.393011][ T154] device team_slave_0 left promiscuous mode [ 423.402613][ T154] device team_slave_1 left promiscuous mode [ 423.410251][ T4318] usb 3-1: device descriptor read/64, error -71 [ 423.418066][ T154] device bond0 left promiscuous mode [ 423.424150][ T154] device bond_slave_0 left promiscuous mode [ 423.430527][ T154] device bond_slave_1 left promiscuous mode [ 423.558839][ T154] device hsr_slave_0 left promiscuous mode [ 423.646101][ T154] device hsr_slave_1 left promiscuous mode [ 423.680306][ T4318] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 423.776247][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.886246][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.894971][ T4318] usb 3-1: device descriptor read/64, error -71 [ 424.274891][ T4318] usb usb3-port1: attempt power cycle [ 424.287778][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.310337][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.327501][ T154] device bridge_slave_1 left promiscuous mode [ 424.339522][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.352139][ T154] device bridge_slave_0 left promiscuous mode [ 424.358414][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.399382][ T154] device veth1_macvtap left promiscuous mode [ 424.406463][ T154] device veth0_macvtap left promiscuous mode [ 424.414089][ T154] device veth1_vlan left promiscuous mode [ 424.420787][ T154] device veth0_vlan left promiscuous mode [ 424.640529][ T154] bond5 (unregistering): Released all slaves [ 424.690210][ T4318] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 424.703341][ T154] bond4 (unregistering): Released all slaves [ 424.734906][ T154] bond3 (unregistering): Released all slaves [ 424.755787][ T154] bond2 (unregistering): Released all slaves [ 424.781278][ T4318] usb 3-1: device descriptor read/8, error -71 [ 424.798913][ T154] bond1 (unregistering): Released all slaves [ 426.352918][ T7340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.761'. [ 426.383209][ T154] team0 (unregistering): Port device team_slave_1 removed [ 426.401764][ T7340] loop2: detected capacity change from 0 to 64 [ 426.433548][ T154] team0 (unregistering): Port device team_slave_0 removed [ 426.481847][ T7340] autofs4:pid:7340:autofs_fill_super: called with bogus options [ 426.523390][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.575143][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.013381][ T154] bond0 (unregistering): Released all slaves [ 427.102029][ T7093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 427.243041][ T7093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 429.512243][ T7375] loop2: detected capacity change from 0 to 64 [ 429.671995][ T7375] autofs4:pid:7375:autofs_fill_super: called with bogus options [ 432.563696][ T7391] tipc: Started in network mode [ 432.568746][ T7391] tipc: Node identity 126f1a367e47, cluster identity 4711 [ 432.629438][ T7391] tipc: Enabled bearer , priority 0 [ 432.696404][ T7391] device syzkaller0 entered promiscuous mode [ 432.746632][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.884317][ T7391] tipc: Resetting bearer [ 434.036088][ T7384] tipc: Resetting bearer [ 434.123694][ T7384] tipc: Disabling bearer [ 434.435950][ T1108] tipc: Node number set to 1814567478 [ 434.502981][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.635984][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.787721][ T7093] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.041960][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 435.058420][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.171832][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.179055][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.241996][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 435.300014][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.315966][ T7420] netlink: 72 bytes leftover after parsing attributes in process `syz.2.776'. [ 435.393456][ T7422] loop2: detected capacity change from 0 to 64 [ 435.495590][ T7422] autofs4:pid:7422:autofs_fill_super: called with bogus options [ 435.523084][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.692590][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.699787][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.954003][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 436.063652][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 436.108453][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 436.281110][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.100276][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.199620][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.331257][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.410685][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.438233][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.570507][ T7441] netlink: 72 bytes leftover after parsing attributes in process `syz.0.773'. [ 437.626855][ T7444] loop0: detected capacity change from 0 to 64 [ 437.698732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 438.884717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.524468][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.530887][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.226659][ T7461] loop0: detected capacity change from 0 to 512 [ 442.277622][ T7467] loop2: detected capacity change from 0 to 512 [ 442.307123][ T7461] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 442.345159][ T7461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 442.368292][ T7461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 442.391975][ T7467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 442.411431][ T7461] System zones: 1-12 [ 442.452453][ T7467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 442.465375][ T7461] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 443.445977][ T7461] EXT4-fs (loop0): 1 truncate cleaned up [ 443.450571][ T7467] System zones: [ 443.451745][ T7461] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 443.452983][ T7467] 1-12 [ 444.024306][ T7485] tipc: Started in network mode [ 444.030241][ T7485] tipc: Node identity d232ee3a0dcf, cluster identity 4711 [ 444.037614][ T7485] tipc: Enabled bearer , priority 0 [ 444.046537][ T7485] device syzkaller0 entered promiscuous mode [ 444.070371][ T7485] tipc: Resetting bearer [ 444.101814][ T7467] EXT4-fs (loop2): 1 truncate cleaned up [ 444.122214][ T7484] tipc: Resetting bearer [ 444.128935][ T7467] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 444.159440][ T7484] tipc: Disabling bearer [ 444.207622][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 444.244105][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.085817][ T7093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.345996][ T7502] loop0: detected capacity change from 0 to 512 [ 445.491327][ T7506] netlink: 72 bytes leftover after parsing attributes in process `syz.2.792'. [ 445.524795][ T7502] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 445.792221][ T7502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 445.986924][ T7502] System zones: 1-12 [ 445.987097][ T7506] loop2: detected capacity change from 0 to 64 [ 446.247932][ T7502] [ 446.503275][ T7502] EXT4-fs (loop0): 1 truncate cleaned up [ 446.508989][ T7502] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 447.402598][ T7525] tipc: Enabled bearer , priority 0 [ 447.451875][ T7525] device syzkaller0 entered promiscuous mode [ 447.608935][ T7531] loop4: detected capacity change from 0 to 512 [ 447.700554][ T7531] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 447.723085][ T7531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 447.737330][ T7535] tipc: Resetting bearer [ 447.743058][ T7531] System zones: 1-12 [ 447.797141][ T7531] EXT4-fs (loop4): 1 truncate cleaned up [ 447.812674][ T7531] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 447.897743][ T7518] tipc: Resetting bearer [ 448.112333][ T7518] tipc: Disabling bearer [ 448.599427][ T6485] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 448.608238][ T6485] Bluetooth: hci2: Injecting HCI hardware error event [ 448.616946][ T4188] Bluetooth: hci2: hardware error 0x00 [ 448.625229][ T6485] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 448.633766][ T6485] Bluetooth: hci3: Injecting HCI hardware error event [ 448.635946][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.641347][ T4197] Bluetooth: hci3: hardware error 0x00 [ 448.654158][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.134286][ T7546] tipc: Enabled bearer , priority 0 [ 450.161444][ T7546] device syzkaller0 entered promiscuous mode [ 450.195876][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.230987][ T7554] loop2: detected capacity change from 0 to 512 [ 450.242647][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.281998][ T7552] tipc: Resetting bearer [ 450.289507][ T7554] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 450.301930][ T7093] device veth0_vlan entered promiscuous mode [ 450.308625][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.337425][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.371694][ T7545] tipc: Resetting bearer [ 450.393604][ T7545] tipc: Disabling bearer [ 450.400996][ T7554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 450.425107][ T7554] System zones: 1-12 [ 450.425132][ T7093] device veth1_vlan entered promiscuous mode [ 450.429095][ T7554] [ 450.498151][ T7561] netlink: 72 bytes leftover after parsing attributes in process `syz.4.802'. [ 450.538784][ T7554] EXT4-fs (loop2): 1 truncate cleaned up [ 450.574227][ T7563] loop4: detected capacity change from 0 to 64 [ 450.666526][ T7554] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 450.779535][ T7563] autofs4:pid:7563:autofs_fill_super: called with bogus options [ 451.369977][ T4201] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 451.951458][ T7574] netlink: 72 bytes leftover after parsing attributes in process `syz.0.805'. [ 452.043870][ T7576] loop0: detected capacity change from 0 to 64 [ 452.138933][ T7576] autofs4:pid:7576:autofs_fill_super: called with bogus options [ 452.953358][ T6515] Bluetooth: (null): Invalid header checksum [ 453.118719][ T4426] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 453.151057][ T4426] Bluetooth: hci4: Injecting HCI hardware error event [ 453.166339][ T4201] Bluetooth: hci4: hardware error 0x00 [ 454.145527][ T7610] netlink: 72 bytes leftover after parsing attributes in process `syz.2.810'. [ 454.223268][ T7612] loop2: detected capacity change from 0 to 64 [ 456.172598][ T7600] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 456.194042][ T7600] kvm: pic: level sensitive irq not supported [ 456.194126][ T7600] kvm: pic: non byte read [ 456.205674][ T7600] kvm: pic: level sensitive irq not supported [ 456.205747][ T7600] kvm: pic: non byte read [ 456.218526][ T7600] kvm: pic: level sensitive irq not supported [ 456.218658][ T7600] kvm: pic: non byte read [ 456.288580][ T5618] Bluetooth: hci1: command 0x0409 tx timeout [ 456.514895][ T7609] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 456.669419][ T7602] autofs4:pid:7602:autofs_fill_super: called with bogus options [ 456.875450][ T7626] netlink: 72 bytes leftover after parsing attributes in process `syz.4.814'. [ 456.949565][ T7627] loop4: detected capacity change from 0 to 64 [ 458.709392][ T5618] Bluetooth: hci1: command 0x041b tx timeout [ 458.768904][ T7632] netlink: 72 bytes leftover after parsing attributes in process `syz.0.812'. [ 458.873968][ T7634] loop0: detected capacity change from 0 to 64 [ 460.710957][ T7634] autofs4:pid:7634:autofs_fill_super: called with bogus options [ 463.149262][ T4318] Bluetooth: hci1: command 0x040f tx timeout [ 465.936690][ T6764] Bluetooth: hci1: command 0x0419 tx timeout [ 465.985252][ T7597] chnl_net:caif_netlink_parms(): no params data found [ 465.998745][ T7676] loop2: detected capacity change from 0 to 512 [ 466.076029][ T7676] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 466.116918][ T7682] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 466.128378][ T7676] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 466.281402][ T7676] System zones: 1-12 [ 466.411251][ T7676] EXT4-fs (loop2): 1 truncate cleaned up [ 466.496657][ T7676] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 467.532249][ T7705] netlink: 72 bytes leftover after parsing attributes in process `syz.1.826'. [ 467.614617][ T7707] loop1: detected capacity change from 0 to 64 [ 467.733670][ T7707] autofs4:pid:7707:autofs_fill_super: called with bogus options [ 468.769542][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.743854][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.753608][ T7597] device bridge_slave_0 entered promiscuous mode [ 469.847934][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.855519][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.913778][ T7597] device