last executing test programs: 5m53.393423263s ago: executing program 1 (id=16): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5m49.821866629s ago: executing program 1 (id=20): syz_emit_vhci(&(0x7f0000001100)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0x0, 0x7}, {0xc8, 0x1}]}}}, 0xc) syz_emit_vhci(0x0, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001580)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001740)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 5m48.850248162s ago: executing program 1 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) io_setup(0x5, &(0x7f0000002800)=0x0) io_submit(r4, 0x1, &(0x7f0000004e80)=[&(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x702a, r3, &(0x7f0000002840), 0x0, 0x1, 0x0, 0x2}]) lseek(0xffffffffffffffff, 0x1, 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0x0) io_submit(r4, 0x0, 0x0) getpid() 5m47.15521283s ago: executing program 1 (id=26): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5m46.164824909s ago: executing program 1 (id=30): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5m37.344856812s ago: executing program 1 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xc831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c4}, 0x18) 5m34.914508315s ago: executing program 32 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xc831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c4}, 0x18) 2m35.413313183s ago: executing program 0 (id=536): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xfff2, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44850) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x41814) 2m34.038693224s ago: executing program 0 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() unshare(0x2c020400) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x8402) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x3}}, 0x20) ppoll(&(0x7f0000000200)=[{r1, 0x692}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 2m33.323256692s ago: executing program 0 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x198) syz_fuse_handle_req(r0, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf8700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x150, 0x0, 0x3, [{{0x2, 0x3, 0x5, 0x0, 0x1, 0xe67f, {0x1, 0x1000, 0x8, 0x2, 0x8, 0x1, 0x2, 0x7ff, 0x81, 0x1000, 0x1, r2, r3, 0x1, 0x443f}}, {0x6, 0x3, 0x2, 0x80000008, '..'}}, {{0x3, 0x2, 0x80000000, 0x2, 0x0, 0x2, {0x4, 0xfffffffffffffffa, 0x4, 0x7, 0xffffffff, 0x8000, 0x2, 0x8, 0x0, 0xa000, 0xfffffffa, r2, r3, 0x48, 0x7}}, {0x5, 0x4, 0x8, 0x1000, 'O,#@:\\:^'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 2m32.073514955s ago: executing program 0 (id=549): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@data_journal}, {@norecovery}]}, 0x3, 0x481, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m30.801174122s ago: executing program 0 (id=555): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xfff2, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44850) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x41814) 2m27.926583087s ago: executing program 0 (id=563): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r7, 0x3}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 2m27.499885206s ago: executing program 33 (id=563): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r7, 0x3}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 43.680602706s ago: executing program 2 (id=776): socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0a7, 0x80, 0x0, 0x10f}, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/clear_refs\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 34.457155487s ago: executing program 2 (id=784): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x7, 0x4ee, &(0x7f0000002080)="$eJzs3EFsVEUfAPD/225pgfLRDxGlohTR2GhsoaBwMDEYTTxoYsSDHpu2EKRQ09ZECIElMXg0JF6N8ejVg1c1XpSTiVc8eiEhhgvgac3bfdvdbl+X0na70v5+yXZnZt97M7Pz5u28me4GsGkNpn+SiL6IuBkROyOi0LzBYPXp3p1L4/fvXBqPUrl88u8k3S3upvFMkj1vzyJDhYjC50n9hQazFy6eHZuampzJ4iNz5z4Zmb1w8eUz58ZOT56ePD96/PjRI4ePvTr6ysNXKie/tF53By5P79v79kfX3x0v1tJ7s+fGeqyVwRjMK0rF82udWYftaAgnxVZbvt7+wrBs6fmfNld3pf/vjK5o2XjABlIul8s9S79cKje7uigFeGQl0ekSAJ1R+6BP739rj7yBwJb2DD867vaJ6g1QWu972SNifyWxEBFD2Q38jjblPxjF+LD0zzfpI40X2zAPAQDQ6KcTtZFg0/ivP2JPw3b/y9ZQ+iPi/xGxKyIei4jdEfF4VLd9IiKebDp+V0SUW+Q/2BRfPP4s3FpdDVtLx3+vZWtb9fFfNK6C9XdlsR0RtQHz5KHsPRmK7p5TZ6YmD7fI4+c3//hycWpSiqz+tfFf+kjzr40Fs3LcKjZN0E2MzY2trtZ1t69GDBSb658UI5L5lYB0CLw3IgZ++XrZx+1vCJ958bt985Huhds9uP4Vv+3Py2QNlirK30a8UG3/Uixo//rKXdJ6fXKkN6YmD42kZ8Gh3Dxu/H7tvbz0ZDn1/+Gv5t3eOvbjyaxnrV7a/tsazv+ord/W69+fRCTz67WzSxzoytJ5XPvziyXvaVZ6/m9JPqiEa/eln43Nzc0cjtiSvLM4fbS+by2ePkepWv+hg/n9f1e2T/pOPBUR6Un8dEQ8E9U7xMEoXzkQEc9GxMGlqx+/vvHcxyuvf3ul9Z/Ivf4taP/6en0aSFNnFqSMTVUvZxH1lPlA19kDN+8P5Oe/vPY/WgkNZSn5179kwVL74lLkB1b59gEAAMAjoRARfQ1zSX1RKAwPV+eAdse2wtT07NxLyfSn5yeq3xHob9i2Oh/cndTmP/sb4qNN8SPZvPFXXVsr8eHx6amJDtUZqNpe6fNJYXj+WlAoDNe+FLM2U8zAf5mv/MDm9aD+v+f6OhUEWHc+/2GzmrncECktsVHJf8rAxrScz39zgbAx5fX/Fv/P7YYBNoiy7gyb2sP0/+KCn3e8sbMd5QHWTzHenw8XOloSYL0Z/8OmtKwvya84UO7Jf6k3Fm8cva0P2BUrK8bWnLw6EkhHVh3JfetK9qr9msKS20Th4Q7Ys+gnI1bWpqdW/7ac3rPmJ385Wx9b6xb8fl36aV6g9XVjtK991yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC19G8AAAD//4Yy2tM=") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000001180)='./bus\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, 0x0, 0x0) 33.874512136s ago: executing program 2 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0) 23.837390428s ago: executing program 5 (id=805): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6200040bfe"], 0xcc) 22.725650082s ago: executing program 3 (id=806): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ec'], 0x32, 0xfffffffffffffffc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 22.531896205s ago: executing program 2 (id=807): clock_adjtime(0xffffffd3, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 20.970051653s ago: executing program 5 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891a, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x2}, 0x94) 20.526883629s ago: executing program 2 (id=810): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.691425667s ago: executing program 4 (id=811): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000001180)='./bus\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) getdents64(0xffffffffffffffff, 0x0, 0x0) 19.605245994s ago: executing program 3 (id=812): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) close(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0xa0028000}) epoll_create1(0x80000) r4 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x8b02) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000040)={0x2, "61a383835e0100d3f736595538e5fe23a81bcf9c3073192d0bd82a046f9c1290", 0x3, 0x3, 0x0, 0x20}) 19.510948828s ago: executing program 5 (id=813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) 19.221017488s ago: executing program 2 (id=814): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004200)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 18.188986618s ago: executing program 3 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) 17.961389253s ago: executing program 4 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0) 17.915086211s ago: executing program 5 (id=817): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x4) 17.739214351s ago: executing program 3 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$igmp(0x2, 0x3, 0x2) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r8, &(0x7f00000003c0)={0x0, 0xa912, 0x10000, 0x3, 0x43}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52a7, 0x5d340f1741c2b427, 0x3, 0x1d0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa56, 0x20, 0x3, 0x218}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6428, 0x20, 0x2, 0xda, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x78e3, 0x100, 0x0, 0x63}}], 0x4, 0x0, 0x0) 16.107387479s ago: executing program 3 (id=819): clock_adjtime(0xffffffd3, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 16.107055425s ago: executing program 5 (id=820): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 14.568138619s ago: executing program 5 (id=821): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ec'], 0x32, 0xfffffffffffffffc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 12.187854523s ago: executing program 4 (id=822): syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0) 12.058975433s ago: executing program 4 (id=823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.879981871s ago: executing program 4 (id=824): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@lazytime}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@barrier_val}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@data_err_ignore}, {@acl}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}], [{@subj_user={'subj_user', 0x3d, 'wlan0\x00'}}, {@appraise}]}, 0x9b, 0x4fc, &(0x7f0000000140)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 2.547020361s ago: executing program 34 (id=814): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004200)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 529.909569ms ago: executing program 3 (id=826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @broadcast, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @local}}, 0x42) 0s ago: executing program 4 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r4, r4, 0x2f}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3f, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, 0x0, 0x25, 0x0, @void}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@map=r7, r5, 0x2f, 0x2018, 0x4, @value=r6}, 0x20) pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="9714cff462295cb241d57240e4dfe8c743c53e9ef4851ffb11", 0x19}], 0x2, 0x5, 0x29800) kernel console output (not intermixed with test programs): error (device loop0): ext4_orphan_get:1404: comm syz.0.102: couldn't read orphan inode 15 (err -117) [ 154.576275][ T6176] loop0: lost filesystem error report for type 5 error -117 [ 154.609709][ T5954] bridge_slave_1: entered promiscuous mode [ 154.674913][ T6073] Flush: task=udevd[6073] dev=loop2 state=2 [ 154.757419][ T6073] Teardown: task=udevd[6073] dev=loop2 state=2 [ 154.865050][ T6071] Flush: task=udevd[6071] dev=loop4 state=2 [ 155.094008][ T6176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.408771][ T6071] Teardown: task=udevd[6071] dev=loop4 state=2 [ 156.437597][ T6188] loop3: detected capacity change from 0 to 512 [ 156.438804][ T6188] EXT4-fs: Ignoring removed oldalloc option [ 156.438856][ T6188] EXT4-fs: Ignoring removed nobh option [ 157.337250][ T6188] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.103: ea_inode file size=7 entry size=6 [ 157.337599][ T6188] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 157.338046][ T6188] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.103: iget: bad extra_isize 90 (inode size 256) [ 157.338079][ T6188] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.342035][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 157.342060][ C0] EXT4-fs (loop3): initial error at time 1784397679: ext4_xattr_inode_iget:441: inode 11 [ 157.342094][ C0] EXT4-fs (loop3): last error at time 1784397679: ext4_xattr_inode_iget:441: inode 11 [ 157.368195][ T6188] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.103: error while reading EA inode 11 err=-117 [ 157.368233][ T6188] loop3: lost filesystem error report for type 5 error -117 [ 157.500523][ T6188] EXT4-fs (loop3): 1 orphan inode deleted [ 157.512788][ T6188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.042740][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.157447][ T6191] loop2: detected capacity change from 0 to 4096 [ 158.174298][ T6191] EXT4-fs: inline encryption not supported [ 158.207941][ T6191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.207966][ T6191] EXT4-fs (loop2): Test dummy encryption mode enabled [ 158.239613][ T6191] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 158.239754][ T6191] System zones: 0-5 [ 158.279930][ T6191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.611709][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 159.983388][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.327853][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 160.476610][ T4912] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 160.476636][ T4912] Bluetooth: Wrong link type (-22) [ 160.485808][ T4912] Bluetooth: hci2: link tx timeout [ 160.487492][ T4912] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.505234][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 161.186005][ T6209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 161.969045][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 162.044984][ T6213] binder: 6212:6213 ioctl c0306201 0 returned -14 [ 162.067265][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.151077][ T6217] loop0: detected capacity change from 0 to 512 [ 162.152406][ T6217] EXT4-fs: Ignoring removed orlov option [ 162.168394][ T6215] fuse: Bad value for 'fd' [ 162.173611][ T6217] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 162.278045][ T6217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 162.278678][ T6217] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.113: corrupted in-inode xattr: e_value size too large [ 162.278714][ T6217] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.281042][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 162.281063][ C1] EXT4-fs (loop0): initial error at time 1784397684: ext4_iget_extra_inode:5180: inode 15 [ 162.281094][ C1] EXT4-fs (loop0): last error at time 1784397684: ext4_iget_extra_inode:5180: inode 15 [ 162.302743][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 162.348502][ T6217] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.113: couldn't read orphan inode 15 (err -117) [ 162.348542][ T6217] loop0: lost filesystem error report for type 5 error -117 [ 162.416699][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.436975][ T6217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.443872][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 162.571921][ T6221] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 162.655068][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 162.718642][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.042540][ T5954] team0: Port device team_slave_0 added [ 163.050517][ T5954] team0: Port device team_slave_1 added [ 163.126127][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.126145][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.126175][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.130183][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.130200][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.130230][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.396048][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.603567][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 163.706278][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 163.760166][ T6231] loop4: detected capacity change from 0 to 512 [ 163.761359][ T4912] Bluetooth: hci0: hcon ffff8880374b0000 sent 0 < count 1 [ 163.781121][ T6231] EXT4-fs (loop4): Test dummy encryption mode enabled [ 163.822919][ T6231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e09d, mo2=0002] [ 163.823059][ T6231] System zones: 1-12 [ 163.850669][ T6231] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.019494][ T6240] loop3: detected capacity change from 0 to 512 [ 164.167167][ T6240] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.118: ea_inode with extended attributes [ 164.167208][ T6240] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 164.168124][ T6240] EXT4-fs (loop3): Remounting filesystem read-only [ 164.168307][ T6240] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -30) [ 164.168404][ T6240] EXT4-fs (loop3): 1 orphan inode deleted [ 164.236495][ T6240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.365573][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.467304][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 165.485617][ T6259] binder: 6258:6259 ioctl c0306201 0 returned -14 [ 165.563840][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 165.620557][ T6263] loop3: detected capacity change from 0 to 512 [ 165.644481][ T6261] fuse: Unknown parameter '0x0000000000000003' [ 165.676158][ T6263] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.121: iget: bad i_size value: 38620345925642 [ 165.676197][ T6263] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.680048][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 165.680071][ C0] EXT4-fs (loop3): initial error at time 1784397687: ext4_orphan_get:1399: inode 15 [ 165.680100][ C0] EXT4-fs (loop3): last error at time 1784397687: ext4_orphan_get:1399: inode 15 [ 165.728205][ T6263] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.121: couldn't read orphan inode 15 (err -117) [ 165.728243][ T6263] loop3: lost filesystem error report for type 5 error -117 [ 165.784152][ T6263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.846033][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 165.950346][ T5605] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 166.007993][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.130220][ T5798] Flush: task=udevd[5798] dev=loop3 state=2 [ 166.141736][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 166.174445][ T5954] hsr_slave_0: entered promiscuous mode [ 166.235205][ T5954] hsr_slave_1: entered promiscuous mode [ 166.237148][ T5954] debugfs: 'hsr0' already exists in 'hsr' [ 166.237188][ T5954] Cannot create hsr debugfs directory [ 166.317468][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 166.320551][ T5798] Teardown: task=udevd[5798] dev=loop3 state=2 [ 166.358477][ T6270] loop2: detected capacity change from 0 to 1024 [ 166.457780][ T6270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.546451][ T4912] Bluetooth: hci3: hcon ffff8880379e0000 sent 0 < count 1 [ 166.737756][ T6277] loop0: detected capacity change from 0 to 512 [ 166.755003][ T6277] EXT4-fs (loop0): Test dummy encryption mode enabled [ 166.826613][ T6270] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.127: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 166.827474][ T6270] EXT4-fs (loop2): Remounting filesystem read-only [ 166.888538][ T6277] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.129: inode has both inline data and extents flags [ 166.888572][ T6277] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.889070][ T6277] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.129: couldn't read orphan inode 15 (err -117) [ 166.889102][ T6277] loop0: lost filesystem error report for type 5 error -117 [ 166.896086][ T6277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.011837][ T6282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 167.877283][ T6277] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #2: comm syz.0.129: invalid size [ 167.916209][ T1524] hsr_slave_0: left promiscuous mode [ 167.948796][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.976527][ T1524] hsr_slave_1: left promiscuous mode [ 167.978521][ T1524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.978705][ T1524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.015190][ T1524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.015218][ T1524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.017727][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.087480][ T6287] binder: 6286:6287 ioctl c0306201 0 returned -14 [ 168.137755][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 168.154358][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 168.195418][ T1524] veth1_macvtap: left promiscuous mode [ 168.195691][ T1524] veth0_macvtap: left promiscuous mode [ 168.196010][ T1524] veth1_vlan: left promiscuous mode [ 168.198140][ T1524] veth0_vlan: left promiscuous mode [ 168.281768][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 168.286674][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 168.628644][ T6295] fuse: Unknown parameter '0x0000000000000003' [ 168.912675][ T6297] loop0: detected capacity change from 0 to 512 [ 168.969794][ T6297] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.135: iget: bad i_size value: 38620345925642 [ 168.969834][ T6297] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.973896][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 168.973923][ C1] EXT4-fs (loop0): initial error at time 1784397690: ext4_orphan_get:1399: inode 15 [ 168.973956][ C1] EXT4-fs (loop0): last error at time 1784397690: ext4_orphan_get:1399: inode 15 [ 169.023849][ T6297] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.135: couldn't read orphan inode 15 (err -117) [ 169.023883][ T6297] loop0: lost filesystem error report for type 5 error -117 [ 169.062050][ T6297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.183878][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.282321][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 169.600453][ T1524] team0 (unregistering): Port device team_slave_1 removed [ 169.688466][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 169.729142][ T1524] team0 (unregistering): Port device team_slave_0 removed [ 170.867744][ T5706] IPVS: starting estimator thread 0... [ 170.963892][ T6315] IPVS: using max 8 ests per chain, 19200 per kthread [ 172.156756][ T6328] loop4: detected capacity change from 0 to 1024 [ 172.160383][ T6328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.198936][ T6331] fuse: Unknown parameter '0x0000000000000003' [ 172.241285][ T6328] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 172.241404][ T6328] System zones: 0-1, 3-12 [ 172.352292][ T6328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.997150][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.128068][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 173.306208][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 173.797522][ T6356] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 173.863200][ T6357] bridge0: port 3(netdevsim1) entered blocking state [ 173.863510][ T6357] bridge0: port 3(netdevsim1) entered disabled state [ 173.863796][ T6357] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 173.869330][ T6357] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 173.877727][ T6357] bridge0: port 3(netdevsim1) entered blocking state [ 173.877906][ T6357] bridge0: port 3(netdevsim1) entered forwarding state [ 174.650185][ T6352] netlink: 'syz.4.148': attribute type 1 has an invalid length. [ 175.106301][ T6352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.402429][ T6371] loop2: detected capacity change from 0 to 8 [ 176.027307][ T6363] bond1: (slave geneve2): making interface the new active one [ 176.104711][ T6363] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 176.288582][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.543438][ T6375] fuse: Unknown parameter '0x0000000000000003' [ 176.596504][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 176.692720][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 177.232471][ T5954] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.335783][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.343207][ T5954] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.598659][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.657453][ T5954] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.747210][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.749441][ T5954] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.837918][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.980048][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.071997][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.120286][ T1527] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.120460][ T1527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.123441][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.123625][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.495866][ T6418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.165'. [ 179.846649][ T6429] fuse: Unknown parameter '0x0000000000000003' [ 180.146810][ C1] Unknown status report in ack skb [ 181.193022][ T6450] loop0: detected capacity change from 0 to 8 [ 181.778789][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 182.130538][ T5798] Flush: task=udevd[5798] dev=loop0 state=2 [ 182.241149][ T5798] Teardown: task=udevd[5798] dev=loop0 state=2 [ 182.321849][ T6466] binder: 6465:6466 ioctl c0306201 200000000080 returned -14 [ 182.336758][ T6466] binder: 6465:6466 ioctl c0306201 2000000003c0 returned -14 [ 182.571024][ T6464] netlink: 48 bytes leftover after parsing attributes in process `syz.0.176'. [ 182.713566][ T6470] loop2: detected capacity change from 0 to 4096 [ 182.736545][ T6470] EXT4-fs: inline encryption not supported [ 182.769046][ T6470] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.769069][ T6470] EXT4-fs (loop2): Test dummy encryption mode enabled [ 182.787546][ T6470] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 182.787664][ T6470] System zones: 0-5 [ 182.887833][ T6470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.060621][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.272287][ T6486] fuse: Unknown parameter '0x0000000000000003' [ 183.699063][ T6492] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 183.869488][ T6495] loop0: detected capacity change from 0 to 1024 [ 184.057714][ T6470] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 184.282446][ T6504] input: syz0 as /devices/virtual/input/input12 [ 184.570435][ T6495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.570917][ T6495] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.650511][ T6494] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.182: lblock 0 mapped to illegal pblock 0 (length 1) [ 184.710197][ T6494] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.182: lblock 0 mapped to illegal pblock 0 (length 1) [ 184.761576][ T6494] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.182: lblock 0 mapped to illegal pblock 0 (length 1) [ 184.792444][ T6494] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.182: lblock 0 mapped to illegal pblock 0 (length 1) [ 184.812680][ T6494] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.182: lblock 0 mapped to illegal pblock 0 (length 1) [ 184.830939][ T6494] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.182: lblock 0 mapped to illegal pblock 0 (length 1) [ 184.886741][ T6494] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.182: lblock 0 mapped to illegal pblock 0 (length 1) [ 185.023843][ T6494] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.182: lblock 0 mapped to illegal pblock 0 (length 1) [ 185.507156][ T6495] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.182: lblock 0 mapped to illegal pblock 0 (length 1) [ 185.760203][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.834764][ T5954] veth0_vlan: entered promiscuous mode [ 185.837787][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.937784][ T5954] veth1_vlan: entered promiscuous mode [ 185.957126][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 186.066975][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 186.134251][ T5954] veth0_macvtap: entered promiscuous mode [ 186.143276][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 186.203074][ T5954] veth1_macvtap: entered promiscuous mode [ 186.219985][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 186.324377][ T6514] overlayfs: failed to resolve './file1': -2 [ 186.429820][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.556670][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.672864][ T1023] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.688151][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.689059][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.689104][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.758836][ T6521] loop2: detected capacity change from 0 to 512 [ 186.784750][ T6521] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.187: iget: bad i_size value: 38620345925642 [ 186.784789][ T6521] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.799416][ T6521] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.187: couldn't read orphan inode 15 (err -117) [ 186.799452][ T6521] loop2: lost filesystem error report for type 5 error -117 [ 186.803281][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 186.803302][ C1] EXT4-fs (loop2): initial error at time 1784397707: ext4_orphan_get:1399: inode 15 [ 186.803327][ C1] EXT4-fs (loop2): last error at time 1784397707: ext4_orphan_get:1404 [ 186.863205][ T6520] binder: 6519:6520 ioctl c0306201 200000000080 returned -14 [ 186.865052][ T6521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.873759][ T6520] binder: 6519:6520 ioctl c0306201 2000000003c0 returned -14 [ 187.038932][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.186054][ T5798] Flush: task=udevd[5798] dev=loop2 state=2 [ 187.266976][ T6531] Bluetooth: MGMT ver 1.23 [ 187.281011][ T6529] fuse: Unknown parameter 'fd0x0000000000000003' [ 187.400391][ T5798] Teardown: task=udevd[5798] dev=loop2 state=2 [ 187.501998][ T6525] netlink: 48 bytes leftover after parsing attributes in process `syz.3.189'. [ 188.374807][ T6541] overlayfs: failed to resolve './file1': -2 [ 188.564167][ T6539] input: syz0 as /devices/virtual/input/input13 [ 188.590836][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.590855][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.674828][ T6550] loop3: detected capacity change from 0 to 512 [ 188.738491][ T6550] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.199: iget: bad i_size value: 38620345925642 [ 188.738529][ T6550] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.743440][ T6550] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.199: couldn't read orphan inode 15 (err -117) [ 188.743473][ T6550] loop3: lost filesystem error report for type 5 error -117 [ 188.753969][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 188.753990][ C1] EXT4-fs (loop3): initial error at time 1784397709: ext4_orphan_get:1399: inode 15 [ 188.754016][ C1] EXT4-fs (loop3): last error at time 1784397709: ext4_orphan_get:1404 [ 188.868529][ T6550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.131180][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.144907][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.144928][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.205018][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 189.361473][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 189.582938][ T6559] fuse: Unknown parameter 'fd0x0000000000000003' [ 190.525079][ T6568] binder: 6563:6568 ioctl c0306201 200000000080 returned -14 [ 190.526188][ T6568] binder: 6563:6568 ioctl c0306201 2000000003c0 returned -14 [ 191.245338][ T6583] bridge0: port 3(netdevsim1) entered blocking state [ 191.245670][ T6583] bridge0: port 3(netdevsim1) entered disabled state [ 191.245995][ T6583] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 191.254698][ T6583] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 191.255502][ T6583] bridge0: port 3(netdevsim1) entered blocking state [ 191.255653][ T6583] bridge0: port 3(netdevsim1) entered forwarding state [ 191.334207][ T6582] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 191.663332][ T6575] netlink: 48 bytes leftover after parsing attributes in process `syz.4.205'. [ 192.026639][ T6587] loop0: detected capacity change from 0 to 512 [ 192.032585][ T6580] loop2: detected capacity change from 0 to 4096 [ 192.044447][ T6580] EXT4-fs: Ignoring removed oldalloc option [ 192.166056][ T6580] EXT4-fs (loop2): Test dummy encryption mode enabled [ 192.203510][ T6587] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.209: iget: bad i_size value: 38620345925642 [ 192.203549][ T6587] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.211158][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 192.211183][ C0] EXT4-fs (loop0): initial error at time 1784397712: ext4_orphan_get:1399: inode 15 [ 192.211214][ C0] EXT4-fs (loop0): last error at time 1784397712: ext4_orphan_get:1399: inode 15 [ 192.211657][ T6587] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.209: couldn't read orphan inode 15 (err -117) [ 192.211687][ T6587] loop0: lost filesystem error report for type 5 error -117 [ 192.280784][ T6587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.416852][ T6580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.517440][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.810594][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 192.863478][ T6596] loop5: detected capacity change from 0 to 8 [ 193.069321][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 