last executing test programs: 4m26.073267489s ago: executing program 3 (id=1732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc3f, 0x2, 0x1, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4m24.181183161s ago: executing program 3 (id=1736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, 0xffffffffffffffff, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271f, 0x0, &(0x7f00000000c0)) 4m21.553456598s ago: executing program 3 (id=1743): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x4800) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 4m21.348349875s ago: executing program 3 (id=1744): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000608, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/82, 0x52) 4m20.895976969s ago: executing program 3 (id=1748): unshare(0x2040400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 4m19.04291215s ago: executing program 3 (id=1753): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x4800) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 4m18.188797738s ago: executing program 32 (id=1753): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x4800) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 5.420234399s ago: executing program 1 (id=2838): mmap(&(0x7f00005e9000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13c16}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffff8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 4.967146623s ago: executing program 1 (id=2843): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0xaa182, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x98, &(0x7f0000000140)={0x8000000, 0x1000, 0x1}}) 4.698051861s ago: executing program 1 (id=2845): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) epoll_create1(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 4.276897275s ago: executing program 2 (id=2849): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000040), 0x0, 0x6}) close(0x3) 3.457963821s ago: executing program 0 (id=2852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 3.456936751s ago: executing program 2 (id=2853): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.391371023s ago: executing program 1 (id=2854): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) 3.257448207s ago: executing program 0 (id=2855): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x1046, 0x0, 0x0) 2.287621058s ago: executing program 0 (id=2857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000088a81600810008"], 0x0) 2.095942414s ago: executing program 1 (id=2858): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hfsplus\x00', 0x25400, &(0x7f0000000100)='nicvf0\x00') syz_open_dev$loop(&(0x7f0000001b80), 0x7fffffffffffffff, 0x80000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x6e3d}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private0, 0x200000}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getrlimit(0xc, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061143400000000000d000000000000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) get_robust_list(r1, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f0000000300)={&(0x7f0000000180)={&(0x7f0000000100)}}, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={&(0x7f0000000340)}}}, &(0x7f00000004c0)=0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)={0x50, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x4000014) 2.083006714s ago: executing program 2 (id=2859): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000200)={[{@i_version}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2.019973717s ago: executing program 4 (id=2860): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0xc080) 1.956019568s ago: executing program 0 (id=2861): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x480, &(0x7f0000000240)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0xf6, 0x320, &(0x7f0000000a40)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325e671, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) ioctl$PPPIOCSMRU1(r1, 0x40047454, 0x0) 1.773429454s ago: executing program 4 (id=2862): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000040), 0x0, 0x6}) close(0x3) 1.59955342s ago: executing program 4 (id=2863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 1.554095491s ago: executing program 2 (id=2864): mmap(&(0x7f00005e9000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1.451954824s ago: executing program 0 (id=2865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000b40)=0x400, 0x4) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) 1.404186066s ago: executing program 4 (id=2866): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x1046, 0x0, 0x0) 1.103140615s ago: executing program 1 (id=2867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=@newtaction={0x1058, 0x30, 0x0, 0x70bd25, 0x25dfdbfb, {}, [{0x1044, 0x1, [@m_police={0x1040, 0x2, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x1, 0x6, 0x3, 0x6, 0x3ff, 0xfff, 0x7fff, 0x9, 0x9, 0xa24, 0x9, 0x1000, 0x8001, 0x0, 0x5, 0x9, 0x6, 0x279, 0x8, 0x5, 0x401, 0xb283, 0xfff, 0x5, 0xa, 0x7, 0x8, 0x5, 0x6, 0x6, 0x3, 0x7, 0x8001, 0x4, 0xffffffb8, 0xc, 0xd0, 0x35000000, 0x2, 0x4, 0x4, 0x4, 0x2, 0xfffffffc, 0x4, 0xffffa8de, 0x7, 0x3, 0x7fff, 0x8, 0x2, 0xb, 0x5, 0x63d512ad, 0x6, 0x8, 0x5, 0x1f, 0x9, 0x4, 0x3, 0x0, 0x11dd, 0x0, 0x9, 0x0, 0x1, 0x8, 0x1, 0x0, 0x1, 0x2, 0xfffffff8, 0x3, 0x4, 0x3, 0x9, 0x10, 0x9, 0x7, 0x4, 0x6, 0x3, 0x100, 0xeb, 0x8000, 0x4, 0x0, 0x2, 0xe, 0xfff, 0x100, 0x8, 0x3, 0x4, 0x8, 0x5, 0x5, 0x0, 0x6, 0x401, 0xeb9, 0x7, 0x4, 0x6, 0x1, 0x2, 0xe, 0x7553, 0xfffffffd, 0x991, 0x9, 0x10, 0x4, 0x7, 0x800, 0x4, 0x40, 0x7, 0x3, 0xca, 0x5, 0x10, 0x8, 0x6, 0x4732, 0x9, 0x0, 0xe, 0x42, 0x4, 0x200, 0x5, 0x6, 0x8, 0x9, 0x6, 0x0, 0x9, 0xff, 0x2, 0x7, 0x4, 0x6, 0x2, 0x1, 0x0, 0x800, 0x2cff, 0x4, 0x2, 0x1, 0x3, 0xe, 0x7f, 0xa402, 0x9, 0x1, 0x100, 0x5, 0x2, 0x1, 0x9e7, 0x7, 0x9, 0x33a, 0x800, 0xfffffff7, 0x2, 0x1, 0x9, 0x3, 0xfffffb44, 0x1, 0x4e1f, 0x6, 0x2, 0x5cd, 0x7, 0x0, 0x2, 0x0, 0x3, 0x7fffffff, 0xd, 0x28e6, 0x9, 0x3, 0x5, 0x488, 0x1000, 0x400, 0x9, 0x0, 0x8, 0x1, 0x6, 0x2, 0xa, 0xd1, 0x2, 0xfffffffe, 0x4b0, 0x5, 0x5, 0x5, 0x2, 0x1, 0x400, 0x6, 0x5, 0x8, 0x7, 0x4, 0x9, 0x6, 0x0, 0x2, 0xfffffff7, 0x7ff, 0x5, 0x7f, 0x3, 0x3, 0xdb9, 0x8, 0x8, 0x4, 0x4, 0x8, 0x5, 0x3112, 0x9, 0xa1, 0x7, 0x844, 0xfff, 0xfffffffe, 0xfffff0ec, 0x8, 0x6, 0x0, 0x7fff, 0xf642, 0x5, 0x0, 0x8001, 0xfffffe17, 0x80, 0x1, 0xfffffff8, 0x9, 0x8, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x25ee, 0x46d, 0x6, 0x9, 0x2, 0xffff0001, 0x8, 0xf26, 0x0, 0x8000, 0x10001, 0x15ab29fb, 0x0, 0x8, 0x8, 0x3, 0x3c5c, 0x3, 0x0, 0xb16, 0x6, 0xd6b0, 0x1, 0x2, 0x1000, 0x29b5, 0x7, 0x6, 0x2, 0x564, 0x7f, 0x7ff, 0x8, 0x1, 0x5, 0x1ff, 0x6, 0x1ff, 0x8, 0x2, 0x3, 0x1, 0x1000, 0x2, 0xd500000, 0x4, 0x732, 0x6, 0x401, 0x9, 0x6, 0x8, 0x5, 0x8, 0x2, 0xb318, 0x9, 0x3, 0x6, 0x8000, 0x2, 0x100, 0x7, 0x9, 0x3fa4, 0xffffffff, 0x7, 0x4, 0x3, 0xe69, 0x7, 0x6, 0x9, 0x0, 0x23d7, 0x4, 0x80, 0x9, 0x2, 0x1000, 0x0, 0x1, 0x40e, 0x2, 0xf3d, 0x122, 0x12d9, 0x200, 0x80, 0xd, 0x7fffffff, 0x9, 0xa9b, 0xffffff8d, 0x4396, 0xf9c, 0xfffffffd, 0x3e, 0xfffffe01, 0x2ffb, 0x8, 0x2, 0x4, 0xbb0, 0x4, 0xff, 0x2, 0x4d, 0x390, 0x5, 0xfffff001, 0x7, 0x2295, 0x4, 0xe279, 0x5, 0xfffff000, 0x3ac0000, 0xbc1, 0x8, 0x7fffffff, 0x80000000, 0x8000, 0x0, 0xa, 0x172, 0x4, 0x1, 0x4, 0x33, 0x6, 0x4, 0xffffff4d, 0x8, 0xd6, 0x3, 0x8, 0xda69, 0x3, 0xa, 0xd80a, 0x8, 0x9, 0x423, 0x5, 0x1ff, 0x9, 0x8001, 0x200, 0x7, 0x7, 0x0, 0xc5, 0x2, 0x1, 0x7, 0xfe8, 0x9, 0x2, 0x1, 0x0, 0x40, 0x6abb, 0x0, 0xf56, 0xa, 0x5, 0x6, 0x3, 0x9, 0xfc, 0x1ff, 0x4, 0xa28, 0x8001, 0x2, 0x6, 0x9e8, 0x7, 0x1, 0x2, 0x0, 0xa8, 0x1, 0xfffffffd, 0x401, 0xfff, 0x9, 0xe, 0x6, 0x4, 0x8, 0x4, 0x5, 0xcdcf, 0x1, 0x8, 0x0, 0x600, 0x5, 0x25c0b40f, 0x6f, 0x5, 0x1, 0x2e, 0xfffffffa, 0x3, 0x3aa, 0xb6e8, 0x7, 0x8, 0x6, 0x6, 0x2, 0xffffed05, 0x86f7, 0x81, 0x0, 0x8, 0x93, 0x7, 0x8, 0xf730, 0x3, 0x6, 0x2, 0x7, 0xdd27, 0x9, 0xe, 0x4, 0x5, 0x3000, 0x3, 0x3, 0xffff, 0x1ff, 0x4, 0x7ff, 0x196, 0x2, 0x217, 0x2, 0xff, 0xfffffffa, 0xcd14, 0x4, 0x4, 0x4, 0x4, 0x2, 0x6, 0x9, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x5, 0x9e, 0x8, 0x200, 0x3, 0x6, 0xa, 0xaec1, 0x0, 0x8, 0x8, 0x1, 0x9, 0x5, 0x3, 0xf3, 0x0, 0xa, 0xffff, 0x9, 0x41, 0x2, 0xe, 0x2, 0x0, 0x1, 0x7, 0xc60, 0x6, 0xa, 0xcdb, 0x6e, 0x6, 0x7, 0xff, 0x8, 0x0, 0x3fde8000, 0x9, 0x5, 0x0, 0x7, 0xf07a, 0x6, 0x5, 0x3, 0x7f, 0x10000, 0x0, 0xc1, 0x4e76, 0x1, 0x80000000, 0x1, 0x1, 0x2, 0x4, 0xe, 0x1, 0x9, 0xe0c2, 0x7f, 0xffff, 0xe, 0x1ff, 0x4, 0x7fff, 0x9, 0x2, 0x5, 0xffffff00, 0x1ff, 0x10, 0x7, 0xce, 0x8, 0x5, 0xfffffc00, 0x55, 0x4, 0x81, 0x80, 0x829, 0xca2, 0x5b3, 0xa, 0x3a00, 0x40, 0x9f2, 0x0, 0x1ff, 0xf, 0x688, 0x6, 0xb6, 0x1, 0x2, 0x7, 0xfffffff9, 0x5, 0x7, 0x3, 0x4, 0xf9, 0x89a, 0x6, 0xfffffffe, 0x4, 0xf, 0x0, 0x7ff, 0x1ff, 0x5, 0x6, 0x8, 0x2770000, 0x8, 0xfffffffa, 0xffffff08, 0x3, 0x9, 0x7fffffff, 0xfffffffe, 0x6, 0x3, 0x7be, 0x2, 0xfffff442, 0xe0, 0x8, 0xfffff4bf, 0x10001, 0x1, 0x1, 0x4, 0x2, 0x9, 0x0, 0x77b, 0x3ff, 0x63, 0x311, 0xf598, 0x7c0, 0x0, 0xc, 0x5, 0x101, 0x6, 0x2, 0x2, 0x9, 0x1, 0x5, 0x5, 0x9, 0x2, 0x6, 0x6, 0xb09, 0x1, 0x7, 0x5d9, 0x2, 0x7, 0x4, 0x1, 0x10, 0x2, 0x100000, 0x8001, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5, 0x3e9, 0x6, 0x9, 0x3, 0x2, 0x400, 0x7, 0x5, 0xae, 0x7, 0x5, 0x6, 0x1ff, 0x9, 0x7, 0x1ff, 0x5a, 0x20400000, 0x2, 0x9, 0x4, 0x6, 0x80000001, 0x4, 0x200, 0x5d2, 0x2, 0x6, 0x3f, 0x9, 0xff, 0x7fff, 0xfffffffd, 0xffff2650, 0x4, 0x10, 0x5d67, 0x9, 0x7, 0x4, 0x7, 0x43c, 0xa8f, 0x6, 0x80, 0x1, 0x2, 0xfffff7d2, 0x8f, 0x5, 0x3ff, 0xf, 0x9, 0xaf68, 0x8e3, 0x7f, 0x9, 0x3, 0x8, 0xffffffff, 0xb, 0xb12, 0x2, 0x5cf9e5c0, 0x3, 0x1, 0x9, 0x1, 0x1, 0x0, 0xc000000, 0x1, 0x7, 0x2, 0x0, 0x7, 0x8, 0x700]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xe2, 0xfffffeff, 0x9, 0x3, 0xfffff800, 0x200, 0x71e4d05d, 0x8, 0x2, 0x5, 0x0, 0xaee3, 0x6, 0x8, 0x10000, 0xa55, 0xd, 0xd45b, 0x800, 0x7f, 0x2, 0x80, 0x7f, 0x7ff, 0x3, 0xffffffff, 0x4, 0x6, 0x5, 0x9, 0x81, 0x70, 0x80000000, 0x2, 0x7, 0x1, 0xffff, 0x400, 0x35, 0x1098, 0x1ff, 0x9, 0x6, 0x0, 0x0, 0x6, 0x8000, 0x9, 0x3, 0x100, 0x6, 0x1, 0x1b2, 0x8, 0x4, 0x1000, 0xf, 0x6, 0xfffffff8, 0x9, 0x4, 0x1, 0xffff1dae, 0x3ff, 0x4, 0x2, 0x2, 0x8, 0x6, 0xab800000, 0xbb63, 0x8, 0x0, 0xb, 0x10, 0x0, 0x4, 0xffff8001, 0x4, 0x0, 0x384, 0x7, 0x0, 0x7fff, 0x56, 0x10001, 0xf, 0x7ff, 0x77e2, 0x400, 0x8d4, 0x7d, 0x800, 0x7, 0x2, 0x0, 0x400, 0x5, 0x8000, 0x100, 0x3, 0x2, 0x94, 0xffffff51, 0x2, 0x6, 0x6, 0x3, 0x7ff, 0x8e, 0x5, 0x7fff, 0x4, 0xc58, 0x8, 0xdfc9, 0x4, 0x2, 0x5, 0x8, 0xa4db, 0x7, 0xb, 0x1, 0x25, 0x1, 0x0, 0x8, 0x6, 0xf, 0x4, 0xd, 0x4f, 0x7, 0x4, 0x2, 0x1, 0x5, 0x4888, 0xe0000, 0x8, 0xfffffff8, 0x1, 0x1ff, 0x5, 0x1000, 0x9, 0x1, 0x4, 0x41, 0x9, 0x4800, 0x2, 0xf, 0xd, 0x8, 0x40, 0x6, 0x1b4, 0xdda1, 0x2, 0xc58, 0x40, 0x7f, 0x3, 0x8, 0x6, 0x9, 0xfffffc00, 0x6, 0x1, 0x8, 0x80000001, 0x4, 0x200, 0x200, 0x4d3, 0x9, 0xa199, 0x7, 0xf7c, 0x1d7d, 0x2, 0xedef, 0x1, 0x3, 0x1ff, 0x4, 0x2f3db703, 0x3, 0x2cbfb49b, 0x9, 0x2d6, 0x8, 0x0, 0x2, 0x4, 0x33, 0x3fc00, 0x1, 0x401, 0x950f, 0x2, 0xb, 0x7, 0x3, 0x100, 0x1000, 0x5, 0x3, 0x3, 0x5, 0x1, 0x4, 0x0, 0x8, 0x7, 0x80, 0x1, 0x10, 0x1000, 0x947b00, 0x4, 0x8000, 0x7, 0x100, 0x924, 0x4, 0xfffffc01, 0xda4, 0x4772, 0x4, 0x20, 0x1, 0x1, 0xfff, 0x71, 0x6, 0x1ff, 0x4, 0x400, 0x7, 0x10001, 0x1, 0x1, 0x7, 0xd, 0xffff, 0x0, 0x400, 0x5, 0x5, 0x800, 0x4, 0x5]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1058}}, 0x4080) 407.297387ms ago: executing program 4 (id=2868): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) 354.651299ms ago: executing program 0 (id=2869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000003800088034000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff040009801400020077673000"/88], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x1, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x4000) r8 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendfile(r8, r8, 0x0, 0xe3aa6ea) 327.39147ms ago: executing program 2 (id=2870): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0xc080) 77.224758ms ago: executing program 4 (id=2871): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000040), 0x0, 0x6}) close(0x3) 0s ago: executing program 2 (id=2872): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000200)={[{@i_version}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) kernel console output (not intermixed with test programs): filesystem 00000000-0000-0000-0000-000000000000. [ 361.476070][ T995] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.500662][ T995] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 361.509524][ T995] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0 [ 361.526025][ T5784] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 361.564822][ T5784] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 361.574746][ T5784] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 363.336162][ T28] audit: type=1326 audit(1780652366.671:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.0.1734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc47839ce59 code=0x0 [ 363.762554][T11087] syzkaller0: entered promiscuous mode [ 363.768192][T11087] syzkaller0: entered allmulticast mode [ 364.792810][T11097] Cannot find del_set index 0 as target [ 365.126404][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 365.326815][ T27] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 365.345600][ T27] usb 1-1: config 0 has no interface number 0 [ 365.358833][ T27] usb 1-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 365.394568][ T27] usb 1-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 365.426282][ T27] usb 1-1: config 0 interface 49 has no altsetting 0 [ 365.451599][ T27] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 365.475199][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.509761][ T27] usb 1-1: config 0 descriptor?? [ 365.747046][ T27] usb 1-1: string descriptor 0 read error: -71 [ 365.806018][ T27] ums-realtek 1-1:0.49: USB Mass Storage device detected [ 366.074177][ T27] usb 1-1: USB disconnect, device number 2 [ 366.296890][T11122] loop3: detected capacity change from 0 to 512 [ 366.319791][T11122] EXT4-fs (loop3): Test dummy encryption mode enabled [ 366.335295][T11122] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 366.376375][T11122] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1744: bad orphan inode 131083 [ 366.403856][T11122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.495834][T11122] overlayfs: upper fs needs to support d_type. [ 366.626082][ T5784] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /416/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 366.709699][T11129] loop0: detected capacity change from 0 to 2048 [ 