bridge_slave_1 entered promiscuous mode [ 469.944763][ T7725] tipc: Enabled bearer , priority 0 [ 469.982821][ T7725] device syzkaller0 entered promiscuous mode [ 470.002845][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.060761][ T7725] tipc: Resetting bearer [ 470.072957][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.156988][ T7724] tipc: Resetting bearer [ 470.904471][ T7732] loop2: detected capacity change from 0 to 512 [ 470.958585][ T7732] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 470.977864][ T7724] tipc: Disabling bearer [ 471.041565][ T7597] team0: Port device team_slave_0 added [ 471.049998][ T7597] team0: Port device team_slave_1 added [ 471.079791][ T7732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 471.211943][ T7732] System zones: 1-12 [ 471.273994][ T7732] EXT4-fs (loop2): 1 truncate cleaned up [ 471.301945][ T7742] loop0: detected capacity change from 0 to 64 [ 471.425077][ T7742] autofs4:pid:7742:autofs_fill_super: called with bogus options [ 471.484486][ T7732] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 472.095218][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.102486][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.128832][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.141536][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.148515][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.226721][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.812033][ T7597] device hsr_slave_0 entered promiscuous mode [ 473.949405][ T7765] loop4: detected capacity change from 0 to 64 [ 475.549450][ T7765] autofs4:pid:7765:autofs_fill_super: called with bogus options [ 475.602609][ T7597] device hsr_slave_1 entered promiscuous mode [ 475.707247][ T7597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.829171][ T7597] Cannot create hsr debugfs directory [ 476.127785][ T7773] netlink: 72 bytes leftover after parsing attributes in process `syz.1.839'. [ 476.218729][ T7775] loop1: detected capacity change from 0 to 64 [ 478.969839][ T7775] autofs4:pid:7775:autofs_fill_super: called with bogus options [ 479.246276][ T7785] netlink: 72 bytes leftover after parsing attributes in process `syz.2.840'. [ 479.324903][ T7787] loop2: detected capacity change from 0 to 64 [ 479.447446][ T7787] autofs4:pid:7787:autofs_fill_super: called with bogus options [ 480.141512][ T4264] device hsr_slave_0 left promiscuous mode [ 480.735743][ T4264] device hsr_slave_1 left promiscuous mode [ 482.602394][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.698883][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.739940][ T4264] device bridge_slave_1 left promiscuous mode [ 482.785123][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.884309][ T4264] device bridge_slave_0 left promiscuous mode [ 482.901044][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.998361][ T4264] device veth1_vlan left promiscuous mode [ 483.007691][ T4264] device veth0_vlan left promiscuous mode [ 483.148444][ T7821] kvm [7818]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1000011d8 [ 483.170449][ T7821] kvm [7818]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 483.193722][ T7821] kvm [7818]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x58ba [ 483.229948][ T7821] kvm [7818]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x7870 [ 483.270804][ T7821] kvm [7818]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xc907, nop [ 483.663789][ T4264] team0 (unregistering): Port device team_slave_1 removed [ 483.695263][ T4264] team0 (unregistering): Port device team_slave_0 removed [ 483.741672][ T4264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.777365][ T4264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.135733][ T4264] bond0 (unregistering): Released all slaves [ 484.829396][ T7852] netlink: 72 bytes leftover after parsing attributes in process `syz.1.853'. [ 484.903055][ T7853] loop1: detected capacity change from 0 to 64 [ 487.380254][ T7862] loop2: detected capacity change from 0 to 64 [ 488.930567][ T7862] autofs4:pid:7862:autofs_fill_super: called with bogus options [ 489.450931][ T7867] loop1: detected capacity change from 0 to 512 [ 489.528874][ T7867] EXT4-fs (loop1): inline encryption not supported [ 489.633185][ T7867] EXT4-fs (loop1): 1 orphan inode deleted [ 489.638982][ T7867] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 490.613568][ T7867] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.909981][ T7597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 491.150481][ T7597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 491.239785][ T7597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 491.400358][ T26] audit: type=1800 audit(1770209420.843:2): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.855" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 491.481477][ T7597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 491.947223][ T7906] loop2: detected capacity change from 0 to 512 [ 492.012688][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.075500][ T7906] EXT4-fs (loop2): orphan cleanup on readonly fs [ 492.126688][ T7597] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.158206][ T7906] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.861: EA inode hash validation failed [ 492.283057][ T7906] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 492.426145][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 492.457837][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 492.466986][ T7906] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.861: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 492.880317][ T7906] EXT4-fs (loop2): Remounting filesystem read-only [ 493.360829][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.379772][ T7906] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.861: ea_inode dec ref err=-117 [ 493.441479][ T7906] EXT4-fs (loop2): 1 orphan inode deleted [ 493.441937][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.447275][ T7906] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 493.596668][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.603847][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.713222][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 493.764436][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 495.054852][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.577680][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.584882][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.638632][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 495.663174][ T7937] loop2: detected capacity change from 0 to 512 [ 495.727922][ T7597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.067599][ T7937] EXT4-fs (loop2): inline encryption not supported [ 496.123448][ T7597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.167502][ T7937] EXT4-fs (loop2): 1 orphan inode deleted [ 496.196662][ T7937] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 496.288382][ T7937] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.359796][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 496.383456][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 496.404029][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 496.418908][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 496.472700][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 496.528797][ T26] audit: type=1800 audit(1770209425.973:3): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.866" name="bus" dev="loop2" ino=16 res=0 errno=0 [ 496.547896][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 496.689641][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 496.815398][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 496.824538][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 496.833658][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 496.842015][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.181604][ T7957] loop0: detected capacity change from 0 to 64 [ 497.346122][ T7957] autofs4:pid:7957:autofs_fill_super: called with bogus options [ 497.685330][ T7961] loop4: detected capacity change from 0 to 512 [ 497.733181][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.754625][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.784576][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.814637][ T7961] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 497.867831][ T7961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 497.940004][ T7961] System zones: 1-12 [ 498.007126][ T7961] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 498.076316][ T7971] loop2: detected capacity change from 0 to 512 [ 498.103578][ T7961] EXT4-fs (loop4): 1 truncate cleaned up [ 498.109352][ T7961] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 498.354462][ T7971] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 499.080036][ T7971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 499.169377][ T7971] System zones: 1-12 [ 499.176382][ T7971] EXT4-fs (loop2): 1 truncate cleaned up [ 499.182615][ T7971] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 499.537631][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 499.563295][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 500.605359][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 500.632357][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 500.645642][ T7995] loop4: detected capacity change from 0 to 512 [ 500.664688][ T7597] device veth0_vlan entered promiscuous mode [ 500.693647][ T7995] EXT4-fs (loop4): inline encryption not supported [ 500.702249][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 500.741708][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 500.781689][ T7597] device veth1_vlan entered promiscuous mode [ 500.824988][ T7995] EXT4-fs (loop4): 1 orphan inode deleted [ 500.906613][ T7995] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 500.991473][ T7995] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.081752][ T7597] device veth0_macvtap entered promiscuous mode [ 501.100055][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.188278][ T8005] loop2: detected capacity change from 0 to 512 [ 501.399728][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.477264][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 501.919628][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.926161][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.949593][ T26] audit: type=1800 audit(1770209431.393:4): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.875" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 501.964048][ T7597] device veth1_macvtap entered promiscuous mode [ 501.984546][ T8005] EXT4-fs (loop2): orphan cleanup on readonly fs [ 502.004137][ T8005] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.874: EA inode hash validation failed [ 502.016896][ T8005] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 502.032142][ T8005] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.874: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 502.051957][ T8005] EXT4-fs (loop2): Remounting filesystem read-only [ 502.058733][ T8005] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.874: ea_inode dec ref err=-117 [ 502.071774][ T8005] EXT4-fs (loop2): 1 orphan inode deleted [ 502.077547][ T8005] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 502.118301][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.141044][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.199638][ T8009] loop1: detected capacity change from 0 to 512 [ 502.200243][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.288362][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.324212][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.404530][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.414773][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.425486][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.436951][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.447327][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.458575][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.519884][ T8009] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 502.555679][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.588415][ T8009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 502.612765][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.622962][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.633485][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.643413][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.655412][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.662452][ T8009] System zones: 1-12 [ 502.669714][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.679292][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 502.695568][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.733677][ T8009] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 