last executing test programs: 2m55.636597415s ago: executing program 1 (id=28): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x2}, 0x8) 2m55.397540964s ago: executing program 1 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m55.095869648s ago: executing program 1 (id=34): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2380002, 0x0, 0xfc, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8011, &(0x7f00000000c0)={[], [{@subj_role={'subj_role', 0x3d, 'd\x86b\b\xf1\xd4\xafP[\x02\xde\xd4\x02\xbb\xfe\xb7L,=\xfby\xfe\xcb\x83\x1c\xb2dF\xa0\x16T\xe5 .g\x03\xc6\xc3x\xfc\xc4\xc1\x88zA\t\xdd\x8c\xab\x99D\x0fw\xf4k@BEn\xe1\xde.\x83\xfaq]9\f|\xf9\xb9\xd5x\xae\xdc\xf5o\x01\xcd\x86\xcb\xadAV\x98\xecU\x96A\xb2\xd7\xd6\x8e\xea\xee\xe8\xfc\x18\tP!\x9c'}}]}) 2m54.82787079s ago: executing program 1 (id=38): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYRES64, @ANYRES8], 0x1, 0x712, &(0x7f0000001240)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) 2m52.784279776s ago: executing program 1 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000004100001200000000b9800000c00f3235000800000f30440f"], 0x41}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m50.255048781s ago: executing program 1 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, 0x0, 0x97}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x70}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m49.51565453s ago: executing program 32 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, 0x0, 0x97}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x70}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.862190244s ago: executing program 2 (id=845): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 28.487967424s ago: executing program 2 (id=850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000f9fffffff4000040"]) 28.187441478s ago: executing program 2 (id=854): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001140)={'team_slave_0\x00', @remote}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001140)={'team_slave_0\x00', @broadcast}) 27.830336567s ago: executing program 2 (id=857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x450, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x40a8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1200009, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x400, 0x30) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x800, 0x1, 0x7, 0x1003}) 26.404006323s ago: executing program 2 (id=861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x48, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.282814573s ago: executing program 2 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[], 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000370000000800", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 24.869485267s ago: executing program 33 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[], 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000370000000800", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 2.462630211s ago: executing program 0 (id=1010): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000) 2.260553967s ago: executing program 0 (id=1013): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="64b61067501a1ae39230a1b3ef1b84094e3a6cc5", 0x14}], 0x1, 0x0, 0x0, 0x8000}}], 0x1, 0x0) 1.947927802s ago: executing program 0 (id=1015): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000840)=[@code={0x1, 0x51, {"660f388239f3430fc7350200000064440f22033e81080000000066b8e2000f00d866ba4300b8f6ff0000ef36660fd4f8450f0ff10d450f00ddc441bdf67ca900"}}], 0x51}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000840)=ANY=[], 0x5e}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010400002200"]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x4c8100, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000018000000000000000500000000000000010000000000000085000000000700000000000000b8a2992d438e0f21f8350400f0000f23f848b866373fdf2a3145320f23d00f21f835100000030f23f8460f"], 0x9d}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.684482284s ago: executing program 5 (id=1018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000004c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000440)="b9990900000f32b9800000c00f3235008000000f3066ba2000ec6530d7c4e31c7d6dfa008fe978e292ffaa9d4a0f01c366988b008ee89a5200000006000fc734a1", 0x41}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20026ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0xcdd4f4433164e185, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.524204837s ago: executing program 4 (id=1020): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0x5}}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 1.332063413s ago: executing program 0 (id=1022): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7be, &(0x7f00000005c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 1.240067879s ago: executing program 5 (id=1024): mprotect(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) 1.160840076s ago: executing program 4 (id=1025): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1240, 0x31, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1030, 0xfb, 0x0, 0x1, [@nested={0x101d, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028aa284f8f626392a21d31e5e06fe98065e0246d46b7fe927a881c18c044e5c139e", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0xdd, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @generic="48f2adbc26fa866f55146583e697a3ae3793fe641fbf2f7456a75f437954532e62b73821b138e01aab0570d1fd444d06c744cc49b4", @nested={0x4, 0x4f}, @typed={0x8, 0xc8, 0x0, 0x0, @pid}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a69c1833c16240c76f64ea112de3c45021c621d034910e1db3fca008b95a45107899e470807feef1304cd8f30cff59aecaa6c50194c6b72963a9b8aeb003858a6c716898b4474bb940d9b2b8"]}]}, 0x1240}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.015890288s ago: executing program 0 (id=1026): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766", 0x2a}, {0x0}], 0x4}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000000)="17", 0xfffffffffffffd9b, 0x10048085, 0x0, 0xffffffffffffff95) 1.015720218s ago: executing program 5 (id=1027): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 980.686551ms ago: executing program 3 (id=1028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 851.502051ms ago: executing program 5 (id=1029): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0200000004000000040000000100000010110100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=r0, @ANYBLOB="2b23fc"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sco\x00') ioctl$SNAPSHOT_FREE(r2, 0x3305) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0x9, 0x9, 0x1c, 0x6}, {0x1, 0x6, 0x0, 0x80000000}, {0xff01, 0x5, 0x2, 0x3}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500"/11, @ANYRES32, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000100850000000300000095"], 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="8b33000000feffffff0005000000"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) 776.053707ms ago: executing program 3 (id=1030): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000feb000/0x2000)=nil) 762.604568ms ago: executing program 4 (id=1031): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@random="ed4e0300", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "6bbe4d", 0x64, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "8c7c8db45d2c0ba8decba26565b12e6b32dd8c20597f6a5959d0921165374b57", "30ffdcbac90c2e58724369f6012f4b84", {"6854dedc3e3710b7a86a6efb5f14d84d", "18e136787f03e12095dc39942fb20364"}}}}}}}}, 0x0) 672.018446ms ago: executing program 3 (id=1032): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 591.855992ms ago: executing program 4 (id=1033): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0x5}}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 485.735541ms ago: executing program 3 (id=1034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) fanotify_init(0x1a, 0x800) r1 = socket$inet6(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 484.9551ms ago: executing program 5 (id=1035): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xffd7, 0x1) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) 332.008103ms ago: executing program 3 (id=1036): socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1903002, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 270.766948ms ago: executing program 4 (id=1037): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 182.346465ms ago: executing program 3 (id=1038): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r3 = fcntl$dupfd(r2, 0x406, r1) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) 85.326093ms ago: executing program 4 (id=1039): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1240, 0x31, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1030, 0xfb, 0x0, 0x1, [@nested={0x101d, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028aa284f8f626392a21d31e5e06fe98065e0246d46b7fe927a881c18c044e5c139e", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0xdd, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @generic="48f2adbc26fa866f55146583e697a3ae3793fe641fbf2f7456a75f437954532e62b73821b138e01aab0570d1fd444d06c744cc49b4", @nested={0x4, 0x4f}, @typed={0x8, 0xc8, 0x0, 0x0, @pid}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a69c1833c16240c76f64ea112de3c45021c621d034910e1db3fca008b95a45107899e470807feef1304cd8f30cff59aecaa6c50194c6b72963a9b8aeb003858a6c716898b4474bb940d9b2b8"]}]}, 0x1240}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 44.995636ms ago: executing program 0 (id=1040): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000feb000/0x2000)=nil) 0s ago: executing program 5 (id=1041): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@random="ed4e0300", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "6bbe4d", 0x64, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "8c7c8db45d2c0ba8decba26565b12e6b32dd8c20597f6a5959d0921165374b57", "30ffdcbac90c2e58724369f6012f4b84", {"6854dedc3e3710b7a86a6efb5f14d84d", "18e136787f03e12095dc39942fb20364"}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. [ 78.304156][ T5774] cgroup: Unknown subsys name 'net' [ 78.444257][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.142050][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.750167][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.763158][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.771221][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.779457][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.787795][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.797035][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.805054][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.812507][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.820193][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.846722][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.855435][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.863282][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.871774][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.881179][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.888971][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.895964][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.904751][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.912269][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.997912][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.006356][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.014365][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.022618][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.030856][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.046166][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.443658][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 82.527775][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 82.571553][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 82.721893][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.730163][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.738568][ T5784] bridge_slave_0: entered allmulticast mode [ 82.746749][ T5784] bridge_slave_0: entered promiscuous mode [ 82.764886][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 82.800602][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.808043][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.815426][ T5784] bridge_slave_1: entered allmulticast mode [ 82.822667][ T5784] bridge_slave_1: entered promiscuous mode [ 82.869861][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.877277][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.884974][ T5788] bridge_slave_0: entered allmulticast mode [ 82.891970][ T5788] bridge_slave_0: entered promiscuous mode [ 82.911448][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.918680][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.926473][ T5793] bridge_slave_0: entered allmulticast mode [ 82.933632][ T5793] bridge_slave_0: entered promiscuous mode [ 82.941490][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.948880][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.956345][ T5793] bridge_slave_1: entered allmulticast mode [ 82.964633][ T5793] bridge_slave_1: entered promiscuous mode [ 82.998436][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.005851][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.013090][ T5788] bridge_slave_1: entered allmulticast mode [ 83.020456][ T5788] bridge_slave_1: entered promiscuous mode [ 83.058441][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.089379][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.102410][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.116086][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.188051][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.201596][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.214278][ T5784] team0: Port device team_slave_0 added [ 83.273962][ T5784] team0: Port device team_slave_1 added [ 83.283043][ T5793] team0: Port device team_slave_0 added [ 83.292391][ T5793] team0: Port device team_slave_1 added [ 83.299128][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.307429][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.314758][ T5797] bridge_slave_0: entered allmulticast mode [ 83.321929][ T5797] bridge_slave_0: entered promiscuous mode [ 83.376805][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.384265][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.391483][ T5797] bridge_slave_1: entered allmulticast mode [ 83.399168][ T5797] bridge_slave_1: entered promiscuous mode [ 83.422089][ T5788] team0: Port device team_slave_0 added [ 83.469698][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.482603][ T5788] team0: Port device team_slave_1 added [ 83.502298][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.509329][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.535562][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.549465][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.556552][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.587459][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.599670][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.607056][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.633792][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.647107][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.654208][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.680671][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.694914][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.756052][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.763065][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.789475][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.832003][ T5797] team0: Port device team_slave_0 added [ 83.838987][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.846757][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.873268][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.895969][ T5784] hsr_slave_0: entered promiscuous mode [ 83.902448][ T5784] hsr_slave_1: entered promiscuous mode [ 83.909125][ T5795] Bluetooth: hci0: command tx timeout [ 83.918042][ T5797] team0: Port device team_slave_1 added [ 83.973975][ T5795] Bluetooth: hci1: command tx timeout [ 83.973997][ T50] Bluetooth: hci2: command tx timeout [ 83.990483][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.997578][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.023930][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.079933][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.087314][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.113815][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.133592][ T5795] Bluetooth: hci3: command tx timeout [ 84.150956][ T5788] hsr_slave_0: entered promiscuous mode [ 84.157638][ T5788] hsr_slave_1: entered promiscuous mode [ 84.164976][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.172907][ T5788] Cannot create hsr debugfs directory [ 84.183143][ T5793] hsr_slave_0: entered promiscuous mode [ 84.189929][ T5793] hsr_slave_1: entered promiscuous mode [ 84.196479][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.204430][ T5793] Cannot create hsr debugfs directory [ 84.330997][ T5797] hsr_slave_0: entered promiscuous mode [ 84.337752][ T5797] hsr_slave_1: entered promiscuous mode [ 84.345441][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.353094][ T5797] Cannot create hsr debugfs directory [ 84.657437][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.682561][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.693184][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.725988][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.806484][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.819655][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.832454][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.853838][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.967789][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.981651][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.992858][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.006811][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.091591][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.115443][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.127303][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.146089][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.241554][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.286194][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.306031][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.349351][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.356945][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.376124][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.395455][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.402645][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.458830][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.466068][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.493268][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.502657][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.509876][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.568894][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.609196][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.616399][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.639925][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.682123][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.689396][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.747954][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.772258][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.805952][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.813161][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.861764][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.869224][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.978708][ T5795] Bluetooth: hci0: command tx timeout [ 86.053564][ T5795] Bluetooth: hci1: command tx timeout [ 86.053955][ T50] Bluetooth: hci2: command tx timeout [ 86.189368][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.215014][ T50] Bluetooth: hci3: command tx timeout [ 86.337836][ T5784] veth0_vlan: entered promiscuous mode [ 86.403000][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.434145][ T5784] veth1_vlan: entered promiscuous mode [ 86.473089][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.501147][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.541914][ T5797] veth0_vlan: entered promiscuous mode [ 86.561268][ T5784] veth0_macvtap: entered promiscuous mode [ 86.588798][ T5784] veth1_macvtap: entered promiscuous mode [ 86.610044][ T5797] veth1_vlan: entered promiscuous mode [ 86.643184][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.691895][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.709908][ T5793] veth0_vlan: entered promiscuous mode [ 86.739761][ T5793] veth1_vlan: entered promiscuous mode [ 86.753065][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.762979][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.772061][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.783450][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.797711][ T5797] veth0_macvtap: entered promiscuous mode [ 86.810440][ T5797] veth1_macvtap: entered promiscuous mode [ 86.830796][ T5788] veth0_vlan: entered promiscuous mode [ 86.868550][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.881176][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.895963][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.909641][ T5788] veth1_vlan: entered promiscuous mode [ 86.925681][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.938080][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.950263][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.982548][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.991875][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.001225][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.010444][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.029795][ T5793] veth0_macvtap: entered promiscuous mode [ 87.059859][ T5793] veth1_macvtap: entered promiscuous mode [ 87.105914][ T5788] veth0_macvtap: entered promiscuous mode [ 87.157730][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.170152][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.179182][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.196110][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.209828][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.222261][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.239495][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.256348][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.270350][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.281568][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.292492][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.305298][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.328162][ T5788] veth1_macvtap: entered promiscuous mode [ 87.374497][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.384816][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.399060][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.408589][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.509031][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.519968][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.531399][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.542178][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.554462][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.565398][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.577989][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.590736][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.602771][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.638147][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.649567][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.670754][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.681986][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.693219][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.704786][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.718340][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.794303][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.814679][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.825076][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.845702][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.860500][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.870291][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.054161][ T50] Bluetooth: hci0: command tx timeout [ 88.077743][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.117145][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.134064][ T50] Bluetooth: hci1: command tx timeout [ 88.139568][ T50] Bluetooth: hci2: command tx timeout [ 88.176132][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.185167][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.284916][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.292947][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.301552][ T5795] Bluetooth: hci3: command tx timeout [ 