366.794515][T11129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.016810][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.310653][T11111] syzkaller0: entered promiscuous mode [ 368.318721][T11111] syzkaller0: entered allmulticast mode [ 368.350384][ T5784] bond0: (slave syz_tun): Releasing backup interface [ 368.451696][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.102651][ T1331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 371.209646][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.261798][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.271254][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.285722][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.304045][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 371.320101][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.949802][T11185] macvtap1: entered promiscuous mode [ 373.045909][ T995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.256020][ T995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.413917][ T5782] Bluetooth: hci3: command tx timeout [ 373.870557][ T995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.736249][ T995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.025633][T11204] syzkaller0: entered promiscuous mode [ 375.042967][T11204] syzkaller0: entered allmulticast mode [ 375.052525][ T5782] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 375.492321][ T5782] Bluetooth: hci3: command tx timeout [ 375.941836][T11222] loop0: detected capacity change from 0 to 2048 [ 376.033141][T11222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.273776][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.490905][T11230] loop0: detected capacity change from 0 to 512 [ 376.537893][T11230] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1782: inode has both inline data and extents flags [ 376.561732][T11230] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1782: couldn't read orphan inode 15 (err -117) [ 376.583738][T11230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.820037][T11230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.113253][T11238] fuse: Unknown parameter 'grou00000000000000000000' [ 377.572598][ T5782] Bluetooth: hci3: command tx timeout [ 378.614728][ T28] audit: type=1326 audit(1780652381.941:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47839ce59 code=0x7ffc0000 [ 378.674633][ T28] audit: type=1326 audit(1780652381.971:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47839ce59 code=0x7ffc0000 [ 378.699301][ T28] audit: type=1326 audit(1780652381.971:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47839ce59 code=0x7ffc0000 [ 378.742434][ T28] audit: type=1326 audit(1780652381.971:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc47839ce59 code=0x7ffc0000 [ 378.768381][ T28] audit: type=1326 audit(1780652381.971:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47839ce59 code=0x7ffc0000 [ 378.803182][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.809585][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.828023][ T28] audit: type=1326 audit(1780652381.971:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47839ce59 code=0x7ffc0000 [ 378.870513][ T28] audit: type=1326 audit(1780652381.971:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47839ce59 code=0x7ffc0000 [ 378.904949][ T28] audit: type=1326 audit(1780652381.971:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc47839ce59 code=0x7ffc0000 [ 378.942516][ T28] audit: type=1326 audit(1780652381.971:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc47839ce59 code=0x7ffc0000 [ 379.060496][T11259] fuse: Unknown parameter 'grou00000000000000000000' [ 379.653263][ T5782] Bluetooth: hci3: command tx timeout [ 379.730865][T11169] chnl_net:caif_netlink_parms(): no params data found [ 379.910354][ T995] tipc: Left network mode [ 380.010792][T11280] fuse: Unknown parameter 'grou00000000000000000000' [ 380.244564][ T23] IPVS: starting estimator thread 0... [ 380.372061][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1806'. [ 380.383131][T11291] IPVS: using max 17 ests per chain, 40800 per kthread [ 380.602252][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1806'. [ 380.877023][T11169] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.915999][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.923973][T11169] bridge_slave_0: entered allmulticast mode [ 380.931464][T11169] bridge_slave_0: entered promiscuous mode [ 380.934125][T11319] fuse: Unknown parameter 'group_i00000000000000000000' [ 381.096879][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.107037][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.123544][T11169] bridge_slave_1: entered allmulticast mode [ 381.133949][T11169] bridge_slave_1: entered promiscuous mode [ 381.355538][T11169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.378092][T11169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.516837][T11169] team0: Port device team_slave_0 added [ 381.548884][T11169] team0: Port device team_slave_1 added [ 381.577328][T11169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.584500][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.611973][T11169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.649552][T11169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.657001][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.683601][T11169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.758295][T11169] hsr_slave_0: entered promiscuous mode [ 381.767093][T11169] hsr_slave_1: entered promiscuous mode [ 381.774346][T11169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.781967][T11169] Cannot create hsr debugfs directory [ 382.038538][ T995] hsr_slave_0: left promiscuous mode [ 382.049697][ T995] hsr_slave_1: left promiscuous mode [ 382.058152][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.069689][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.078503][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.090290][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.099112][ T995] bridge_slave_1: left allmulticast mode [ 382.105018][ T995] bridge_slave_1: left promiscuous mode [ 382.112684][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.125710][ T995] bridge_slave_0: left allmulticast mode [ 382.131440][ T995] bridge_slave_0: left promiscuous mode [ 382.137495][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.168951][ T995] veth1_macvtap: left promiscuous mode [ 382.176208][ T995] veth0_macvtap: left promiscuous mode [ 382.181926][ T995] veth1_vlan: left promiscuous mode [ 382.190182][ T995] veth0_vlan: left promiscuous mode [ 382.348847][ T995] pimreg (unregistering): left allmulticast mode [ 382.837647][ T995] team0 (unregistering): Port device team_slave_1 removed [ 382.891449][ T995] team0 (unregistering): Port device team_slave_0 removed [ 382.938628][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.990428][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.349571][ T995] bond0 (unregistering): Released all slaves [ 383.861744][T11312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.875627][T11169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.919463][T11169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.005822][T11169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.063237][T11169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.283109][T11350] fuse: Unknown parameter 'group_i00000000000000000000' [ 384.439396][T11169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.507149][T11169] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.563776][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.572071][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.670313][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.677618][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.541054][T11169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.799804][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1829'. [ 385.993763][T11388] fuse: Unknown parameter 'group_i00000000000000000000' [ 386.035111][T11390] loop0: detected capacity change from 0 to 128 [ 386.094400][T11273] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 386.168751][T11169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.786956][T11169] veth0_vlan: entered promiscuous mode [ 386.807282][T11169] veth1_vlan: entered promiscuous mode [ 386.860023][T11169] veth0_macvtap: entered promiscuous mode [ 386.875689][T11169] veth1_macvtap: entered promiscuous mode [ 386.899886][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.910974][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.921751][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.932879][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.943184][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.955593][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.967774][T11169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.989591][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.001755][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.018514][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.029410][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.044675][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.059894][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.076582][T11169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.093210][T11169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.102676][T11169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.111437][T11169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.120895][T11169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.784318][T11366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.833873][T11438] fuse: Unknown parameter 'group_id00000000000000000000' [ 387.994023][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.001902][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.185807][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.202614][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.583400][T11460] fuse: Unknown parameter 'group_id00000000000000000000' [ 388.649075][T11465] loop0: detected capacity change from 0 to 512 [ 388.678042][T11465] EXT4-fs: inline encryption not supported [ 388.697653][T11465] EXT4-fs: inline encryption not supported [ 388.773392][T11465] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 388.912731][T11465] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 389.022688][T11465] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1847: bg 0: block 248: padding at end of block bitmap is not set [ 389.100340][T11465] Quota error (device loop0): write_blk: dquota write failed [ 389.146354][T11465] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 389.196362][T11465] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1847: Failed to acquire dquot type 1 [ 389.241038][T11465] EXT4-fs (loop0): 1 truncate cleaned up [ 389.250767][T11465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 389.422405][T11457] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 389.546193][T11494] fuse: Unknown parameter 'group_id00000000000000000000' [ 389.556400][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 390.933438][ T5782] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 390.940250][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 391.063409][T11525] fuse: Bad value for 'user_id' [ 391.131441][T11523] loop1: detected capacity change from 0 to 512 [ 391.151933][T11523] EXT4-fs: inline encryption not supported [ 391.194011][T11523] EXT4-fs: inline encryption not supported [ 391.237629][T11523] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.304820][T11523] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 391.405086][T11523] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1868: bg 0: block 248: padding at end of block bitmap is not set [ 391.487043][T11523] Quota error (device loop1): write_blk: dquota write failed [ 391.497908][T11523] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 391.528543][T11523] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1868: Failed to acquire dquot type 1 [ 391.652591][T11523] EXT4-fs (loop1): 1 truncate cleaned up [ 392.246791][ T5782] Bluetooth: Wrong link type (-71) [ 392.383496][T11523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 392.698434][T11523] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 393.714123][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 393.926637][T11573] fuse: Bad value for 'user_id' [ 394.451535][T11591] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 395.994301][T11605] fuse: Bad value for 'user_id' [ 396.343488][T11608] batman_adv: batadv0: Adding interface: dummy0 [ 396.349831][T11608] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.463273][T11619] binder: BINDER_SET_CONTEXT_MGR already set [ 396.480102][T11608] batman_adv: batadv0: Interface activated: dummy0 [ 396.487151][T11619] binder: 11616:11619 ioctl 4018620d 200000004a80 returned -16 [ 396.510294][T11620] loop4: detected capacity change from 0 to 512 [ 396.527200][T11613] batadv0: mtu less than device minimum [ 396.550819][T11613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.564036][T11613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.576602][T11613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.589223][T11613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.595365][T11620] EXT4-fs: inline encryption not supported [ 396.605241][T11613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.610659][T11613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.628494][T11613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.641058][T11613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.710456][T11620] EXT4-fs: inline encryption not supported [ 396.745177][T11620] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 396.832049][T11620] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 396.968807][T11620] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1893: bg 0: block 248: padding at end of block bitmap is not set [ 397.111593][T11620] Quota error (device loop4): write_blk: dquota write failed [ 397.149955][T11620] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 397.222028][T11620] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1893: Failed to acquire dquot type 1 [ 397.314173][T11620] EXT4-fs (loop4): 1 truncate cleaned up [ 397.325200][T11620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 397.833890][T11646] fuse: Bad value for 'fd' [ 398.121810][T11608] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 398.297930][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 398.832075][T11674] overlayfs: failed to resolve './bus': -2 [ 398.951676][T11678] fuse: Bad value for 'fd' [ 399.323754][T11689] block nbd0: not configured, cannot reconfigure [ 400.179700][T11704] loop0: detected capacity change from 0 to 512 [ 400.265281][T11704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.380832][T11701] syzkaller0: entered promiscuous mode [ 400.427727][T11701] syzkaller0: entered allmulticast mode [ 400.545811][T11713] overlayfs: failed to resolve './bus': -2 [ 401.844537][T11735] loop4: detected capacity change from 0 to 8 [ 401.948096][T11735] SQUASHFS error: Failed to read block 0x71e: -5 [ 401.955023][T11735] SQUASHFS error: Unable to read metadata cache entry [71c] [ 401.962486][T11735] SQUASHFS error: Unable to read inode 0x11f [ 402.453636][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 403.091502][T11749] overlayfs: failed to resolve './bus': -2 [ 405.484059][T11781] loop4: detected capacity change from 0 to 4096 [ 405.495652][T11781] EXT4-fs (loop4): Test dummy encryption mode enabled [ 405.527358][T11781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.640399][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.781910][T11785] fuse: Bad value for 'fd' [ 406.171415][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.002878][T11812] fuse: Bad value for 'fd' [ 407.371358][T11816] loop1: detected capacity change from 0 to 4096 [ 407.568303][T11816] EXT4-fs (loop1): Test dummy encryption mode enabled [ 407.656297][T11816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.870155][T11827] syzkaller0: entered promiscuous mode [ 407.890535][T11827] syzkaller0: entered allmulticast mode [ 407.946280][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.618840][T11848] loop1: detected capacity change from 0 to 8 [ 408.734621][T11848] SQUASHFS error: Failed to read block 0x71e: -5 [ 408.741185][T11848] SQUASHFS error: Unable to read metadata cache entry [71c] [ 408.748739][T11848] SQUASHFS error: Unable to read inode 0x11f [ 409.416928][T11851] fuse: Invalid rootmode [ 412.130902][T11846] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1968'. [ 412.168357][T11846] net_ratelimit: 11 callbacks suppressed [ 412.168422][T11846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.979589][T11879] fuse: Invalid rootmode [ 413.611259][T11899] loop2: detected capacity change from 0 to 8 [ 413.643315][T11899] SQUASHFS error: Failed to read block 0x71e: -5 [ 413.649785][T11899] SQUASHFS error: Unable to read metadata cache entry [71c] [ 413.657251][T11899] SQUASHFS error: Unable to read inode 0x11f [ 414.509114][T11909] loop2: detected capacity change from 0 to 128 [ 414.520377][T11907] syzkaller0: entered promiscuous mode [ 414.540360][T11909] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 414.552320][T11907] syzkaller0: entered allmulticast mode [ 414.631075][T11912] loop4: detected capacity change from 0 to 2048 [ 414.713066][T11912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.742679][T11912] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 414.817786][T11920] fuse: Invalid rootmode [ 415.031022][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.280518][T11930] 9pnet_fd: Insufficient options for proto=fd [ 419.035658][T11961] loop4: detected capacity change from 0 to 128 [ 419.116060][T11961] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 419.338817][T11970] loop0: detected capacity change from 0 to 8 [ 419.395071][T11970] SQUASHFS error: Failed to read block 0x71e: -5 [ 419.401626][T11970] SQUASHFS error: Unable to read metadata cache entry [71c] [ 419.409086][T11970] SQUASHFS error: Unable to read inode 0x11f [ 419.707829][T11967] fuse: Bad value for 'rootmode' [ 421.160831][T11982] loop4: detected capacity change from 0 to 256 [ 421.313558][T11982] FAT-fs (loop4): Unrecognized mount option "n¨numtail" or missing value [ 423.149230][T12028] fuse: Bad value for 'rootmode' [ 423.332770][T12033] binder: 12032:12033 unknown command 1074553619 [ 423.346472][T12033] binder: 12032:12033 ioctl c0306201 200000000540 returned -22 [ 423.393522][T12037] loop2: detected capacity change from 0 to 256 [ 423.486927][T12037] FAT-fs (loop2): Directory bread(block 64) failed [ 423.582991][T12037] FAT-fs (loop2): Directory bread(block 65) failed [ 423.625045][T12037] FAT-fs (loop2): Directory bread(block 66) failed [ 423.688789][T12037] FAT-fs (loop2): Directory bread(block 67) failed [ 423.719824][T12037] FAT-fs (loop2): Directory bread(block 68) failed [ 423.753946][T12037] FAT-fs (loop2): Directory bread(block 69) failed [ 423.760680][T12037] FAT-fs (loop2): Directory bread(block 70) failed [ 423.814148][T12037] FAT-fs (loop2): Directory bread(block 71) failed [ 423.852114][T12037] FAT-fs (loop2): Directory bread(block 72) failed [ 423.884054][T12037] FAT-fs (loop2): Directory bread(block 73) failed [ 424.053529][T12058] syz.2.2017: attempt to access beyond end of device [ 424.053529][T12058] loop2: rw=1, sector=1288, nr_sectors = 504 limit=256 [ 424.465553][T11416] kworker/u4:11: attempt to access beyond end of device [ 424.465553][T11416] loop2: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 424.483961][T11416] kworker/u4:11: attempt to access beyond end of device [ 424.483961][T11416] loop2: rw=1, sector=1792, nr_sectors = 40 limit=256 [ 424.530946][T11416] kworker/u4:11: attempt to access beyond end of device [ 424.530946][T11416] loop2: rw=1, sector=1864, nr_sectors = 2592 limit=256 [ 424.675466][T12068] syzkaller0: entered promiscuous mode [ 424.714799][T12068] syzkaller0: entered allmulticast mode [ 424.792890][T12075] fuse: Bad value for 'rootmode' [ 426.137859][T12101] fuse: Unknown parameter 'use00000000000000000000' [ 426.816341][T12126] syzkaller0: entered promiscuous mode [ 426.828538][T12126] syzkaller0: entered allmulticast mode [ 427.932890][T12139] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 427.941184][T12143] loop0: detected capacity change from 0 to 256 [ 427.961260][T12139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 428.015275][T12146] fuse: Unknown parameter 'use00000000000000000000' [ 429.483289][T12179] syzkaller0: entered promiscuous mode [ 429.499214][T12179] syzkaller0: entered allmulticast mode [ 430.981831][T12208] loop4: detected capacity change from 0 to 8 [ 431.145090][T12212] syzkaller0: entered promiscuous mode [ 431.150671][T12212] syzkaller0: entered allmulticast mode [ 431.178108][T12207] SQUASHFS error: Failed to read block 0x4de: -5 [ 431.355962][T12207] SQUASHFS error: Failed to read block 0x4de: -5 [ 431.511432][ T28] audit: type=1800 audit(1780652434.821:135): pid=12207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2064" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 432.101374][T12224] fuse: Unknown parameter 'user_i00000000000000000000' [ 433.565291][T12255] syzkaller0: entered promiscuous mode [ 433.570863][T12255] syzkaller0: entered allmulticast mode [ 433.626749][T12259] fuse: Unknown parameter 'user_i00000000000000000000' [ 433.663752][T12262] loop0: detected capacity change from 0 to 8 [ 433.746295][T12262] SQUASHFS error: Failed to read block 0x4de: -5 [ 433.762831][T12262] SQUASHFS error: Failed to read block 0x4de: -5 [ 433.793611][ T28] audit: type=1800 audit(1780652437.131:136): pid=12262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2082" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 433.821272][T12262] SQUASHFS error: Failed to read block 0x4de: -5 [ 433.840201][T12262] SQUASHFS error: Failed to read block 0x4de: -5 [ 433.880139][T12262] SQUASHFS error: Failed to read block 0x4de: -5 [ 433.899677][T12262] SQUASHFS error: Failed to read block 0x4de: -5 [ 434.452403][T11431] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.392748][T12293] fuse: Unknown parameter 'user_i00000000000000000000' [ 435.878938][T12303] syzkaller0: entered promiscuous mode [ 435.913240][T12303] syzkaller0: entered allmulticast mode [ 436.164771][T12315] loop2: detected capacity change from 0 to 8 [ 436.211448][T12315] SQUASHFS error: Failed to read block 0x4de: -5 [ 436.240831][T12315] SQUASHFS error: Failed to read block 0x4de: -5 [ 436.282260][ T28] audit: type=1800 audit(1780652439.611:137): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2100" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 436.472520][T12323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2102'. [ 436.602511][T12329] fuse: Unknown parameter 'user_id00000000000000000000' [ 438.117213][T12359] loop0: detected capacity change from 0 to 1024 [ 438.137856][T12359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.230405][T12359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.392146][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.406749][T12372] fuse: Unknown parameter 'user_id00000000000000000000' [ 440.042692][T12403] fuse: Unknown parameter 'user_id00000000000000000000' [ 440.215366][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.222031][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.700019][T12438] fuse: Bad value for 'fd' [ 442.029610][T12454] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 442.046382][T12454] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 442.262494][T12459] loop4: detected capacity change from 0 to 128 [ 442.272547][T12462] [U] vŌ3øĀfł¾"SēĮ/Éź4:ĆXTz“Wt‘’lWµ«= [ 442.279249][T12462] [U] J"—e:ĄĘ" [ 442.326208][T12459] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.410920][T12459] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 442.897752][T12480] fuse: Bad value for 'fd' [ 443.716895][T11169] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.972135][T12494] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 444.021463][T12494] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 444.296833][T12509] fuse: Bad value for 'fd' [ 445.661242][T12540] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 445.900407][T12551] fuse: Unknown parameter '0x0000000000000004' [ 445.921687][T12553] loop2: detected capacity change from 0 to 512 [ 445.964943][T12553] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 446.094518][T12553] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.2172: bad orphan inode 131083 [ 446.161843][T12553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.306571][T12553] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.2172: path /544/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 447.146334][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.299451][T12577] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 447.520795][T12590] fuse: Unknown parameter '0x0000000000000004' [ 448.180325][T12617] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 449.044238][T12630] ŖŖŖŖŖŖ: renamed from vlan0 (while UP) [ 449.132112][T12634] fuse: Unknown parameter '0x0000000000000004' [ 449.408167][T12644] loop0: detected capacity change from 0 to 4096 [ 449.435683][T12644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.485365][T12644] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.2197: corrupted inode contents [ 449.541572][T12644] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #15: comm syz.0.2197: mark_inode_dirty error [ 449.606137][T12644] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.2197: corrupted inode contents [ 449.644104][T12654] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 449.646258][T12644] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.2197: mark_inode_dirty error [ 449.747781][T12644] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.2197: corrupted inode contents [ 449.820156][T12644] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.2197: mark_inode_dirty error [ 449.872115][T12644] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.2197: corrupted inode contents [ 449.910650][T12644] EXT4-fs error (device loop0): ext4_truncate:4301: inode #15: comm syz.0.2197: mark_inode_dirty error [ 449.941869][T12644] EXT4-fs error (device loop0) in ext4_setattr:5682: Corrupt filesystem [ 449.997881][T12652] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.2197: corrupted inode contents [ 450.254162][ T5779] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 451.023764][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.213104][T12680] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 451.231483][T12680] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 451.274558][T12684] fuse: Unknown parameter '0x0000000000000004' [ 451.331421][T12686] loop4: detected capacity change from 0 to 512 [ 451.355284][T12686] EXT4-fs (loop4): orphan cleanup on readonly fs [ 451.376232][T12686] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 451.397031][T12686] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 451.449852][T12686] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2211: attempt to clear invalid blocks 2 len 1 [ 451.478161][T12686] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2211: invalid indirect mapped block 1819239214 (level 0) [ 451.505322][T12686] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2211: invalid indirect mapped block 1819239214 (level 1) [ 451.523074][T12686] EXT4-fs (loop4): 1 truncate cleaned up [ 451.530430][T12686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 451.594874][T12686] EXT4-fs: Ignoring removed oldalloc option [ 451.615241][T12686] EXT4-fs: can't change dax mount option while remounting [ 451.729456][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.784262][T12703] loop1: detected capacity change from 0 to 512 [ 452.797511][T12703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 452.858215][T12703] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.2219: bad orphan inode 131083 [ 453.093251][T12703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.173405][T12703] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.2219: path /528/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 453.733235][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 453.755413][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.764170][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.772619][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 453.783172][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 453.790716][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 453.905223][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.107896][T12718] fuse: Unknown parameter '0x0000000000000004' [ 454.459345][T11431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.517174][T12725] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 454.794584][T11431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.937349][T11431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.039138][T12712] chnl_net:caif_netlink_parms(): no params data found [ 455.065882][T12740] loop1: detected capacity change from 0 to 512 [ 455.087360][T12740] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 455.170657][T12740] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.2229: bad orphan inode 131083 [ 455.248622][T12740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.303867][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.450351][T11431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.893077][ T5778] Bluetooth: hci4: command tx timeout [ 456.117878][T12749] fuse: Unknown parameter '0x0000000000000004' [ 456.273688][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.281969][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.306538][T12712] bridge_slave_0: entered allmulticast mode [ 456.367821][T12712] bridge_slave_0: entered promiscuous mode [ 456.489233][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.498775][T12758] loop1: detected capacity change from 0 to 256 [ 456.522461][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.533972][T12758] FAT-fs (loop1): Unrecognized mount option "n¨numtail" or missing value [ 456.552431][T12712] bridge_slave_1: entered allmulticast mode [ 456.602070][T12712] bridge_slave_1: entered promiscuous mode [ 456.779681][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.075392][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.524423][T12712] team0: Port device team_slave_0 added [ 457.531638][T12772] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 457.666605][T12712] team0: Port device team_slave_1 added [ 457.846216][T12712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.872286][T12778] loop4: detected capacity change from 0 to 512 [ 457.880900][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.924790][T12712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.950708][ T27] IPVS: starting estimator thread 0... [ 457.972441][ T5778] Bluetooth: hci4: command tx timeout [ 458.033507][T12778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 458.082626][T12782] IPVS: using max 17 ests per chain, 40800 per kthread [ 458.175054][T12778] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.2238: bad orphan inode 131083 [ 458.194108][T12778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.889580][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.910282][T12712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.962787][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.069626][T12712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.142034][T12794] loop1: detected capacity change from 0 to 512 [ 459.160732][T12795] fuse: Unknown parameter 'fd0x0000000000000004' [ 459.211670][T12794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 459.225586][T12712] hsr_slave_0: entered promiscuous mode [ 459.232420][T12794] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 459.252696][T12712] hsr_slave_1: entered promiscuous mode [ 459.260987][T12712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.270789][T12712] Cannot create hsr debugfs directory [ 459.311314][T12794] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 459.365907][T12794] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2241: attempt to clear invalid blocks 2 len 1 [ 459.408436][T12794] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2241: invalid indirect mapped block 1819239214 (level 0) [ 459.439914][T12794] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2241: invalid indirect mapped block 1819239214 (level 1) [ 459.458275][T12800] loop4: detected capacity change from 0 to 256 [ 459.473419][T12800] FAT-fs (loop4): Unrecognized mount option "n¨numtail" or missing value [ 459.488081][T12794] EXT4-fs (loop1): 1 truncate cleaned up [ 459.515639][T12794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 459.655618][T12794] EXT4-fs: Ignoring removed oldalloc option [ 459.690798][T12794] EXT4-fs: can't change dax mount option while remounting [ 459.824401][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.054285][ T5778] Bluetooth: hci4: command tx timeout [ 460.693927][T12829] loop1: detected capacity change from 0 to 512 [ 460.724284][T12829] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 460.779552][T12829] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.2247: bad orphan inode 131083 [ 460.828499][T12829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.955095][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.028644][T12835] fuse: Unknown parameter 'fd0x0000000000000004' [ 461.200456][T12839] loop4: detected capacity change from 0 to 512 [ 461.218223][T12839] EXT4-fs (loop4): orphan cleanup on readonly fs [ 461.229480][T12839] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 461.238581][T12839] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 461.255384][T12839] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2251: attempt to clear invalid blocks 2 len 1 [ 461.275023][T12839] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2251: invalid indirect mapped block 1819239214 (level 0) [ 461.290300][T12839] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2251: invalid indirect mapped block 1819239214 (level 1) [ 461.322366][T12839] EXT4-fs (loop4): 1 truncate cleaned up [ 461.374375][T12839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 461.450467][T12839] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 461.461974][T12839] EXT4-fs error (device loop4): __ext4_remount:6756: comm syz.4.2251: Abort forced by user [ 461.477891][T12839] EXT4-fs (loop4): Remounting filesystem read-only [ 461.494528][T12839] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 461.585611][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.833726][T12859] loop4: detected capacity change from 0 to 256 [ 461.834460][T11431] hsr_slave_0: left promiscuous mode [ 461.861578][T12859] FAT-fs (loop4): Unrecognized mount option "n¨numtail" or missing value [ 461.871194][T11431] hsr_slave_1: left promiscuous mode [ 461.899391][T11431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.952260][T11431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.986875][T11431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.007776][T11431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.039381][T11431] bridge_slave_1: left promiscuous mode [ 462.061620][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.080946][T11431] bridge_slave_0: left allmulticast mode [ 462.131595][T11431] bridge_slave_0: left promiscuous mode [ 462.148105][ T5778] Bluetooth: hci4: command tx timeout [ 462.161348][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.254685][T11431] veth1_macvtap: left promiscuous mode [ 462.260504][T11431] veth0_macvtap: left promiscuous mode [ 462.266660][T11431] veth1_vlan: left promiscuous mode [ 462.272053][T11431] veth0_vlan: left promiscuous mode [ 462.469322][T11431] pimreg (unregistering): left allmulticast mode [ 463.106644][T11431] team0 (unregistering): Port device team_slave_1 removed [ 463.158310][T11431] team0 (unregistering): Port device team_slave_0 removed [ 463.205707][T11431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.259825][T11431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.628522][T11431] bond0 (unregistering): Released all slaves [ 463.725134][T11431] lo (unregistering): left allmulticast mode [ 463.924009][ T5813] IPVS: starting estimator thread 0... [ 464.098078][T12876] IPVS: using max 19 ests per chain, 45600 per kthread [ 464.257632][T12880] syzkaller0: entered promiscuous mode [ 464.428431][T12880] syzkaller0: entered allmulticast mode [ 464.596029][T12712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 464.862109][T12712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 465.138671][T12712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 465.156405][T12712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 465.714862][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.141684][T12712] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.173223][T12903] fuse: Unknown parameter 'fd0x0000000000000004' [ 466.223532][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.230747][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.316948][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.324210][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.681841][T12921] loop1: detected capacity change from 0 to 512 [ 466.741589][T12921] EXT4-fs (loop1): orphan cleanup on readonly fs [ 466.762676][T12921] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 466.793584][T12921] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 466.847895][T12921] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2264: attempt to clear invalid blocks 2 len 1 [ 466.955163][T12921] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2264: invalid indirect mapped block 1819239214 (level 0) [ 467.027075][T12934] syzkaller0: entered promiscuous mode [ 467.039979][T12921] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2264: invalid indirect mapped block 1819239214 (level 1) [ 467.079845][T12934] syzkaller0: entered allmulticast mode [ 467.133963][T12921] EXT4-fs (loop1): 1 truncate cleaned up [ 467.141161][T12921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.272549][T12921] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 467.319955][T12921] EXT4-fs error (device loop1): __ext4_remount:6756: comm syz.1.2264: Abort forced by user [ 467.368894][T12921] EXT4-fs (loop1): Remounting filesystem read-only [ 467.401311][T12921] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 467.493028][T12712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.507177][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.557525][T12950] loop4: detected capacity change from 0 to 512 [ 467.571885][T12950] EXT4-fs: Ignoring removed i_version option [ 467.607494][T12950] EXT4-fs: Ignoring removed oldalloc option [ 467.691805][T12950] EXT4-fs (loop4): Test dummy encryption mode enabled [ 467.745987][T12950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.791683][T12712] veth0_vlan: entered promiscuous mode [ 467.807913][T12712] veth1_vlan: entered promiscuous mode [ 467.890346][T12712] veth0_macvtap: entered promiscuous mode [ 467.976241][T12712] veth1_macvtap: entered promiscuous mode [ 468.009932][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.020579][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.218664][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.583604][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.636620][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.677605][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.731389][T12712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.775975][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.787800][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.797736][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.808257][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.818161][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.828736][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.853794][T12712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.901789][T12712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.918913][T12712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.930543][T12712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.939859][T12712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.990717][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.173546][ T4528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.211759][ T4528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.314740][T12975] loop4: detected capacity change from 0 to 256 [ 469.338307][T12975] FAT-fs (loop4): Unrecognized mount option "n¨numtail" or missing value [ 469.349404][T11431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.363517][T11431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.881555][T12993] syzkaller0: entered promiscuous mode [ 469.910838][T12993] syzkaller0: entered allmulticast mode [ 470.285689][T13004] loop0: detected capacity change from 0 to 512 [ 470.507956][T13012] loop2: detected capacity change from 0 to 512 [ 470.587464][T13012] EXT4-fs: Ignoring removed i_version option [ 470.630585][T13012] EXT4-fs: Ignoring removed oldalloc option [ 470.685333][T13012] EXT4-fs (loop2): Test dummy encryption mode enabled [ 471.084318][T13012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.651963][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.829979][T13056] loop1: detected capacity change from 0 to 512 [ 472.915449][T13056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 472.984828][T13056] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.2288: bad orphan inode 131083 [ 473.009205][T13063] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 473.022304][T13063] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 473.031936][T13056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.214578][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.415129][T13077] loop4: detected capacity change from 0 to 512 [ 473.428582][T13077] EXT4-fs (loop4): Test dummy encryption mode enabled [ 473.540841][T13077] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2295: inode has both inline data and extents flags [ 473.587990][T13077] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2295: couldn't read orphan inode 15 (err -117) [ 473.607816][T13077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.803243][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.517827][T13087] loop1: detected capacity change from 0 to 512 [ 474.567041][T13087] EXT4-fs (loop1): orphan cleanup on readonly fs [ 474.613192][T13087] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 474.651572][T13093] loop4: detected capacity change from 0 to 512 [ 474.659986][T13087] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 474.705478][T13093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 474.719478][T13087] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2299: attempt to clear invalid blocks 2 len 1 [ 474.779550][T13087] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2299: invalid indirect mapped block 1819239214 (level 0) [ 474.794292][T13093] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.2301: bad orphan inode 131083 [ 474.863547][T13093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.893226][T13087] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2299: invalid indirect mapped block 1819239214 (level 1) [ 475.004668][T13087] EXT4-fs (loop1): 1 truncate cleaned up [ 475.032847][T13087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 475.065427][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.090092][T13102] loop0: detected capacity change from 0 to 