502.758372][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 502.820490][ T8009] EXT4-fs (loop1): 1 truncate cleaned up [ 502.836690][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 502.869554][ T8009] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 502.897590][ T7597] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.920141][ T7597] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.928913][ T7597] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.266191][ T8032] loop2: detected capacity change from 0 to 512 [ 503.447780][ T7597] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.879692][ T8022] loop0: detected capacity change from 0 to 512 [ 503.960426][ T8022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 503.991541][ T8032] EXT4-fs (loop2): orphan cleanup on readonly fs [ 503.999347][ T8032] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.877: EA inode hash validation failed [ 504.012060][ T8032] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 504.025292][ T8032] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.877: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 504.042155][ T8032] EXT4-fs (loop2): Remounting filesystem read-only [ 504.048747][ T8032] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.877: ea_inode dec ref err=-117 [ 504.061918][ T8032] EXT4-fs (loop2): 1 orphan inode deleted [ 504.067691][ T8032] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 504.497568][ T8022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 504.620520][ T8022] System zones: 1-12 [ 505.110941][ T8022] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 505.278911][ T8022] EXT4-fs (loop0): 1 truncate cleaned up [ 505.394827][ T8022] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 505.426443][ T8050] loop1: detected capacity change from 0 to 512 [ 505.687651][ T6826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.424434][ T6826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.450496][ T8052] loop2: detected capacity change from 0 to 512 [ 506.484450][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 506.498460][ T8050] EXT4-fs (loop1): inline encryption not supported [ 506.510888][ T8052] EXT4-fs (loop2): orphan cleanup on readonly fs [ 506.521012][ T8052] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.880: EA inode hash validation failed [ 506.533794][ T8052] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 506.547061][ T8052] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.880: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 506.567932][ T8052] EXT4-fs (loop2): Remounting filesystem read-only [ 506.574583][ T8052] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.880: ea_inode dec ref err=-117 [ 506.587706][ T8052] EXT4-fs (loop2): 1 orphan inode deleted [ 506.593618][ T8052] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 506.696690][ T8050] EXT4-fs (loop1): 1 orphan inode deleted [ 506.728698][ T8050] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 506.914546][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.944894][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.957811][ T8050] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.205457][ T26] audit: type=1800 audit(1770209436.653:5): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.882" name="bus" dev="loop1" ino=16 res=0 errno=0 [ 507.425935][ T8064] loop0: detected capacity change from 0 to 512 [ 507.808022][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 507.988043][ T8064] EXT4-fs (loop0): orphan cleanup on readonly fs [ 508.218300][ T8064] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.883: EA inode hash validation failed [ 508.232073][ T8064] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.883: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 508.254698][ T8064] EXT4-fs (loop0): Remounting filesystem read-only [ 508.261448][ T8064] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.0.883: ea_inode dec ref err=-117 [ 508.274667][ T8064] EXT4-fs (loop0): 1 orphan inode deleted [ 508.283455][ T8064] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 508.566798][ T8080] loop2: detected capacity change from 0 to 64 [ 509.056567][ T8080] autofs4:pid:8080:autofs_fill_super: called with bogus options [ 509.678272][ T8088] loop0: detected capacity change from 0 to 64 [ 509.838794][ T8088] autofs4:pid:8088:autofs_fill_super: called with bogus options [ 510.545538][ T8091] netlink: 72 bytes leftover after parsing attributes in process `syz.5.705'. [ 510.621288][ T8093] loop5: detected capacity change from 0 to 64 [ 510.792653][ T8093] autofs4:pid:8093:autofs_fill_super: called with bogus options [ 511.479596][ T8106] loop1: detected capacity change from 0 to 512 [ 512.204396][ T8113] loop5: detected capacity change from 0 to 512 [ 512.242501][ T8114] loop0: detected capacity change from 0 to 1024 [ 512.253422][ T8106] EXT4-fs (loop1): inline encryption not supported [ 512.275531][ T8113] EXT4-fs (loop5): orphan cleanup on readonly fs [ 512.283594][ T8113] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.890: EA inode hash validation failed [ 512.296399][ T8113] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.890: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 512.315646][ T8113] EXT4-fs (loop5): Remounting filesystem read-only [ 512.322374][ T8113] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.890: ea_inode dec ref err=-117 [ 512.336283][ T8113] EXT4-fs (loop5): 1 orphan inode deleted [ 512.342220][ T8113] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 512.391757][ T8114] ======================================================= [ 512.391757][ T8114] WARNING: The mand mount option has been deprecated and [ 512.391757][ T8114] and is ignored by this kernel. Remove the mand [ 512.391757][ T8114] option from the mount to silence this warning. [ 512.391757][ T8114] ======================================================= [ 512.649601][ T8106] EXT4-fs (loop1): 1 orphan inode deleted [ 512.674896][ T8106] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 512.713430][ T8114] EXT4-fs (loop0): Ignoring removed oldalloc option [ 512.736394][ T8106] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.500962][ T26] audit: type=1800 audit(1770209442.953:6): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.891" name="bus" dev="loop1" ino=16 res=0 errno=0 [ 513.844344][ T8114] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc=0x00000000000000e6,oldalloc,nobarrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 513.946067][ T8128] loop5: detected capacity change from 0 to 512 [ 513.962805][ T8128] EXT4-fs (loop5): orphan cleanup on readonly fs [ 513.972327][ T8128] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.893: EA inode hash validation failed [ 513.985148][ T8128] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.893: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 514.002775][ T8128] EXT4-fs (loop5): Remounting filesystem read-only [ 514.009619][ T8128] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.893: ea_inode dec ref err=-117 [ 514.017230][ T8114] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.023220][ T8128] EXT4-fs (loop5): 1 orphan inode deleted [ 514.038675][ T8128] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 515.073698][ T8146] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 516.135469][ T8157] loop4: detected capacity change from 0 to 512 [ 516.159058][ T8158] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 516.192988][ T8157] EXT4-fs (loop4): inline encryption not supported [ 516.250505][ T8157] EXT4-fs (loop4): 1 orphan inode deleted [ 516.268775][ T8157] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 516.334639][ T8157] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.448852][ T26] audit: type=1800 audit(1770209445.893:7): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.897" name="bus" dev="loop4" ino=16 res=0 errno=0 [ 518.926013][ T8184] loop4: detected capacity change from 0 to 512 [ 519.614174][ T8184] EXT4-fs (loop4): inline encryption not supported [ 519.905039][ T8194] loop0: detected capacity change from 0 to 512 [ 519.930663][ T8184] EXT4-fs (loop4): 1 orphan inode deleted [ 519.936485][ T8184] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 519.970622][ T8184] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.025196][ T8194] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 520.037621][ T8198] loop1: detected capacity change from 0 to 512 [ 520.338514][ T8194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 520.703190][ T8205] loop5: detected capacity change from 0 to 512 [ 520.728356][ T8194] System zones: 1-12 [ 520.739417][ T8198] EXT4-fs (loop1): inline encryption not supported [ 520.970220][ T26] audit: type=1800 audit(1770209450.413:8): pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.903" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 521.014816][ T8205] EXT4-fs (loop5): orphan cleanup on readonly fs [ 521.023119][ T8194] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 521.039564][ T8205] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.905: EA inode hash validation failed [ 521.052395][ T8205] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.905: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 521.069996][ T8205] EXT4-fs (loop5): Remounting filesystem read-only [ 521.076764][ T8205] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.905: ea_inode dec ref err=-117 [ 521.089917][ T8205] EXT4-fs (loop5): 1 orphan inode deleted [ 521.095784][ T8205] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 521.164684][ T8194] EXT4-fs (loop0): 1 truncate cleaned up [ 521.207758][ T8194] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 521.424020][ T8198] EXT4-fs (loop1): 1 orphan inode deleted [ 521.470263][ T8198] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 521.529012][ T8198] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.423813][ T26] audit: type=1800 audit(1770209451.873:9): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.901" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 523.550794][ T8236] loop2: detected capacity change from 0 to 1024 [ 525.259125][ T8236] EXT4-fs (loop2): Ignoring removed oldalloc option [ 525.333666][ T8253] loop0: detected capacity change from 0 to 512 [ 525.349851][ T8236] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc=0x00000000000000e6,oldalloc,nobarrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 525.397726][ T8236] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.503773][ T8253] EXT4-fs (loop0): orphan cleanup on readonly fs [ 525.595835][ T8261] loop5: detected capacity change from 0 to 1024 [ 525.606368][ T8253] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.913: EA inode hash validation failed [ 525.705177][ T8253] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 525.780543][ T8253] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.913: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 525.812938][ T8253] EXT4-fs (loop0): Remounting filesystem read-only [ 525.833424][ T8253] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.0.913: ea_inode dec ref err=-117 [ 525.903216][ T8253] EXT4-fs (loop0): 1 orphan inode deleted [ 526.044801][ T8261] EXT4-fs (loop5): Ignoring removed oldalloc option [ 526.060273][ T8253] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 526.081972][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.158343][ T8261] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc=0x00000000000000e6,oldalloc,nobarrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 526.232685][ T8261] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.202566][ T8292] loop0: detected capacity change from 0 to 512 [ 527.832586][ T8292] EXT4-fs (loop0): orphan cleanup on readonly fs [ 527.849649][ T8292] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.918: EA inode hash validation failed [ 527.865236][ T8292] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.918: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 527.886642][ T8292] EXT4-fs (loop0): Remounting filesystem read-only [ 527.893545][ T8292] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.0.918: ea_inode dec ref err=-117 [ 527.908161][ T8292] EXT4-fs (loop0): 1 orphan inode deleted [ 527.914147][ T8292] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 529.141010][ T8307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 529.162403][ T8309] loop1: detected capacity change from 0 to 512 [ 529.205736][ T8309] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 529.262658][ T8309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 529.282397][ T8309] System zones: 1-12 [ 529.411359][ T8309] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 529.516782][ T8309] EXT4-fs (loop1): 1 truncate cleaned up [ 529.566086][ T8309] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 531.093810][ T8329] loop1: detected capacity change