193.363209][ T6600] loop4: detected capacity change from 0 to 512 [ 193.435646][ T6600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.517408][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 193.888845][ T6600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.889038][ T6600] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.642018][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.796993][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 194.822427][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.937638][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 194.948602][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 194.980872][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 195.034295][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 195.089359][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 195.478405][ T6638] fuse: Unknown parameter 'fd0x0000000000000003' [ 195.631042][ T6643] loop5: detected capacity change from 0 to 512 [ 195.695572][ T4912] Bluetooth: hci3: hcon ffff8880379e0000 sent 0 < count 1 [ 196.223283][ T6643] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.221: iget: bad i_size value: 38620345925642 [ 196.223320][ T6643] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.937780][ T6643] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.221: couldn't read orphan inode 15 (err -117) [ 196.937839][ T6643] loop5: lost filesystem error report for type 5 error -117 [ 197.188416][ T6643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.324580][ T6664] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.560969][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.866428][ T6676] loop4: detected capacity change from 0 to 512 [ 197.977448][ T6678] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 198.546432][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 198.618445][ T6676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.823065][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 199.116796][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.239937][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 199.516208][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 200.548392][ T6723] loop2: detected capacity change from 0 to 512 [ 200.628814][ T6723] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.240: iget: bad i_size value: 38620345925642 [ 200.628868][ T6723] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.630137][ T6723] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.240: couldn't read orphan inode 15 (err -117) [ 200.630219][ T6723] loop2: lost filesystem error report for type 5 error -117 [ 200.645018][ T6723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.408666][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.463964][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 201.587622][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 202.403219][ T6771] loop4: detected capacity change from 0 to 512 [ 202.514071][ T6771] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.255: iget: bad i_size value: 38620345925642 [ 202.514112][ T6771] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.518160][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 202.518183][ C0] EXT4-fs (loop4): initial error at time 1784397721: ext4_orphan_get:1399: inode 15 [ 202.518215][ C0] EXT4-fs (loop4): last error at time 1784397721: ext4_orphan_get:1399: inode 15 [ 202.574261][ T6771] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.255: couldn't read orphan inode 15 (err -117) [ 202.574292][ T6771] loop4: lost filesystem error report for type 5 error -117 [ 202.605718][ T6771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.668753][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.668870][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.051257][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.323785][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 204.274139][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 204.464147][ T6805] loop2: detected capacity change from 0 to 512 [ 204.466265][ T6805] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 204.466285][ T6805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 204.534643][ T6803] loop5: detected capacity change from 0 to 512 [ 204.582716][ T6805] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.266: Invalid block bitmap block 0 in block_group 0 [ 204.582751][ T6805] loop2: lost filesystem error report for type 5 error -117 [ 204.588203][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 204.588227][ C0] EXT4-fs (loop2): initial error at time 1784397723: ext4_read_block_bitmap_nowait:483 [ 204.588252][ C0] EXT4-fs (loop2): last error at time 1784397723: ext4_read_block_bitmap_nowait:483 [ 204.629308][ T6805] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 204.629373][ T6805] loop2: lost filesystem error report for type 5 error -117 [ 204.688824][ T6803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.709936][ T6805] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.266: attempt to clear invalid blocks 983261 len 1 [ 204.710040][ T6805] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.714807][ T6805] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.266: Invalid inode table block 0 in block_group 0 [ 204.714903][ T6805] loop2: lost filesystem error report for type 5 error -117 [ 204.790046][ T6805] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 204.790075][ T6805] loop2: lost filesystem error report for type 5 error -117 [ 204.868125][ T6803] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.265: bg 0: block 306: padding at end of block bitmap is not set [ 204.990653][ T6813] loop0: detected capacity change from 0 to 512 [ 205.041853][ T6805] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 205.047788][ T6805] loop2: lost filesystem error report for type 5 error -117 [ 205.063687][ T6805] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.266: Invalid inode table block 0 in block_group 0 [ 205.063721][ T6805] loop2: lost filesystem error report for type 5 error -117 [ 205.098762][ T6805] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 205.098793][ T6805] loop2: lost filesystem error report for type 5 error -117 [ 205.101405][ T6805] EXT4-fs error (device loop2): ext4_truncate:4691: inode #11: comm syz.2.266: mark_inode_dirty error [ 205.101440][ T6805] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.130149][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.148892][ T6805] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 205.148962][ T6805] loop2: lost filesystem error report for type 5 error -117 [ 205.154420][ T6805] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.266: Invalid inode table block 0 in block_group 0 [ 205.154513][ T6805] loop2: lost filesystem error report for type 5 error -117 [ 205.275295][ T6805] EXT4-fs (loop2): 1 truncate cleaned up [ 205.334612][ T6821] loop4: detected capacity change from 0 to 512 [ 205.345064][ T6821] EXT4-fs (loop4): Test dummy encryption mode enabled [ 205.345424][ T6821] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 205.383543][ T6821] Flush: task=syz.4.270[6821] dev=loop4 state=2 [ 205.383943][ T6813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.406580][ T6805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.438116][ T5798] Flush: task=udevd[5798] dev=loop5 state=2 [ 205.542620][ T5798] Teardown: task=udevd[5798] dev=loop5 state=2 [ 205.548526][ T6821] Teardown: task=syz.4.270[6821] dev=loop4 state=2 [ 205.634694][ T6821] loop4: detected capacity change from 0 to 1024 [ 205.736164][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.740691][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.803061][ T5798] Flush: task=udevd[5798] dev=loop4 state=2 [ 205.860127][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 205.924992][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 205.986040][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 205.986453][ T5798] Teardown: task=udevd[5798] dev=loop4 state=2 [ 206.140430][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 208.468394][ T38] audit: type=1326 audit(1784397727.242:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6847 comm="syz.4.281" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc738e9de99 code=0x0 [ 208.863980][ T32] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 208.864032][ T32] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 208.864068][ T32] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 208.864094][ T32] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 208.864120][ T32] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 208.864147][ T32] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 209.025261][ T32] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [] on [ 209.060969][ T6856] loop2: detected capacity change from 0 to 512 [ 209.124335][ T6856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.611924][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.713743][ T6864] loop3: detected capacity change from 0 to 1024 [ 209.799826][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 209.844494][ T6864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.844638][ T6864] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.013802][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 211.044883][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 211.397956][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 211.492081][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 211.843733][ T6886] loop3: detected capacity change from 0 to 1024 [ 211.939934][ T6886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.943522][ T6893] loop2: detected capacity change from 0 to 256 [ 212.214692][ T6900] loop4: detected capacity change from 0 to 4096 [ 212.253922][ T6900] EXT4-fs: inline encryption not supported [ 212.332816][ T6900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.332841][ T6900] EXT4-fs (loop4): Test dummy encryption mode enabled [ 212.358318][ T6900] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 212.358817][ T6900] System zones: 0-5 [ 212.418738][ T38] audit: type=1326 audit(1784397730.914:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6902 comm="syz.0.300" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafac60de99 code=0x0 [ 212.475059][ T6900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.523036][ T5606] do_umount: task=syz-executor[5606] propagate_mount_busy()!=0 [ 212.523351][ T5606] do_umount: task=syz-executor[5606] propagate_mount_busy()!=0 [ 212.740211][ T5733] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.740248][ T5733] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.740276][ T5733] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.740304][ T5733] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 212.826136][ T5733] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [] on [ 212.951225][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 213.169024][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 213.623922][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.790925][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 214.993012][ T6917] netlink: 16 bytes leftover after parsing attributes in process `syz.5.304'. [ 215.308926][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 215.699673][ T6930] loop2: detected capacity change from 0 to 8 [ 215.700562][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.854459][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 215.990764][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 215.999140][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 216.388142][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'. [ 216.426094][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 216.739529][ T6945] loop5: detected capacity change from 0 to 4096 [ 217.037399][ T6945] EXT4-fs: inline encryption not supported [ 217.228944][ T6961] loop0: detected capacity change from 0 to 512 [ 217.243324][ T6961] EXT4-fs: Ignoring removed oldalloc option [ 217.243587][ T6961] EXT4-fs: Ignoring removed nobh option [ 217.802337][ T6957] netlink: 'syz.2.318': attribute type 42 has an invalid length. [ 218.023751][ T6945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.023775][ T6945] EXT4-fs (loop5): Test dummy encryption mode enabled [ 218.047120][ T6961] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.316: ea_inode file size=7 entry size=6 [ 218.048676][ T6961] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.316: iget: bad extra_isize 90 (inode size 256) [ 218.048711][ T6961] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 218.049690][ T6961] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.316: error while reading EA inode 11 err=-117 [ 218.049724][ T6961] loop0: lost filesystem error report for type 5 error -117 [ 218.057268][ T6961] EXT4-fs (loop0): 1 orphan inode deleted [ 218.060435][ T6961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.202301][ T6945] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 218.202444][ T6945] System zones: 0-5 [ 218.229040][ T6945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.458218][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.803989][ T6969] loop3: detected capacity change from 0 to 8 [ 219.045975][ T38] audit: type=1326 audit(1784397737.023:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6971 comm="syz.2.322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57b1fbde99 code=0x0 [ 219.410645][ T822] hid_parser_main: 2 callbacks suppressed [ 219.420112][ T822] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.420156][ T822] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.420184][ T822] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.420212][ T822] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.420239][ T822] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.420266][ T822] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.564219][ T822] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [] on [ 219.705495][ T6073] Flush: task=udevd[6073] dev=loop3 state=2 [ 219.744702][ T5798] Flush: task=udevd[5798] dev=loop0 state=2 [ 221.530324][ T5798] Teardown: task=udevd[5798] dev=loop0 state=2 [ 221.552521][ T6073] Teardown: task=udevd[6073] dev=loop3 state=2 [ 221.602830][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.772921][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 221.775181][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 221.896981][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 222.141910][ T4912] Bluetooth: hci3: hcon ffff8880379e0000 sent 0 < count 1 [ 224.105460][ T7007] loop4: detected capacity change from 0 to 512 [ 224.117074][ T7007] EXT4-fs: Ignoring removed oldalloc option [ 224.117333][ T7007] EXT4-fs: Ignoring removed nobh option [ 224.617473][ T7007] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.330: ea_inode file size=7 entry size=6 [ 224.617827][ T7007] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.330: iget: bad extra_isize 90 (inode size 256) [ 224.617863][ T7007] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 224.626906][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 224.626932][ C0] EXT4-fs (loop4): initial error at time 1784397742: ext4_xattr_inode_iget:441: inode 11 [ 224.627019][ C0] EXT4-fs (loop4): last error at time 1784397742: ext4_xattr_inode_iget:441: inode 11 [ 224.642102][ T7007] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.330: error while reading EA inode 11 err=-117 [ 224.642202][ T7007] loop4: lost filesystem error report for type 5 error -117 [ 224.688337][ T7007] EXT4-fs (loop4): 1 orphan inode deleted [ 224.694721][ T7007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.083080][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.176895][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 225.228842][ T7014] loop3: detected capacity change from 0 to 8 [ 225.262150][ T7018] random: crng reseeded on system resumption [ 225.283132][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 225.297908][ T7016] loop5: detected capacity change from 0 to 4096 [ 225.306113][ T7016] EXT4-fs: inline encryption not supported [ 225.354547][ T7016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.354567][ T7016] EXT4-fs (loop5): Test dummy