512 [ 475.135401][T13102] EXT4-fs: Ignoring removed bh option [ 475.142377][ T5778] Bluetooth: hci4: command 0x0405 tx timeout [ 475.183539][T13102] EXT4-fs: Ignoring removed mblk_io_submit option [ 475.217365][T13102] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 475.290409][T13102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.304558][T13102] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 475.320667][T13110] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 475.398778][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.496159][T12712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.772109][T13122] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 475.794562][T13122] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 475.969479][T13127] autofs4:pid:13127:autofs_fill_super: called with bogus options [ 476.116968][T13133] loop2: detected capacity change from 0 to 512 [ 476.176458][T13133] EXT4-fs (loop2): orphan cleanup on readonly fs [ 476.200533][T13133] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 476.231345][T13133] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 476.265987][T13133] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2314: attempt to clear invalid blocks 2 len 1 [ 476.286674][T13133] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2314: invalid indirect mapped block 1819239214 (level 0) [ 476.303230][T13133] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2314: invalid indirect mapped block 1819239214 (level 1) [ 476.320556][T13133] EXT4-fs (loop2): 1 truncate cleaned up [ 476.328722][T13133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 477.023984][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.223330][T13143] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 477.372867][T13149] overlayfs: missing 'lowerdir' [ 478.101388][T13162] loop1: detected capacity change from 0 to 256 [ 478.287185][T13162] FAT-fs (loop1): Directory bread(block 64) failed [ 478.294661][T13162] FAT-fs (loop1): Directory bread(block 65) failed [ 478.302065][T13162] FAT-fs (loop1): Directory bread(block 66) failed [ 478.308891][T13162] FAT-fs (loop1): Directory bread(block 67) failed [ 478.316110][T13162] FAT-fs (loop1): Directory bread(block 68) failed [ 478.322815][T13162] FAT-fs (loop1): Directory bread(block 69) failed [ 478.330000][T13162] FAT-fs (loop1): Directory bread(block 70) failed [ 478.336692][T13162] FAT-fs (loop1): Directory bread(block 71) failed [ 478.343831][T13162] FAT-fs (loop1): Directory bread(block 72) failed [ 478.350507][T13162] FAT-fs (loop1): Directory bread(block 73) failed [ 478.759584][T13166] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2324'. [ 478.952474][T13172] loop4: detected capacity change from 0 to 512 [ 479.010001][T13172] EXT4-fs (loop4): orphan cleanup on readonly fs [ 479.064522][T13172] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 479.087030][T13172] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 479.117247][T13172] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2326: attempt to clear invalid blocks 2 len 1 [ 479.156488][T13172] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2326: invalid indirect mapped block 1819239214 (level 0) [ 479.243085][T13172] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2326: invalid indirect mapped block 1819239214 (level 1) [ 479.291896][T13172] EXT4-fs (loop4): 1 truncate cleaned up [ 479.332126][T13172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.442849][T13181] overlayfs: missing 'lowerdir' [ 479.485745][T13183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 479.511731][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.313238][T13198] loop0: detected capacity change from 0 to 256 [ 481.057767][T13198] FAT-fs (loop0): Directory bread(block 64) failed [ 481.065189][T13198] FAT-fs (loop0): Directory bread(block 65) failed [ 481.071883][T13198] FAT-fs (loop0): Directory bread(block 66) failed [ 481.078572][T13198] FAT-fs (loop0): Directory bread(block 67) failed [ 481.085301][T13198] FAT-fs (loop0): Directory bread(block 68) failed [ 481.091883][T13198] FAT-fs (loop0): Directory bread(block 69) failed [ 481.098676][T13198] FAT-fs (loop0): Directory bread(block 70) failed [ 481.105368][T13198] FAT-fs (loop0): Directory bread(block 71) failed [ 481.112053][T13198] FAT-fs (loop0): Directory bread(block 72) failed [ 481.118720][T13198] FAT-fs (loop0): Directory bread(block 73) failed [ 481.241283][ T28] audit: type=1326 audit(1780652484.571:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.4.2337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819ce59 code=0x7ffc0000 [ 481.281009][T13197] syzkaller0: entered promiscuous mode [ 481.295615][T13197] syzkaller0: entered allmulticast mode [ 481.342977][ T28] audit: type=1326 audit(1780652484.601:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.4.2337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819ce59 code=0x7ffc0000 [ 481.380578][ T28] audit: type=1326 audit(1780652484.611:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.4.2337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8ec819ce59 code=0x7ffc0000 [ 481.409885][ T28] audit: type=1326 audit(1780652484.611:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.4.2337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819ce59 code=0x7ffc0000 [ 481.501661][ T28] audit: type=1326 audit(1780652484.611:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.4.2337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819ce59 code=0x7ffc0000 [ 481.700673][T13210] loop0: detected capacity change from 0 to 512 [ 481.745181][T13210] EXT4-fs (loop0): orphan cleanup on readonly fs [ 481.751610][T13210] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 481.792525][T13210] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 481.807526][T13210] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2340: attempt to clear invalid blocks 2 len 1 [ 481.831823][T13210] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2340: invalid indirect mapped block 1819239214 (level 0) [ 481.901484][T13210] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2340: invalid indirect mapped block 1819239214 (level 1) [ 481.949758][T13210] EXT4-fs (loop0): 1 truncate cleaned up [ 481.958437][T13210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 482.020961][T13214] overlayfs: missing 'lowerdir' [ 482.058884][T13210] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 482.132819][T13210] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.2340: Abort forced by user [ 482.168100][T13210] EXT4-fs (loop0): Remounting filesystem read-only [ 482.209180][T13210] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 482.290257][T12712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.419756][ T5778] Bluetooth: hci4: unexpected event for opcode 0x0c56 [ 483.536235][T13245] loop0: detected capacity change from 0 to 256 [ 483.762449][T13249] overlayfs: missing 'workdir' [ 484.054112][T13256] loop0: detected capacity change from 0 to 512 [ 484.070262][T13256] EXT4-fs: Ignoring removed i_version option [ 484.106241][T13256] EXT4-fs: Ignoring removed oldalloc option [ 484.148674][T13256] EXT4-fs (loop0): Test dummy encryption mode enabled [ 484.175332][T13256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.300905][T12712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.683573][T13295] loop1: detected capacity change from 0 to 512 [ 487.691593][T13295] EXT4-fs: Ignoring removed i_version option [ 487.807807][T13296] loop4: detected capacity change from 0 to 256 [ 487.904872][T13296] FAT-fs (loop4): Directory bread(block 64) failed [ 487.911718][T13296] FAT-fs (loop4): Directory bread(block 65) failed [ 487.919991][T13296] FAT-fs (loop4): Directory bread(block 66) failed [ 487.926980][T13296] FAT-fs (loop4): Directory bread(block 67) failed [ 487.934661][T13296] FAT-fs (loop4): Directory bread(block 68) failed [ 487.941431][T13296] FAT-fs (loop4): Directory bread(block 69) failed [ 487.948768][T13296] FAT-fs (loop4): Directory bread(block 70) failed [ 487.955566][T13296] FAT-fs (loop4): Directory bread(block 71) failed [ 487.962899][T13296] FAT-fs (loop4): Directory bread(block 72) failed [ 487.969650][T13296] FAT-fs (loop4): Directory bread(block 73) failed [ 488.342258][T13295] EXT4-fs: Ignoring removed oldalloc option [ 488.459020][T13299] syzkaller0: entered promiscuous mode [ 488.488993][T13295] EXT4-fs (loop1): Test dummy encryption mode enabled [ 488.501050][T13299] syzkaller0: entered allmulticast mode [ 488.554172][T13299] tipc: Enabled bearer , priority 0 [ 488.570745][T13295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.620826][T13299] tipc: Resetting bearer [ 488.647396][T13298] tipc: Resetting bearer [ 488.763162][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.773180][T13298] tipc: Disabling bearer [ 488.885383][T13310] syzkaller0: entered promiscuous mode [ 488.899026][T13310] syzkaller0: entered allmulticast mode [ 488.940591][T13313] syzkaller0: entered promiscuous mode [ 488.947222][T13313] syzkaller0: entered allmulticast mode [ 490.609279][T13323] loop0: detected capacity change from 0 to 256 [ 490.634414][T13323] FAT-fs (loop0): Unrecognized mount option "n¨numtail" or missing value [ 492.979745][T13327] vlan2: entered promiscuous mode [ 492.991320][T13327] vlan2: entered allmulticast mode [ 493.005320][T13327] hsr_slave_1: entered allmulticast mode [ 493.118619][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 493.136093][T13327] hsr_slave_0: left promiscuous mode [ 493.463340][T13340] loop4: detected capacity change from 0 to 512 [ 493.470674][T13340] EXT4-fs: Ignoring removed i_version option [ 493.477064][T13340] EXT4-fs: Ignoring removed oldalloc option [ 493.508329][T13340] EXT4-fs (loop4): Test dummy encryption mode enabled [ 493.534332][T13340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.621192][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.049064][T13350] syzkaller0: entered promiscuous mode [ 494.070682][T13350] syzkaller0: entered allmulticast mode [ 494.540260][T13374] loop1: detected capacity change from 0 to 512 [ 494.563392][T13374] EXT4-fs: Ignoring removed i_version option [ 494.582378][T13374] EXT4-fs: Ignoring removed oldalloc option [ 494.606177][T13374] EXT4-fs (loop1): Test dummy encryption mode enabled [ 494.634524][T13374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.869659][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.271913][T13371] syzkaller0: entered promiscuous mode [ 497.277485][T13371] syzkaller0: entered allmulticast mode [ 497.554733][T13410] loop4: detected capacity change from 0 to 2048 [ 497.773790][T13410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.512068][ T28] audit: type=1800 audit(1780652501.841:143): pid=13410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2399" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 498.616053][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.057014][T13434] vlan2: entered promiscuous mode [ 501.062519][T13434] vlan2: entered allmulticast mode [ 501.067685][T13434] hsr_slave_1: entered allmulticast mode [ 501.087733][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 501.112377][T13436] hsr_slave_0: left promiscuous mode [ 501.658560][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.665666][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.889692][T13479] syzkaller0: entered promiscuous mode [ 502.916264][T13479] syzkaller0: entered allmulticast mode [ 503.219149][T13491] syzkaller0: entered promiscuous mode [ 503.226076][T13491] syzkaller0: entered allmulticast mode [ 504.944814][T13515] loop2: detected capacity change from 0 to 2048 [ 505.023938][T13515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.101951][T13521] loop4: detected capacity change from 0 to 256 [ 505.137354][T13521] FAT-fs (loop4): Unrecognized mount option "n¨numtail" or missing value [ 505.446577][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.054725][T13546] loop2: detected capacity change from 0 to 1024 [ 506.118687][T13546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 506.162467][T13546] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.221879][T13546] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.2434: lblock 3 mapped to illegal pblock 3 (length 3) [ 506.261459][T13546] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 506.300798][T13546] EXT4-fs (loop2): This should not happen!! Data will be lost [ 506.300798][T13546] [ 506.372040][T11421] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:16: lblock 8 mapped to illegal pblock 8 (length 8) [ 506.404563][T11421] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 506.417416][T11421] EXT4-fs (loop2): This should not happen!! Data will be lost [ 506.417416][T11421] [ 506.438444][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 508.540483][T13575] autofs4:pid:13575:autofs_fill_super: called with bogus options [ 509.292734][T13585] netlink: 'syz.4.2447': attribute type 12 has an invalid length. [ 509.300644][T13585] netlink: 'syz.4.2447': attribute type 29 has an invalid length. [ 509.343204][T13585] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2447'. [ 509.364536][T13585] netlink: 'syz.4.2447': attribute type 1 has an invalid length. [ 509.385610][T13585] netlink: 'syz.4.2447': attribute type 1 has an invalid length. [ 509.407817][T13585] netlink: 'syz.4.2447': attribute type 2 has an invalid length. [ 509.434725][T13588] netlink: 'syz.4.2447': attribute type 12 has an invalid length. [ 509.451413][T13588] netlink: 'syz.4.2447': attribute type 29 has an invalid length. [ 509.482317][T13588] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2447'. [ 509.506186][T13588] netlink: 'syz.4.2447': attribute type 1 has an invalid length. [ 509.522981][T13588] netlink: 'syz.4.2447': attribute type 1 has an invalid length. [ 509.542378][T13588] netlink: 'syz.4.2447': attribute type 2 has an invalid length. [ 509.753267][T13591] syzkaller0: entered promiscuous mode [ 509.769061][T13591] syzkaller0: entered allmulticast mode [ 509.953070][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 509.971273][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 509.980873][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 510.013371][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 510.031107][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 510.040985][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.089801][ T6181] syz_tun (unregistering): left allmulticast mode [ 510.189894][T13599] autofs4:pid:13599:autofs_fill_super: called with bogus options [ 511.470063][T13596] chnl_net:caif_netlink_parms(): no params data found [ 