from 0 to 512 [ 531.327428][ T8329] EXT4-fs (loop1): orphan cleanup on readonly fs [ 531.339363][ T8329] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.922: EA inode hash validation failed [ 531.352827][ T8329] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 531.366501][ T8329] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.922: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 531.395231][ T8329] EXT4-fs (loop1): Remounting filesystem read-only [ 531.401966][ T8329] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.1.922: ea_inode dec ref err=-117 [ 531.415934][ T8329] EXT4-fs (loop1): 1 orphan inode deleted [ 531.421845][ T8329] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 531.675217][ T8333] loop0: detected capacity change from 0 to 512 [ 531.820449][ T8333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 532.009461][ T8333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 532.770250][ T8333] System zones: 1-12 [ 532.931444][ T8333] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 533.282422][ T8333] EXT4-fs (loop0): 1 truncate cleaned up [ 533.289583][ T8333] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 534.574637][ T8355] loop5: detected capacity change from 0 to 512 [ 535.139496][ T8355] EXT4-fs (loop5): orphan cleanup on readonly fs [ 535.167448][ T8355] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.927: EA inode hash validation failed [ 535.231251][ T8355] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 535.420319][ T8355] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.927: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 535.578917][ T8367] loop4: detected capacity change from 0 to 512 [ 536.050187][ T8355] EXT4-fs (loop5): Remounting filesystem read-only [ 536.056776][ T8355] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.927: ea_inode dec ref err=-117 [ 536.078991][ T8372] loop0: detected capacity change from 0 to 1024 [ 536.087671][ T8355] EXT4-fs (loop5): 1 orphan inode deleted [ 536.094463][ T8355] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 536.116346][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.153079][ T8367] EXT4-fs (loop4): orphan cleanup on readonly fs [ 536.165261][ T8367] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.930: EA inode hash validation failed [ 536.178100][ T8367] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.930: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 536.197271][ T8367] EXT4-fs (loop4): Remounting filesystem read-only [ 536.203163][ T8372] EXT4-fs (loop0): Ignoring removed oldalloc option [ 536.203990][ T8367] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.4.930: ea_inode dec ref err=-117 [ 536.224134][ T8367] EXT4-fs (loop4): 1 orphan inode deleted [ 536.229917][ T8367] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 536.330390][ T8372] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc=0x00000000000000e6,oldalloc,nobarrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 536.360307][ T8372] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.932378][ T8394] loop2: detected capacity change from 0 to 512 [ 538.040750][ T8394] EXT4-fs (loop2): inline encryption not supported [ 539.217273][ T8414] loop0: detected capacity change from 0 to 512 [ 539.235555][ T8394] EXT4-fs (loop2): 1 orphan inode deleted [ 539.290158][ T8394] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 539.405424][ T8414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 539.423370][ T8394] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.443513][ T8416] loop1: detected capacity change from 0 to 512 [ 539.454263][ T26] audit: type=1800 audit(1770209468.903:10): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.937" name="bus" dev="loop2" ino=16 res=0 errno=0 [ 539.524678][ T8418] loop5: detected capacity change from 0 to 512 [ 539.687423][ T8414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 539.699075][ T8414] System zones: 1-12 [ 539.711850][ T8416] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 539.722176][ T8418] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 539.888538][ T8414] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 540.629082][ T8414] EXT4-fs (loop0): 1 truncate cleaned up [ 540.662500][ T8414] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 540.691920][ T8418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 540.702857][ T8416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 540.843911][ T8418] System zones: 1-12 [ 540.848187][ T8416] System zones: 1-12 [ 540.874099][ T8416] EXT4-fs (loop1): 1 truncate cleaned up [ 540.880019][ T8418] EXT4-fs (loop5): 1 truncate cleaned up [ 540.885799][ T8418] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 540.958533][ T8416] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 540.993481][ T8428] loop2: detected capacity change from 0 to 512 [ 541.821516][ T8428] EXT4-fs (loop2): inline encryption not supported [ 542.081255][ T8428] EXT4-fs (loop2): 1 orphan inode deleted [ 542.119034][ T8428] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 542.401128][ T8428] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.460031][ T26] audit: type=1800 audit(1770209471.913:11): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.943" name="bus" dev="loop2" ino=16 res=0 errno=0 [ 544.405706][ T8457] loop1: detected capacity change from 0 to 512 [ 544.796837][ T8457] EXT4-fs (loop1): orphan cleanup on readonly fs [ 544.804706][ T8457] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.946: EA inode hash validation failed [ 544.817399][ T8457] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 544.830593][ T8457] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.946: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 544.848421][ T8457] EXT4-fs (loop1): Remounting filesystem read-only [ 544.855179][ T8457] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.1.946: ea_inode dec ref err=-117 [ 544.868237][ T8457] EXT4-fs (loop1): 1 orphan inode deleted [ 544.874161][ T8457] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 548.155686][ T8483] loop1: detected capacity change from 0 to 512 [ 548.540257][ T8483] EXT4-fs (loop1): inline encryption not supported [ 548.782237][ T8483] EXT4-fs (loop1): 1 orphan inode deleted [ 548.789052][ T8483] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 548.803343][ T8483] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.818055][ T8490] netlink: 72 bytes leftover after parsing attributes in process `syz.0.953'. [ 548.893220][ T8492] loop0: detected capacity change from 0 to 64 [ 550.448785][ T8499] loop4: detected capacity change from 0 to 512 [ 550.870508][ T26] audit: type=1800 audit(1770209480.323:12): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.954" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 550.895149][ T8498] loop5: detected capacity change from 0 to 512 [ 553.548774][ T8510] loop2: detected capacity change from 0 to 512 [ 554.612477][ T8510] EXT4-fs (loop2): orphan cleanup on readonly fs [ 554.622335][ T8510] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.958: EA inode hash validation failed [ 554.635436][ T8510] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.958: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 554.653056][ T8510] EXT4-fs (loop2): Remounting filesystem read-only [ 554.659752][ T8510] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.958: ea_inode dec ref err=-117 [ 554.673359][ T8510] EXT4-fs (loop2): 1 orphan inode deleted [ 554.679228][ T8510] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 554.784254][ T8517] loop5: detected capacity change from 0 to 512 [ 554.869827][ T8517] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 554.989919][ T8525] loop0: detected capacity change from 0 to 512 [ 554.999885][ T8517] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 555.015890][ T8527] loop1: detected capacity change from 0 to 512 [ 555.019709][ T8517] System zones: 1-12 [ 555.051089][ T8517] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 555.064491][ T8525] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 555.092060][ T8527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 555.146324][ T8527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 555.164307][ T8525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 555.200423][ T8525] System zones: 1-12 [ 555.204621][ T8527] System zones: 1-12 [ 555.210554][ T8517] EXT4-fs (loop5): 1 truncate cleaned up [ 555.216289][ T8517] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 555.279846][ T8525] EXT4-fs (loop0): 1 truncate cleaned up [ 555.286206][ T8527] EXT4-fs (loop1): 1 truncate cleaned up [ 555.327829][ T8527] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 555.361275][ T8525] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 557.273696][ T8555] loop2: detected capacity change from 0 to 512 [ 558.573479][ T8555] EXT4-fs (loop2): inline encryption not supported [ 559.507801][ T8561] fuse: Unknown parameter 'user_i00000000000000000000' [ 559.918456][ T8565] netlink: 72 bytes leftover after parsing attributes in process `syz.1.969'. [ 559.991315][ T8568] loop1: detected capacity change from 0 to 64 [ 560.101844][ T8555] EXT4-fs: error -4 creating inode table initialization thread [ 560.278543][ T8555] EXT4-fs (loop2): mount failed [ 560.760911][ T8572] loop5: detected capacity change from 0 to 512 [ 560.832215][ T8576] netlink: 72 bytes leftover after parsing attributes in process `syz.4.973'. [ 560.905016][ T8579] loop4: detected capacity change from 0 to 64 [ 560.932578][ T8572] EXT4-fs (loop5): inline encryption not supported [ 561.635616][ T8572] EXT4-fs (loop5): 1 orphan inode deleted [ 561.677348][ T8572] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 561.692937][ T8572] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.910141][ T26] audit: type=1800 audit(1770209491.333:13): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.972" name="bus" dev="loop5" ino=16 res=0 errno=0 [ 561.982805][ T8593] loop4: detected capacity change from 0 to 512 [ 562.006936][ T8593] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 562.045963][ T8591] loop1: detected capacity change from 0 to 512 [ 562.078617][ T8591] EXT4-fs (loop1): orphan cleanup on readonly fs [ 562.089718][ T8591] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.975: EA inode hash validation failed [ 562.103613][ T8591] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 562.118466][ T8591] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.975: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 562.151148][ T8591] EXT4-fs (loop1): Remounting filesystem read-only [ 562.157722][ T8591] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.1.975: ea_inode dec ref err=-117 [ 562.170943][ T8591] EXT4-fs (loop1): 1 orphan inode deleted [ 562.176707][ T8591] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 562.230320][ T8593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 562.305345][ T8601] netlink: 72 bytes leftover after parsing attributes in process `syz.0.979'. [ 562.378169][ T8604] loop0: detected capacity change from 0 to 64 [ 562.386491][ T8593] System zones: 1-12 [ 562.982951][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.087794][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.376633][ T8593] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 564.479604][ T8593] EXT4-fs (loop4): 1 truncate cleaned up [ 564.512257][ T8610] loop1: detected capacity change from 0 to 512 [ 564.520142][ T8593] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 564.628584][ T8610] EXT4-fs (loop1): inline encryption not supported [ 566.315039][ T8610] EXT4-fs (loop1): 1 orphan inode deleted [ 566.339168][ T8610] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 566.401586][ T8610] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.417664][ T8626] loop5: detected capacity change from 0 to 512 [ 566.489655][ T26] audit: type=1800 audit(1770209495.933:14): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.980" name="bus" dev="loop1" ino=16 res=0 errno=0 [ 566.525468][ T8626] EXT4-fs (loop5): inline encryption not supported [ 566.659284][ T8628] loop0: detected capacity change from 0 to 512 [ 566.784762][ T8630] netlink: 72 bytes leftover after parsing attributes in process `syz.2.986'. [ 566.859506][ T8639] autofs4:pid:8639:autofs_fill_super: called with bogus options [ 566.883958][ T8628] EXT4-fs (loop0): inline encryption not supported [ 567.069191][ T8626] EXT4-fs (loop5): 1 orphan inode deleted [ 567.244836][ T8626] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 567.325400][ T8626] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.392119][ T8628] EXT4-fs (loop0): 1 orphan inode deleted [ 567.469824][ T8628] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 567.486016][ T26] audit: type=1800 audit(1770209496.943:15): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.983" name="bus" dev="loop5" ino=16 