88.349186][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.383802][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.486900][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.547416][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.618526][ T5880] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.101917][ T5894] netlink: 'syz.0.10': attribute type 29 has an invalid length. [ 89.138888][ T5894] netlink: 'syz.0.10': attribute type 29 has an invalid length. [ 89.186371][ T5894] netlink: 'syz.0.10': attribute type 29 has an invalid length. [ 89.311409][ T5898] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10'. [ 89.349482][ T5901] syzkaller0: entered promiscuous mode [ 89.360291][ T5901] syzkaller0: entered allmulticast mode [ 89.376398][ T5894] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 89.462907][ T5894] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.476507][ T5898] netlink: 'syz.0.10': attribute type 13 has an invalid length. [ 89.594598][ T5898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.762068][ T5911] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.146344][ T5795] Bluetooth: hci0: command tx timeout [ 90.218011][ T50] Bluetooth: hci1: command tx timeout [ 90.218839][ T5795] Bluetooth: hci2: command tx timeout [ 90.376923][ T5795] Bluetooth: hci3: command tx timeout [ 91.289867][ T55] cfg80211: failed to load regulatory.db [ 91.712222][ T5924] tipc: Started in network mode [ 91.717574][ T5924] tipc: Node identity da71a10909f, cluster identity 4711 [ 91.725986][ T5924] tipc: Enabled bearer , priority 0 [ 91.738386][ T5924] syzkaller0: entered promiscuous mode [ 91.744091][ T5924] syzkaller0: entered allmulticast mode [ 91.787090][ T5924] tipc: Resetting bearer [ 91.848209][ T5923] tipc: Resetting bearer [ 91.879545][ T5923] tipc: Disabling bearer [ 92.340995][ T5941] trusted_key: encrypted_key: keyword 'loalt' not recognized [ 92.770035][ T5950] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.097043][ T5967] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 93.379524][ T5968] syz.0.37 (5968) used greatest stack depth: 17960 bytes left [ 93.597436][ T5978] syz.1.38[5978]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.672043][ T5978] loop1: detected capacity change from 0 to 1024 [ 93.788284][ T5983] loop3: detected capacity change from 0 to 16 [ 93.837105][ T5983] erofs: (device loop3): mounted with root inode @ nid 36. [ 93.898470][ T5795] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -16 in[46, 0] out[9000] [ 93.974204][ T5983] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -16 in[46, 4050] out[4096] [ 94.115699][ T28] audit: type=1800 audit(1754465706.128:2): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.42" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 94.295372][ T5978] loop1: detected capacity change from 1024 to 64 [ 94.432154][ T5995] loop2: detected capacity change from 0 to 256 [ 94.543282][ T5995] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 94.685675][ T5995] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.694073][ T5995] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 94.703705][ T5995] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.711979][ T5995] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 95.151901][ T5788] hfsplus: bad catalog entry type [ 97.015079][ T48] kworker/u4:3: attempt to access beyond end of device [ 97.015079][ T48] loop1: rw=1, sector=206, nr_sectors = 2 limit=64 [ 97.066840][ T48] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 97.087988][ T48] kworker/u4:3: attempt to access beyond end of device [ 97.087988][ T48] loop1: rw=1, sector=208, nr_sectors = 2 limit=64 [ 97.142879][ T48] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 97.160114][ T3505] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.174524][ T48] kworker/u4:3: attempt to access beyond end of device [ 97.174524][ T48] loop1: rw=1, sector=210, nr_sectors = 2 limit=64 [ 97.198645][ T48] Buffer I/O error on dev loop1, logical block 105, lost async page write [ 97.217565][ T48] kworker/u4:3: attempt to access beyond end of device [ 97.217565][ T48] loop1: rw=1, sector=212, nr_sectors = 2 limit=64 [ 97.249567][ T48] Buffer I/O error on dev loop1, logical block 106, lost async page write [ 97.290557][ T3505] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.310952][ T48] hfsplus: b-tree write err: -5, ino 4 [ 97.325678][ T59] kworker/u4:4: attempt to access beyond end of device [ 97.325678][ T59] loop1: rw=2049, sector=206, nr_sectors = 2 limit=64 [ 97.368848][ T59] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 97.394021][ T59] kworker/u4:4: attempt to access beyond end of device [ 97.394021][ T59] loop1: rw=2049, sector=208, nr_sectors = 2 limit=64 [ 97.433658][ T59] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 97.451236][ T59] kworker/u4:4: attempt to access beyond end of device [ 97.451236][ T59] loop1: rw=2049, sector=210, nr_sectors = 2 limit=64 [ 97.471495][ T3505] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.483438][ T59] Buffer I/O error on dev loop1, logical block 105, lost async page write [ 97.493874][ T6019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.513449][ T59] kworker/u4:4: attempt to access beyond end of device [ 97.513449][ T59] loop1: rw=2049, sector=212, nr_sectors = 2 limit=64 [ 97.555536][ T59] Buffer I/O error on dev loop1, logical block 106, lost async page write [ 97.599861][ T6019] loop3: detected capacity change from 0 to 1024 [ 97.621081][ T5788] syz-executor: attempt to access beyond end of device [ 97.621081][ T5788] loop1: rw=2049, sector=1022, nr_sectors = 1 limit=64 [ 97.650335][ T3505] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.718025][ T6019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.194859][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.326499][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.343555][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.365270][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.378849][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.389497][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.400758][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.874456][ T3505] hsr_slave_0: left promiscuous mode [ 100.902875][ T3505] hsr_slave_1: left promiscuous mode [ 100.950943][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.988298][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.015093][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.026710][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.055710][ T3505] bridge_slave_1: left allmulticast mode [ 101.061443][ T3505] bridge_slave_1: left promiscuous mode [ 101.084772][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.148175][ T3505] bridge_slave_0: left allmulticast mode [ 101.155377][ T3505] bridge_slave_0: left promiscuous mode [ 101.161428][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.337849][ T3505] veth1_macvtap: left promiscuous mode [ 101.352962][ T3505] veth0_macvtap: left promiscuous mode [ 101.359309][ T3505] veth1_vlan: left promiscuous mode [ 101.374427][ T3505] veth0_vlan: left promiscuous mode [ 101.494797][ T50] Bluetooth: hci1: command tx timeout [ 102.470264][ T6118] loop2: detected capacity change from 0 to 128 [ 102.478699][ T6118] ======================================================= [ 102.478699][ T6118] WARNING: The mand mount option has been deprecated and [ 102.478699][ T6118] and is ignored by this kernel. Remove the mand [ 102.478699][ T6118] option from the mount to silence this warning. [ 102.478699][ T6118] ======================================================= [ 102.637483][ T6118] syz.2.76: attempt to access beyond end of device [ 102.637483][ T6118] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 102.730469][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 102.811767][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 102.866850][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.923881][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.583826][ T50] Bluetooth: hci1: command tx timeout [ 103.628329][ T3505] bond0 (unregistering): Released all slaves [ 103.850911][ T6053] chnl_net:caif_netlink_parms(): no params data found [ 104.400847][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.414048][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.430421][ T6053] bridge_slave_0: entered allmulticast mode [ 104.470793][ T6053] bridge_slave_0: entered promiscuous mode [ 104.517687][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.550727][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.578074][ T6053] bridge_slave_1: entered allmulticast mode [ 104.625811][ T6053] bridge_slave_1: entered promiscuous mode [ 104.768428][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.846265][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.020785][ T6053] team0: Port device team_slave_0 added [ 105.047016][ T6053] team0: Port device team_slave_1 added [ 105.216114][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.223142][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.289674][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.336734][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.353571][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.394381][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.585563][ T6053] hsr_slave_0: entered promiscuous mode [ 105.622074][ T6053] hsr_slave_1: entered promiscuous mode [ 105.641913][ T6053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.653712][ T50] Bluetooth: hci1: command tx timeout [ 105.686532][ T6053] Cannot create hsr debugfs directory [ 106.351875][ T6053] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.406943][ T6053] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.553980][ T6053] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.593505][ T6053] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.734369][ T50] Bluetooth: hci1: command tx timeout [ 109.394236][ T6207] IPv6: addrconf: prefix option has invalid lifetime [ 110.895647][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.998613][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.054880][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.062211][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.130256][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.137730][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.971692][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.799377][ T6053] veth0_vlan: entered promiscuous mode [ 112.857416][ T6053] veth1_vlan: entered promiscuous mode [ 112.985739][ T6053] veth0_macvtap: entered promiscuous mode [ 113.025244][ T6053] veth1_macvtap: entered promiscuous mode [ 113.078161][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.103360][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.130912][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.162110][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.183637][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.218118][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.240517][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.305024][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.335701][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.353798][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.392485][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.425023][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.443383][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.490015][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.525312][ T6053] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.564802][ T6053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.590883][ T6053] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.613379][ T6053] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.885111][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.920406][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.972996][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.012326][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.038389][ T6314] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 114.667760][ T6329] loop4: detected capacity change from 0 to 512 [ 114.801151][ T6329] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e84ec028, mo2=0000] [ 114.883798][ T6329] System zones: 0-2, 18-18, 34-34 [ 114.958449][ T6329] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 114.998517][ T6329] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 115.055142][ T6329] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.118: Failed to acquire dquot type 0 [ 115.112588][ T6329] EXT4-fs (loop4): Remounting