511.549348][T13623] loop4: detected capacity change from 0 to 512 [ 511.563344][T13623] EXT4-fs: Ignoring removed i_version option [ 511.582601][T13623] EXT4-fs: Ignoring removed oldalloc option [ 511.655104][T13623] EXT4-fs (loop4): Test dummy encryption mode enabled [ 511.703783][T13623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.870463][T13596] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.879730][T13596] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.887289][T13596] bridge_slave_0: entered allmulticast mode [ 511.896805][T13596] bridge_slave_0: entered promiscuous mode [ 511.908031][T13596] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.920683][T13596] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.928072][T13596] bridge_slave_1: entered allmulticast mode [ 511.936071][T13596] bridge_slave_1: entered promiscuous mode [ 511.982893][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.995808][T13634] syzkaller0: entered promiscuous mode [ 512.001352][T13634] syzkaller0: entered allmulticast mode [ 512.021337][T13596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.113409][T13596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.142374][ T5782] Bluetooth: hci1: command tx timeout [ 512.161684][T13596] team0: Port device team_slave_0 added [ 512.175359][T13596] team0: Port device team_slave_1 added [ 512.267377][T13596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.302817][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.349036][T13596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.363011][T13596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.370199][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.418535][T13596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.430107][T13642] autofs4:pid:13642:autofs_fill_super: called with bogus options [ 512.505439][T13596] hsr_slave_0: entered promiscuous mode [ 512.513347][T13596] hsr_slave_1: entered promiscuous mode [ 513.823930][T13596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.822583][ T5782] Bluetooth: hci1: command tx timeout [ 515.348848][T13596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.558055][T13596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.669589][T13663] loop0: detected capacity change from 0 to 512 [ 515.678995][T13596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.692443][T13663] EXT4-fs: Ignoring removed i_version option [ 515.698558][T13663] EXT4-fs: Ignoring removed oldalloc option [ 515.727094][T13663] EXT4-fs (loop0): Test dummy encryption mode enabled [ 515.761426][T13663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.971753][T12712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.000559][T13596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 516.016703][T13596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 516.038347][T13596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 516.066656][T13596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.219835][T13672] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2470'. [ 516.259528][T13670] syzkaller0: entered promiscuous mode [ 516.272345][T13670] syzkaller0: entered allmulticast mode [ 516.438663][T13674] autofs4:pid:13674:autofs_fill_super: called with bogus options [ 516.504415][T13596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.590255][T13596] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.639607][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.646886][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.667983][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.675260][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.853062][ T5782] Bluetooth: hci1: command tx timeout [ 517.158369][T13596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.290687][T13596] veth0_vlan: entered promiscuous mode [ 517.327700][T13596] veth1_vlan: entered promiscuous mode [ 517.406303][T13596] veth0_macvtap: entered promiscuous mode [ 517.435435][T13596] veth1_macvtap: entered promiscuous mode [ 517.494509][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.522490][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.552250][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.568968][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.579752][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.590678][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.606592][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.619770][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.651796][T13596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.686206][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.697757][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.708268][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.720626][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.736393][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.748767][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.765633][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.779754][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.797508][T13596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.869396][T13596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.912064][T13596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.942439][T13596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.967325][T13596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.142810][T13708] syzkaller0: entered promiscuous mode [ 518.148377][T13708] syzkaller0: entered allmulticast mode [ 518.278560][T13710] autofs4:pid:13710:autofs_fill_super: called with bogus options [ 518.375137][T11422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.397619][T11422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.619526][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.659532][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.932769][ T5782] Bluetooth: hci1: command tx timeout [ 519.059465][T13735] autofs4:pid:13735:autofs_fill_super: called with bogus options [ 519.308598][T13744] syzkaller0: entered promiscuous mode [ 519.314335][T13744] syzkaller0: entered allmulticast mode [ 520.357983][T13762] autofs4:pid:13762:autofs_fill_super: called with bogus options [ 520.616252][T13767] syzkaller0: entered promiscuous mode [ 520.643369][T13767] syzkaller0: entered allmulticast mode [ 520.964581][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 520.974320][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 520.984430][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.005343][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.042334][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 521.051456][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.191255][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.324630][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.515549][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.586420][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.861698][T13774] chnl_net:caif_netlink_parms(): no params data found [ 521.920150][ T67] tipc: Left network mode [ 522.054364][T13797] autofs4:pid:13797:autofs_fill_super: called with bogus options [ 522.192454][T13802] loop4: detected capacity change from 0 to 256 [ 522.214471][T13802] FAT-fs (loop4): Unrecognized mount option "n¨numtail" or missing value [ 522.382482][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.430439][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.477012][T13774] bridge_slave_0: entered allmulticast mode [ 522.525778][T13774] bridge_slave_0: entered promiscuous mode [ 522.629217][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.654605][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.661962][T13774] bridge_slave_1: entered allmulticast mode [ 522.681822][T13774] bridge_slave_1: entered promiscuous mode [ 522.848488][T13774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.899736][T13810] syzkaller0: entered promiscuous mode [ 522.912228][T13810] syzkaller0: entered allmulticast mode [ 522.925800][T13774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.079078][T13774] team0: Port device team_slave_0 added [ 523.092741][ T5782] Bluetooth: hci0: command tx timeout [ 523.447899][T13774] team0: Port device team_slave_1 added [ 524.630537][T13774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.665292][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.691302][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.749240][T13774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.847730][T13774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.862951][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.946217][T13774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.172235][ T5782] Bluetooth: hci0: command tx timeout [ 525.301135][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.343362][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.394655][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.430703][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.479629][ T67] bridge_slave_1: left promiscuous mode [ 525.519586][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.644803][ T67] bridge_slave_0: left allmulticast mode [ 525.650531][ T67] bridge_slave_0: left promiscuous mode [ 525.686261][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.929563][T13847] autofs4:pid:13847:autofs_fill_super: called with bogus options [ 526.264563][ T67] veth1_macvtap: left promiscuous mode [ 526.402016][ T67] veth0_macvtap: left promiscuous mode [ 526.668517][ T67] veth1_vlan: left promiscuous mode [ 526.692760][ T67] veth0_vlan: left promiscuous mode [ 527.256919][ T5782] Bluetooth: hci0: command tx timeout [ 527.356790][T13865] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2523'. [ 527.885986][ T67] pimreg (unregistering): left allmulticast mode [ 528.950817][ T67] team0 (unregistering): Port device team_slave_1 removed [ 529.001504][ T67] team0 (unregistering): Port device team_slave_0 removed [ 529.058681][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.157770][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.333513][ T5782] Bluetooth: hci0: command tx timeout [ 529.421162][T13899] autofs4:pid:13899:autofs_fill_super: called with bogus options [ 529.862933][ T67] bond0 (unregistering): Released all slaves [ 529.977181][T13774] hsr_slave_0: entered promiscuous mode [ 529.984128][T13774] hsr_slave_1: entered promiscuous mode [ 529.990604][T13774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.998832][T13774] Cannot create hsr debugfs directory [ 530.046929][T13908] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2533'. [ 530.768846][ T67] IPVS: stop unused estimator thread 0... [ 531.795797][T13938] autofs4:pid:13938:autofs_fill_super: called with bogus options [ 532.347642][T13954] syzkaller0: entered promiscuous mode [ 532.354751][T13954] syzkaller0: entered allmulticast mode [ 532.458779][T13774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 532.506520][T13774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 532.525104][T13958] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2544'. [ 532.536753][T13774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 532.557710][T13774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 532.886078][T13774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.908682][T13774] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.925562][T11416] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.932792][T11416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.177526][T11416] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.184858][T11416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.580832][T13774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.888535][T13976] autofs4:pid:13976:autofs_fill_super: called with bogus options [ 535.481572][T13987] syzkaller0: entered promiscuous mode [ 535.516733][T13987] syzkaller0: entered allmulticast mode [ 538.597692][T14010] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2554'. [ 538.717415][T14018] syzkaller0: entered promiscuous mode [ 538.743855][T14018] syzkaller0: entered allmulticast mode [ 539.639183][T14031] autofs4:pid:14031:autofs_fill_super: called with bogus options [ 541.858067][T13774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.034912][T13774] veth0_vlan: entered promiscuous mode [ 542.076303][T13774] veth1_vlan: entered promiscuous mode [ 542.727874][T13774] veth0_macvtap: entered promiscuous mode [ 544.057639][T13774] veth1_macvtap: entered promiscuous mode [ 544.166374][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.207165][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.238790][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.265743][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.288777][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.326603][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.365654][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.407374][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.447598][T13774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.491508][T14064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2562'. [ 544.576028][T14064] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 544.641519][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.727919][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.776583][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.063089][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.078736][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.375352][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.755771][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.035638][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.227817][T13774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.311356][T13774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.412339][T13774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.462075][T13774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.471017][T13774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.744661][T14090] syzkaller0: entered promiscuous mode [ 546.750240][T14090] syzkaller0: entered allmulticast mode [ 546.957163][T14099] autofs4:pid:14099:autofs_fill_super: called with bogus options [ 552.006932][T14146] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2572'. [ 552.233851][T14150] loop4: detected capacity change from 0 to 2048 [ 552.247084][ T795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.255428][ T795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.271513][T14150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.319382][T14150] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.384612][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.423307][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.351747][T14161] fs-verity: sha256 using implementation "sha256-avx2" [ 553.958601][T14157] autofs4:pid:14157:autofs_fill_super: called with bogus options [ 554.085454][T14165] loop0: detected capacity change from 0 to 512 [ 554.174218][T14165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 554.180904][T14165] EXT4-fs: Ignoring removed bh option [ 554.332045][T14165] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 554.434678][T14165] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #11: comm syz.0.2576: corrupted inode contents [ 554.513337][T14165] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #11: comm syz.0.2576: mark_inode_dirty error [ 554.556719][T14165] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2576: invalid indirect mapped block 1 (level 1) [ 554.646259][T14165] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #11: comm syz.0.2576: corrupted inode contents [ 554.677793][T14165] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 554.709916][T14165] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #11: comm syz.0.2576: corrupted inode contents [ 554.736260][T14175] loop2: detected capacity change from 0 to 512 [ 554.748999][T14165] EXT4-fs error (device loop0): ext4_truncate:4301: inode #11: comm syz.0.2576: mark_inode_dirty error [ 554.779703][T14175] EXT4-fs: Ignoring removed i_version option [ 554.800092][T14175] EXT4-fs: Ignoring removed oldalloc option [ 554.823810][T14165] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 554.855998][T14165] EXT4-fs (loop0): 1 truncate cleaned up [ 554.863979][T14175] EXT4-fs (loop2): Test dummy encryption mode enabled [ 554.880019][T14165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.963040][T14175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.995228][T14165] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.2576: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 555.210071][T12712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.271489][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.475800][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.534059][T14178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2580'. [ 557.006425][T14185] syzkaller0: entered promiscuous mode [ 557.062968][T14185] syzkaller0: entered allmulticast mode [ 558.136183][T14206] loop0: detected capacity change from 0 to 512 [ 558.174876][T14206] EXT4-fs: Ignoring removed i_version option [ 558.181006][T14206] EXT4-fs: Ignoring removed oldalloc option [ 558.279309][T14206] EXT4-fs (loop0): Test dummy encryption mode enabled [ 558.308621][T14206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.366051][T14210] loop2: detected capacity change from 0 to 2048 [ 558.417929][T14210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.453097][T14210] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.723875][T12712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.865114][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.106228][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.120863][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.429327][T14216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2592'. [ 563.538721][T14239] syzkaller0: entered promiscuous mode [ 563.601952][T14239] syzkaller0: entered allmulticast mode [ 563.729534][T14245] loop0: detected capacity change from 0 to 512 [ 563.749593][T14245] EXT4-fs: Ignoring removed i_version option [ 563.765680][T14245] EXT4-fs: Ignoring removed oldalloc option [ 563.794417][T14245] EXT4-fs (loop0): Test dummy encryption mode enabled [ 564.003283][T14245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.642873][T14245] overlayfs: failed to resolve './bus': -2 [ 564.864454][T12712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.172271][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 565.929009][T14268] syzkaller0: entered promiscuous mode [ 565.970997][T14268] syzkaller0: entered allmulticast mode [ 569.205847][T14276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2610'. [ 569.215900][T14276] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 569.390193][T14306] loop4: detected capacity change from 0 to 512 [ 569.444557][T14306] EXT4-fs: Ignoring removed i_version option [ 569.456743][T14306] EXT4-fs: Ignoring removed oldalloc option [ 569.479371][T14306] EXT4-fs (loop4): Test dummy encryption mode enabled [ 569.529460][T14306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.613681][T14306] overlayfs: failed to resolve './bus': -2 [ 569.796688][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.022469][T14336] syzkaller0: entered promiscuous mode [ 571.041458][T14336] syzkaller0: entered allmulticast mode [ 571.481082][T14361] loop1: detected capacity change from 0 to 512 [ 571.504999][T14361] EXT4-fs: Ignoring removed i_version option [ 571.538424][T14361] EXT4-fs: Ignoring removed oldalloc option [ 571.573717][T14361] EXT4-fs (loop1): Test dummy encryption mode enabled [ 571.604642][T14361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.738674][T14361] overlayfs: failed to resolve './bus': -2 [ 571.852542][T13774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.193262][T14399] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2641'. [ 575.212709][T14399] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 575.339213][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'. [ 575.666095][T14411] loop0: detected capacity change from 0 to 2048 [ 575.744437][T14411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.884953][T14409] syzkaller0: entered promiscuous mode [ 575.916772][T14409] syzkaller0: entered allmulticast mode [ 577.492541][T14430] autofs4:pid:14430:autofs_fill_super: called with bogus options [ 578.389460][T14446] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11169] was attempted by " [ 579.663549][T14414] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 579.758143][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.323592][T12712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.542662][ T5778] Bluetooth: hci4: command 0x0405 tx timeout [ 580.717489][T14476] loop2: detected capacity change from 0 to 1024 [ 580.746506][T14478] autofs4:pid:14478:autofs_fill_super: called with bogus options [ 580.766382][T14476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 581.182531][T14487] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13774] was attempted by " [ 581.184627][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.363143][T14491] loop0: detected capacity change from 0 to 1024 [ 581.444540][T14493] loop2: detected capacity change from 0 to 256 [ 581.461622][T14491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.543805][T14493] FAT-fs (loop2): Directory bread(block 64) failed [ 581.554720][T14493] FAT-fs (loop2): Directory bread(block 65) failed [ 581.587620][T14493] FAT-fs (loop2): Directory bread(block 66) failed [ 581.596266][T14493] FAT-fs (loop2): Directory bread(block 67) failed [ 581.612568][T14493] FAT-fs (loop2): Directory bread(block 68) failed [ 581.639834][T14493] FAT-fs (loop2): Directory bread(block 69) failed [ 581.656064][T12712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.671835][T14493] FAT-fs (loop2): Directory bread(block 70) failed [ 581.682534][T14498] syzkaller0: entered promiscuous mode [ 581.688192][T14498] syzkaller0: entered allmulticast mode [ 581.696324][T14493] FAT-fs (loop2): Directory bread(block 71) failed [ 581.708540][T14493] FAT-fs (loop2): Directory bread(block 72) failed [ 581.716426][T14493] FAT-fs (loop2): Directory bread(block 73) failed [ 583.063452][T14513] autofs4:pid:14513:autofs_fill_super: called with bogus options [ 583.618203][T14522] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13596] was attempted by " [ 585.187038][T14528] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 585.648348][T14538] loop4: detected capacity change from 0 to 256 [ 586.070168][T14538] FAT-fs (loop4): Directory bread(block 64) failed [ 586.214692][T14538] FAT-fs (loop4): Directory bread(block 65) failed [ 586.390661][T14538] FAT-fs (loop4): Directory bread(block 66) failed [ 586.416420][T14538] FAT-fs (loop4): Directory bread(block 67) failed [ 586.458682][T14545] loop0: detected capacity change from 0 to 256 [ 586.465534][T14538] FAT-fs (loop4): Directory bread(block 68) failed [ 586.489661][T14538] FAT-fs (loop4): Directory bread(block 69) failed [ 586.537815][T14538] FAT-fs (loop4): Directory bread(block 70) failed [ 586.659496][T14538] FAT-fs (loop4): Directory bread(block 71) failed [ 586.711784][T14538] FAT-fs (loop4): Directory bread(block 72) failed [ 586.779570][T14538] FAT-fs (loop4): Directory bread(block 73) failed [ 587.612621][T14553] syzkaller0: entered promiscuous mode [ 587.618196][T14553] syzkaller0: entered allmulticast mode [ 587.629991][T14556] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 587.664039][T14556] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 587.901720][T14564] loop1: detected capacity change from 0 to 512 [ 587.926222][T14564] EXT4-fs: Ignoring removed i_version option [ 587.962763][T14564] EXT4-fs: Ignoring removed oldalloc option [ 587.983403][T14564] EXT4-fs (loop1): Test dummy encryption mode enabled [ 588.004496][T14564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.192889][T13774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.598317][T14579] loop1: detected capacity change from 0 to 256 [ 589.619382][T14579] FAT-fs (loop1): Unrecognized mount option "n¨numtail" or missing value [ 590.848976][T14588] loop1: detected capacity change from 0 to 256 [ 590.914575][T14588] FAT-fs (loop1): Directory bread(block 64) failed [ 590.924704][T14588] FAT-fs (loop1): Directory bread(block 65) failed [ 590.937593][T14588] FAT-fs (loop1): Directory bread(block 66) failed [ 590.944817][T14588] FAT-fs (loop1): Directory bread(block 67) failed [ 590.951831][T14588] FAT-fs (loop1): Directory bread(block 68) failed [ 590.959115][T14588] FAT-fs (loop1): Directory bread(block 69) failed [ 590.966501][T14588] FAT-fs (loop1): Directory bread(block 70) failed [ 590.975149][T14588] FAT-fs (loop1): Directory bread(block 71) failed [ 590.981940][T14588] FAT-fs (loop1): Directory bread(block 72) failed [ 590.989165][T14588] FAT-fs (loop1): Directory bread(block 73) failed [ 591.322796][T14592] loop1: detected capacity change from 0 to 512 [ 591.333897][T14592] EXT4-fs: Ignoring removed i_version option [ 591.351432][T14592] EXT4-fs: Ignoring removed oldalloc option [ 591.364637][T14592] EXT4-fs (loop1): Test dummy encryption mode enabled [ 591.385893][T14592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.592103][T13774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.770754][ T5782] Bluetooth: hci0: link tx timeout [ 592.788821][ T5782] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 593.046853][T14606] loop1: detected capacity change from 0 to 256 [ 593.073487][T14606] FAT-fs (loop1): Unrecognized mount option "n¨numtail" or missing value [ 593.137414][T11273] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 593.326265][T14612] loop4: detected capacity change from 0 to 256 [ 593.537454][T14612] FAT-fs (loop4): Directory bread(block 64) failed [ 593.726056][T14612] FAT-fs (loop4): Directory bread(block 65) failed [ 593.880858][T14612] FAT-fs (loop4): Directory bread(block 66) failed [ 593.928541][T14612] FAT-fs (loop4): Directory bread(block 67) failed [ 593.982751][T14612] FAT-fs (loop4): Directory bread(block 68) failed [ 593.989373][T14612] FAT-fs (loop4): Directory bread(block 69) failed [ 594.085956][T14612] FAT-fs (loop4): Directory bread(block 70) failed [ 594.129903][T14612] FAT-fs (loop4): Directory bread(block 71) failed [ 594.168261][T14612] FAT-fs (loop4): Directory bread(block 72) failed [ 594.180062][T14612] FAT-fs (loop4): Directory bread(block 73) failed [ 594.428597][T14621] loop2: detected capacity change from 0 to 512 [ 594.463600][T14621] EXT4-fs: Ignoring removed i_version option [ 594.469729][T14621] EXT4-fs: Ignoring removed oldalloc option [ 594.903982][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 595.024332][T14621] EXT4-fs (loop2): Test dummy encryption mode enabled [ 595.438786][T14627] loop4: detected capacity change from 0 to 2048 [ 595.503235][T14627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.504424][T14621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.789296][T14638] syzkaller0: entered promiscuous mode [ 595.798051][T14638] syzkaller0: entered allmulticast mode [ 595.862796][ T28] audit: type=1800 audit(1780652599.191:144): pid=14627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2716" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 595.924330][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.991234][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.259529][T14653] loop0: detected capacity change from 0 to 256 [ 596.279901][T14653] FAT-fs (loop0): Unrecognized mount option "n¨numtail" or missing value [ 596.547004][T14657] loop2: detected capacity change from 0 to 256 [ 597.030752][T14657] FAT-fs (loop2): Directory bread(block 64) failed [ 597.099700][T14657] FAT-fs (loop2): Directory bread(block 65) failed [ 597.137132][T14657] FAT-fs (loop2): Directory bread(block 66) failed [ 597.167682][T14657] FAT-fs (loop2): Directory bread(block 67) failed [ 597.212398][T14657] FAT-fs (loop2): Directory bread(block 68) failed [ 597.252368][T14657] FAT-fs (loop2): Directory bread(block 69) failed [ 597.259128][T14657] FAT-fs (loop2): Directory bread(block 70) failed [ 597.306900][T14657] FAT-fs (loop2): Directory bread(block 71) failed [ 597.330522][T14657] FAT-fs (loop2): Directory bread(block 72) failed [ 597.347926][T14657] FAT-fs (loop2): Directory bread(block 73) failed [ 597.413820][T14662] loop0: detected capacity change from 0 to 512 [ 597.474991][T14662] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2726: inode has both inline data and extents flags [ 597.538262][T14662] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2726: couldn't read orphan inode 15 (err -117) [ 597.596939][T14662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.763062][T14662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.572594][T14677] loop0: detected capacity change from 0 to 2048 [ 599.641755][T14677] loop0: p1 p2 p3 p4 [ 599.641755][T14677] p1: [ 599.654000][T14677] loop0: p1 size 16779263 extends beyond EOD, truncated [ 599.675064][T14677] loop0: p2 size 458752 extends beyond EOD, truncated [ 599.692862][T14677] loop0: p3 start 3036676096 is beyond EOD, truncated [ 599.699805][T14677] loop0: p4 start 