res=0 errno=0 [ 567.508686][ T8628] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.561775][ T8645] loop2: detected capacity change from 0 to 512 [ 567.584589][ T26] audit: type=1800 audit(1770209497.033:16): pid=8628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.984" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 567.866540][ T8645] EXT4-fs (loop2): inline encryption not supported [ 568.153713][ T8645] EXT4-fs (loop2): 1 orphan inode deleted [ 568.228912][ T8645] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 568.343988][ T8645] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.574593][ T26] audit: type=1800 audit(1770209498.023:17): pid=8645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.987" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 568.638756][ T8660] loop5: detected capacity change from 0 to 512 [ 568.728554][ T8660] EXT4-fs (loop5): orphan cleanup on readonly fs [ 568.737043][ T8660] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.990: EA inode hash validation failed [ 568.750562][ T8660] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 568.763903][ T8660] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.990: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 568.785637][ T8660] EXT4-fs (loop5): Remounting filesystem read-only [ 568.792741][ T8660] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.990: ea_inode dec ref err=-117 [ 568.805876][ T8660] EXT4-fs (loop5): 1 orphan inode deleted [ 568.811767][ T8660] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 570.275475][ T8673] loop0: detected capacity change from 0 to 512 [ 570.400877][ T8673] EXT4-fs (loop0): inline encryption not supported [ 570.522523][ T8673] EXT4-fs (loop0): 1 orphan inode deleted [ 570.555656][ T8673] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 571.050484][ T8673] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.408135][ T8685] loop2: detected capacity change from 0 to 512 [ 571.470214][ T26] audit: type=1800 audit(1770209500.903:18): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.993" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 571.605410][ T8685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 571.669534][ T8685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 571.690161][ T8685] System zones: 1-12 [ 571.713854][ T8685] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 572.452004][ T8685] EXT4-fs (loop2): 1 truncate cleaned up [ 572.462571][ T8685] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 572.668209][ T8694] netlink: 72 bytes leftover after parsing attributes in process `syz.1.998'. [ 572.745711][ T8696] autofs4:pid:8696:autofs_fill_super: called with bogus options [ 573.309561][ T8698] loop0: detected capacity change from 0 to 512 [ 573.923661][ T8698] EXT4-fs (loop0): inline encryption not supported [ 574.186960][ T8698] EXT4-fs (loop0): 1 orphan inode deleted [ 574.258100][ T8698] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 574.439230][ T8698] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.870633][ T26] audit: type=1800 audit(1770209504.323:19): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.999" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 575.657144][ T8712] loop4: detected capacity change from 0 to 512 [ 577.879126][ T8712] EXT4-fs (loop4): inline encryption not supported [ 578.075737][ T8712] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 578.238257][ T8727] loop0: detected capacity change from 0 to 512 [ 578.307824][ T8727] EXT4-fs (loop0): orphan cleanup on readonly fs [ 578.328045][ T8727] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.1004: EA inode hash validation failed [ 578.343714][ T8727] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 578.357498][ T8727] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.1004: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 578.399428][ T8727] EXT4-fs (loop0): Remounting filesystem read-only [ 578.406498][ T8727] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.0.1004: ea_inode dec ref err=-117 [ 578.420946][ T8727] EXT4-fs (loop0): 1 orphan inode deleted [ 578.426802][ T8727] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 578.999939][ T8732] loop1: detected capacity change from 0 to 512 [ 579.222577][ T8732] EXT4-fs (loop1): inline encryption not supported [ 579.774812][ T8732] EXT4-fs (loop1): 1 orphan inode deleted [ 580.073488][ T8732] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 580.120443][ T8732] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.161868][ T8743] loop2: detected capacity change from 0 to 512 [ 580.284961][ T8743] EXT4-fs (loop2): inline encryption not supported [ 580.410134][ T26] audit: type=1800 audit(1770209509.843:20): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1007" name="bus" dev="loop1" ino=16 res=0 errno=0 [ 580.441127][ T8743] EXT4-fs (loop2): 1 orphan inode deleted [ 580.447089][ T8743] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 580.500727][ T8743] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.520772][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 580.612015][ T26] audit: type=1800 audit(1770209510.063:21): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1009" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 581.308477][ T8753] loop0: detected capacity change from 0 to 512 [ 581.434263][ T8753] EXT4-fs (loop0): inline encryption not supported [ 581.795223][ T8753] EXT4-fs (loop0): 1 orphan inode deleted [ 582.157200][ T8753] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 582.833532][ T8753] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.967349][ T26] audit: type=1800 audit(1770209512.413:22): pid=8753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1011" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 586.417376][ T8783] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1018'. [ 586.492026][ T8785] autofs4:pid:8785:autofs_fill_super: called with bogus options [ 593.815300][ T8823] loop2: detected capacity change from 0 to 512 [ 593.854918][ T8825] loop0: detected capacity change from 0 to 512 [ 593.861465][ T8823] EXT4-fs (loop2): inline encryption not supported [ 593.964544][ T8825] EXT4-fs (loop0): inline encryption not supported [ 593.996532][ T8823] EXT4-fs (loop2): 1 orphan inode deleted [ 594.040346][ T8823] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 594.100612][ T8823] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.119763][ T8825] EXT4-fs (loop0): 1 orphan inode deleted [ 594.820768][ T8825] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 594.923539][ T8825] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.908889][ T26] audit: type=1800 audit(1770209525.353:23): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1029" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 600.439227][ T8868] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1041'. [ 606.766095][ T8899] loop5: detected capacity change from 0 to 512 [ 606.799620][ T8899] EXT4-fs (loop5): inline encryption not supported [ 606.904310][ T8899] EXT4-fs (loop5): 1 orphan inode deleted [ 606.910263][ T8899] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 606.970411][ T8899] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.019297][ T26] audit: type=1800 audit(1770209536.463:24): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1049" name="bus" dev="loop5" ino=16 res=0 errno=0 [ 611.002296][ T8934] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 611.037119][ T8936] loop2: detected capacity change from 0 to 512 [ 611.168410][ T8936] EXT4-fs (loop2): inline encryption not supported [ 611.197451][ T8939] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1059'. [ 611.271682][ T8941] loop1: detected capacity change from 0 to 64 [ 611.469679][ T8941] autofs4:pid:8941:autofs_fill_super: called with bogus options [ 611.581386][ T8936] EXT4-fs (loop2): 1 orphan inode deleted [ 611.709231][ T8936] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 611.971251][ T8936] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.296608][ T8948] loop4: detected capacity change from 0 to 512 [ 612.830408][ T26] audit: type=1800 audit(1770209542.253:25): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1058" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 613.067382][ T8948] EXT4-fs (loop4): orphan cleanup on readonly fs [ 613.111194][ T8948] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.1060: EA inode hash validation failed [ 613.124210][ T8948] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.1060: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 613.160880][ T8948] EXT4-fs (loop4): Remounting filesystem read-only [ 613.167497][ T8948] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.4.1060: ea_inode dec ref err=-117 [ 613.180781][ T8948] EXT4-fs (loop4): 1 orphan inode deleted [ 613.186681][ T8948] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 614.615254][ T8962] loop1: detected capacity change from 0 to 512 [ 614.684694][ T8962] EXT4-fs (loop1): inline encryption not supported [ 614.966882][ T8962] EXT4-fs (loop1): 1 orphan inode deleted [ 615.365202][ T8967] loop0: detected capacity change from 0 to 512 [ 615.388274][ T8962] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 615.407544][ T8962] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.480670][ T8967] EXT4-fs (loop0): orphan cleanup on readonly fs [ 615.494762][ T8967] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.1065: EA inode hash validation failed [ 615.507861][ T8967] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.1065: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 615.525139][ T8967] EXT4-fs (loop0): Remounting filesystem read-only [ 615.531749][ T8967] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.0.1065: ea_inode dec ref err=-117 [ 615.545182][ T8967] EXT4-fs (loop0): 1 orphan inode deleted [ 615.551869][ T8967] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 615.623552][ T26] audit: type=1800 audit(1770209545.083:26): pid=8962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1064" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 617.718451][ T8994] loop0: detected capacity change from 0 to 512 [ 617.845614][ T8994] EXT4-fs (loop0): inline encryption not supported [ 618.459174][ T8994] EXT4-fs (loop0): 1 orphan inode deleted [ 618.566602][ T8994] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 619.843549][ T8994] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.939117][ T9004] loop5: detected capacity change from 0 to 512 [ 620.017594][ T9004] EXT4-fs (loop5): inline encryption not supported [ 620.227379][ T26] audit: type=1800 audit(1770209549.473:27): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1072" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 621.109831][ T9004] EXT4-fs (loop5): 1 orphan inode deleted [ 621.132037][ T9004] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 621.183043][ T9004] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.144648][ T9018] loop2: detected capacity change from 0 to 512 [ 623.975685][ T9022] loop4: detected capacity change from 0 to 512 [ 624.424097][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.430490][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.487241][ T9024] loop1: detected capacity change from 0 to 512 [ 624.546682][ T9022] EXT4-fs (loop4): inline encryption not supported [ 625.868803][ T9024] EXT4-fs (loop1): inline encryption not supported [ 627.311273][ T9037] loop5: detected capacity change from 0 to 512 [ 627.370555][ T9022] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 627.504126][ T9024] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 627.526888][ T9037] EXT4-fs (loop5): inline encryption not supported [ 627.700731][ T9037] EXT4-fs (loop5): 1 orphan inode deleted [ 627.760262][ T9037] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 628.680285][ T9037] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.819783][ T26] audit: type=1800 audit(1770209558.263:28): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1082" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 629.867243][ T9067] loop4: detected capacity change from 0 to 512 [ 629.958724][ T9067] EXT4-fs (loop4): inline encryption not supported [ 629.984918][ T9065] loop2: detected capacity change from 0 to 512 [ 630.879256][ T9067] EXT4-fs (loop4): 1 orphan inode deleted [ 630.905720][ T9065] EXT4-fs (loop2): inline encryption not supported [ 630.922600][ T9067] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 631.001658][ T9065] EXT4-fs (loop2): 1 orphan inode deleted [ 631.017072][ T9067] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.129366][ T9065] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 631.482671][ T9065] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.540250][ T26] audit: type=1800 audit(1770209560.963:29): pid=9067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1090" name="bus" dev="loop4" ino=16 