filesystem read-only [ 115.155800][ T6329] EXT4-fs (loop4): 1 orphan inode deleted [ 115.163187][ T6329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.211303][ T6329] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.420900][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.427570][ T6350] netlink: 36 bytes leftover after parsing attributes in process `syz.2.122'. [ 116.488719][ T6373] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 116.975821][ T6391] loop4: detected capacity change from 0 to 256 [ 117.292042][ T6394] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1268758650 (2537517300 ns) > initial count (625258754 ns). Using initial count to start timer. [ 118.391140][ T6435] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.185703][ T6457] loop2: detected capacity change from 0 to 512 [ 119.219800][ T6457] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.462797][ T6457] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.148: corrupted inode contents [ 119.523517][ T6457] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.148: mark_inode_dirty error [ 119.547859][ T6457] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.148: corrupted inode contents [ 119.581235][ T6457] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.148: mark_inode_dirty error [ 119.606241][ T6457] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.148: corrupted inode contents [ 119.627610][ T6457] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 119.658580][ T6457] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.148: corrupted inode contents [ 119.688132][ T6457] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.148: mark_inode_dirty error [ 119.719746][ T6457] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 119.754396][ T6457] EXT4-fs (loop2): 1 truncate cleaned up [ 119.761559][ T6457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.816037][ T59] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 119.834450][ T6457] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.845690][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:4: Failed to release dquot type 1 [ 120.016357][ T6457] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.148: iget: bad i_size value: 1407374883557376 [ 120.109058][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.552006][ T6495] loop2: detected capacity change from 0 to 128 [ 120.603624][ T6495] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.651288][ T6495] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.082063][ T5797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.069788][ T6533] loop2: detected capacity change from 0 to 7 [ 123.100868][ T6533] Dev loop2: unable to read RDB block 7 [ 123.119596][ T6533] loop2: AHDI p1 p2 p3 [ 123.133467][ T6533] loop2: partition table partially beyond EOD, truncated [ 123.153813][ T6533] loop2: p1 start 1601398130 is beyond EOD, truncated [ 123.171622][ T6533] loop2: p2 start 1702059890 is beyond EOD, truncated [ 124.169184][ T6562] tipc: Started in network mode [ 124.174439][ T6562] tipc: Node identity fe15fefad29c, cluster identity 4711 [ 124.187264][ T6562] tipc: Enabled bearer , priority 0 [ 124.200329][ T6562] syzkaller0: entered promiscuous mode [ 124.206582][ T6562] syzkaller0: entered allmulticast mode [ 124.254329][ T6562] tipc: Resetting bearer [ 124.279260][ T6561] tipc: Resetting bearer [ 124.404933][ T6561] tipc: Disabling bearer [ 126.463323][ C1] sched: RT throttling activated [ 127.740002][ T6595] loop0: detected capacity change from 0 to 128 [ 127.857421][ T6595] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.942585][ T6595] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.148016][ T6606] loop2: detected capacity change from 0 to 1024 [ 128.159261][ T6606] EXT4-fs: inline encryption not supported [ 128.188389][ T6606] EXT4-fs: Ignoring removed i_version option [ 128.207394][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.224138][ T6606] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.311740][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.375210][ T6611] loop0: detected capacity change from 0 to 512 [ 128.389331][ T6611] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 128.513867][ T6606] EXT4-fs error (device loop2): mb_free_blocks:1943: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 128.681275][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.447875][ T6638] tipc: Enabling of bearer rejected, failed to enable media [ 133.260375][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.267713][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.660966][ T6743] tipc: Enabled bearer , priority 0 [ 134.700250][ T6743] syzkaller0: entered promiscuous mode [ 134.736681][ T6743] syzkaller0: entered allmulticast mode [ 134.809728][ T6746] loop0: detected capacity change from 0 to 1024 [ 134.853128][ T6746] EXT4-fs: inline encryption not supported [ 134.908895][ T6742] tipc: Resetting bearer [ 134.923533][ T6746] EXT4-fs: Ignoring removed i_version option [ 134.983521][ T6746] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.117764][ T6746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.146425][ T6742] tipc: Disabling bearer [ 135.462710][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.007278][ T6759] overlayfs: failed to resolve './bus': -2 [ 136.596236][ T6771] syzkaller0: entered promiscuous mode [ 136.617970][ T6771] syzkaller0: entered allmulticast mode [ 138.819799][ T6783] tipc: Enabling of bearer rejected, failed to enable media [ 138.994639][ T6803] overlayfs: failed to resolve './bus': -2 [ 140.286948][ T6833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.241'. [ 141.650189][ T6856] loop2: detected capacity change from 0 to 1024 [ 141.686066][ T6856] EXT4-fs: inline encryption not supported [ 141.692174][ T6856] EXT4-fs: Ignoring removed i_version option [ 141.760328][ T6856] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.873725][ T6856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.009404][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.238707][ T6877] netlink: 36 bytes leftover after parsing attributes in process `syz.4.256'. [ 143.197847][ T6890] loop4: detected capacity change from 0 to 512 [ 143.308260][ T6890] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.260: corrupted inode contents [ 143.367024][ T6890] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.260: mark_inode_dirty error [ 143.441395][ T6890] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.260: corrupted inode contents [ 143.485701][ T6890] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.260: mark_inode_dirty error [ 143.524309][ T6890] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.260: corrupted inode contents [ 143.555350][ T6890] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 143.580496][ T6890] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.260: corrupted inode contents [ 143.641301][ T6890] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.260: mark_inode_dirty error [ 143.677904][ T6890] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 143.728230][ T6890] EXT4-fs (loop4): 1 truncate cleaned up [ 143.744189][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 143.754871][ T6890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.772771][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:1: Failed to release dquot type 1 [ 143.796493][ T6890] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.936046][ T6890] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.260: iget: bad i_size value: 1407374883557376 [ 143.993941][ T6890] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.260: iget: bad i_size value: 1407374883557376 [ 144.036965][ T6890] overlayfs: failed to resolve './file0': -117 [ 144.152695][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.261677][ T6944] loop4: detected capacity change from 0 to 1024 [ 146.295735][ T6944] EXT4-fs: inline encryption not supported [ 146.332857][ T6944] EXT4-fs: Ignoring removed i_version option [ 146.384684][ T6944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.516513][ T6944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.779539][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.624538][ T6973] syzkaller1: entered promiscuous mode [ 147.630357][ T6973] syzkaller1: entered allmulticast mode [ 148.869719][ T6989] loop4: detected capacity change from 0 to 128 [ 148.916627][ T6989] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 148.994200][ T6989] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 149.843968][ T6989] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 149.921726][ T6053] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.391306][ T7000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.293'. [ 150.487484][ T7005] syzkaller1: entered promiscuous mode [ 150.504624][ T7005] syzkaller1: entered allmulticast mode [ 151.614050][ T7023] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 153.553019][ T7039] netlink: 48 bytes leftover after parsing attributes in process `syz.2.307'. [ 153.869613][ T7048] loop3: detected capacity change from 0 to 512 [ 153.956728][ T7048] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 153.990056][ T7048] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 154.002121][ T7048] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.309: Failed to acquire dquot type 1 [ 154.048994][ T7048] EXT4-fs (loop3): 1 truncate cleaned up [ 154.063265][ T7048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.076683][ T7048] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.110621][ T7048] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 154.122156][ T7048] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 154.132806][ T7048] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.309: Failed to acquire dquot type 1 [ 154.153242][ T7048] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.309: deleted inode referenced: 12 [ 154.269758][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.629955][ T7068] loop4: detected capacity change from 0 to 8192 [ 155.087187][ T7080] loop3: detected capacity change from 0 to 512 [ 155.148951][ T7080] EXT4-fs error (device loop3): __ext4_fill_super:5502: inode #2: comm syz.3.320: iget: special inode unallocated [ 155.187982][ T7080] EXT4-fs (loop3): get root inode failed [ 155.201891][ T7080] EXT4-fs (loop3): mount failed [ 155.999170][ T7080] loop3: detected capacity change from 0 to 512 [ 156.078380][ T7080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.147932][ T7080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.232650][ T7080] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.373653][ T28] audit: type=1800 audit(1754465768.408:3): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.320" name="file0" dev="overlay" ino=13 res=0 errno=0 [ 156.561901][ T7091] syzkaller1: entered promiscuous mode [ 156.583692][ T7091] syzkaller1: entered allmulticast mode [ 156.602547][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.412930][ T7117] loop3: detected capacity change from 0 to 4096 [ 157.609634][ T7127] loop4: detected capacity change from 0 to 256 [ 157.650692][ T7127] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.730322][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.753232][ T7117] EXT4-fs (loop3): Test dummy encryption mode enabled [ 157.771324][ T7117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.789971][ T7127] FAT-fs (loop4): Filesystem has been set read-only [ 157.796924][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.805718][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.814535][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.823165][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.832651][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.841724][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.850814][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.863547][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.872241][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.932205][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.961500][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.993772][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.021706][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.042011][ T7117] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 