encryption mode enabled [ 225.392384][ T7016] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 225.392525][ T7016] System zones: 0-5 [ 225.421911][ T7016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.475185][ T7022] loop4: detected capacity change from 0 to 8 [ 225.881752][ T6073] Flush: task=udevd[6073] dev=loop3 state=2 [ 227.137411][ T7029] SQUASHFS error: Unable to read inode 0xa7 [ 227.155957][ T7022] SQUASHFS error: Unable to read directory block [631:72] [ 227.532035][ T5615] Bluetooth: hci3: hcon ffff8880379e0000 sent 0 < count 1 [ 228.090894][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 228.090948][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 228.090977][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 228.091011][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 228.213196][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 229.119178][ T6073] Teardown: task=udevd[6073] dev=loop3 state=2 [ 229.182254][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 229.664847][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.582715][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 230.916897][ T7042] netlink: 48 bytes leftover after parsing attributes in process `syz.0.343'. [ 230.937027][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 231.058893][ T7060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 232.561766][ T7082] loop5: detected capacity change from 0 to 512 [ 232.603054][ T7082] EXT4-fs: Ignoring removed oldalloc option [ 232.603343][ T7082] EXT4-fs: Ignoring removed nobh option [ 233.385311][ T7082] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.344: ea_inode file size=7 entry size=6 [ 233.385626][ T7082] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.344: iget: bad extra_isize 90 (inode size 256) [ 233.385659][ T7082] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.387155][ T7082] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.344: error while reading EA inode 11 err=-117 [ 233.387188][ T7082] loop5: lost filesystem error report for type 5 error -117 [ 233.392263][ T7082] EXT4-fs (loop5): 1 orphan inode deleted [ 233.394914][ T7082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.923113][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.034821][ T7091] loop2: detected capacity change from 0 to 4096 [ 234.063167][ T7091] EXT4-fs: inline encryption not supported [ 234.088504][ T7091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.088527][ T7091] EXT4-fs (loop2): Test dummy encryption mode enabled [ 234.188169][ T7091] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 234.188309][ T7091] System zones: 0-5 [ 234.228300][ T7080] Flush: task=udevd[7080] dev=loop5 state=2 [ 234.234879][ T7091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.644454][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.754007][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 238.755157][ T7080] Teardown: task=udevd[7080] dev=loop5 state=2 [ 238.890075][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 239.448885][ T7125] netlink: 48 bytes leftover after parsing attributes in process `syz.3.360'. [ 239.871332][ T7134] loop4: detected capacity change from 0 to 512 [ 239.872495][ T7134] EXT4-fs: Ignoring removed oldalloc option [ 239.872546][ T7134] EXT4-fs: Ignoring removed nobh option [ 240.360665][ T7142] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 241.074179][ T7134] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.363: ea_inode file size=7 entry size=6 [ 241.074494][ T7134] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.363: iget: bad extra_isize 90 (inode size 256) [ 241.074526][ T7134] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 241.076477][ T7134] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.363: error while reading EA inode 11 err=-117 [ 241.076510][ T7134] loop4: lost filesystem error report for type 5 error -117 [ 241.077227][ T7134] EXT4-fs (loop4): 1 orphan inode deleted [ 241.080395][ T7134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.717724][ T7148] loop0: detected capacity change from 0 to 4096 [ 241.774213][ T7148] EXT4-fs: inline encryption not supported [ 241.778424][ T7148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.778444][ T7148] EXT4-fs (loop0): Test dummy encryption mode enabled [ 241.876054][ T7155] loop3: detected capacity change from 0 to 4096 [ 241.879847][ T7148] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 241.880096][ T7148] System zones: 0-5 [ 241.933583][ T7155] EXT4-fs: Ignoring removed oldalloc option [ 242.074900][ T7155] EXT4-fs (loop3): Test dummy encryption mode enabled [ 242.092858][ T7148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.298607][ T7160] loop2: detected capacity change from 0 to 512 [ 242.301839][ T7155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.505412][ T7160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.505553][ T7160] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.766129][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.833185][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.913544][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 244.373548][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 244.743693][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 245.614707][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 245.675935][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 245.737287][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.738663][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.941334][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 245.967239][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 246.053617][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 246.054865][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 251.336786][ T7209] loop0: detected capacity change from 0 to 512 [ 251.510147][ T7200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.375'. [ 252.057725][ T7221] loop3: detected capacity change from 0 to 512 [ 252.069978][ T7221] EXT4-fs: Ignoring removed oldalloc option [ 252.070255][ T7221] EXT4-fs: Ignoring removed nobh option [ 252.864886][ T7221] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.380: ea_inode file size=7 entry size=6 [ 252.865292][ T7221] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.380: iget: bad extra_isize 90 (inode size 256) [ 252.865334][ T7221] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 252.867854][ T7221] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.380: error while reading EA inode 11 err=-117 [ 252.867883][ T7221] loop3: lost filesystem error report for type 5 error -117 [ 252.870077][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 252.870097][ C1] EXT4-fs (loop3): initial error at time 1784397768: ext4_xattr_inode_iget:441: inode 11 [ 252.870127][ C1] EXT4-fs (loop3): last error at time 1784397768: ext4_xattr_inode_iget:446 [ 252.870367][ T7221] EXT4-fs (loop3): 1 orphan inode deleted [ 252.873371][ T7221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.150439][ T5798] Flush: task=udevd[5798] dev=loop0 state=2 [ 253.244300][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.319135][ T7226] loop5: detected capacity change from 0 to 4096 [ 253.348241][ T7226] EXT4-fs: Ignoring removed oldalloc option [ 253.404458][ T5798] Teardown: task=udevd[5798] dev=loop0 state=2 [ 253.430225][ T7226] EXT4-fs (loop5): Test dummy encryption mode enabled [ 253.638393][ T7226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.715796][ T7224] loop0: detected capacity change from 0 to 4096 [ 253.721019][ T7224] EXT4-fs: inline encryption not supported [ 253.731606][ T7224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.731625][ T7224] EXT4-fs (loop0): Test dummy encryption mode enabled [ 253.819524][ T6073] Flush: task=udevd[6073] dev=loop3 state=2 [ 254.113631][ T7224] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 254.113788][ T7224] System zones: 0-5 [ 254.225360][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.384'. [ 254.502932][ T7224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.056801][ T6073] Teardown: task=udevd[6073] dev=loop3 state=2 [ 255.112162][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.320502][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 255.352197][ T7253] loop3: detected capacity change from 0 to 512 [ 255.353686][ T7253] EXT4-fs: Ignoring removed oldalloc option [ 255.419908][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 255.527992][ T7253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.587314][ T7253] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.900858][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.995532][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.030579][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 256.127397][ T5798] Flush: task=udevd[5798] dev=loop0 state=2 [ 257.034595][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 257.040339][ T5798] Teardown: task=udevd[5798] dev=loop0 state=2 [ 257.513905][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.394'. [ 257.671011][ T7258] netlink: 48 bytes leftover after parsing attributes in process `syz.2.393'. [ 257.827592][ T7278] loop5: detected capacity change from 0 to 512 [ 257.836985][ T7278] EXT4-fs: Ignoring removed oldalloc option [ 257.837246][ T7278] EXT4-fs: Ignoring removed nobh option [ 258.730996][ T7278] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.396: ea_inode file size=7 entry size=6 [ 258.731328][ T7278] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.396: iget: bad extra_isize 90 (inode size 256) [ 258.731361][ T7278] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 258.733052][ T7278] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.396: error while reading EA inode 11 err=-117 [ 258.733086][ T7278] loop5: lost filesystem error report for type 5 error -117 [ 258.733413][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 258.733436][ C1] EXT4-fs (loop5): initial error at time 1784397773: ext4_xattr_inode_iget:441: inode 11 [ 258.733472][ C1] EXT4-fs (loop5): last error at time 1784397773: ext4_xattr_inode_iget:446 [ 258.847885][ T7278] EXT4-fs (loop5): 1 orphan inode deleted [ 258.850901][ T7278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.191021][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.293970][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 259.383760][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 259.649421][ T7301] loop2: detected capacity change from 0 to 256 [ 259.683140][ T7303] loop0: detected capacity change from 0 to 256 [ 259.686790][ T7302] loop5: detected capacity change from 0 to 512 [ 259.731678][ T7303] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.841826][ T7302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.847942][ T7302] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.949111][ T7298] loop3: detected capacity change from 0 to 4096 [ 259.952753][ T7298] EXT4-fs: inline encryption not supported [ 259.977232][ T7298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.977255][ T7298] EXT4-fs (loop3): Test dummy encryption mode enabled [ 260.000802][ T7298] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 260.001050][ T7298] System zones: 0-5 [ 260.043178][ T7298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.568688][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.638746][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.751447][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 260.816198][ T6073] Flush: task=udevd[6073] dev=loop3 state=2 [ 260.822726][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 260.846987][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 261.087381][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 261.893656][ T7318] netlink: 48 bytes leftover after parsing attributes in process `syz.4.408'. [ 261.915178][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 261.977972][ T6073] Teardown: task=udevd[6073] dev=loop3 state=2 [ 262.033957][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 262.790564][ T7346] loop2: detected capacity change from 0 to 512 [ 262.800075][ T7346] EXT4-fs: Ignoring removed oldalloc option [ 262.800324][ T7346] EXT4-fs: Ignoring removed nobh option [ 263.625544][ T7346] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.411: ea_inode file size=7 entry size=6 [ 263.625879][ T7346] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.411: iget: bad extra_isize 90 (inode size 256) [ 263.625910][ T7346] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 263.642774][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 263.642797][ C1] EXT4-fs (loop2): initial error at time 1784397778: ext4_xattr_inode_iget:441: inode 11 [ 263.642828][ C1] EXT4-fs (loop2): last error at time 1784397778: ext4_xattr_inode_iget:441: inode 11 [ 263.648656][ T7346] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.411: error while reading EA inode 11 err=-117 [ 263.648691][ T7346] loop2: lost filesystem error report for type 5 error -117 [ 263.654293][ T7346] EXT4-fs (loop2): 1 orphan inode deleted [ 263.666851][ T7346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.037013][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.210159][ T7349] loop3: detected capacity change from 0 to 4096 [ 264.213507][ T7349] EXT4-fs: Ignoring removed oldalloc option [ 264.214805][ T6073] Flush: task=udevd[6073] dev=loop2 state=2 [ 264.215013][ T7349] EXT4-fs (loop3): Test dummy encryption mode enabled [ 264.318199][ T6073] Teardown: task=udevd[6073] dev=loop2 state=2 [ 264.458774][ T7349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.556536][ T7364] loop4: detected capacity change from 0 to 512 [ 264.735410][ T7364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.735544][ T7364] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.267628][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.610667][ T7388] netlink: 'syz.2.425': attribute type 39 has an invalid length. [ 266.902286][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.933121][ T6073] Flush: task=udevd[6073] dev=loop4 state=2 [ 267.075542][ T6073] Teardown: task=udevd[6073] dev=loop4 state=2 [ 267.342028][ T5798] Flush: task=udevd[5798] dev=loop3 state=2 [ 267.401692][ T7401] netlink: 48 bytes leftover after parsing attributes in process `syz.4.424'. [ 267.542259][ T7408] loop5: detected capacity change from 0 to 512 [ 267.543426][ T7408] EXT4-fs: Ignoring removed oldalloc option [ 267.543493][ T7408] EXT4-fs: Ignoring removed nobh option [ 268.565074][ T7408] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.428: ea_inode file size=7 entry size=6 [ 268.565369][ T7408] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.428: iget: bad extra_isize 90 (inode size 256) [ 268.565401][ T7408] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.573955][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 268.573976][ C0] EXT4-fs (loop5): initial error at time 1784397782: ext4_xattr_inode_iget:441: inode 11 [ 268.574007][ C0] EXT4-fs (loop5): last error at time 1784397782: ext4_xattr_inode_iget:441: inode 11 [ 268.623852][ T5798] Teardown: task=udevd[5798] dev=loop3 state=2 [ 268.659255][ T7408] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.428: error while reading EA inode 11 err=-117 [ 268.659292][ T7408] loop5: lost filesystem error report for type 5 error -117 [ 268.660108][ T7408] EXT4-fs (loop5): 1 orphan inode deleted [ 268.663178][ T7408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.278675][ T7419] sctp: [Deprecated]: syz.4.432 (pid 7419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.278675][ T7419] Use struct sctp_sack_info instead [ 269.320287][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.402490][ T7418] loop0: detected capacity change from 0 to 1024 [ 269.417886][ T7421] loop3: detected capacity change from 0 to 512 [ 269.517314][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.517446][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.580424][ T7418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 269.580579][ T7418] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.058249][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 270.879062][ T7421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.879187][ T7421] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.407257][ T7436] overlayfs: missing 'lowerdir' [ 271.644599][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 271.667116][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.051994][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.053950][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 272.957477][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 273.029320][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 273.074477][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 273.788484][ T7470] loop5: detected capacity change from 0 to 512 [ 273.803029][ T7470] EXT4-fs: Ignoring removed oldalloc option [ 273.803341][ T7470] EXT4-fs: Ignoring removed nobh option [ 274.608860][ T7470] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.443: ea_inode file size=7 entry size=6 [ 274.609175][ T7470] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.443: iget: bad extra_isize 90 (inode size 256) [ 274.609207][ T7470] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 274.611068][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 274.611090][ C1] EXT4-fs (loop5): initial error at time 1784397788: ext4_xattr_inode_iget:441: inode 11 [ 274.611120][ C1] EXT4-fs (loop5): last error at time 1784397788: ext4_xattr_inode_iget:441: inode 11 [ 274.611447][ T7470] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.443: error while reading EA inode 11 err=-117 [ 274.611479][ T7470] loop5: lost filesystem error report for type 5 error -117 [ 274.612125][ T7470] EXT4-fs (loop5): 1 orphan inode deleted [ 274.615157][ T7470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.736916][ T7459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.442'. [ 275.043232][ T7476] loop2: detected capacity change from 0 to 512 [ 275.141367][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.262104][ T7476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.262251][ T7476] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.351469][ T7483] binder: 7482:7483 ioctl c0306201 200000000080 returned -14 [ 275.371877][ T7483] binder: 7482:7483 ioctl c0306201 2000000003c0 returned -14 [ 275.526517][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.531086][ T5798] Flush: task=udevd[5798] dev=loop5 state=2 [ 276.705653][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 276.735993][ T7490] input: syz0 as /devices/virtual/input/input28 [ 277.016160][ T7487] sctp: [Deprecated]: syz.5.446 (pid 7487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.016160][ T7487] Use struct sctp_sack_info instead [ 277.171623][ T5798] Teardown: task=udevd[5798] dev=loop5 state=2 [ 277.279326][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 278.175128][ T7503] loop2: detected capacity change from 0 to 1024 [ 278.228392][ T7503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 278.255381][ T7503] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.460355][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 278.518276][ T7508] loop3: detected capacity change from 0 to 4096 [ 278.527816][ T7508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.527836][ T7508] EXT4-fs (loop3): Test dummy encryption mode enabled [ 278.554130][ T7508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.605574][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 279.647913][ T7516] loop5: detected capacity change from 0 to 512 [ 279.660478][ T7516] EXT4-fs: Ignoring removed oldalloc option [ 279.660760][ T7516] EXT4-fs: Ignoring removed nobh option [ 280.444518][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 280.470855][ T7516] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.456: ea_inode file size=7 entry size=6 [ 280.471158][ T7516] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.456: iget: bad extra_isize 90 (inode size 256) [ 280.471191][ T7516] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 280.484652][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 280.484676][ C1] EXT4-fs (loop5): initial error at time 1784397793: ext4_xattr_inode_iget:441: inode 11 [ 280.484706][ C1] EXT4-fs (loop5): last error at time 1784397793: ext4_xattr_inode_iget:441: inode 11 [ 280.601572][ T7516] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.456: error while reading EA inode 11 err=-117 [ 280.601604][ T7516] loop5: lost filesystem error report for type 5 error -117 [ 280.657691][ T7516] EXT4-fs (loop5): 1 orphan inode deleted [ 280.661449][ T7516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.779275][ T7518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.457'. [ 280.832699][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.532388][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.551040][ T5612] Bluetooth: Wrong link type (-22) [ 281.628642][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 282.201799][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 282.300678][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 282.573399][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 282.620926][ T7538] binder: 7537:7538 ioctl c0306201 200000000080 returned -14 [ 282.622906][ T7538] binder: 7537:7538 ioctl c0306201 2000000003c0 returned -14 [ 283.542794][ T7542] loop4: detected capacity change from 0 to 1024 [ 283.647977][ T7542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 283.648120][ T7542] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.726174][ T7553] loop3: detected capacity change from 0 to 512 [ 283.933614][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 283.952588][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.952941][ T7553] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.097102][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 284.264136][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.278541][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 284.790095][ T7570] loop5: detected capacity change from 0 to 512 [ 284.799265][ T7570] EXT4-fs: Ignoring removed oldalloc option [ 284.799635][ T7570] EXT4-fs: Ignoring removed nobh option [ 285.598848][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 285.676804][ T7570] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.470: ea_inode file size=7 entry size=6 [ 285.677123][ T7570] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.470: iget: bad extra_isize 90 (inode size 256) [ 285.677157][ T7570] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 285.687138][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 285.687164][ C0] EXT4-fs (loop5): initial error at time 1784397798: ext4_xattr_inode_iget:441: inode 11 [ 285.687196][ C0] EXT4-fs (loop5): last error at time 1784397798: ext4_xattr_inode_iget:441: inode 11 [ 285.793180][ T7570] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.470: error while reading EA inode 11 err=-117 [ 285.793228][ T7570] loop5: lost filesystem error report for type 5 error -117 [ 285.811545][ T7570] EXT4-fs (loop5): 1 orphan inode deleted [ 285.814650][ T7570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.944137][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 286.150514][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.216969][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 286.826587][ T5612] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 286.904300][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 287.068872][ T7590] binder: 7588:7590 ioctl c0306201 200000000080 returned -14 [ 287.085493][ T7590] binder: 7588:7590 ioctl c0306201 2000000003c0 returned -14 [ 287.122731][ T7593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.477'. [ 287.378583][ T7594] netlink: 48 bytes leftover after parsing attributes in process `syz.5.471'. [ 287.639294][ T7603] input: syz0 as /devices/virtual/input/input31 [ 287.810011][ T7583] loop3: detected capacity change from 0 to 128 [ 287.917083][ T7583] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 287.917117][ T7583] FAT-fs (loop3): data area starts beyond volume (36 > 6) [ 287.917135][ T7583] FAT-fs (loop3): Can't find a valid FAT filesystem [ 287.959911][ T7609] loop2: detected capacity change from 0 to 128 [ 288.150506][ T7611] loop0: detected capacity change from 0 to 512 [ 288.160813][ T7611] EXT4-fs: Ignoring removed oldalloc option [ 288.161062][ T7611] EXT4-fs: Ignoring removed nobh option [ 288.935893][ T7611] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.482: ea_inode file size=7 entry size=6 [ 288.936207][ T7611] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.482: iget: bad extra_isize 90 (inode size 256) [ 288.936239][ T7611] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 288.938140][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 288.938161][ C1] EXT4-fs (loop0): initial error at time 1784397801: ext4_xattr_inode_iget:441: inode 11 [ 288.938193][ C1] EXT4-fs (loop0): last error at time 1784397801: ext4_xattr_inode_iget:441: inode 11 [ 288.954990][ T7611] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.482: error while reading EA inode 11 err=-117 [ 288.955021][ T7611] loop0: lost filesystem error report for type 5 error -117 [ 288.960258][ T7611] EXT4-fs (loop0): 1 orphan inode deleted [ 288.963893][ T7611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.250710][ T5798] Flush: task=udevd[5798] dev=loop3 state=2 [ 289.449771][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.451282][ T5798] Teardown: task=udevd[5798] dev=loop3 state=2 [ 289.571434][ T5604] Flush: task=syz-executor[5604] dev=loop0 state=2 [ 289.668218][ T5604] Teardown: task=syz-executor[5604] dev=loop0 state=2 [ 290.523175][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 290.837077][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 290.968020][ T7629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.489'. [ 291.100706][ T7634] loop2: detected capacity change from 0 to 2048 [ 292.018012][ T7628] loop4: detected capacity change from 0 to 256 [ 293.075442][ T7628] loop4: Can't mount, would change RO state [ 294.134497][ T7646] netlink: 48 bytes leftover after parsing attributes in process `syz.3.495'. [ 295.478959][ T7634] loop2: unable to read partition table [ 295.479201][ T7634] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 295.596904][ T5798] Flush: task=udevd[5798] dev=loop2 state=2 [ 295.624384][ T6073] Flush: task=udevd[6073] dev=loop4 state=2 [ 295.771617][ T5798] Teardown: task=udevd[5798] dev=loop2 state=2 [ 296.104350][ T6073] Teardown: task=udevd[6073] dev=loop4 state=2 [ 304.704186][ T7700] netlink: 48 bytes leftover after parsing attributes in process `syz.4.510'. [ 305.360841][ T7715] loop3: detected capacity change from 0 to 2048 [ 307.019464][ T7715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.296410][ T7715] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 309.546435][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.653411][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 309.758123][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 309.916155][ T7736] binder: 7734:7736 ioctl 4018620d 0 returned -22 [ 309.929223][ T7736] binder: 7734:7736 ioctl c0306201 200000000080 returned -14 [ 309.956062][ T7733] loop5: detected capacity change from 0 to 512 [ 309.969451][ T7736] binder: 7734:7736 ioctl c0306201 2000000003c0 returned -14 [ 309.983377][ T7733] EXT4-fs: Ignoring removed oldalloc option [ 310.076726][ T7733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.076854][ T7733] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.530943][ T5612] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 310.609298][ T7749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.527'. [ 311.092073][ T7733] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 311.092279][ T7733] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 311.092502][ T7754] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 311.092617][ T7754] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 311.092640][ T7754] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.523: Failed to acquire dquot type 0 [ 311.107160][ T7733] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.523: Failed to acquire dquot type 0 [ 313.173302][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.293482][ T5612] block nbd0: Receive control failed (result -32) [ 313.369265][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 313.518440][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 313.542358][ T7769] binder: 7767:7769 ioctl 4018620d 0 returned -22 [ 313.553710][ T7769] binder: 7767:7769 ioctl c0306201 200000000080 returned -14 [ 313.596902][ T7769] binder: 7767:7769 ioctl c0306201 2000000003c0 returned -14 [ 314.070066][ T7778] loop3: detected capacity change from 0 to 4096 [ 314.258974][ T7778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.773883][ T7789] netlink: 164 bytes leftover after parsing attributes in process `syz.4.543'. [ 314.935463][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.028869][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.546'. [ 315.178802][ T5798] Flush: task=udevd[5798] dev=loop3 state=2 [ 316.282726][ T5798] Teardown: task=udevd[5798] dev=loop3 state=2 [ 316.470878][ T7793] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 316.573827][ T7795] macvlan2: entered promiscuous mode [ 316.573858][ T7795] macvlan2: entered allmulticast mode [ 316.574527][ T7795] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 316.897240][ T7808] binder: 7807:7808 ioctl 4018620d 0 returned -22 [ 316.910112][ T7808] binder: 7807:7808 ioctl c0306201 200000000080 returned -14 [ 316.940048][ T7808] binder: 7807:7808 ioctl c0306201 2000000003c0 returned -14 [ 316.998909][ T7810] loop0: detected capacity change from 0 to 512 [ 317.118172][ T7810] EXT4-fs (loop0): Test dummy encryption mode enabled [ 317.118194][ T7810] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 317.142773][ T7810] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.549: bad orphan inode 131072 [ 317.142812][ T7810] loop0: lost filesystem error report for type 5 error -117 [ 317.149204][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 317.149251][ C1] EXT4-fs (loop0): initial error at time 1784397827: ext4_orphan_get:1425 [ 317.149292][ C1] EXT4-fs (loop0): last error at time 1784397827: ext4_orphan_get:1425 [ 317.266079][ T7810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.651319][ T7816] overlayfs: upper fs needs to support d_type. [ 317.772791][ T7818] loop2: detected capacity change from 0 to 512 [ 317.795749][ T7820] loop3: detected capacity change from 0 to 512 [ 317.840843][ T7820] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 317.844675][ T7820] Flush: task=syz.3.551[7820] dev=loop3 state=2 [ 317.945194][ T7820] Teardown: task=syz.3.551[7820] dev=loop3 state=2 [ 317.946812][ T7818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.946938][ T7818] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.028214][ T5604] do_umount: task=syz-executor[5604] propagate_mount_busy()!=0 [ 318.028477][ T5604] do_umount: task=syz-executor[5604] propagate_mount_busy()!=0 [ 318.055945][ T5604] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /120/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 318.250494][ T5604] do_umount: task=syz-executor[5604] propagate_mount_busy()!