res=0 errno=0 [ 632.652051][ T26] audit: type=1800 audit(1770209562.103:30): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1088" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 633.484858][ T9097] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1094'. [ 633.556214][ T9100] loop0: detected capacity change from 0 to 64 [ 634.094001][ T9100] autofs4:pid:9100:autofs_fill_super: called with bogus options [ 635.803571][ T9108] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1096'. [ 635.830893][ T9108] loop2: detected capacity change from 0 to 64 [ 637.627605][ T9125] loop0: detected capacity change from 0 to 512 [ 637.840914][ T9125] EXT4-fs (loop0): inline encryption not supported [ 637.942408][ T9134] loop5: detected capacity change from 0 to 512 [ 638.728935][ T9134] EXT4-fs (loop5): orphan cleanup on readonly fs [ 638.742717][ T9125] EXT4-fs (loop0): 1 orphan inode deleted [ 638.749231][ T9134] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.1103: EA inode hash validation failed [ 638.762157][ T9134] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.1103: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 638.778319][ T9134] EXT4-fs (loop5): Remounting filesystem read-only [ 638.785018][ T9134] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.1103: ea_inode dec ref err=-117 [ 638.798556][ T9134] EXT4-fs (loop5): 1 orphan inode deleted [ 638.804364][ T9134] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 638.836507][ T9125] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 639.059323][ T9125] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.710189][ T9152] loop5: detected capacity change from 0 to 512 [ 641.841310][ T9152] EXT4-fs (loop5): orphan cleanup on readonly fs [ 641.849021][ T9152] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.1106: EA inode hash validation failed [ 641.862569][ T9152] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.1106: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 641.892838][ T9152] EXT4-fs (loop5): Remounting filesystem read-only [ 641.899424][ T9152] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.1106: ea_inode dec ref err=-117 [ 641.912749][ T9152] EXT4-fs (loop5): 1 orphan inode deleted [ 641.918531][ T9152] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 643.970725][ T9170] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1112'. [ 643.999269][ T9170] loop2: detected capacity change from 0 to 64 [ 644.829498][ T9177] loop0: detected capacity change from 0 to 512 [ 645.238653][ T9177] EXT4-fs (loop0): inline encryption not supported [ 646.208554][ T9177] EXT4-fs (loop0): 1 orphan inode deleted [ 646.220281][ T9177] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 646.298015][ T9177] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.333447][ T9192] loop5: detected capacity change from 0 to 512 [ 647.070102][ T26] audit: type=1800 audit(1770209576.513:31): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1114" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 647.161373][ T9192] EXT4-fs (loop5): orphan cleanup on readonly fs [ 647.169221][ T9192] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.1117: EA inode hash validation failed [ 647.182691][ T9192] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.1117: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 647.672242][ T9192] EXT4-fs (loop5): Remounting filesystem read-only [ 647.678820][ T9192] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.1117: ea_inode dec ref err=-117 [ 647.692032][ T9192] EXT4-fs (loop5): 1 orphan inode deleted [ 647.697798][ T9192] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 653.222955][ T9240] loop1: detected capacity change from 0 to 512 [ 655.938829][ T9258] loop4: detected capacity change from 0 to 512 [ 656.022342][ T9262] loop0: detected capacity change from 0 to 512 [ 656.812630][ T9258] EXT4-fs (loop4): inline encryption not supported [ 656.864603][ T9262] EXT4-fs (loop0): orphan cleanup on readonly fs [ 656.872930][ T9262] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.1134: EA inode hash validation failed [ 656.886014][ T9262] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.1134: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 657.587750][ T9262] EXT4-fs (loop0): Remounting filesystem read-only [ 657.594592][ T9262] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.0.1134: ea_inode dec ref err=-117 [ 657.608109][ T9262] EXT4-fs (loop0): 1 orphan inode deleted [ 657.616252][ T9262] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 658.243063][ T9258] EXT4-fs (loop4): 1 orphan inode deleted [ 658.562257][ T9258] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 658.680083][ T9258] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.590159][ T9294] loop2: detected capacity change from 0 to 512 [ 661.440360][ T9294] EXT4-fs (loop2): inline encryption not supported [ 661.659293][ T9294] EXT4-fs (loop2): 1 orphan inode deleted [ 661.720251][ T9294] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 661.824415][ T9294] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.958828][ T9310] loop1: detected capacity change from 0 to 512 [ 662.227693][ T9310] EXT4-fs (loop1): orphan cleanup on readonly fs [ 662.235224][ T9310] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.1150: EA inode hash validation failed [ 662.249251][ T9310] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.1150: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 662.266477][ T9310] EXT4-fs (loop1): Remounting filesystem read-only [ 662.273213][ T9310] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.1.1150: ea_inode dec ref err=-117 [ 662.286290][ T9310] EXT4-fs (loop1): 1 orphan inode deleted [ 662.292256][ T9310] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 665.157062][ T9335] loop0: detected capacity change from 0 to 512 [ 666.706652][ T9335] EXT4-fs (loop0): orphan cleanup on readonly fs [ 666.715823][ T9335] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.1154: EA inode hash validation failed [ 666.728729][ T9335] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.1154: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 666.744712][ T9335] EXT4-fs (loop0): Remounting filesystem read-only [ 666.751369][ T9335] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.0.1154: ea_inode dec ref err=-117 [ 666.776148][ T9335] EXT4-fs (loop0): 1 orphan inode deleted [ 666.848533][ T9335] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 667.019807][ T9350] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1159'. [ 667.093256][ T9352] loop5: detected capacity change from 0 to 64 [ 672.142257][ T9358] loop2: detected capacity change from 0 to 512 [ 672.393086][ T9366] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 672.429026][ T9358] EXT4-fs (loop2): inline encryption not supported [ 672.654430][ T9358] EXT4-fs (loop2): 1 orphan inode deleted [ 672.738770][ T9372] loop5: detected capacity change from 0 to 512 [ 673.294746][ T9358] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 673.435687][ T9358] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.469625][ T9372] EXT4-fs (loop5): orphan cleanup on readonly fs [ 673.477196][ T9372] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.1164: EA inode hash validation failed [ 673.490150][ T9372] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.1164: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 673.505816][ T9372] EXT4-fs (loop5): Remounting filesystem read-only [ 673.513529][ T9372] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.1164: ea_inode dec ref err=-117 [ 673.526729][ T9372] EXT4-fs (loop5): 1 orphan inode deleted [ 673.532588][ T9372] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 673.683607][ T26] audit: type=1800 audit(1770209603.133:32): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1162" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 675.699358][ T9397] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1174'. [ 675.734306][ T9397] loop5: detected capacity change from 0 to 64 [ 679.792847][ T9402] autofs4:pid:9402:autofs_fill_super: called with bogus options [ 680.364378][ T9406] loop4: detected capacity change from 0 to 512 [ 680.454333][ T9406] EXT4-fs (loop4): inline encryption not supported [ 681.912702][ T9406] EXT4-fs (loop4): 1 orphan inode deleted [ 681.918512][ T9406] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 681.954723][ T9406] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.181978][ T9424] loop5: detected capacity change from 0 to 512 [ 682.461970][ T26] audit: type=1800 audit(1770209611.923:33): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1163" name="bus" dev="loop4" ino=16 res=0 errno=0 [ 682.620818][ T9424] EXT4-fs (loop5): orphan cleanup on readonly fs [ 682.640612][ T9424] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.1177: EA inode hash validation failed [ 682.654412][ T9424] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.1177: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 682.676988][ T9424] EXT4-fs (loop5): Remounting filesystem read-only [ 682.683719][ T9424] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.1177: ea_inode dec ref err=-117 [ 682.697902][ T9424] EXT4-fs (loop5): 1 orphan inode deleted [ 682.703896][ T9424] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 684.279763][ T9456] syz.4.1191 uses obsolete (PF_INET,SOCK_PACKET) [ 685.604583][ T9483] loop5: detected capacity change from 0 to 2048 [ 685.709265][ T9483] Alternate GPT is invalid, using primary GPT. [ 685.733548][ T9483] loop5: p1 p2 p3 [ 685.737356][ T9483] loop5: partition table partially beyond EOD, truncated [ 685.848524][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1197'. [ 685.871101][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.877552][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.977006][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1197'. [ 686.257191][ T9502] loop1: detected capacity change from 0 to 512 [ 686.266117][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 686.304342][ T6540] udevd[6540]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 686.305644][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 686.350672][ T26] audit: type=1326 audit(1770209615.793:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d14afeb9 code=0x7ffc0000 [ 686.426908][ T26] audit: type=1326 audit(1770209615.813:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d14afeb9 code=0x7ffc0000 [ 686.460913][ T9511] loop5: detected capacity change from 0 to 2048 [ 686.469146][ T9502] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 686.540716][ T26] audit: type=1326 audit(1770209615.813:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d14afeb9 code=0x7ffc0000 [ 686.563363][ T26] audit: type=1326 audit(1770209615.843:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2d147078e code=0x7ffc0000 [ 686.585985][ T26] audit: type=1326 audit(1770209615.843:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d14afeb9 code=0x7ffc0000 [ 686.594422][ T9511] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 686.619661][ T26] audit: type=1326 audit(1770209615.843:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d14afeb9 code=0x7ffc0000 [ 686.649174][ T26] audit: type=1326 audit(1770209615.843:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d14afeb9 code=0x7ffc0000 [ 686.660564][ T9502] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.673850][ T26] audit: type=1326 audit(1770209615.843:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d14afeb9 code=0x7ffc0000 [ 686.713653][ T26] audit: type=1326 audit(1770209615.843:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa2d147078e code=0x7ffc0000 [ 686.781578][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 686.782114][ T6545] udevd[6545]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 686.831402][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 686.887427][ T9502] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #12: comm syz.1.1207: corrupted xattr block 6 [ 687.051360][ T9509] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 687.137188][ T9509] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 408 with error 28 [ 687.247385][ T9509] EXT4-fs (loop5): This should not happen!! Data will be lost [ 687.247385][ T9509] [ 687.280275][ T9509] EXT4-fs (loop5): Total free blocks count 0 [ 687.308986][ T9509] EXT4-fs (loop5): Free/Dirty block details [ 687.333281][ T9509] EXT4-fs (loop5): free_blocks=2415919504 [ 687.420501][ T9509] EXT4-fs (loop5): dirty_blocks=816 [ 687.427186][ T9509] EXT4-fs (loop5): Block reservation details [ 687.456340][ T9509] EXT4-fs (loop5): i_reserved_data_blocks=53 [ 688.136451][ T9545] loop2: detected capacity change from 0 to 8192 [ 688.257593][ T9545] loop2: p2 p3 p4 [ 688.310265][ T9545] loop2: p2 size 64000 extends beyond EOD, truncated [ 688.362027][ T9545] loop2: p3 start 65280 is beyond EOD, truncated [ 688.378723][ T9545] loop2: p4 size 50331904 extends beyond EOD, truncated [ 688.417809][ T9511] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 408 with max blocks 2048 with error 28 [ 688.438555][ T9511] EXT4-fs (loop5): This should not happen!! Data will be lost [ 688.438555][ T9511] [ 688.603357][ T9556] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1223'. [ 688.776750][ T9558] loop2: detected capacity change from 0 to 128 [ 688.912699][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 688.955220][ T9558] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 688.980510][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 688.993261][ T9558] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.536031][ T9584] loop5: detected capacity change from 0 to 1024 [ 689.563991][ T9583] loop4: detected capacity change from 0 to 1024 [ 689.640292][ T9583] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 689.669276][ T9583] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: inode #32: comm syz.4.1234: iget: special inode unallocated [ 689.705522][ T9584] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000002,,errors=continue. Quota mode: none. [ 689.742789][ T9583] EXT4-fs (loop4): no journal found [ 689.763677][ T9583] EXT4-fs (loop4): can't get journal size [ 689.797764][ T9583] EXT4-fs (loop4): filesystem is read-only [ 689.807604][ T9583] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 689.857093][ T9583] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.1234: bad inode number: 15 [ 689.872142][ T9593] loop2: detected capacity change from 0 to 2048 [ 689.991389][ T9593] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 690.263750][ T9590] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 690.291204][ T9590] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1536 with error 28 [ 690.320447][ T9590] EXT4-fs (loop2): This should not happen!! Data will be lost [ 690.320447][ T9590] [ 690.340296][ T9590] EXT4-fs (loop2): Total free blocks count 0 [ 690.348634][ T9590] EXT4-fs (loop2): Free/Dirty block details [ 690.371548][ T9590] EXT4-fs (loop2): free_blocks=2415919504 [ 690.421508][ T9607] loop4: detected capacity change from 0 to 512 [ 690.436462][ T9590] EXT4-fs (loop2): dirty_blocks=1872 [ 690.470260][ T9590] EXT4-fs (loop2): Block reservation details [ 690.508595][ T9607] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 690.517122][ T9590] EXT4-fs (loop2): i_reserved_data_blocks=132 [ 690.556308][ T9607] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1242: bad orphan inode 131083 [ 690.576079][ T9607] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 690.681345][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 690.681363][ T26] audit: type=1326 audit(1770209620.133:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60cf84eb9 code=0x7ffc0000 [ 690.799666][ T26] audit: type=1326 audit(1770209620.173:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60cf84eb9 code=0x7ffc0000 [ 690.834247][ T26] audit: type=1326 audit(1770209620.173:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60cf84eb9 code=0x7ffc0000 [ 690.895743][ T26] audit: type=1326 audit(1770209620.173:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60cf84eb9 code=0x7ffc0000 [ 690.936944][ T26] audit: type=1326 audit(1770209620.173:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc60cf4578e code=0x7ffc0000 [ 690.994531][ T26] audit: type=1326 audit(1770209620.173:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60cf84eb9 code=0x7ffc0000 [ 691.064464][ T26] audit: type=1326 audit(1770209620.173:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60cf84eb9 code=0x7ffc0000 [ 691.135170][ T26] audit: type=1326 audit(1770209620.203:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60cf84eb9 code=0x7ffc0000 [ 691.216545][ T26] audit: type=1326 audit(1770209620.203:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60cf84eb9 code=0x7ffc0000 [ 691.305625][ T26] audit: type=1326 audit(1770209620.203:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc60cf4578e code=0x7ffc0000 [ 691.377940][ T9634] loop5: detected capacity change from 0 to 256 [ 691.462669][ T9593] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1536 with max blocks 2048 with error 28 [ 691.496268][ T9593] EXT4-fs (loop2): This should not happen!! Data will be lost [ 691.496268][ T9593] [ 691.648560][ T9637] netlink: 'syz.0.1252': attribute type 1 has an invalid length. [ 691.677163][ T9637] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1252'. [ 693.653110][ T9676] loop5: detected capacity change from 0 to 2048 [ 693.784706][ T9676] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 694.255764][ T9696] loop0: detected capacity change from 0 to 2048 [ 694.361453][ T9700] loop1: detected capacity change from 0 to 512 [ 694.365284][ T9696] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,quota,auto_da_alloc=0x000000000000ffff,noblock_validity,nodioread_nolock,noblock_validity,bsdgroups,,errors=continue. Quota mode: writeback. [ 694.458961][ T9700] EXT4-fs (loop1): Ignoring removed nobh option [ 694.544726][ T9700] [ 694.547119][ T9700] ====================================================== [ 694.554291][ T9700] WARNING: possible circular locking dependency detected [ 694.561360][ T9700] syzkaller #0 Not tainted [ 694.565801][ T9700] ------------------------------------------------------ [ 694.572849][ T9700] syz.1.1276/9700 is trying to acquire lock: [ 694.578860][ T9700] ffff888078beabd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 694.589021][ T9700] [ 694.589021][ T9700] but task is already holding lock: [ 694.596416][ T9700] ffff888061c6b2a0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 694.606303][ T9700] [ 694.606303][ T9700] which lock already depends on the new lock. [ 694.606303][ T9700] [ 694.616738][ T9700] [ 694.616738][ T9700] the existing dependency chain (in reverse order) is: [ 694.625780][ T9700] [ 694.625780][ T9700] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 694.633383][ T9700] down_write+0x38/0x60 [ 694.638102][ T9700] ext4_destroy_inline_data+0x24/0xe0 [ 694.644031][ T9700] ext4_writepages+0x670/0x2df0 [ 694.649516][ T9700] do_writepages+0x476/0x6e0 [ 694.654669][ T9700] filemap_fdatawrite_wbc+0x1eb/0x240 [ 694.660592][ T9700] filemap_flush+0xd4/0x130 [ 694.665659][ T9700] ext4_convert_inline_data+0x18b/0x5f0 [ 694.671760][ T9700] ext4_page_mkwrite+0x1df/0x1250 [ 694.677391][ T9700] do_page_mkwrite+0x168/0x3c0 [ 694.682801][ T9700] wp_page_shared+0x16b/0x6d0 [ 694.688037][ T9700] handle_mm_fault+0x1f06/0x4410 [ 694.693531][ T9700] do_user_addr_fault+0x489/0xc80 [ 694.699114][ T9700] exc_page_fault+0x60/0x100 [ 694.704258][ T9700] asm_exc_page_fault+0x22/0x30 [ 694.709664][ T9700] [ 694.709664][ T9700] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 694.718277][ T9700] __lock_acquire+0x2c42/0x7d10 [ 694.723692][ T9700] lock_acquire+0x19e/0x400 [ 694.728754][ T9700] percpu_down_read+0x46/0x1b0 [ 694.734095][ T9700] ext4_writepages+0x20f/0x2df0 [ 694.739247][ T9696] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.1274: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 694.739534][ T9700] do_writepages+0x476/0x6e0 [ 694.761087][ T9700] __writeback_single_inode+0x153/0xda0 [ 694.767193][ T9700] writeback_single_inode+0x3cb/0x8e0 [ 694.773138][ T9700] write_inode_now+0x23b/0x2c0 [ 694.778474][ T9700] iput+0x5ab/0x8a0 [ 694.782845][ T9700] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 694.788781][ T9700] ext4_xattr_block_set+0x4fd/0x2d20 [ 694.794624][ T9700] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 694.800997][ T9700] __ext4_expand_extra_isize+0x301/0x3e0 [ 694.807191][ T9700] __ext4_mark_inode_dirty+0x469/0x700 [ 694.813232][ T9700] ext4_evict_inode+0xa8d/0x1090 [ 694.818826][ T9700] evict+0x4c9/0x8d0 [ 694.823280][ T9700] ext4_orphan_cleanup+0xad2/0x1320 [ 694.829035][ T9700] ext4_fill_super+0x8e25/0x95a0 [ 694.834532][ T9700] mount_bdev+0x287/0x3c0 [ 694.839410][ T9700] legacy_get_tree+0xe6/0x180 [ 694.844642][ T9700] vfs_get_tree+0x88/0x270 [ 694.849611][ T9700] do_new_mount+0x24a/0xa40 [ 694.854667][ T9700] __se_sys_mount+0x2e3/0x3d0 [ 694.859898][ T9700] do_syscall_64+0x4c/0xa0 [ 694.864871][ T9700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 694.871323][ T9700] [ 694.871323][ T9700] other info that might help us debug this: [ 694.871323][ T9700] [ 694.881576][ T9700] Possible unsafe locking scenario: [ 694.881576][ T9700] [ 694.889138][ T9700] CPU0 CPU1 [ 694.894531][ T9700] ---- ---- [ 694.899914][ T9700] lock(&ei->xattr_sem); [ 694.904306][ T9700] lock(&sbi->s_writepages_rwsem); [ 694.912054][ T9700] lock(&ei->xattr_sem); [ 694.919028][ T9700] lock(&sbi->s_writepages_rwsem); [ 694.924423][ T9700] [ 694.924423][ T9700] *** DEADLOCK *** [ 694.924423][ T9700] [ 694.932614][ T9700] 3 locks held by syz.1.1276/9700: [ 694.937745][ T9700] #0: ffff88802ae2c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 694.947904][ T9700] #1: ffff88802ae2c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 694.953142][ T9705] loop5: detected capacity change from 0 to 512 [ 694.957444][ T9700] #2: ffff888061c6b2a0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 694.973990][ T9700] [ 694.973990][ T9700] stack backtrace: [ 694.979919][ T9700] CPU: 0 PID: 9700 Comm: syz.1.1276 Not tainted syzkaller #0 [ 694.987340][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.997626][ T9700] Call Trace: [ 695.000939][ T9700] [ 695.003899][ T9700] dump_stack_lvl+0x188/0x250 [ 695.008619][ T9700] ? load_image+0x400/0x400 [ 695.013149][ T9700] ? show_regs_print_info+0x20/0x20 [ 695.018466][ T9700] ? print_circular_bug+0x12b/0x1a0 [ 695.023685][ T9700] check_noncircular+0x296/0x330 [ 695.028644][ T9700] ? look_up_lock_class+0x71/0x110 [ 695.033793][ T9700] ? add_chain_block+0x940/0x940 [ 695.038765][ T9700] ? lockdep_lock+0xf1/0x1f0 [ 695.043410][ T9700] ? rcu_is_watching+0x11/0xa0 [ 695.048244][ T9700] ? mark_lock+0x94/0x320 [ 695.052595][ T9700] __lock_acquire+0x2c42/0x7d10 [ 695.057495][ T9700] ? __lock_acquire+0x7d10/0x7d10 [ 695.062644][ T9700] ? verify_lock_unused+0x140/0x140 [ 695.067876][ T9700] lock_acquire+0x19e/0x400 [ 695.072512][ T9700] ? ext4_writepages+0x20f/0x2df0 [ 695.077559][ T9700] ? __might_sleep+0xf0/0xf0 [ 695.082162][ T9700] ? read_lock_is_recursive+0x10/0x10 [ 695.087554][ T9700] ? mark_lock+0x94/0x320 [ 695.091895][ T9700] ? __lock_acquire+0x13bc/0x7d10 [ 695.096943][ T9700] percpu_down_read+0x46/0x1b0 [ 695.101737][ T9700] ? ext4_writepages+0x20f/0x2df0 [ 695.106798][ T9700] ext4_writepages+0x20f/0x2df0 [ 695.111680][ T9700] ? verify_lock_unused+0x140/0x140 [ 695.116902][ T9700] ? verify_lock_unused+0x140/0x140 [ 695.122130][ T9700] ? mark_lock+0x94/0x320 [ 695.126482][ T9700] ? ext4_readpage+0x2e0/0x2e0 [ 695.131265][ T9700] ? __lock_acquire+0x13bc/0x7d10 [ 695.136399][ T9700] ? __lock_acquire+0x7d10/0x7d10 [ 695.141445][ T9700] ? __lock_acquire+0x7d10/0x7d10 [ 695.146486][ T9700] ? do_raw_spin_lock+0x128/0x2f0 [ 695.151559][ T9700] ? do_raw_spin_unlock+0x11d/0x230 [ 695.156769][ T9700] ? ext4_readpage+0x2e0/0x2e0 [ 695.161548][ T9700] do_writepages+0x476/0x6e0 [ 695.166163][ T9700] ? __writepage+0x130/0x130 [ 695.170782][ T9700] ? writeback_single_inode+0x3c0/0x8e0 [ 695.176348][ T9700] ? __lock_acquire+0x7d10/0x7d10 [ 695.181398][ T9700] ? do_raw_spin_lock+0x128/0x2f0 [ 695.186434][ T9700] __writeback_single_inode+0x153/0xda0 [ 695.191995][ T9700] writeback_single_inode+0x3cb/0x8e0 [ 695.197387][ T9700] ? write_inode_now+0x2c0/0x2c0 [ 695.202343][ T9700] write_inode_now+0x23b/0x2c0 [ 695.207130][ T9700] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 695.212613][ T9700] ? do_raw_spin_unlock+0x11d/0x230 [ 695.217833][ T9700] iput+0x5ab/0x8a0 [ 695.221664][ T9700] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 695.227062][ T9700] ? ext4_xattr_ibody_set+0x330/0x330 [ 695.232450][ T9700] ? __ext4_journal_get_write_access+0x2ea/0x6e0 [ 695.238800][ T9700] ? __might_sleep+0xf0/0xf0 [ 695.243405][ T9700] ? ext4_xattr_block_set+0xc2/0x2d20 [ 695.248879][ T9700] ext4_xattr_block_set+0x4fd/0x2d20 [ 695.254209][ T9700] ? ext4_get_inode_loc+0x120/0x120 [ 695.259427][ T9700] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 695.265249][ T9700] ? ext4_xattr_block_find+0x500/0x500 [ 695.270731][ T9700] ? ext4_xattr_block_find+0x433/0x500 [ 695.276241][ T9700] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 695.282096][ T9700] __ext4_expand_extra_isize+0x301/0x3e0 [ 695.287763][ T9700] __ext4_mark_inode_dirty+0x469/0x700 [ 695.293247][ T9700] ext4_evict_inode+0xa8d/0x1090 [ 695.298206][ T9700] ? _raw_spin_unlock+0x24/0x40 [ 695.303089][ T9700] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 695.309005][ T9700] ? do_raw_spin_unlock+0x11d/0x230 [ 695.314247][ T9700] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 695.320158][ T9700] evict+0x4c9/0x8d0 [ 