158.076274][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.093576][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.112750][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.124984][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.142425][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.169439][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.192111][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.202589][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.204569][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.253719][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.273736][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.296906][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.332282][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.363399][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.401044][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.437581][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.468831][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.497834][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.518237][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.537215][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.567503][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.613757][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.622451][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.637151][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.673541][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.682501][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.714130][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.734505][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.743113][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.781968][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.797787][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.818260][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.860561][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.879189][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.933505][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.942123][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.971643][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 158.982967][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.002578][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.011906][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.025261][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.054279][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.077104][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.108026][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.126085][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.147933][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.164159][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.183566][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.217047][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.243433][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.252090][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.304689][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.328626][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.348141][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.375959][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.393937][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.432654][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.463480][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.492698][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.508285][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.523073][ T7127] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.535068][ T28] audit: type=1800 audit(1754465771.578:4): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.332" name="file1" dev="loop4" ino=1048598 res=0 errno=0 [ 160.437620][ T7199] netlink: 36 bytes leftover after parsing attributes in process `syz.2.353'. [ 160.850784][ T7202] syzkaller1: entered promiscuous mode [ 160.863846][ T7202] syzkaller1: entered allmulticast mode [ 161.330918][ T7216] loop2: detected capacity change from 0 to 1024 [ 161.367841][ T7216] EXT4-fs: inline encryption not supported [ 161.404387][ T7216] EXT4-fs: Ignoring removed i_version option [ 161.433511][ T7216] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.506143][ T7216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.689294][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.954247][ T7234] loop4: detected capacity change from 0 to 512 [ 162.042997][ T7234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.140939][ T7234] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.381081][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.421213][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'. [ 162.602052][ T7250] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 163.341991][ T7267] loop4: detected capacity change from 0 to 16 [ 163.386563][ T7267] erofs: (device loop4): mounted with root inode @ nid 36. [ 163.528565][ T7270] loop3: detected capacity change from 0 to 1024 [ 163.619212][ T7270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.654503][ T7270] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.916382][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.150817][ T7293] netlink: 36 bytes leftover after parsing attributes in process `syz.4.383'. [ 166.033967][ T7314] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 167.251717][ T7343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.400'. [ 167.887101][ T7361] syzkaller0: entered promiscuous mode [ 167.893023][ T7361] syzkaller0: entered allmulticast mode [ 171.072983][ T7404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.417'. [ 171.334643][ T7430] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.344706][ T7430] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 171.354601][ T7430] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 171.941964][ T7448] syzkaller0: entered promiscuous mode [ 171.950580][ T7448] syzkaller0: entered allmulticast mode [ 171.965129][ T7455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.433'. [ 172.462247][ T7472] overlayfs: missing 'lowerdir' [ 174.194168][ T7504] overlayfs: missing 'lowerdir' [ 175.613958][ T7507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.448'. [ 175.909854][ T7516] syzkaller0: entered promiscuous mode [ 175.920126][ T7516] syzkaller0: entered allmulticast mode [ 176.022141][ T7526] overlayfs: missing 'lowerdir' [ 176.339764][ T7531] loop4: detected capacity change from 0 to 1024 [ 176.352492][ T7531] EXT4-fs: Ignoring removed orlov option [ 176.455065][ T7531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.541721][ T7531] kvm: pic: single mode not supported [ 176.543003][ T7531] kvm: pic: single mode not supported [ 176.613609][ T7531] kvm: pic: non byte read [ 176.641192][ T7531] kvm: pic: non byte read [ 176.646138][ T7531] kvm: pic: non byte read [ 176.842857][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.448979][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'. [ 178.625126][ T7561] overlayfs: missing 'workdir' [ 178.795958][ T7571] loop3: detected capacity change from 0 to 128 [ 178.891952][ T7571] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.942254][ T7571] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.057561][ T5784] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.357735][ T7589] tipc: Started in network mode [ 179.363124][ T7589] tipc: Node identity dadf18bb9402, cluster identity 4711 [ 179.371252][ T7589] tipc: Enabled bearer , priority 0 [ 179.419120][ T7587] syzkaller0: entered promiscuous mode [ 179.424765][ T7587] syzkaller0: entered allmulticast mode [ 179.432451][ T7590] netlink: 36 bytes leftover after parsing attributes in process `syz.4.472'. [ 179.447002][ T7589] tipc: Resetting bearer [ 179.875607][ T7595] overlayfs: missing 'workdir' [ 180.439052][ T8] tipc: Node number set to 1323112635 [ 180.957223][ T7605] loop0: detected capacity change from 0 to 512 [ 181.021148][ T7605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.034161][ T7605] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.229034][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.320234][ T7610] kvm: pic: level sensitive irq not supported [ 181.320322][ T7610] kvm: pic: non byte read [ 182.021538][ T7588] tipc: Disabling bearer [ 182.263445][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.485'. [ 183.006150][ T7651] syzkaller0: entered promiscuous mode [ 183.011713][ T7651] syzkaller0: entered allmulticast mode [ 183.210848][ T7660] loop2: detected capacity change from 0 to 128 [ 183.372788][ T7660] syz.2.498: attempt to access beyond end of device [ 183.372788][ T7660] loop2: rw=2049, sector=145, nr_sectors = 448 limit=128 [ 184.926864][ T7689] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 186.136498][ T7692] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 186.156993][ T7692] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 186.183098][ T7692] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 186.581083][ T7706] process 'syz.0.512' launched '/dev/fd/3' with NULL argv: empty string added [ 186.593545][ T7703] syzkaller0: entered promiscuous mode [ 186.599146][ T7703] syzkaller0: entered allmulticast mode [ 189.077477][ T7726] syzkaller0: entered promiscuous mode [ 189.083132][ T7726] syzkaller0: entered allmulticast mode [ 189.088422][ T7729] loop4: detected capacity change from 0 to 1024 [ 189.153993][ T7729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.173708][ T7729] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.192260][ T28] audit: type=1800 audit(1754465801.228:5): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.519" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 189.215725][ T7729] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: comm syz.4.519: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.236388][ T7729] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.519: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 189.304128][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.562886][ T7750] loop2: detected capacity change from 0 to 512 [ 190.620030][ T7750] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.526: casefold flag without casefold feature [ 190.639654][ T7750] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.526: couldn't read orphan inode 15 (err -117) [ 190.673066][ T7750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.020815][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.504835][ T7781] loop2: detected capacity change from 0 to 512 [ 192.553847][ T7781] EXT4-fs: Ignoring removed nobh option [ 192.590549][ T7781] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.535: iget: bad i_size value: 38620345925642 [ 192.614550][ T7781] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.535: couldn't read orphan inode 15 (err -117) [ 192.628928][ T7781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.856169][ T7787] syzkaller0: entered promiscuous mode [ 192.871821][ T7787] syzkaller0: entered allmulticast mode [ 192.943649][ T141] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:5: bg 0: block 5: invalid block bitmap [ 192.978728][ T141] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 193.014459][ T141] EXT4-fs (loop2): This should not happen!! Data will be lost [ 193.014459][ T141] [ 193.033587][ T141] EXT4-fs (loop2): Total free blocks count 0 [ 193.039762][ T141] EXT4-fs (loop2): Free/Dirty block details [ 193.050130][ T141] EXT4-fs (loop2): free_blocks=0 [ 193.056130][ T141] EXT4-fs (loop2): dirty_blocks=8 [ 193.071522][ T141] EXT4-fs (loop2): Block reservation details [ 193.081686][ T141] EXT4-fs (loop2): i_reserved_data_blocks=8 [ 193.126650][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.286493][ T7797] loop4: detected capacity change from 0 to 512 [ 193.373452][ T7797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.449317][ T7797] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.601656][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.699072][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.715204][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.163922][ T7822] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 197.406319][ T7830] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 197.417930][ T7830] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 197.579466][ T7835] loop2: detected capacity change from 0 to 512 [ 197.722060][ T7844] loop4: detected capacity change from 0 to 128 [ 197.729797][ T7835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.753761][ T7840] tipc: Started in network mode [ 197.758715][ T7840] tipc: Node identity 62a5c205ccee, cluster identity 4711 [ 197.786381][ T7835] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.799146][ T7840] tipc: Enabled bearer , priority 0 [ 197.885721][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.897215][ T7840] tipc: Resetting bearer [ 197.954212][ T7837] tipc: Disabling bearer [ 198.455448][ T7846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.947977][ T7869] loop2: detected capacity change from 0 to 512 [ 199.965443][ T7869] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.559: casefold flag without casefold feature [ 200.051790][ T7869] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.559: couldn't read orphan inode 15 (err -117) [ 200.131369][ T7869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.503806][ T7873] loop4: detected capacity change from 0 to 512 [ 200.631507][ T7873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.694027][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.708005][ T7873] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.862207][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.907822][ T7879] loop2: detected capacity change from 0 to 128 [ 200.986120][ T7879] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.067554][ T7879] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.140644][ T7879] syz.2.561 (pid 7879) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 201.238973][ T5797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.985020][ T7900] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 203.284170][ T7927] loop3: detected capacity change from 0 to 256 [ 203.381091][ T7927] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 203.461251][ T7927] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 203.469535][ T7927] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 203.479229][ T7927] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 203.487209][ T7927] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 204.070295][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 205.131412][ T7946] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 205.749217][ T7968] loop0: detected capacity change from 0 to 256 [ 205.871109][ T7966] kvm: pic: single mode not supported [ 205.872078][ T7966] kvm: pic: single mode not supported [ 205.889218][ T7966] kvm: pic: level sensitive irq not supported [ 205.895904][ T7966] kvm: pic: single mode not supported [ 205.902123][ T7966] kvm: pic: level sensitive irq not supported [ 205.927100][ T7966] kvm: pic: level sensitive irq not supported [ 206.624310][ T7978] loop3: detected capacity change from 0 to 512 [ 206.725073][ T7968] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 206.726997][ T7978] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.592: casefold flag without casefold feature [ 206.817344][ T7978] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.592: couldn't read orphan inode 15 (err -117) [ 206.832965][ T7978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.866029][ T7978] overlayfs: failed to resolve './file1': -2 [ 206.989647][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.017236][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 207.029536][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 207.035894][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 207.405724][ T8000] loop2: detected capacity change from 0 to 512 [ 207.442326][ T8000] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 207.483641][ T8000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 207.540229][ T8000] EXT4-fs (loop2): orphan cleanup on readonly fs [ 207.570615][ T8000] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.599: bad orphan inode 267 [ 207.610648][ T8000] EXT4-fs (loop2): Remounting filesystem read-only [ 207.647684][ T8000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 207.716590][ T8000] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.599: dx entry: limit 0 != root limit 125 [ 207.730175][ T8000] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.599: Corrupt directory, running e2fsck is recommended [ 207.776750][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 208.265474][ T8017] loop3: detected capacity change from 0 to 512 [ 208.303172][ T8017] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.604: casefold flag without casefold feature [ 208.327073][ T8017] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.604: couldn't read orphan inode 15 (err -117) [ 208.370115][ T8017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.473786][ T8017] overlayfs: failed to resolve './file1': -2 [ 208.537253][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.683644][ T8027] loop2: detected capacity change from 0 to 764 [ 208.737370][ T8031] loop0: detected capacity change from 0 to 256 [ 209.423645][ T8040] loop0: detected capacity change from 0 to 256 [ 209.527668][ T8040] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 209.595677][ T8040] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 209.603775][ T8040] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 209.613180][ T8040] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 209.621201][ T8040] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 211.088081][ T8056] loop2: detected capacity change from 0 to 512 [ 211.168297][ T8056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.230498][ T8056] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.396034][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.930342][ T8074] loop0: detected capacity change from 0 to 512 [ 211.967839][ T8074] EXT4-fs: Ignoring removed i_version option [ 211.994021][ T8074] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.042451][ T8074] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 212.067569][ T8074] EXT4-fs (loop0): 1 truncate cleaned up [ 212.075054][ T8074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.130126][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.666961][ T8093] loop0: detected capacity change from 0 to 256 [ 212.770529][ T8093] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 212.872489][ T8092] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 212.880626][ T8092] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 212.890347][ T8092] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 212.898650][ T8092] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 215.367591][ T8126] loop3: detected capacity change from 0 to 2048 [ 215.415206][ T8126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.592556][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.904771][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.640'. [ 216.664896][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 217.132975][ T8151] loop0: detected capacity change from 0 to 512 [ 217.194643][ T8151] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.648: bad orphan inode 31 [ 217.288010][ T8151] ext4_test_bit(bit=30, block=4) = 0 [ 217.293663][ T8151] EXT4-fs (loop0): 1 truncate cleaned up [ 217.300680][ T8151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.479578][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.618525][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 218.108561][ T8183] loop0: detected capacity change from 0 to 128 [ 218.146128][ T8183] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 218.182297][ T8183] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.293025][ T8190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.664'. [ 218.398940][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.744890][ T8206] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 218.809716][ T8208] loop4: detected capacity change from 0 to 512 [ 218.887788][ T8208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.936945][ T8208] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.180200][ T8217] netlink: 48 bytes leftover after parsing attributes in process `syz.3.673'. [ 219.192721][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.811394][ T8231] loop2: detected capacity change from 0 to 2368 [ 220.205201][ T8244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.683'. [ 220.434667][ T8252] loop0: detected capacity change from 0 to 1024 [ 220.454356][ T8252] EXT4-fs: Ignoring removed orlov option [ 220.479421][ T8252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.644770][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.311799][ T8282] overlayfs: failed to clone upperpath [ 221.412569][ T8289] loop0: detected capacity change from 0 to 512 [ 221.434119][ T8289] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.480547][ T8289] EXT4-fs (loop0): 1 truncate cleaned up [ 221.498857][ T8289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.566562][ T8289] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.705: corrupted in-inode xattr: overlapping e_value [ 221.587062][ T8289] EXT4-fs (loop0): Remounting filesystem read-only [ 221.594162][ T8289] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1781: inode #15: comm syz.0.705: unable to update i_inline_off [ 221.696049][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.752872][ T8295] overlayfs: failed to clone upperpath [ 222.000566][ T8304] sit1: entered allmulticast mode [ 222.378815][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 222.529593][ T8323] loop2: detected capacity change from 0 to 1024 [ 222.539614][ T8323] EXT4-fs: Ignoring removed orlov option [ 222.562156][ T8323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.710188][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.239066][ T8347] loop2: detected capacity change from 0 to 512 [ 223.247812][ T8345] Zero length message leads to an empty skb [ 223.255475][ T8347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.285923][ T8347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.319561][ T8347] EXT4-fs (loop2): 1 truncate cleaned up [ 223.339317][ T8347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.522202][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.725373][ T8362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.736'. [ 223.743226][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 223.914274][ T8361] kvm: kvm [8359]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 223.926670][ T8361] kvm: kvm [8359]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 223.947928][ T8361] kvm: kvm [8359]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 223.973191][ T8361] kvm: kvm [8359]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 223.986198][ T8361] kvm: kvm [8359]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 224.633131][ T8383] loop0: detected capacity change from 0 to 512 [ 224.684541][ T8383] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 225.179342][ T8392] loop2: detected capacity change from 0 to 256 [ 225.280014][ T8392] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 225.354449][ T8392] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 225.362485][ T8392] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 225.373007][ T8392] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 225.381221][ T8392] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 228.780874][ T8451] loop4: detected capacity change from 0 to 512 [ 228.821432][ T8451] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 229.079693][ T8451] block device autoloading is deprecated and will be removed. [ 229.122455][ T8451] syz.4.768: attempt to access beyond end of device [ 229.122455][ T8451] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 229.196708][ T8451] EXT4-fs (loop4): couldn't read superblock of external journal [ 229.598364][ T8459] loop4: detected capacity change from 0 to 256 [ 230.157947][ T8469] loop4: detected capacity change from 0 to 256 [ 231.226166][ T8483] syzkaller0: entered promiscuous mode [ 231.251891][ T8483] syzkaller0: entered allmulticast mode [ 232.723210][ T8498] fuse: Bad value for 'fd' [ 234.047459][ T8514] loop4: detected capacity change from 0 to 512 [ 234.059798][ T8514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.076613][ T8514] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.091577][ T8514] EXT4-fs (loop4): 1 truncate cleaned up [ 234.099771][ T8514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.164219][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.213053][ T8519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.474876][ T8526] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 235.634890][ T8536] netlink: 36 bytes leftover after parsing attributes in process `syz.3.801'. [ 236.200232][ T8550] loop4: detected capacity change from 0 to 512 [ 236.212883][ T8550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.229376][ T8550] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.272912][ T8550] EXT4-fs (loop4): 1 truncate cleaned up [ 236.289044][ T8550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.434297][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.675711][ T8560] overlayfs: failed to clone lowerpath [ 236.790630][ T8562] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 237.004550][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.814'. [ 237.046077][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.814'. [ 237.432829][ T8589] bridge_slave_0: default FDB implementation only supports local addresses [ 237.454363][ T8591] overlayfs: overlapping lowerdir path [ 237.733501][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.826'. [ 237.766956][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.826'. [ 237.934596][ T8608] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 238.124633][ T8614] fuse: Bad value for 'fd' [ 238.327197][ T8620] loop4: detected capacity change from 0 to 256 [ 238.349470][ T28] audit: type=1800 audit(1754465850.388:6): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.833" name="file1" dev="loop4" ino=1048609 res=0 errno=0 [ 238.372740][ T8620] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 238.399983][ T8620] FAT-fs (loop4): Filesystem has been set read-only [ 238.508521][ T8624] overlayfs: failed to clone lowerpath [ 238.708031][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.837'. [ 238.750153][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.837'. [ 239.295757][ T8654] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 239.590955][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.851'. [ 239.618269][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.851'. [ 239.839480][ T8671] overlayfs: failed to clone upperpath [ 239.871094][ T8673] team_slave_0: entered allmulticast mode [ 240.014725][ T8674] team_slave_0: entered promiscuous mode [ 240.396157][ T8683] loop2: detected capacity change from 0 to 512 [ 240.446079][ T8683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 240.620616][ T8689] loop4: detected capacity change from 0 to 256 [ 240.660548][ T8689] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 240.731646][ T8689] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 240.739677][ T8689] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 240.749141][ T8689] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 240.757114][ T8689] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 240.853331][ T8683] EXT4-fs (loop2): 1 truncate cleaned up [ 241.174743][ T8683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.388342][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 241.444630][ T8692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 241.491061][ T5797] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 241.729558][ T8694] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 242.176907][ T8701] overlayfs: failed to clone upperpath [ 242.570059][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.678277][ T8705] syzkaller0: entered promiscuous mode [ 242.685642][ T8705] syzkaller0: entered allmulticast mode [ 243.160211][ T8717] overlayfs: failed to clone upperpath [ 243.480269][ T1080] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.856529][ T8729] syz.3.875: attempt to access beyond end of device [ 243.856529][ T8729] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 243.869458][ T8729] F2FS-fs (loop7): Unable to read 1th superblock [ 243.876987][ T8729] syz.3.875: attempt to access beyond end of device [ 243.876987][ T8729] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 243.912451][ T8729] F2FS-fs (loop7): Unable to read 2th superblock [ 244.422531][ T1080] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.570604][ T1080] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.745241][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.756673][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.765967][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.774931][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.784348][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 244.791778][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.826273][ T1080] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.538604][ T8736] overlayfs: failed to resolve './file1': -2 [ 245.566484][ T1080] tipc: Left network mode [ 245.821029][ T8739] autofs4:pid:8739:autofs_fill_super: called with bogus options [ 245.860109][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 245.874727][ T8741] loop0: detected capacity change from 0 to 512 [ 245.903868][ T8741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.914558][ T8741] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 245.965815][ T8741] EXT4-fs (loop0): 1 truncate cleaned up [ 245.987775][ T8741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.186926][ T8753] overlayfs: failed to clone upperpath [ 246.195854][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.347686][ T28] audit: type=1107 audit(1754465858.388:7): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='’' [ 246.365583][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.389794][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.400226][ T8755] 9pnet_fd: Insufficient options for proto=fd [ 246.406932][ T8731] bridge_slave_0: entered allmulticast mode [ 246.421457][ T8731] bridge_slave_0: entered promiscuous mode [ 246.523199][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.530667][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.541511][ T8731] bridge_slave_1: entered allmulticast mode [ 246.552036][ T8731] bridge_slave_1: entered promiscuous mode [ 246.567642][ T8763] autofs4:pid:8763:autofs_fill_super: called with bogus options [ 246.762987][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.853456][ T5795] Bluetooth: hci3: command tx timeout [ 246.860694][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.968917][ T8731] team0: Port device team_slave_0 added [ 247.041508][ T8731] team0: Port device team_slave_1 added [ 247.215894][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.240795][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.278307][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.372627][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.393801][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.456504][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.511896][ T8783] autofs4:pid:8783:autofs_fill_super: called with bogus options [ 247.519846][ T1080] hsr_slave_0: left promiscuous mode [ 247.532739][ T1080] hsr_slave_1: left promiscuous mode [ 247.540916][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.553458][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.578586][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.608755][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.655718][ T1080] bridge_slave_1: left allmulticast mode [ 247.661454][ T1080] bridge_slave_1: left promiscuous mode [ 247.704118][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.755231][ T1080] bridge_slave_0: left allmulticast mode [ 247.761071][ T1080] bridge_slave_0: left promiscuous mode [ 247.795052][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.848470][ T1080] veth1_macvtap: left promiscuous mode [ 247.863507][ T1080] veth0_macvtap: left promiscuous mode [ 247.869276][ T1080] veth1_vlan: left promiscuous mode [ 247.890642][ T1080] veth0_vlan: left promiscuous mode [ 247.896165][ T8793] loop0: detected capacity change from 0 to 1024 [ 247.934676][ T8793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.996604][ T8793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.073016][ T8791] loop4: detected capacity change from 0 to 1024 [ 248.123961][ T8791] EXT4-fs: Ignoring removed orlov option [ 248.217111][ T8791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.309436][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.338638][ T8791] kvm: pic: single mode not supported [ 248.339598][ T8791] kvm: pic: single mode not supported [ 248.363881][ T8791] kvm: pic: single mode not supported [ 248.369366][ T8791] kvm: pic: level sensitive irq not supported [ 248.588195][ T8805] loop0: detected capacity change from 0 to 4096 [ 248.604789][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.655019][ T8805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.936306][ T5795] Bluetooth: hci3: command tx timeout [ 249.071798][ T8817] loop4: detected capacity change from 0 to 256 [ 249.123535][ T8819] overlayfs: failed to clone upperpath [ 249.450913][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.914876][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 249.993756][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 250.112143][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.244852][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.920804][ T8842] loop4: detected capacity change from 0 to 512 [ 250.935056][ T8842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.982288][ T8842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 250.998377][ T8842] EXT4-fs (loop4): 1 truncate cleaned up [ 251.005830][ T8842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.019874][ T5795] Bluetooth: hci3: command tx timeout [ 251.100120][ T8845] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 251.122073][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.293532][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 251.477693][ T1080] bond0 (unregistering): Released all slaves [ 251.743182][ T8731] hsr_slave_0: entered promiscuous mode [ 251.752294][ T8731] hsr_slave_1: entered promiscuous mode [ 251.763904][ T8731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.788715][ T8731] Cannot create hsr debugfs directory [ 252.062887][ T8860] loop4: detected capacity change from 0 to 1024 [ 252.084394][ T8860] EXT4-fs: Ignoring removed orlov option [ 252.147605][ T8860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.196892][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.389756][ T8731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.462468][ T8731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.484815][ T8731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.505964][ T8731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.632643][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.697591][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.727802][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.735148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.764836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.772003][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.097370][ T5795] Bluetooth: hci3: command tx timeout [ 253.322647][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.029617][ T8731] veth0_vlan: entered promiscuous mode [ 254.057600][ T8731] veth1_vlan: entered promiscuous mode [ 254.134267][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 254.166918][ T8918] team1: entered promiscuous mode [ 254.193460][ T8918] team1: entered allmulticast mode [ 254.229831][ T8731] veth0_macvtap: entered promiscuous mode [ 254.250289][ T8731] veth1_macvtap: entered promiscuous mode [ 254.300069][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.333348][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.361562][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.405186][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.433452][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.449298][ T8924] loop4: detected capacity change from 0 to 1024 [ 254.456401][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.467630][ T8924] EXT4-fs: Ignoring removed orlov option [ 254.489986][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.514989][ T8924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.538023][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.570444][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.586304][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.607467][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.632323][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.647706][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.664771][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.666905][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.727586][ T8731] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.737893][ T8731] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.752153][ T8731] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.762497][ T8731] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.945891][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.962268][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.035624][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.045015][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.140110][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.146826][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.184683][ T8971] loop5: detected capacity change from 0 to 512 [ 257.321741][ T8973] loop0: detected capacity change from 0 to 512 [ 257.394282][ T8973] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.959: iget: bad i_size value: 38620345925642 [ 257.518408][ T8973] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.959: couldn't read orphan inode 15 (err -117) [ 257.628998][ T8973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.697891][ T8973] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.959: iget: bad i_size value: 38620345925642 [ 257.765133][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.253172][ T8998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 259.600064][ T9016] loop4: detected capacity change from 0 to 1764 [ 260.210796][ T7993] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.090092][ T9036] loop0: detected capacity change from 0 to 4096 [ 261.136636][ T9036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.276634][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.968520][ T9069] loop4: detected capacity change from 0 to 4096 [ 264.121315][ T9069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.137472][ T9076] fuse: Bad value for 'fd' [ 264.306057][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.667632][ T9091] loop4: detected capacity change from 0 to 4096 [ 264.670903][ T9096] loop5: detected capacity change from 0 to 512 [ 264.712022][ T9096] EXT4-fs (loop5): orphan cleanup on readonly fs [ 264.756069][ T9091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.783468][ T9096] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 264.801264][ T9096] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 264.870030][ T9096] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1004: attempt to clear invalid blocks 2 len 1 [ 264.924687][ T9096] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1004: invalid indirect mapped block 1819239214 (level 0) [ 264.979949][ T9096] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1004: invalid indirect mapped block 1819239214 (level 1) [ 265.036493][ T9096] EXT4-fs (loop5): 1 truncate cleaned up [ 265.059051][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.060010][ T9096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.188335][ T9096] EXT4-fs error (device loop5): ext4_lookup:1855: inode #2: comm syz.5.1004: 'file1' linked to parent dir [ 265.324109][ T8731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.611506][ T9117] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 265.622661][ T9113] loop5: detected capacity change from 0 to 4096 [ 265.716268][ T9113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.838329][ T8731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.216802][ T9139] fuse: Bad value for 'fd' [ 266.506385][ T9142] kvm: vcpu 0: requested 48 ns lapic timer period limited to 200000 ns [ 266.725333][ T9152] loop0: detected capacity change from 0 to 764 [ 267.282758][ T9173] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1029'. [ 267.560571][ T9183] loop5: detected capacity change from 0 to 512 [ 267.569414][ T9183] EXT4-fs: Ignoring removed i_version option [ 267.578661][ T9183] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 267.619357][ T9183] EXT4-fs (loop5): 1 truncate cleaned up [ 267.641418][ T9183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.809699][ T9183] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 267.904764][ T8731] EXT4-fs warning (device loop5): ext4_xattr_inode_create:1486: refuse to create EA inode when umounting [ 267.932264][ T8731] ------------[ cut here ]------------ [ 267.938458][ T8731] WARNING: CPU: 0 PID: 8731 at fs/ext4/xattr.c:1487 ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 267.949337][ T8731] Modules linked in: [ 267.953359][ T8731] CPU: 0 PID: 8731 Comm: syz-executor Not tainted 6.6.101-syzkaller #0 [ 267.961651][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.971911][ T8731] RIP: 0010:ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 267.979400][ T8731] Code: 4c 8b 7c 24 10 e9 12 0a 00 00 e8 bd e9 43 ff 48 89 df 48 c7 c6 82 eb 5b 8c ba ce 05 00 00 48 c7 c1 60 d0 be 8a e8 52 56 fc ff <0f> 0b 49 c7 c6 ea ff ff ff 48 8b 5c 24 08 e9 fe 09 00 00 48 8d 78 [ 267.999670][ T8731] RSP: 0018:ffffc9000c7ef3e0 EFLAGS: 00010246 [ 268.006257][ T8731] RAX: 7e3da141ce5afa00 RBX: ffff88802f938000 RCX: 7e3da141ce5afa00 [ 268.014534][ T8731] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 268.022566][ T8731] RBP: ffffc9000c7ef5b0 R08: ffffc9000c7eefa7 R09: 1ffff920018fddf4 [ 268.030734][ T8731] R10: dffffc0000000000 R11: fffff520018fddf5 R12: ffff8880762934e8 [ 268.038954][ T8731] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880762934b0 [ 268.047186][ T8731] FS: 0000555591f85500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 268.056217][ T8731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.062862][ T8731] CR2: 00007ffaeffb7dac CR3: 0000000073b44000 CR4: 00000000003526f0 [ 268.071040][ T8731] Call Trace: [ 268.074410][ T8731] [ 268.077432][ T8731] ? mark_lock+0x94/0x320 [ 268.081827][ T8731] ? ext4_xattr_ibody_set+0x6a0/0x6a0 [ 268.087383][ T8731] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 268.093521][ T8731] ? ext4_xattr_block_set+0xd6/0x32a0 [ 268.098985][ T8731] ext4_xattr_block_set+0x23e/0x32a0 [ 268.104440][ T8731] ? write_boundary_block+0xb0/0xb0 [ 268.109711][ T8731] ? __might_sleep+0xe0/0xe0 [ 268.114650][ T8731] ? __getblk_gfp+0x54/0x660 [ 268.119322][ T8731] ? ext4_xattr_block_find+0x350/0x350 [ 268.124951][ T8731] ? ext4_xattr_block_find+0x2d4/0x350 [ 268.130521][ T8731] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 268.136915][ T8731] __ext4_expand_extra_isize+0x306/0x400 [ 268.142624][ T8731] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 268.148251][ T8731] ext4_dirty_inode+0xcb/0x110 [ 268.153092][ T8731] ? __ext4_expand_extra_isize+0x400/0x400 [ 268.159070][ T8731] __mark_inode_dirty+0x2b4/0xc80 [ 268.164235][ T8731] iput+0x1cc/0x920 [ 268.168106][ T8731] __dentry_kill+0x431/0x650 [ 268.172879][ T8731] shrink_dentry_list+0x39f/0x6a0 [ 268.178063][ T8731] shrink_dcache_parent+0xac/0x3c0 [ 268.183326][ T8731] ? write_sequnlock+0x30/0x30 [ 268.188250][ T8731] ? down_read_trylock+0x1d6/0x370 [ 268.193797][ T8731] ? __init_rwsem+0x160/0x160 [ 268.198599][ T8731] do_one_tree+0x23/0xe0 [ 268.202988][ T8731] shrink_dcache_for_umount+0x69/0x110 [ 268.208778][ T8731] generic_shutdown_super+0x67/0x2b0 [ 268.214242][ T8731] kill_block_super+0x44/0x90 [ 268.219143][ T8731] ext4_kill_sb+0x68/0xa0 [ 268.223761][ T8731] deactivate_locked_super+0x97/0x100 [ 268.229203][ T8731] cleanup_mnt+0x429/0x4c0 [ 268.233726][ T8731] task_work_run+0x1ce/0x250 [ 268.238372][ T8731] ? task_work_cancel+0x240/0x240 [ 268.243580][ T8731] ? exit_to_user_mode_loop+0x3b/0x110 [ 268.249115][ T8731] exit_to_user_mode_loop+0xe6/0x110 [ 268.254529][ T8731] exit_to_user_mode_prepare+0xb1/0x140 [ 268.260148][ T8731] syscall_exit_to_user_mode+0x1a/0x50 [ 268.265776][ T8731] do_syscall_64+0x61/0xb0 [ 268.270435][ T8731] ? clear_bhb_loop+0x40/0x90 [ 268.275240][ T8731] ? clear_bhb_loop+0x40/0x90 [ 268.279956][ T8731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.285993][ T8731] RIP: 0033:0x7f0591b8ff17 [ 268.290458][ T8731] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 268.311582][ T8731] RSP: 002b:00007fff74d63378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 268.320886][ T8731] RAX: 0000000000000000 RBX: 00007f0591c11c05 RCX: 00007f0591b8ff17 [ 268.328998][ T8731] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff74d63430 [ 268.337144][ T8731] RBP: 00007fff74d63430 R08: 0000000000000000 R09: 0000000000000000 [ 268.345495][ T8731] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff74d644c0 [ 268.353674][ T8731] R13: 00007f0591c11c05 R14: 000000000004162c R15: 00007fff74d64500 [ 268.361797][ T8731] [ 268.365171][ T8731] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 268.372589][ T8731] CPU: 0 PID: 8731 Comm: syz-executor Not tainted 6.6.101-syzkaller #0 [ 268.380863][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.390978][ T8731] Call Trace: [ 268.394366][ T8731] [ 268.397314][ T8731] dump_stack_lvl+0x16c/0x230 [ 268.402014][ T8731] ? show_regs_print_info+0x20/0x20 [ 268.407228][ T8731] ? load_image+0x3b0/0x3b0 [ 268.411778][ T8731] panic+0x2c0/0x710 [ 268.415701][ T8731] ? bpf_jit_dump+0xd0/0xd0 [ 268.420242][ T8731] __warn+0x2e0/0x470 [ 268.424347][ T8731] ? ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 268.431141][ T8731] ? ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 268.437587][ T8731] report_bug+0x2be/0x4f0 [ 268.441955][ T8731] ? ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 268.448401][ T8731] ? ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 268.454778][ T8731] ? ext4_xattr_inode_lookup_create+0x5c0/0x1d80 [ 268.461139][ T8731] handle_bug+0xcf/0x120 [ 268.465602][ T8731] exc_invalid_op+0x1a/0x50 [ 268.470122][ T8731] asm_exc_invalid_op+0x1a/0x20 [ 268.475083][ T8731] RIP: 0010:ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 268.482065][ T8731] Code: 4c 8b 7c 24 10 e9 12 0a 00 00 e8 bd e9 43 ff 48 89 df 48 c7 c6 82 eb 5b 8c ba ce 05 00 00 48 c7 c1 60 d0 be 8a e8 52 56 fc ff <0f> 0b 49 c7 c6 ea ff ff ff 48 8b 5c 24 08 e9 fe 09 00 00 48 8d 78 [ 268.501776][ T8731] RSP: 0018:ffffc9000c7ef3e0 EFLAGS: 00010246 [ 268.507879][ T8731] RAX: 7e3da141ce5afa00 RBX: ffff88802f938000 RCX: 7e3da141ce5afa00 [ 268.516044][ T8731] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 268.524050][ T8731] RBP: ffffc9000c7ef5b0 R08: ffffc9000c7eefa7 R09: 1ffff920018fddf4 [ 268.532571][ T8731] R10: dffffc0000000000 R11: fffff520018fddf5 R12: ffff8880762934e8 [ 268.540576][ T8731] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880762934b0 [ 268.548685][ T8731] ? mark_lock+0x94/0x320 [ 268.553040][ T8731] ? ext4_xattr_ibody_set+0x6a0/0x6a0 [ 268.558446][ T8731] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 268.564551][ T8731] ? ext4_xattr_block_set+0xd6/0x32a0 [ 268.569951][ T8731] ext4_xattr_block_set+0x23e/0x32a0 [ 268.575259][ T8731] ? write_boundary_block+0xb0/0xb0 [ 268.580570][ T8731] ? __might_sleep+0xe0/0xe0 [ 268.585287][ T8731] ? __getblk_gfp+0x54/0x660 [ 268.589912][ T8731] ? ext4_xattr_block_find+0x350/0x350 [ 268.595408][ T8731] ? ext4_xattr_block_find+0x2d4/0x350 [ 268.600977][ T8731] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 268.606913][ T8731] __ext4_expand_extra_isize+0x306/0x400 [ 268.612606][ T8731] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 268.618191][ T8731] ext4_dirty_inode+0xcb/0x110 [ 268.622973][ T8731] ? __ext4_expand_extra_isize+0x400/0x400 [ 268.628889][ T8731] __mark_inode_dirty+0x2b4/0xc80 [ 268.633942][ T8731] iput+0x1cc/0x920 [ 268.637774][ T8731] __dentry_kill+0x431/0x650 [ 268.642576][ T8731] shrink_dentry_list+0x39f/0x6a0 [ 268.647720][ T8731] shrink_dcache_parent+0xac/0x3c0 [ 268.652860][ T8731] ? write_sequnlock+0x30/0x30 [ 268.657647][ T8731] ? down_read_trylock+0x1d6/0x370 [ 268.662776][ T8731] ? __init_rwsem+0x160/0x160 [ 268.667466][ T8731] do_one_tree+0x23/0xe0 [ 268.671738][ T8731] shrink_dcache_for_umount+0x69/0x110 [ 268.677263][ T8731] generic_shutdown_super+0x67/0x2b0 [ 268.682680][ T8731] kill_block_super+0x44/0x90 [ 268.687553][ T8731] ext4_kill_sb+0x68/0xa0 [ 268.691912][ T8731] deactivate_locked_super+0x97/0x100 [ 268.697371][ T8731] cleanup_mnt+0x429/0x4c0 [ 268.701982][ T8731] task_work_run+0x1ce/0x250 [ 268.706604][ T8731] ? task_work_cancel+0x240/0x240 [ 268.711685][ T8731] ? exit_to_user_mode_loop+0x3b/0x110 [ 268.717175][ T8731] exit_to_user_mode_loop+0xe6/0x110 [ 268.722569][ T8731] exit_to_user_mode_prepare+0xb1/0x140 [ 268.728152][ T8731] syscall_exit_to_user_mode+0x1a/0x50 [ 268.733772][ T8731] do_syscall_64+0x61/0xb0 [ 268.738204][ T8731] ? clear_bhb_loop+0x40/0x90 [ 268.743034][ T8731] ? clear_bhb_loop+0x40/0x90 [ 268.747732][ T8731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.753648][ T8731] RIP: 0033:0x7f0591b8ff17 [ 268.758086][ T8731] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 268.777816][ T8731] RSP: 002b:00007fff74d63378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 268.786353][ T8731] RAX: 0000000000000000 RBX: 00007f0591c11c05 RCX: 00007f0591b8ff17 [ 268.794459][ T8731] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff74d63430 [ 268.804986][ T8731] RBP: 00007fff74d63430 R08: 0000000000000000 R09: 0000000000000000 [ 268.812998][ T8731] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff74d644c0 [ 268.821084][ T8731] R13: 00007f0591c11c05 R14: 000000000004162c R15: 00007fff74d64500 [ 268.829117][ T8731] [ 268.844035][ T8731] Kernel Offset: disabled [ 268.848561][ T8731] Rebooting in 86400 seconds..