100663296 is beyond EOD, truncated [ 607.551508][T14765] loop1: detected capacity change from 0 to 256 [ 607.642045][T14768] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 607.654423][T14768] binder: 14766:14768 ioctl 4018620d 200000000100 returned -1 [ 607.680432][T14765] FAT-fs (loop1): Directory bread(block 64) failed [ 607.700597][T14765] FAT-fs (loop1): Directory bread(block 65) failed [ 607.719726][T14765] FAT-fs (loop1): Directory bread(block 66) failed [ 607.729227][T14765] FAT-fs (loop1): Directory bread(block 67) failed [ 607.736533][T14765] FAT-fs (loop1): Directory bread(block 68) failed [ 607.744584][T14765] FAT-fs (loop1): Directory bread(block 69) failed [ 607.751559][T14765] FAT-fs (loop1): Directory bread(block 70) failed [ 607.761826][T14765] FAT-fs (loop1): Directory bread(block 71) failed [ 607.788713][T14765] FAT-fs (loop1): Directory bread(block 72) failed [ 607.799341][T14765] FAT-fs (loop1): Directory bread(block 73) failed [ 608.226807][T14778] loop2: detected capacity change from 0 to 256 [ 608.244655][T14778] FAT-fs (loop2): Unrecognized mount option "n¨numtail" or missing value [ 609.358214][T14794] loop2: detected capacity change from 0 to 256 [ 609.493395][T14794] FAT-fs (loop2): Directory bread(block 64) failed [ 609.531420][T14794] FAT-fs (loop2): Directory bread(block 65) failed [ 609.562512][T14794] FAT-fs (loop2): Directory bread(block 66) failed [ 609.583723][T14794] FAT-fs (loop2): Directory bread(block 67) failed [ 609.593973][T14794] FAT-fs (loop2): Directory bread(block 68) failed [ 609.600605][T14794] FAT-fs (loop2): Directory bread(block 69) failed [ 609.622337][T14794] FAT-fs (loop2): Directory bread(block 70) failed [ 609.639199][T14794] FAT-fs (loop2): Directory bread(block 71) failed [ 609.651756][T14794] FAT-fs (loop2): Directory bread(block 72) failed [ 609.685640][T14794] FAT-fs (loop2): Directory bread(block 73) failed [ 609.905765][T14797] loop1: detected capacity change from 0 to 2048 [ 610.053361][T14797] loop1: p1 p2 p3 p4 [ 610.053361][T14797] p1: [ 610.063852][T14797] loop1: p1 size 16779263 extends beyond EOD, truncated [ 610.085201][T14797] loop1: p2 size 458752 extends beyond EOD, truncated [ 610.101107][T14797] loop1: p3 start 3036676096 is beyond EOD, truncated [ 610.108134][T14797] loop1: p4 start 100663296 is beyond EOD, truncated [ 610.945509][T14803] overlayfs: failed to verify origin (142/file1, ino=780, err=-61) [ 610.964323][T11273] udevd[11273]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 611.604746][T14818] syzkaller0: entered promiscuous mode [ 611.626283][T14818] syzkaller0: entered allmulticast mode [ 612.558377][T14826] loop2: detected capacity change from 0 to 256 [ 612.767768][T14826] FAT-fs (loop2): Directory bread(block 64) failed [ 612.798673][T14826] FAT-fs (loop2): Directory bread(block 65) failed [ 612.836217][T14826] FAT-fs (loop2): Directory bread(block 66) failed [ 612.872262][T14826] FAT-fs (loop2): Directory bread(block 67) failed [ 612.879006][T14826] FAT-fs (loop2): Directory bread(block 68) failed [ 612.912406][T14826] FAT-fs (loop2): Directory bread(block 69) failed [ 612.925596][T14826] FAT-fs (loop2): Directory bread(block 70) failed [ 612.932714][T14826] FAT-fs (loop2): Directory bread(block 71) failed [ 612.939435][T14826] FAT-fs (loop2): Directory bread(block 72) failed [ 612.946704][T14826] FAT-fs (loop2): Directory bread(block 73) failed [ 614.373176][T14859] syzkaller0: entered promiscuous mode [ 614.386705][T14859] syzkaller0: entered allmulticast mode [ 614.652584][T14866] loop1: detected capacity change from 0 to 256 [ 614.704630][T14866] FAT-fs (loop1): Directory bread(block 64) failed [ 614.711634][T14866] FAT-fs (loop1): Directory bread(block 65) failed [ 614.719321][T14866] FAT-fs (loop1): Directory bread(block 66) failed [ 614.726229][T14866] FAT-fs (loop1): Directory bread(block 67) failed [ 614.733676][T14866] FAT-fs (loop1): Directory bread(block 68) failed [ 614.740539][T14866] FAT-fs (loop1): Directory bread(block 69) failed [ 614.772469][T14868] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 4, id = 0 [ 614.784669][T14866] FAT-fs (loop1): Directory bread(block 70) failed [ 615.572452][T14866] FAT-fs (loop1): Directory bread(block 71) failed [ 615.637580][T14866] FAT-fs (loop1): Directory bread(block 72) failed [ 615.672437][T14866] FAT-fs (loop1): Directory bread(block 73) failed [ 615.949767][ T28] audit: type=1800 audit(1780652619.281:145): pid=14872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2806" name="/newroot/266/file0" dev="tmpfs" ino=1457 res=0 errno=0 [ 617.490853][T14905] syzkaller0: entered promiscuous mode [ 617.498320][T14909] loop1: detected capacity change from 0 to 256 [ 617.512366][T14905] syzkaller0: entered allmulticast mode [ 617.609950][T14909] FAT-fs (loop1): Directory bread(block 64) failed [ 617.640892][T14909] FAT-fs (loop1): Directory bread(block 65) failed [ 617.660978][T14909] FAT-fs (loop1): Directory bread(block 66) failed [ 617.679520][T14909] FAT-fs (loop1): Directory bread(block 67) failed [ 617.697200][T14909] FAT-fs (loop1): Directory bread(block 68) failed [ 617.724718][T14909] FAT-fs (loop1): Directory bread(block 69) failed [ 617.738276][T14909] FAT-fs (loop1): Directory bread(block 70) failed [ 617.749491][T14909] FAT-fs (loop1): Directory bread(block 71) failed [ 617.758086][T14909] FAT-fs (loop1): Directory bread(block 72) failed [ 617.788312][T14909] FAT-fs (loop1): Directory bread(block 73) failed [ 617.928284][T14914] loop4: detected capacity change from 0 to 512 [ 617.968077][T14914] EXT4-fs: Ignoring removed i_version option [ 617.998015][T14914] EXT4-fs: Ignoring removed oldalloc option [ 618.036426][T14914] EXT4-fs (loop4): Test dummy encryption mode enabled [ 618.110854][T14914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.518147][T14914] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 619.313672][T14914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 619.433353][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.800686][T14937] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 619.932892][T14941] syzkaller0: entered promiscuous mode [ 619.946537][T14941] syzkaller0: entered allmulticast mode [ 620.167342][T14948] loop0: detected capacity change from 0 to 256 [ 620.287209][T14948] FAT-fs (loop0): Directory bread(block 64) failed [ 620.319085][T14948] FAT-fs (loop0): Directory bread(block 65) failed [ 620.348897][T14948] FAT-fs (loop0): Directory bread(block 66) failed [ 620.373358][T14948] FAT-fs (loop0): Directory bread(block 67) failed [ 620.380488][T14948] FAT-fs (loop0): Directory bread(block 68) failed [ 620.402340][T14948] FAT-fs (loop0): Directory bread(block 69) failed [ 620.423305][T14948] FAT-fs (loop0): Directory bread(block 70) failed [ 620.462264][T14948] FAT-fs (loop0): Directory bread(block 71) failed [ 620.469010][T14948] FAT-fs (loop0): Directory bread(block 72) failed [ 620.499068][T14948] FAT-fs (loop0): Directory bread(block 73) failed [ 620.536718][T14953] loop4: detected capacity change from 0 to 512 [ 620.565427][T14953] EXT4-fs: Ignoring removed i_version option [ 620.571636][T14953] EXT4-fs: Ignoring removed oldalloc option [ 620.604428][T14953] EXT4-fs (loop4): Test dummy encryption mode enabled [ 620.667685][T14953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.813140][T14953] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 621.877150][T14953] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 621.940926][T14966] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2834'. [ 622.109914][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.211328][T14972] syzkaller0: entered promiscuous mode [ 622.222933][T14972] syzkaller0: entered allmulticast mode [ 622.711210][T14989] loop4: detected capacity change from 0 to 512 [ 622.794540][T14989] EXT4-fs: Ignoring removed i_version option [ 622.832309][T14989] EXT4-fs: Ignoring removed oldalloc option [ 622.902818][T14989] EXT4-fs (loop4): Test dummy encryption mode enabled [ 622.971426][T14989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.044301][T14996] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2846'. [ 623.223543][T14989] overlayfs: missing 'lowerdir' [ 623.397326][T11169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.991761][T15008] syzkaller0: entered promiscuous mode [ 623.997549][T15008] syzkaller0: entered allmulticast mode [ 624.254869][T15012] netlink: 'syz.2.2853': attribute type 19 has an invalid length. [ 624.270236][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2853'. [ 624.300005][T15012] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.309799][T15012] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.319674][T15012] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.328672][T15012] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.552498][T15012] netlink: 'syz.2.2853': attribute type 19 has an invalid length. [ 624.583435][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.591065][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.292526][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2853'. [ 625.448308][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2857'. [ 625.535025][T15029] loop2: detected capacity change from 0 to 512 [ 625.592868][T15031] loop0: detected capacity change from 0 to 128 [ 625.613549][T15031] FAT-fs (loop0): bogus logical sector size 0 [ 625.619717][T15031] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 625.637743][T15031] FAT-fs (loop0): Can't find a valid FAT filesystem [ 625.788098][T15029] EXT4-fs: Ignoring removed i_version option [ 625.809061][T15029] EXT4-fs: Ignoring removed oldalloc option [ 625.823393][ T5770] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 625.852731][T15029] EXT4-fs (loop2): Test dummy encryption mode enabled [ 625.887610][T15029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.924069][T15029] overlayfs: missing 'lowerdir' [ 626.016273][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.204799][T15044] syzkaller0: entered promiscuous mode [ 626.210696][T15044] syzkaller0: entered allmulticast mode [ 627.675023][T15065] loop0: detected capacity change from 0 to 1024 [ 627.743626][T15065] EXT4-fs: Ignoring removed bh option [ 627.839169][T15065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.943799][T15065] BUG: unable to handle page fault for address: ffffffffffffffec [ 627.951605][T15065] #PF: supervisor read access in kernel mode [ 627.957613][T15065] #PF: error_code(0x0000) - not-present page [ 627.963631][T15065] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 627.969681][T15065] Oops: 0000 [#1] PREEMPT SMP KASAN [ 627.975096][T15065] CPU: 0 PID: 15065 Comm: syz.0.2869 Not tainted syzkaller #0 [ 627.982578][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 627.992665][T15065] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 627.998937][T15065] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 77 d5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 628.018639][T15065] RSP: 0018:ffffc9000ecff800 EFLAGS: 00010246 [ 628.024814][T15065] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 628.032817][T15065] RDX: ffffc90016627000 RSI: 0000000000028f11 RDI: ffffffffffffffec [ 628.040815][T15065] RBP: ffffc9000ecffab0 R08: ffff88805ce16ee3 R09: 1ffff1100b9c2ddc [ 628.048825][T15065] R10: dffffc0000000000 R11: ffffed100b9c2ddd R12: 0000000000000004 [ 628.056865][T15065] R13: 1ffff92001d9ff2c R14: dffffc0000000000 R15: ffffffffffffffe4 [ 628.064884][T15065] FS: 00007fbf6c3c66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 628.073841][T15065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.080449][T15065] CR2: ffffffffffffffec CR3: 0000000067edb000 CR4: 00000000003506f0 [ 628.088454][T15065] Call Trace: [ 628.091846][T15065] [ 628.094886][T15065] ? __might_sleep+0xe0/0xe0 [ 628.099607][T15065] ? ext4_ext_release+0x10/0x10 [ 628.104514][T15065] ? __lock_acquire+0x7d40/0x7d40 [ 628.109618][T15065] ? ext4_es_lookup_extent+0x60e/0xa00 [ 628.115120][T15065] ext4_map_blocks+0x9e2/0x1b80 [ 628.120023][T15065] ? ext4_issue_zeroout+0x250/0x250 [ 628.125263][T15065] ? ext4_journal_check_start+0x178/0x250 [ 628.131046][T15065] ? __ext4_journal_start_sb+0x259/0x560 [ 628.136739][T15065] ext4_alloc_file_blocks+0x3df/0xc50 [ 628.142166][T15065] ? trace_ext4_fallocate_enter+0x1d0/0x1d0 [ 628.148126][T15065] ? __mark_inode_dirty+0x3a8/0xc90 [ 628.153407][T15065] ? file_modified_flags+0x267/0x2a0 [ 628.158731][T15065] ext4_fallocate+0xa7f/0x1d40 [ 628.163546][T15065] vfs_fallocate+0x58e/0x700 [ 628.168209][T15065] __x64_sys_fallocate+0xc1/0x110 [ 628.173275][T15065] do_syscall_64+0x55/0xb0 [ 628.177844][T15065] ? clear_bhb_loop+0x40/0x90 [ 628.182609][T15065] ? clear_bhb_loop+0x40/0x90 [ 628.187332][T15065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.193343][T15065] RIP: 0033:0x7fbf6b59ce59 [ 628.197809][T15065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.217456][T15065] RSP: 002b:00007fbf6c3c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 628.225912][T15065] RAX: ffffffffffffffda RBX: 00007fbf6b816180 RCX: 00007fbf6b59ce59 [ 628.233971][T15065] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000a [ 628.242020][T15065] RBP: 00007fbf6b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 628.250120][T15065] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 628.258144][T15065] R13: 00007fbf6b816218 R14: 00007fbf6b816180 R15: 00007fff24ccd788 [ 628.266181][T15065] [ 628.269238][T15065] Modules linked in: [ 628.273193][T15065] CR2: ffffffffffffffec [ 628.277382][T15065] ---[ end trace 0000000000000000 ]--- [ 628.282864][T15065] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 628.288983][T15065] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 77 d5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 628.308627][T15065] RSP: 0018:ffffc9000ecff800 EFLAGS: 00010246 [ 628.314748][T15065] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 628.322777][T15065] RDX: ffffc90016627000 RSI: 0000000000028f11 RDI: ffffffffffffffec [ 628.330784][T15065] RBP: ffffc9000ecffab0 R08: ffff88805ce16ee3 R09: 1ffff1100b9c2ddc [ 628.338811][T15065] R10: dffffc0000000000 R11: ffffed100b9c2ddd R12: 0000000000000004 [ 628.346904][T15065] R13: 1ffff92001d9ff2c R14: dffffc0000000000 R15: ffffffffffffffe4 [ 628.354921][T15065] FS: 00007fbf6c3c66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 628.363881][T15065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.370497][T15065] CR2: ffffffffffffffec CR3: 0000000067edb000 CR4: 00000000003506f0 [ 628.378580][T15065] Kernel panic - not syncing: Fatal exception [ 628.385272][T15065] Kernel Offset: disabled [ 628.389604][T15065] Rebooting in 86400 seconds..