695.324080][ T9700] ? proc_nr_inodes+0x320/0x320 [ 695.328946][ T9700] ? do_raw_spin_unlock+0x11d/0x230 [ 695.334166][ T9700] ? _raw_spin_unlock+0x24/0x40 [ 695.339061][ T9700] ? iput+0x706/0x8a0 [ 695.343078][ T9700] ext4_orphan_cleanup+0xad2/0x1320 [ 695.348345][ T9700] ? ext4_orphan_del+0xbf0/0xbf0 [ 695.353305][ T9700] ? errseq_check_and_advance+0x62/0x120 [ 695.358993][ T9700] ext4_fill_super+0x8e25/0x95a0 [ 695.363961][ T9700] ? ext4_mount+0x40/0x40 [ 695.368303][ T9700] ? set_blocksize+0x1f3/0x370 [ 695.373087][ T9700] ? sb_set_blocksize+0xa5/0xe0 [ 695.378039][ T9700] mount_bdev+0x287/0x3c0 [ 695.382387][ T9700] ? ext4_mount+0x40/0x40 [ 695.386732][ T9700] legacy_get_tree+0xe6/0x180 [ 695.391424][ T9700] ? ext4_errno_to_code+0x160/0x160 [ 695.396639][ T9700] vfs_get_tree+0x88/0x270 [ 695.401071][ T9700] do_new_mount+0x24a/0xa40 [ 695.405597][ T9700] __se_sys_mount+0x2e3/0x3d0 [ 695.410299][ T9700] ? __x64_sys_mount+0xc0/0xc0 [ 695.415087][ T9700] ? lockdep_hardirqs_on+0x94/0x140 [ 695.420312][ T9700] ? __x64_sys_mount+0x1c/0xc0 [ 695.425090][ T9700] do_syscall_64+0x4c/0xa0 [ 695.429530][ T9700] ? clear_bhb_loop+0x30/0x80 [ 695.434218][ T9700] ? clear_bhb_loop+0x30/0x80 [ 695.438906][ T9700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 695.444829][ T9700] RIP: 0033:0x7fc67849c14a [ 695.449263][ T9700] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.468887][ T9700] RSP: 002b:00007fc6766f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 695.477405][ T9700] RAX: ffffffffffffffda RBX: 00007fc6766f5ee0 RCX: 00007fc67849c14a [ 695.485398][ T9700] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fc6766f5ea0 [ 695.493471][ T9700] RBP: 0000200000000180 R08: 00007fc6766f5ee0 R09: 0000000000800718 [ 695.501462][ T9700] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 695.509881][ T9700] R13: 00007fc6766f5ea0 R14: 00000000000004a3 R15: 0000200000000280 [ 695.518151][ T9700] [ 695.551710][ T9705] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 695.559436][ T9705] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 695.611002][ T9700] ------------[ cut here ]------------ [ 695.616642][ T9700] EA inode 11 i_nlink=1026 [ 695.616916][ T9700] WARNING: CPU: 1 PID: 9700 at fs/ext4/xattr.c:1005 ext4_xattr_inode_update_ref+0x4bd/0x510 [ 695.620209][ T9705] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 695.646062][ T9700] Modules linked in: [ 695.662542][ T9700] CPU: 1 PID: 9700 Comm: syz.1.1276 Not tainted syzkaller #0 [ 695.697194][ T9711] loop0: detected capacity change from 0 to 1024 [ 695.705047][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.717592][ T9700] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510 [ 695.724447][ T9700] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 14 e8 a1 ff 49 8b 37 48 c7 c7 00 9b 3d 8a 89 da e8 a3 bd 94 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 ed ac 9f 07 [ 695.748580][ T9711] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 695.766832][ T9705] EXT4-fs (loop5): 1 truncate cleaned up [ 695.772765][ T9700] RSP: 0018:ffffc900032d7160 EFLAGS: 00010246 [ 695.779048][ T9700] RAX: d5cfabe6f9876800 RBX: 0000000000000402 RCX: 0000000000080000 [ 695.787474][ T9700] RDX: ffffc90003e11000 RSI: 000000000007ffff RDI: 0000000000080000 [ 695.795916][ T9700] RBP: ffffc900032d7250 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 695.804218][ T9700] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff888061c6be70 [ 695.812474][ T9700] R13: 1ffff1100c38d80d R14: dffffc0000000000 R15: ffff888061c6beb0 [ 695.815711][ T9705] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,mblk_io_submit,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 695.820777][ T9700] FS: 00007fc6766f66c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 695.849491][ T9700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.856323][ T9700] CR2: 0000200000842000 CR3: 000000007d7c1000 CR4: 00000000003506f0 [ 695.864612][ T9700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 695.873432][ T9700] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 695.882229][ T9700] Call Trace: [ 695.885556][ T9700] [ 695.888525][ T9700] ? ext4_xattr_block_csum+0x560/0x560 [ 695.894438][ T9700] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 695.899952][ T9700] ? bit_wait+0xc0/0xc0 [ 695.904869][ T9700] ext4_xattr_set_entry+0xed9/0x3ea0 [ 695.912095][ T9700] ? __sync_dirty_buffer+0x32d/0x370 [ 695.918175][ T9700] ? __ext4_handle_dirty_metadata+0x39d/0x800 [ 695.925466][ T9700] ? ext4_xattr_block_set+0xda0/0x2d20 [ 695.936285][ T9700] ? ext4_xattr_ibody_set+0x330/0x330 [ 695.948223][ T9700] ? ext4_get_inode_loc+0x120/0x120 [ 695.954014][ T9711] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,nombcache,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x0000000000000090,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 695.982664][ T9700] ext4_xattr_ibody_set+0x112/0x330 [ 695.987946][ T9700] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 695.994189][ T9700] __ext4_expand_extra_isize+0x301/0x3e0 [ 695.999889][ T9700] __ext4_mark_inode_dirty+0x469/0x700 [ 696.005831][ T9700] ext4_evict_inode+0xa8d/0x1090 [ 696.010869][ T9700] ? _raw_spin_unlock+0x24/0x40 [ 696.016216][ T9700] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 696.022242][ T9700] ? do_raw_spin_unlock+0x11d/0x230 [ 696.027568][ T9700] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 696.033620][ T9700] evict+0x4c9/0x8d0 [ 696.038687][ T9700] ? proc_nr_inodes+0x320/0x320 [ 696.043727][ T9700] ? do_raw_spin_unlock+0x11d/0x230 [ 696.049077][ T9700] ? _raw_spin_unlock+0x24/0x40 [ 696.054090][ T9700] ? iput+0x706/0x8a0 [ 696.058239][ T9700] ext4_orphan_cleanup+0xad2/0x1320 [ 696.063626][ T9700] ? ext4_orphan_del+0xbf0/0xbf0 [ 696.068604][ T9700] ? errseq_check_and_advance+0x62/0x120 [ 696.074436][ T9700] ext4_fill_super+0x8e25/0x95a0 [ 696.079432][ T9700] ? ext4_mount+0x40/0x40 [ 696.083863][ T9700] ? set_blocksize+0x1f3/0x370 [ 696.088745][ T9700] ? sb_set_blocksize+0xa5/0xe0 [ 696.095600][ T9700] mount_bdev+0x287/0x3c0 [ 696.100554][ T9700] ? ext4_mount+0x40/0x40 [ 696.104942][ T9700] legacy_get_tree+0xe6/0x180 [ 696.109660][ T9700] ? ext4_errno_to_code+0x160/0x160 [ 696.115222][ T9700] vfs_get_tree+0x88/0x270 [ 696.119789][ T9700] do_new_mount+0x24a/0xa40 [ 696.124411][ T9700] __se_sys_mount+0x2e3/0x3d0 [ 696.129219][ T9700] ? __x64_sys_mount+0xc0/0xc0 [ 696.144199][ T9711] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 696.163368][ T9700] ? lockdep_hardirqs_on+0x94/0x140 [ 696.168635][ T9700] ? __x64_sys_mount+0x1c/0xc0 [ 696.189679][ T9700] do_syscall_64+0x4c/0xa0 [ 696.194977][ T9711] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 696.209548][ T9700] ? clear_bhb_loop+0x30/0x80 [ 696.214378][ T9700] ? clear_bhb_loop+0x30/0x80 [ 696.219222][ T9700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 696.240437][ T9700] RIP: 0033:0x7fc67849c14a [ 696.244922][ T9700] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.264979][ T9711] EXT4-fs (loop0): This should not happen!! Data will be lost [ 696.264979][ T9711] [ 696.278499][ T9711] EXT4-fs (loop0): Total free blocks count 0 [ 696.293743][ T9700] RSP: 002b:00007fc6766f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 696.304079][ T9711] EXT4-fs (loop0): Free/Dirty block details [ 696.320045][ T9700] RAX: ffffffffffffffda RBX: 00007fc6766f5ee0 RCX: 00007fc67849c14a [ 696.326958][ T9711] EXT4-fs (loop0): free_blocks=20480 [ 696.328090][ T9700] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fc6766f5ea0 [ 696.328109][ T9700] RBP: 0000200000000180 R08: 00007fc6766f5ee0 R09: 0000000000800718 [ 696.328125][ T9700] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 696.337114][ T9711] EXT4-fs (loop0): dirty_blocks=80 [ 696.352344][ T9700] R13: 00007fc6766f5ea0 R14: 00000000000004a3 R15: 0000200000000280 [ 696.372043][ T9711] EXT4-fs (loop0): Block reservation details [ 696.378170][ T9711] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 696.384609][ T9700] [ 696.389669][ T9700] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 696.397116][ T9700] CPU: 1 PID: 9700 Comm: syz.1.1276 Not tainted syzkaller #0 [ 696.404515][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.405784][ T9715] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 696.414595][ T9700] Call Trace: [ 696.414607][ T9700] [ 696.414614][ T9700] dump_stack_lvl+0x188/0x250 [ 696.437819][ T9700] ? show_regs_print_info+0x20/0x20 [ 696.443106][ T9700] ? load_image+0x400/0x400 [ 696.447653][ T9700] panic+0x2e5/0x810 [ 696.451588][ T9700] ? bpf_jit_dump+0xd0/0xd0 [ 696.456164][ T9700] ? ext4_xattr_inode_update_ref+0x4bd/0x510 [ 696.462178][ T9700] __warn+0x248/0x2b0 [ 696.466206][ T9700] ? ext4_xattr_inode_update_ref+0x4bd/0x510 [ 696.472218][ T9700] report_bug+0x1b7/0x2e0 [ 696.476577][ T9700] handle_bug+0x3a/0x70 [ 696.480763][ T9700] exc_invalid_op+0x16/0x40 [ 696.485291][ T9700] asm_exc_invalid_op+0x16/0x20 [ 696.489763][ T9715] EXT4-fs (loop0): This should not happen!! Data will be lost [ 696.489763][ T9715] [ 696.490170][ T9700] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510 [ 696.490203][ T9700] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 14 e8 a1 ff 49 8b 37 48 c7 c7 00 9b 3d 8a 89 da e8 a3 bd 94 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 ed ac 9f 07 [ 696.490221][ T9700] RSP: 0018:ffffc900032d7160 EFLAGS: 00010246 [ 696.490239][ T9700] RAX: d5cfabe6f9876800 RBX: 0000000000000402 RCX: 0000000000080000 [ 696.490253][ T9700] RDX: ffffc90003e11000 RSI: 000000000007ffff RDI: 0000000000080000 [ 696.490268][ T9700] RBP: ffffc900032d7250 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 696.490282][ T9700] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff888061c6be70 [ 696.490297][ T9700] R13: 1ffff1100c38d80d R14: dffffc0000000000 R15: ffff888061c6beb0 [ 696.490332][ T9700] ? ext4_xattr_block_csum+0x560/0x560 [ 696.490357][ T9700] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 696.490380][ T9700] ? bit_wait+0xc0/0xc0 [ 696.587849][ T9700] ext4_xattr_set_entry+0xed9/0x3ea0 [ 696.593174][ T9700] ? __sync_dirty_buffer+0x32d/0x370 [ 696.598490][ T9700] ? __ext4_handle_dirty_metadata+0x39d/0x800 [ 696.604594][ T9700] ? ext4_xattr_block_set+0xda0/0x2d20 [ 696.610124][ T9700] ? ext4_xattr_ibody_set+0x330/0x330 [ 696.615528][ T9700] ? ext4_get_inode_loc+0x120/0x120 [ 696.620773][ T9700] ext4_xattr_ibody_set+0x112/0x330 [ 696.626003][ T9700] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 696.632999][ T9700] __ext4_expand_extra_isize+0x301/0x3e0 [ 696.638813][ T9700] __ext4_mark_inode_dirty+0x469/0x700 [ 696.644322][ T9700] ext4_evict_inode+0xa8d/0x1090 [ 696.649316][ T9700] ? _raw_spin_unlock+0x24/0x40 [ 696.654205][ T9700] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 696.660145][ T9700] ? do_raw_spin_unlock+0x11d/0x230 [ 696.665467][ T9700] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 696.671476][ T9700] evict+0x4c9/0x8d0 [ 696.675408][ T9700] ? proc_nr_inodes+0x320/0x320 [ 696.680289][ T9700] ? do_raw_spin_unlock+0x11d/0x230 [ 696.685514][ T9700] ? _raw_spin_unlock+0x24/0x40 [ 696.690398][ T9700] ? iput+0x706/0x8a0 [ 696.694411][ T9700] ext4_orphan_cleanup+0xad2/0x1320 [ 696.699672][ T9700] ? ext4_orphan_del+0xbf0/0xbf0 [ 696.704634][ T9700] ? errseq_check_and_advance+0x62/0x120 [ 696.710294][ T9700] ext4_fill_super+0x8e25/0x95a0 [ 696.715275][ T9700] ? ext4_mount+0x40/0x40 [ 696.719627][ T9700] ? set_blocksize+0x1f3/0x370 [ 696.724412][ T9700] ? sb_set_blocksize+0xa5/0xe0 [ 696.729289][ T9700] mount_bdev+0x287/0x3c0 [ 696.733645][ T9700] ? ext4_mount+0x40/0x40 [ 696.737998][ T9700] legacy_get_tree+0xe6/0x180 [ 696.742709][ T9700] ? ext4_errno_to_code+0x160/0x160 [ 696.747946][ T9700] vfs_get_tree+0x88/0x270 [ 696.752399][ T9700] do_new_mount+0x24a/0xa40 [ 696.756948][ T9700] __se_sys_mount+0x2e3/0x3d0 [ 696.761662][ T9700] ? __x64_sys_mount+0xc0/0xc0 [ 696.766451][ T9700] ? lockdep_hardirqs_on+0x94/0x140 [ 696.771671][ T9700] ? __x64_sys_mount+0x1c/0xc0 [ 696.776458][ T9700] do_syscall_64+0x4c/0xa0 [ 696.780899][ T9700] ? clear_bhb_loop+0x30/0x80 [ 696.785595][ T9700] ? clear_bhb_loop+0x30/0x80 [ 696.790301][ T9700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 696.796233][ T9700] RIP: 0033:0x7fc67849c14a [ 696.800676][ T9700] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.820391][ T9700] RSP: 002b:00007fc6766f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 696.829070][ T9700] RAX: ffffffffffffffda RBX: 00007fc6766f5ee0 RCX: 00007fc67849c14a [ 696.837098][ T9700] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fc6766f5ea0 [ 696.845108][ T9700] RBP: 0000200000000180 R08: 00007fc6766f5ee0 R09: 0000000000800718 [ 696.853128][ T9700] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 696.861134][ T9700] R13: 00007fc6766f5ea0 R14: 00000000000004a3 R15: 0000200000000280 [ 696.869179][ T9700] [ 696.872446][ T9700] Kernel Offset: disabled [ 696.876794][ T9700] Rebooting in 86400 seconds..