=0 [ 318.331359][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.497692][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 318.583965][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 319.285942][ T7836] loop5: detected capacity change from 0 to 512 [ 319.295712][ T7836] EXT4-fs: Ignoring removed oldalloc option [ 319.295975][ T7836] EXT4-fs: Ignoring removed nobh option [ 320.058474][ T7836] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.558: ea_inode file size=7 entry size=6 [ 320.058779][ T7836] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.558: iget: bad extra_isize 90 (inode size 256) [ 320.058810][ T7836] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 320.064163][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 320.064189][ C1] EXT4-fs (loop5): initial error at time 1784397830: ext4_xattr_inode_iget:441: inode 11 [ 320.064221][ C1] EXT4-fs (loop5): last error at time 1784397830: ext4_xattr_inode_iget:441: inode 11 [ 320.064829][ T7836] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.558: error while reading EA inode 11 err=-117 [ 320.064861][ T7836] loop5: lost filesystem error report for type 5 error -117 [ 320.142319][ T7836] EXT4-fs (loop5): 1 orphan inode deleted [ 320.146485][ T7836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.429567][ T7839] overlayfs: statfs failed on './file0' [ 320.508358][ T7842] syz.2.560 uses obsolete (PF_INET,SOCK_PACKET) [ 320.610627][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.675090][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 320.764807][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 320.854225][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.151728][ T7859] loop5: detected capacity change from 0 to 1024 [ 322.170738][ T7859] EXT4-fs: Ignoring removed orlov option [ 322.219272][ T7859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec118, mo2=0002] [ 322.219372][ T7859] System zones: 0-1, 3-12 [ 322.268280][ T7859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.868449][ T4912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.909655][ T4912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.910998][ T4912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.912499][ T4912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.936699][ T4912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.387235][ T1473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.484352][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.557303][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 323.685321][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 323.814587][ T7872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.569'. [ 324.679258][ T7896] loop5: detected capacity change from 0 to 512 [ 324.688897][ T7896] EXT4-fs: Ignoring removed oldalloc option [ 324.689203][ T7896] EXT4-fs: Ignoring removed nobh option [ 325.466800][ T1473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.629194][ T7896] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.572: ea_inode file size=7 entry size=6 [ 325.629534][ T7896] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.572: iget: bad extra_isize 90 (inode size 256) [ 325.629570][ T7896] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 325.630228][ T7896] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.572: error while reading EA inode 11 err=-117 [ 325.630261][ T7896] loop5: lost filesystem error report for type 5 error -117 [ 325.631017][ T7896] EXT4-fs (loop5): 1 orphan inode deleted [ 325.634218][ T7896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.016772][ T5612] Bluetooth: hci1: command tx timeout [ 326.078321][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.216170][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 326.311309][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 326.440305][ T7908] binder: BINDER_SET_CONTEXT_MGR already set [ 326.440322][ T7908] binder: 7905:7908 ioctl 4018620d 200000000040 returned -16 [ 326.695059][ T1473] bridge0: port 3(netdevsim1) entered disabled state [ 326.801599][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 327.217884][ T1473] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 327.217979][ T1473] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 327.372661][ T1473] bridge0: port 3(netdevsim1) entered disabled state [ 327.428637][ T7924] sctp: [Deprecated]: syz.2.579 (pid 7924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.428637][ T7924] Use struct sctp_sack_info instead [ 327.576070][ T7926] loop3: detected capacity change from 0 to 512 [ 327.632158][ T7926] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 327.934698][ T6073] Flush: task=udevd[6073] dev=loop3 state=2 [ 328.131239][ T1473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.182060][ T6073] Teardown: task=udevd[6073] dev=loop3 state=2 [ 328.205269][ T5612] Bluetooth: hci1: command tx timeout [ 330.458108][ T5612] Bluetooth: hci1: command tx timeout [ 332.906440][ T5612] Bluetooth: hci1: command tx timeout [ 332.956384][ T7951] binder: BINDER_SET_CONTEXT_MGR already set [ 332.956396][ T7951] binder: 7950:7951 ioctl 4018620d 200000000040 returned -16 [ 333.168328][ T7928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.580'. [ 333.808457][ T1473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.277254][ T7982] loop3: detected capacity change from 0 to 8 [ 335.212651][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 335.417626][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 335.515552][ T7995] netlink: 48 bytes leftover after parsing attributes in process `syz.2.599'. [ 335.643360][ T7999] loop3: detected capacity change from 0 to 256 [ 335.843071][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.843190][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.370198][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 336.462425][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 336.930133][ T8015] input: syz0 as /devices/virtual/input/input35 [ 336.934947][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.606'. [ 340.511523][ T8055] loop4: detected capacity change from 0 to 256 [ 340.674784][ T8062] syz.3.617 (8062) used greatest stack depth: 19200 bytes left [ 340.761272][ T5612] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 340.761358][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.761392][ T5612] Tainted: [L]=SOFTLOCKUP [ 340.761405][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.761425][ T5612] Workqueue: hci4 hci_rx_work [ 340.761470][ T5612] Call Trace: [ 340.761479][ T5612] [ 340.761489][ T5612] dump_stack_lvl+0xe8/0x150 [ 340.761529][ T5612] sysfs_create_dir_ns+0x271/0x2a0 [ 340.761563][ T5612] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 340.761598][ T5612] ? rt_spin_unlock+0x163/0x200 [ 340.761632][ T5612] kobject_add_internal+0x62c/0xce0 [ 340.761667][ T5612] kobject_add+0x163/0x240 [ 340.761690][ T5612] ? rt_spin_unlock+0x157/0x200 [ 340.761723][ T5612] ? __pfx_kobject_add+0x10/0x10 [ 340.761755][ T5612] ? get_device_parent+0x370/0x3a0 [ 340.761789][ T5612] device_add+0x3fa/0xb80 [ 340.761820][ T5612] hci_conn_add_sysfs+0xd5/0x210 [ 340.761855][ T5612] le_conn_complete_evt+0xfef/0x1580 [ 340.761891][ T5612] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 340.761915][ T5612] ? lockdep_hardirqs_on+0x7a/0x110 [ 340.761952][ T5612] ? rt_mutex_slowunlock+0x219/0x460 [ 340.761981][ T5612] ? skb_pull_data+0xf0/0x200 [ 340.762020][ T5612] hci_le_enh_conn_complete_evt+0x189/0x490 [ 340.762046][ T5612] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 340.762090][ T5612] hci_event_packet+0x67a/0xf10 [ 340.762123][ T5612] ? reacquire_held_locks+0x117/0x1a0 [ 340.762160][ T5612] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 340.762194][ T5612] ? __pfx_hci_event_packet+0x10/0x10 [ 340.762225][ T5612] ? rt_spin_unlock+0x157/0x200 [ 340.762263][ T5612] ? hci_send_to_monitor+0xe2/0x590 [ 340.762293][ T5612] hci_rx_work+0x3ee/0x1020 [ 340.762342][ T5612] ? process_one_work+0x7fd/0x1480 [ 340.762372][ T5612] process_one_work+0xaaf/0x1480 [ 340.762426][ T5612] ? __pfx_process_one_work+0x10/0x10 [ 340.762453][ T5612] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.762483][ T5612] ? assign_work+0x3cf/0x5d0 [ 340.762519][ T5612] worker_thread+0xb05/0x10d0 [ 340.762577][ T5612] kthread+0x388/0x470 [ 340.762613][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 340.762641][ T5612] ? __pfx_kthread+0x10/0x10 [ 340.762679][ T5612] ret_from_fork+0x514/0xb70 [ 340.762719][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 340.762757][ T5612] ? __switch_to+0xc89/0x1420 [ 340.762793][ T5612] ? __pfx_kthread+0x10/0x10 [ 340.762832][ T5612] ret_from_fork_asm+0x1a/0x30 [ 340.762874][ T5612] [ 340.762933][ T5612] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 340.762977][ T5612] Bluetooth: hci4: failed to register connection device [ 342.103622][ T1473] bridge_slave_1: left allmulticast mode [ 342.103658][ T1473] bridge_slave_1: left promiscuous mode [ 342.103974][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.106155][ T8074] loop2: detected capacity change from 0 to 128 [ 342.160605][ T8074] FAT-fs (loop2): data area starts beyond volume (36 > 6) [ 342.160635][ T8074] FAT-fs (loop2): Can't find a valid FAT filesystem [ 342.161539][ T8074] Flush: task=syz.2.619[8074] dev=loop2 state=2 [ 342.161946][ T7075] Flush: task=udevd[7075] dev=loop4 state=2 [ 342.252663][ T8074] Teardown: task=syz.2.619[8074] dev=loop2 state=2 [ 342.254350][ T7075] Teardown: task=udevd[7075] dev=loop4 state=2 [ 342.372281][ T1473] bridge_slave_0: left allmulticast mode [ 342.372319][ T1473] bridge_slave_0: left promiscuous mode [ 342.372597][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.625012][ T8086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 343.377529][ T4912] Bluetooth: hci0: Malformed LE Event: 0x0d [ 350.923871][ T8121] loop5: detected capacity change from 0 to 128 [ 350.947216][ T8120] loop3: detected capacity change from 0 to 256 [ 350.955034][ T8121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 350.955327][ T8121] System zones: 1-3, 19-19, 35-36 [ 351.009914][ T8121] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 351.014890][ T8121] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 351.024912][ T8121] EXT4-fs warning (device loop5): ext4_group_extend:1861: can't shrink FS - resize aborted [ 351.449465][ T5954] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.715002][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 351.752347][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 351.835785][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 351.876134][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 351.960411][ T8126] loop2: detected capacity change from 0 to 2048 [ 352.021134][ T8126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.660825][ T8140] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 352.664329][ T8140] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 352.664388][ T8140] EXT4-fs (loop2): This should not happen!! Data will be lost [ 352.664388][ T8140] [ 352.664429][ T8140] EXT4-fs (loop2): Total free blocks count 0 [ 352.664478][ T8140] EXT4-fs (loop2): Free/Dirty block details [ 352.664552][ T8140] EXT4-fs (loop2): free_blocks=2415919504 [ 352.664627][ T8140] EXT4-fs (loop2): dirty_blocks=48 [ 352.664666][ T8140] EXT4-fs (loop2): Block reservation details [ 352.664703][ T8140] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 353.171773][ T8144] binder: 8143:8144 unknown command 0 [ 353.171791][ T8144] binder: 8143:8144 ioctl c0306201 2000000001c0 returned -22 [ 355.906335][ T1473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.992089][ T1473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.037830][ T1473] bond0 (unregistering): Released all slaves [ 356.104223][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 356.302298][ T5603] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 356.319975][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.417593][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 356.467557][ T8158] loop5: detected capacity change from 0 to 128 [ 356.552532][ T8158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 356.552754][ T8158] System zones: 1-3, 19-19, 35-36 [ 356.573439][ T8158] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 356.574987][ T8158] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 356.630260][ T8158] EXT4-fs warning (device loop5): ext4_group_extend:1885: will only finish group (8193 blocks, 8129 new) [ 356.766240][ T8158] EXT4-fs warning (device loop5): ext4_group_extend:1890: can't read last block, resize aborted [ 356.793824][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 357.704827][ T5954] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.752172][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 357.884578][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 358.333197][ T8171] loop5: detected capacity change from 0 to 512 [ 358.340154][ T8171] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 358.412672][ T8174] binder: 8172:8174 unknown command 0 [ 358.412696][ T8174] binder: 8172:8174 ioctl c0306201 2000000001c0 returned -22 [ 358.496229][ T8101] Flush: task=udevd[8101] dev=loop5 state=2 [ 358.588123][ T8101] Teardown: task=udevd[8101] dev=loop5 state=2 [ 358.708608][ T8181] netlink: 36 bytes leftover after parsing attributes in process `syz.3.647'. [ 358.708634][ T8181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.647'. [ 359.369814][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.370902][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.371335][ T7870] bridge_slave_0: entered allmulticast mode [ 359.383416][ T7870] bridge_slave_0: entered promiscuous mode [ 359.599746][ T8194] sctp: [Deprecated]: syz.5.648 (pid 8194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.599746][ T8194] Use struct sctp_sack_info instead [ 360.856216][ T8205] usb usb7: usbfs: process 8205 (syz.2.651) did not claim interface 0 before use [ 361.811829][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.812234][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.828789][ T7870] bridge_slave_1: entered allmulticast mode [ 361.839360][ T7870] bridge_slave_1: entered promiscuous mode [ 362.052188][ T8217] loop5: detected capacity change from 0 to 512 [ 362.058040][ T8217] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 362.169714][ T8101] Flush: task=udevd[8101] dev=loop5 state=2 [ 362.280030][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.302626][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.321488][ T8101] Teardown: task=udevd[8101] dev=loop5 state=2 [ 362.351072][ T8221] binder: 8220:8221 unknown command 0 [ 362.351095][ T8221] binder: 8220:8221 ioctl c0306201 2000000001c0 returned -22 [ 362.683226][ T7870] team0: Port device team_slave_0 added [ 362.698386][ T7870] team0: Port device team_slave_1 added [ 362.885098][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.885131][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.885164][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.022582][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.659'. [ 363.111864][ T1473] hsr_slave_0: left promiscuous mode [ 363.187699][ T1473] hsr_slave_1: left promiscuous mode [ 363.189852][ T1473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.189881][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.273824][ T1473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.273846][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.959395][ T1473] veth1_macvtap: left promiscuous mode [ 363.959514][ T1473] veth0_macvtap: left promiscuous mode [ 363.959832][ T1473] veth1_vlan: left promiscuous mode [ 363.964217][ T1473] veth0_vlan: left promiscuous mode [ 364.070212][ T8245] sctp: [Deprecated]: syz.5.664 (pid 8245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.070212][ T8245] Use struct sctp_sack_info instead [ 364.920302][ T8249] loop2: detected capacity change from 0 to 512 [ 364.967221][ T8249] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 365.100155][ T8101] Flush: task=udevd[8101] dev=loop2 state=2 [ 365.205067][ T8101] Teardown: task=udevd[8101] dev=loop2 state=2 [ 365.648867][ T1473] team0 (unregistering): Port device team_slave_1 removed [ 365.704433][ T1473] team0 (unregistering): Port device team_slave_0 removed [ 366.095661][ T8251] binder: 8250:8251 unknown command 0 [ 366.095688][ T8251] binder: 8250:8251 ioctl c0306201 2000000001c0 returned -22 [ 366.123660][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.123679][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.123712][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.152564][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 366.786995][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.670'. [ 366.861404][ T8261] usb usb7: usbfs: process 8261 (syz.4.669) did not claim interface 0 before use [ 367.115577][ T7870] hsr_slave_0: entered promiscuous mode [ 367.139895][ T7870] hsr_slave_1: entered promiscuous mode [ 367.405843][ T7870] debugfs: 'hsr0' already exists in 'hsr' [ 367.405872][ T7870] Cannot create hsr debugfs directory [ 367.595488][ T8264] loop2: detected capacity change from 0 to 1024 [ 367.774658][ T8264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.257760][ T5603] do_umount: task=syz-executor[5603] propagate_mount_busy()!=0 [ 368.258034][ T5603] do_umount: task=syz-executor[5603] propagate_mount_busy()!=0 [ 368.700535][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.750435][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 368.954707][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 369.034793][ T1473] IPVS: stop unused estimator thread 0... [ 369.448965][ T8297] loop3: detected capacity change from 0 to 512 [ 369.469150][ T8297] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 369.810297][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7 [ 369.883611][ T8297] Flush: task=syz.3.676[8297] dev=loop3 state=2 [ 369.974244][ T8297] Teardown: task=syz.3.676[8297] dev=loop3 state=2 [ 371.350232][ T8324] usb usb7: usbfs: process 8324 (syz.4.682) did not claim interface 0 before use [ 375.192883][ T8331] loop3: detected capacity change from 0 to 256 [ 375.223243][ T7870] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 375.521492][ T7870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.524236][ T7870] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 375.784195][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 375.804132][ T7870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.842134][ T8348] loop2: detected capacity change from 0 to 512 [ 375.844493][ T8348] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 375.892916][ T7870] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 375.928525][ T8348] Flush: task=syz.2.687[8348] dev=loop2 state=2 [ 376.798531][ T7870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.814704][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 376.818544][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8 [ 376.835568][ T7870] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.138137][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 377.160547][ T8348] Teardown: task=syz.2.687[8348] dev=loop2 state=2 [ 377.282653][ T7870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.498522][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 377.904169][ T8378] usb usb7: usbfs: process 8378 (syz.5.693) did not claim interface 0 before use [ 378.646716][ T8385] sctp: [Deprecated]: syz.3.696 (pid 8385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.646716][ T8385] Use struct sctp_sack_info instead [ 378.890345][ T8387] loop5: detected capacity change from 0 to 512 [ 379.005483][ T8387] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.697: bg 0: block 5: invalid block bitmap [ 379.005521][ T8387] loop5: lost filesystem error report for type 5 error -117 [ 379.013303][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 379.013393][ C1] EXT4-fs (loop5): initial error at time 1784397884: ext4_validate_block_bitmap:432 [ 379.013463][ C1] EXT4-fs (loop5): last error at time 1784397884: ext4_validate_block_bitmap:432 [ 379.069949][ T8387] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 379.070045][ T8387] loop5: lost filesystem error report for type 5 error -117 [ 379.146423][ T8391] loop4: detected capacity change from 0 to 256 [ 379.162810][ T8387] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.697: invalid indirect mapped block 3 (level 2) [ 379.162947][ T8387] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 379.188444][ T8387] EXT4-fs (loop5): 1 orphan inode deleted [ 379.188469][ T8387] EXT4-fs (loop5): 1 truncate cleaned up [ 379.248763][ T8387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.552422][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 379.591564][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.686106][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 379.751588][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.829485][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 379.923336][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.957327][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 380.128996][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.129280][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.235976][ T761] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.238122][ T761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.291047][ T8417] usb usb7: usbfs: process 8417 (syz.5.706) did not claim interface 0 before use [ 383.134284][ T8425] loop4: detected capacity change from 0 to 256 [ 383.661434][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 383.791115][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 386.651709][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.462942][ T8483] loop3: detected capacity change from 0 to 256 [ 388.351071][ T8494] usb usb7: usbfs: process 8494 (syz.2.719) did not claim interface 0 before use [ 388.712981][ T8495] loop4: detected capacity change from 0 to 512 [ 388.940095][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.030255][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.089695][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.095354][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.097340][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.236945][ T8495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.278148][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 389.384423][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 389.450855][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.534008][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 389.610509][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 389.972581][ T8514] loop4: detected capacity change from 0 to 4096 [ 390.587446][ T8514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.587479][ T8514] EXT4-fs (loop4): Test dummy encryption mode enabled [ 391.226119][ T8514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.419062][ T4912] Bluetooth: hci5: command tx timeout [ 393.682645][ T5612] Bluetooth: hci5: command tx timeout [ 393.853228][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.963441][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 394.080510][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 394.145508][ T8536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input36 [ 395.918698][ T5612] Bluetooth: hci5: command tx timeout [ 399.378887][ T5612] Bluetooth: hci5: command tx timeout [ 399.994863][ T5612] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 399.994906][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 399.994938][ T5612] Tainted: [L]=SOFTLOCKUP [ 399.994946][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.994960][ T5612] Workqueue: hci0 hci_rx_work [ 399.995001][ T5612] Call Trace: [ 399.995010][ T5612] [ 399.995019][ T5612] dump_stack_lvl+0xe8/0x150 [ 399.995056][ T5612] sysfs_create_dir_ns+0x271/0x2a0 [ 399.995088][ T5612] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 399.995121][ T5612] ? rt_spin_unlock+0x163/0x200 [ 399.995151][ T5612] kobject_add_internal+0x62c/0xce0 [ 399.995185][ T5612] kobject_add+0x163/0x240 [ 399.995205][ T5612] ? rt_spin_unlock+0x157/0x200 [ 399.995237][ T5612] ? __pfx_kobject_add+0x10/0x10 [ 399.995266][ T5612] ? get_device_parent+0x370/0x3a0 [ 399.995296][ T5612] device_add+0x3fa/0xb80 [ 399.995322][ T5612] hci_conn_add_sysfs+0xd5/0x210 [ 399.995354][ T5612] le_conn_complete_evt+0xfef/0x1580 [ 399.995400][ T5612] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 399.995421][ T5612] ? lockdep_hardirqs_on+0x7a/0x110 [ 399.995450][ T5612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 399.995480][ T5612] ? rt_mutex_slowunlock+0x219/0x460 [ 399.995512][ T5612] ? skb_pull_data+0xf0/0x200 [ 399.995551][ T5612] hci_le_conn_complete_evt+0x187/0x470 [ 399.995595][ T5612] hci_event_packet+0x67a/0xf10 [ 399.995623][ T5612] ? reacquire_held_locks+0x117/0x1a0 [ 399.995657][ T5612] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 399.995689][ T5612] ? __pfx_hci_event_packet+0x10/0x10 [ 399.995719][ T5612] ? rt_spin_unlock+0x157/0x200 [ 399.995746][ T5612] ? hci_send_to_monitor+0xe2/0x590 [ 399.995771][ T5612] hci_rx_work+0x3ee/0x1020 [ 399.995810][ T5612] ? process_one_work+0x7fd/0x1480 [ 399.995837][ T5612] process_one_work+0xaaf/0x1480 [ 399.995885][ T5612] ? __pfx_process_one_work+0x10/0x10 [ 399.995907][ T5612] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.995937][ T5612] ? assign_work+0x3cf/0x5d0 [ 399.995965][ T5612] worker_thread+0xb05/0x10d0 [ 399.996008][ T5612] kthread+0x388/0x470 [ 399.996037][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 399.996058][ T5612] ? __pfx_kthread+0x10/0x10 [ 399.996087][ T5612] ret_from_fork+0x514/0xb70 [ 399.996118][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 399.996146][ T5612] ? __switch_to+0xc89/0x1420 [ 399.996173][ T5612] ? __pfx_kthread+0x10/0x10 [ 399.996209][ T5612] ret_from_fork_asm+0x1a/0x30 [ 399.996242][ T5612] [ 399.996296][ T5612] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 399.996330][ T5612] Bluetooth: hci0: failed to register connection device [ 400.642074][ T8582] input: syz0 as /devices/virtual/input/input37 [ 401.138317][ T8593] loop2: detected capacity change from 0 to 8 [ 401.157601][ T8593] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.742'. [ 401.629189][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 401.742799][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 402.807235][ T8619] usb usb7: usbfs: process 8619 (syz.2.744) did not claim interface 0 before use [ 405.489227][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 405.489332][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.329083][ T8642] loop5: detected capacity change from 0 to 256 [ 406.617501][ T8645] loop3: detected capacity change from 0 to 1024 [ 406.681281][ T8645] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 408.378606][ T8345] Flush: task=udevd[8345] dev=loop3 state=2 [ 408.687680][ T8659] loop4: detected capacity change from 0 to 8 [ 408.788162][ T8659] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.753'. [ 410.825088][ T8345] Teardown: task=udevd[8345] dev=loop3 state=2 [ 414.927551][ T8694] usb usb7: usbfs: process 8694 (syz.3.760) did not claim interface 0 before use [ 415.399491][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 415.643060][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 415.821165][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 416.157581][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.761'. [ 416.797074][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 422.433067][ T8743] loop3: detected capacity change from 0 to 8 [ 422.484665][ T8743] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.770'. [ 423.406999][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 423.523068][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 424.006948][ T8764] usb usb7: usbfs: process 8764 (syz.3.773) did not claim interface 0 before use [ 425.178912][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.179253][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.193644][ T8496] bridge_slave_0: entered allmulticast mode [ 425.240910][ T8496] bridge_slave_0: entered promiscuous mode [ 426.755731][ T70] bridge_slave_1: left allmulticast mode [ 426.755770][ T70] bridge_slave_1: left promiscuous mode [ 426.756060][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.727045][ T70] bridge_slave_0: left allmulticast mode [ 428.727097][ T70] bridge_slave_0: left promiscuous mode [ 428.732053][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.508885][ T8791] loop3: detected capacity change from 0 to 8 [ 433.981100][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.068259][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.090681][ T70] bond0 (unregistering): Released all slaves [ 434.132522][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.132992][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.133219][ T8496] bridge_slave_1: entered allmulticast mode [ 434.135895][ T8496] bridge_slave_1: entered promiscuous mode [ 434.285120][ T8783] Unknown status report in ack skb [ 434.389036][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.420133][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.507424][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 434.628284][ T8795] loop2: detected capacity change from 0 to 512 [ 434.630577][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 434.649423][ T8496] team0: Port device team_slave_0 added [ 434.680010][ T8496] team0: Port device team_slave_1 added [ 434.709909][ T8795] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.784: bg 0: block 5: invalid block bitmap [ 434.709945][ T8795] loop2: lost filesystem error report for type 5 error -117 [ 434.716654][ T8795] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 434.717264][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 434.717283][ C1] EXT4-fs (loop2): initial error at time 1784397936: ext4_validate_block_bitmap:432 [ 434.717328][ C1] EXT4-fs (loop2): last error at time 1784397936: ext4_validate_block_bitmap:432 [ 434.723717][ T8795] loop2: lost filesystem error report for type 5 error -117 [ 434.726540][ T8795] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.784: invalid indirect mapped block 3 (level 2) [ 434.726633][ T8795] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 434.829217][ T8795] EXT4-fs (loop2): 1 orphan inode deleted [ 434.829244][ T8795] EXT4-fs (loop2): 1 truncate cleaned up [ 434.918463][ T8795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.071815][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.162981][ T8808] usb usb7: usbfs: process 8808 (syz.5.787) did not claim interface 0 before use [ 435.624442][ T5603] Flush: task=syz-executor[5603] dev=loop2 state=2 [ 435.703584][ T5603] Teardown: task=syz-executor[5603] dev=loop2 state=2 [ 435.769465][ T70] hsr_slave_0: left promiscuous mode [ 436.071806][ T70] hsr_slave_1: left promiscuous mode [ 436.072979][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.119604][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.217080][ T8821] loop4: detected capacity change from 0 to 1024 [ 437.427614][ T8821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.684107][ T70] team0 (unregistering): Port device team_slave_1 removed [ 438.686440][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.760060][ T70] team0 (unregistering): Port device team_slave_0 removed [ 439.065526][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.065545][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.065577][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.228832][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 439.323498][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 439.444306][ T8832] loop3: detected capacity change from 0 to 8 [ 439.479081][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.479100][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.479130][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.908434][ T8496] hsr_slave_0: entered promiscuous mode [ 439.910927][ T8496] hsr_slave_1: entered promiscuous mode [ 439.912975][ T8496] debugfs: 'hsr0' already exists in 'hsr' [ 439.913002][ T8496] Cannot create hsr debugfs directory [ 439.997851][ T5606] Flush: task=syz-executor[5606] dev=loop3 state=2 [ 441.226840][ T5606] Teardown: task=syz-executor[5606] dev=loop3 state=2 [ 441.724997][ T8846] loop5: detected capacity change from 0 to 512 [ 442.520719][ T8846] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.797: bg 0: block 5: invalid block bitmap [ 442.520756][ T8846] loop5: lost filesystem error report for type 5 error -117 [ 442.541585][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 442.541645][ C1] EXT4-fs (loop5): initial error at time 1784397943: ext4_validate_block_bitmap:432 [ 442.541729][ C1] EXT4-fs (loop5): last error at time 1784397943: ext4_validate_block_bitmap:432 [ 442.691720][ T8846] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 442.691751][ T8846] loop5: lost filesystem error report for type 5 error -117 [ 442.699949][ T8846] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.797: invalid indirect mapped block 3 (level 2) [ 442.700054][ T8846] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 442.740820][ T8846] EXT4-fs (loop5): 1 orphan inode deleted [ 442.740846][ T8846] EXT4-fs (loop5): 1 truncate cleaned up [ 442.784281][ T8846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.091373][ T8861] usb usb7: usbfs: process 8861 (syz.4.800) did not claim interface 0 before use [ 443.130509][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.432711][ T5954] Flush: task=syz-executor[5954] dev=loop5 state=2 [ 444.371396][ T5954] Teardown: task=syz-executor[5954] dev=loop5 state=2 [ 444.763031][ T5585] IPVS: starting estimator thread 0... [ 444.868212][ T8876] IPVS: using max 9 ests per chain, 21600 per kthread [ 447.924050][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 448.078918][ C1] Unknown status report in ack skb [ 449.331875][ T8908] loop4: detected capacity change from 0 to 512 [ 450.417283][ T8908] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.811: bg 0: block 5: invalid block bitmap [ 450.417325][ T8908] loop4: lost filesystem error report for type 5 error -117 [ 450.420671][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 450.420698][ C0] EXT4-fs (loop4): initial error at time 1784397950: ext4_validate_block_bitmap:432 [ 450.420725][ C0] EXT4-fs (loop4): last error at time 1784397950: ext4_validate_block_bitmap:432 [ 450.467788][ T8908] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 450.467817][ T8908] loop4: lost filesystem error report for type 5 error -117 [ 450.509283][ T8908] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.811: invalid indirect mapped block 3 (level 2) [ 450.509344][ T8908] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 450.569666][ T8908] EXT4-fs (loop4): 1 orphan inode deleted [ 450.569695][ T8908] EXT4-fs (loop4): 1 truncate cleaned up [ 450.610428][ T8908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.990343][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.152637][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 451.245941][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 452.961265][ T8930] syzkaller0: entered promiscuous mode [ 452.961296][ T8930] syzkaller0: entered allmulticast mode [ 453.342825][ T4912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.645280][ T4912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.773875][ T4912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.960537][ T4912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.045441][ T4912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.696209][ T4912] Bluetooth: hci1: command tx timeout [ 457.008614][ T8979] loop4: detected capacity change from 0 to 1024 [ 457.027593][ T8979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.065879][ T8979] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 457.066025][ T8979] System zones: 0-1, 3-12 [ 457.069517][ T8979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.961575][ T4912] Bluetooth: hci1: command tx timeout [ 461.204666][ T4912] Bluetooth: hci1: command tx timeout [ 463.475660][ T4912] Bluetooth: hci1: command tx timeout [ 466.615670][ T4912] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 466.619349][ T4912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 466.620626][ T4912] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 466.730254][ T4912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 466.731351][ T4912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 468.890990][ T8918] ================================================================== [ 468.891010][ T8918] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 468.891044][ T8918] Read of size 1 at addr ffff88801eb467e8 by task syz.2.814/8918 [ 468.891063][ T8918] [ 468.891082][ T8918] CPU: 0 UID: 0 PID: 8918 Comm: syz.2.814 Tainted: G L syz[ 468.891082][ T8918] CPU: 0 UID: 0 PID: 8918 Comm: syz.2.814 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 468.891123][ T8918] Tainted: [L]=SOFTLOCKUP [ 468.891131][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.891145][ T8918] Call Trace: [ 468.891153][ T8918] [ 468.891162][ T8918] dump_stack_lvl+0xe8/0x150 [ 468.891197][ T8918] print_address_description+0x55/0x1e0 [ 468.891232][ T8918] ? rt_spin_lock+0x83/0x400 [ 468.891256][ T8918] print_report+0x58/0x70 [ 468.891284][ T8918] kasan_report+0x117/0x150 [ 468.891313][ T8918] ? rt_spin_lock+0x83/0x400 [ 468.891343][ T8918] __kasan_check_byte+0x2a/0x40 [ 468.891367][ T8918] lock_acquire+0x7d/0x350 [ 468.891393][ T8918] ? lock_acquire+0x115/0x350 [ 468.891419][ T8918] rt_spin_lock+0x83/0x400 [ 468.891443][ T8918] ? bt_accept_unlink+0x7d/0x2f0 [ 468.891491][ T8918] ? __pfx_rt_spin_lock+0x10/0x10 [ 468.891516][ T8918] ? rcu_is_watching+0x15/0xb0 [ 468.891546][ T8918] ? __local_bh_disable_ip+0x3c/0x420 [ 468.891574][ T8918] ? bt_accept_unlink+0x61/0x2f0 [ 468.891608][ T8918] bt_accept_unlink+0x7d/0x2f0 [ 468.891640][ T8918] ? bt_accept_unlink+0x61/0x2f0 [ 468.891672][ T8918] l2cap_sock_teardown_cb+0x17e/0x490 [ 468.891705][ T8918] l2cap_chan_del+0x98/0x600 [ 468.891734][ T8918] l2cap_conn_del+0x2f2/0x520 [ 468.891762][ T8918] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 468.891787][ T8918] hci_conn_hash_flush+0x105/0x260 [ 468.891815][ T8918] hci_dev_close_sync+0x7fc/0x10a0 [ 468.891842][ T8918] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 468.891864][ T8918] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.891895][ T8918] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 468.891927][ T8918] ? mutex_lock_nested+0x152/0x1d0 [ 468.891950][ T8918] ? hci_unregister_dev+0x22a/0x5b0 [ 468.891982][ T8918] hci_unregister_dev+0x232/0x5b0 [ 468.892014][ T8918] vhci_release+0x170/0x1c0 [ 468.892037][ T8918] ? __pfx_vhci_release+0x10/0x10 [ 468.892057][ T8918] __fput+0x42a/0xa80 [ 468.892085][ T8918] task_work_run+0x1d9/0x270 [ 468.892108][ T8918] ? __pfx_task_work_run+0x10/0x10 [ 468.892130][ T8918] ? do_exit+0x735/0x2360 [ 468.892148][ T8918] ? kmem_cache_free+0x187/0x6c0 [ 468.892169][ T8918] ? put_net+0x191/0x260 [ 468.892194][ T8918] ? do_exit+0x735/0x2360 [ 468.892215][ T8918] do_exit+0x73a/0x2360 [ 468.892233][ T8918] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.892264][ T8918] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 468.892300][ T8918] ? __pfx_do_exit+0x10/0x10 [ 468.892332][ T8918] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 468.892364][ T8918] ? rt_spin_unlock+0x157/0x200 [ 468.892391][ T8918] do_group_exit+0x22d/0x2f0 [ 468.892411][ T8918] ? rt_spin_unlock+0x163/0x200 [ 468.892438][ T8918] get_signal+0x121b/0x12c0 [ 468.892476][ T8918] arch_do_signal_or_restart+0xbb/0x860 [ 468.892520][ T8918] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.892565][ T8918] exit_to_user_mode_loop+0x104/0x730 [ 468.892590][ T8918] ? rcu_is_watching+0x15/0xb0 [ 468.892622][ T8918] do_syscall_64+0x33d/0x530 [ 468.892655][ T8918] ? irqentry_exit+0x10f/0x8f0 [ 468.892685][ T8918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.892707][ T8918] ? clear_bhb_loop+0x40/0x90 [ 468.892732][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.892764][ T8918] RIP: 0033:0x7f57b1fbde99 [ 468.892790][ T8918] Code: Unable to access opcode bytes at 0x7f57b1fbde6f. [ 468.892802][ T8918] RSP: 002b:00007ffc2280b4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 468.892826][ T8918] RAX: 0000000000000000 RBX: 00007f57b2247da0 RCX: 00007f57b1fbde99 [ 468.892842][ T8918] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 468.892856][ T8918] RBP: 00007f57b2247da0 R08: 0000000000000006 R09: 0000000000000000 [ 468.892870][ T8918] R10: 00007f57b2247cb0 R11: 0000000000000246 R12: 00000000000689bf [ 468.892886][ T8918] R13: 00007f57b2245fac R14: 00000000000688f0 R15: 00007f57b2245fa0 [ 468.892912][ T8918] [ 468.892921][ T8918] [ 468.892931][ T8918] Allocated by task 3090: [ 468.892942][ T8918] kasan_save_track+0x3e/0x80 [ 468.892962][ T8918] __kasan_kmalloc+0x93/0xb0 [ 468.892983][ T8918] __kmalloc_node_track_caller_noprof+0x566/0x7b0 [ 468.893005][ T8918] __alloc_skb+0x2bd/0x7a0 [ 468.893029][ T8918] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 468.893057][ T8918] process_one_work+0xaaf/0x1480 [ 468.893080][ T8918] worker_thread+0xb05/0x10d0 [ 468.893105][ T8918] kthread+0x388/0x470 [ 468.893136][ T8918] ret_from_fork+0x514/0xb70 [ 468.893168][ T8918] ret_from_fork_asm+0x1a/0x30 [ 468.893186][ T8918] [ 468.893191][ T8918] Freed by task 3090: [ 468.893201][ T8918] kasan_save_track+0x3e/0x80 [ 468.893220][ T8918] kasan_save_free_info+0x40/0x50 [ 468.893248][ T8918] __kasan_slab_free+0x5c/0x80 [ 468.893270][ T8918] kfree+0x1c5/0x6c0 [ 468.893300][ T8918] skb_release_data+0x85e/0xab0 [ 468.893326][ T8918] __kfree_skb+0x5d/0x210 [ 468.893349][ T8918] nsim_dev_trap_report_work+0x879/0xcb0 [ 468.893375][ T8918] process_one_work+0xaaf/0x1480 [ 468.893398][ T8918] worker_thread+0xb05/0x10d0 [ 468.893422][ T8918] kthread+0x388/0x470 [ 468.893452][ T8918] ret_from_fork+0x514/0xb70 [ 468.893490][ T8918] ret_from_fork_asm+0x1a/0x30 [ 468.893509][ T8918] [ 468.893514][ T8918] The buggy address belongs to the object at ffff88801eb46000 [ 468.893514][ T8918] which belongs to the cache kmalloc-4k of size 4096 [ 468.893534][ T8918] The buggy address is located 2024 bytes inside of [ 468.893534][ T8918] freed 4096-byte region [ffff88801eb46000, ffff88801eb47000) [ 468.893556][ T8918] [ 468.893561][ T8918] The buggy address belongs to the physical page: [ 468.893578][ T8918] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1eb40 [ 468.893599][ T8918] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 468.893616][ T8918] flags: 0x80000000000040(head|node=0|zone=1) [ 468.893639][ T8918] page_type: f5(slab) [ 468.893660][ T8918] raw: 0080000000000040 ffff88813feaf140 dead000000000100 dead000000000122 [ 468.893678][ T8918] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 468.893699][ T8918] head: 0080000000000040 ffff88813feaf140 dead000000000100 dead000000000122 [ 468.893718][ T8918] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 468.893739][ T8918] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 468.893757][ T8918] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 468.893768][ T8918] page dumped because: kasan: bad access detected [ 468.893787][ T8918] page_owner tracks the page as allocated [ 468.893795][ T8918] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5798, tgid 5798 (udevd), ts 189728893672 [ 468.893831][ T8918] post_alloc_hook+0x1f9/0x250 [ 468.893866][ T8918] get_page_from_freelist+0x264c/0x26c0 [ 468.893888][ T8918] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 468.893912][ T8918] allocate_slab+0x7c/0x5e0 [ 468.893938][ T8918] refill_objects+0x2d8/0x350 [ 468.893964][ T8918] __pcs_replace_empty_main+0x330/0x690 [ 468.893991][ T8918] __kmalloc_noprof+0x543/0x790 [ 468.894009][ T8918] tomoyo_realpath_from_path+0xef/0x640 [ 468.894034][ T8918] tomoyo_path_perm+0x283/0x560 [ 468.894063][ T8918] tomoyo_path_symlink+0xab/0xf0 [ 468.894088][ T8918] security_path_symlink+0x165/0x310 [ 468.894112][ T8918] filename_symlinkat+0x134/0x420 [ 468.894132][ T8918] __se_sys_symlink+0x4d/0x2b0 [ 468.894152][ T8918] do_syscall_64+0x17b/0x530 [ 468.894182][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.894202][ T8918] page last free pid 6071 tgid 6071 ts 189626667777 stack trace: [ 468.894217][ T8918] __free_frozen_pages+0x1185/0x1270 [ 468.894236][ T8918] __slab_free+0x252/0x2a0 [ 468.894255][ T8918] qlist_free_all+0x99/0x100 [ 468.894286][ T8918] kasan_quarantine_reduce+0x148/0x160 [ 468.894318][ T8918] __kasan_slab_alloc+0x22/0x80 [ 468.894338][ T8918] kmem_cache_alloc_noprof+0x358/0x680 [ 468.894371][ T8918] flock_lock_inode+0x22a/0x1310 [ 468.894401][ T8918] locks_lock_inode_wait+0x114/0x470 [ 468.894428][ T8918] __se_sys_flock+0x4e0/0x680 [ 468.894453][ T8918] do_syscall_64+0x17b/0x530 [ 468.894491][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.894512][ T8918] [ 468.894518][ T8918] Memory state around the buggy address: [ 468.894530][ T8918] ffff88801eb46680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.894545][ T8918] ffff88801eb46700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.894560][ T8918] >ffff88801eb46780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.894571][ T8918] ^ [ 468.894584][ T8918] ffff88801eb46800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.894599][ T8918] ffff88801eb46880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.894611][ T8918] ================================================================== [ 468.933136][ T8918] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 468.933201][ T8918] CPU: 0 UID: 0 PID: 8918 Comm: syz.2.814 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 468.933283][ T8918] Tainted: [L]=SOFTLOCKUP [ 468.933303][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.933336][ T8918] Call Trace: [ 468.933357][ T8918] [ 468.933378][ T8918] vpanic+0x56c/0xa60 [ 468.933449][ T8918] ? __pfx_vpanic+0x10/0x10 [ 468.933511][ T8918] ? __pfx___schedule+0x10/0x10 [ 468.933601][ T8918] panic+0xc5/0xd0 [ 468.933651][ T8918] ? __pfx_panic+0x10/0x10 [ 468.933703][ T8918] ? preempt_schedule_thunk+0x16/0x40 [ 468.933784][ T8918] ? rt_spin_lock+0x83/0x400 [ 468.933840][ T8918] check_panic_on_warn+0x89/0xb0 [ 468.933901][ T8918] ? rt_spin_lock+0x83/0x400 [ 468.933965][ T8918] end_report+0x73/0x170 [ 468.934040][ T8918] ? rt_spin_lock+0x83/0x400 [ 468.934094][ T8918] kasan_report+0x128/0x150 [ 468.934177][ T8918] ? rt_spin_lock+0x83/0x400 [ 468.934269][ T8918] __kasan_check_byte+0x2a/0x40 [ 468.934332][ T8918] lock_acquire+0x7d/0x350 [ 468.934396][ T8918] ? lock_acquire+0x115/0x350 [ 468.934465][ T8918] rt_spin_lock+0x83/0x400 [ 468.934527][ T8918] ? bt_accept_unlink+0x7d/0x2f0 [ 468.934611][ T8918] ? __pfx_rt_spin_lock+0x10/0x10 [ 468.934674][ T8918] ? rcu_is_watching+0x15/0xb0 [ 468.934745][ T8918] ? __local_bh_disable_ip+0x3c/0x420 [ 468.934817][ T8918] ? bt_accept_unlink+0x61/0x2f0 [ 468.934893][ T8918] bt_accept_unlink+0x7d/0x2f0 [ 468.934975][ T8918] ? bt_accept_unlink+0x61/0x2f0 [ 468.935052][ T8918] l2cap_sock_teardown_cb+0x17e/0x490 [ 468.935132][ T8918] l2cap_chan_del+0x98/0x600 [ 468.935213][ T8918] l2cap_conn_del+0x2f2/0x520 [ 468.935277][ T8918] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 468.935340][ T8918] hci_conn_hash_flush+0x105/0x260 [ 468.935413][ T8918] hci_dev_close_sync+0x7fc/0x10a0 [ 468.935485][ T8918] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 468.935551][ T8918] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.935650][ T8918] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 468.935731][ T8918] ? mutex_lock_nested+0x152/0x1d0 [ 468.935786][ T8918] ? hci_unregister_dev+0x22a/0x5b0 [ 468.935868][ T8918] hci_unregister_dev+0x232/0x5b0 [ 468.935966][ T8918] vhci_release+0x170/0x1c0 [ 468.936020][ T8918] ? __pfx_vhci_release+0x10/0x10 [ 468.936073][ T8918] __fput+0x42a/0xa80 [ 468.936146][ T8918] task_work_run+0x1d9/0x270 [ 468.936208][ T8918] ? __pfx_task_work_run+0x10/0x10 [ 468.936260][ T8918] ? do_exit+0x735/0x2360 [ 468.936309][ T8918] ? kmem_cache_free+0x187/0x6c0 [ 468.936364][ T8918] ? put_net+0x191/0x260 [ 468.936427][ T8918] ? do_exit+0x735/0x2360 [ 468.936488][ T8918] do_exit+0x73a/0x2360 [ 468.936530][ T8918] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.936610][ T8918] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 468.936701][ T8918] ? __pfx_do_exit+0x10/0x10 [ 468.936777][ T8918] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 468.936858][ T8918] ? rt_spin_unlock+0x157/0x200 [ 468.936937][ T8918] do_group_exit+0x22d/0x2f0 [ 468.936996][ T8918] ? rt_spin_unlock+0x163/0x200 [ 468.937073][ T8918] get_signal+0x121b/0x12c0 [ 468.937173][ T8918] arch_do_signal_or_restart+0xbb/0x860 [ 468.937258][ T8918] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.937363][ T8918] exit_to_user_mode_loop+0x104/0x730 [ 468.937425][ T8918] ? rcu_is_watching+0x15/0xb0 [ 468.937507][ T8918] do_syscall_64+0x33d/0x530 [ 468.937588][ T8918] ? irqentry_exit+0x10f/0x8f0 [ 468.937670][ T8918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.937723][ T8918] ? clear_bhb_loop+0x40/0x90 [ 468.937785][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.937838][ T8918] RIP: 0033:0x7f57b1fbde99 [ 468.937888][ T8918] Code: Unable to access opcode bytes at 0x7f57b1fbde6f. [ 468.937918][ T8918] RSP: 002b:00007ffc2280b4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 468.937981][ T8918] RAX: 0000000000000000 RBX: 00007f57b2247da0 RCX: 00007f57b1fbde99 [ 468.938017][ T8918] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 468.938050][ T8918] RBP: 00007f57b2247da0 R08: 0000000000000006 R09: 0000000000000000 [ 468.938082][ T8918] R10: 00007f57b2247cb0 R11: 0000000000000246 R12: 00000000000689bf [ 468.938124][ T8918] R13: 00007f57b2245fac R14: 00000000000688f0 R15: 00007f57b2245fa0 [ 468.938188][ T8918] [ 468.938816][ T8918] Kernel Offset: disabled