last executing test programs: 7m17.549865684s ago: executing program 2 (id=5421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 7m17.427100097s ago: executing program 2 (id=5422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x2, 0x0, {0x2}, {0x1}, 0xfd, 0x2}, {0x1, 0x0, {0x2}, {0x2, 0x1, 0x3}, 0xfd, 0xfe}, {0x2, 0x1, {0x3a38d2a68c436be, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xff}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd06, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 7m16.321755502s ago: executing program 2 (id=5433): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, 0x0, 0x0, 0x5405, 0x0, 0x0) 7m15.469209923s ago: executing program 2 (id=5434): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 7m15.278979787s ago: executing program 2 (id=5437): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m14.748531399s ago: executing program 2 (id=5443): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$eJzs3c9rJFkdAPBvddKZzExmk1UPOrDr4q7MLDrdk427GzysK4ieFsT1PsakJ4TppIekszsJi3b+AkFEBU968SL4Bwgy4MWjCAN6VlhRRGcV9LBOSXVXJ7FTnfSMnfQk+Xygpt6rH/39vkxeparrURXAufVCRLwZEY/SNH05Iqbz5aV8ilZnyrb74OF7i9mURJq+/bckknxZtlmapmn3My/nu01GxNe+EvHNZF/AyXy+tX1noV6vrefVanP1bnVja/vGyurCcm25tjY3N/va/Ovzr87fHEo7r0TEG1/60/e/89Mvv/HLz777x1t/uf6tLK2pfH23HU9g/LCVnaaXL0z27LD+hMGeRll7yh/mlYuD7bNznAkBANBXdo7/kYj4VES8HNMxdvjpLAAAAHAKpV+Yig+Tzv27AhN9lgMAAACnSKk9BjYpVfKxAFNRKlUqnTG8H4tLpXpjo/mZ243NtaXOWNmZKJdur9RrN/OxwjNRTrL6bLu8V3+lpz4XEc9GxPemL7brlcVGfWnUX34AAADAOXG55/r/n9Od6//DJSeTHAAAADA8M6NOAAAAADh2rv8BAADgTCuPOgEAAADg2H31rbeyKe2+/3rpna3NO413bizVNu5UVjcXK4uN9buV5UZjuf3MvtWjPq/eaNz9XKxt3qs2axvN6pWt7Vurjc215q2VmDyRBgEAAAAHPPvJ+79PIqL1+YvtKTMx6qSAEzG+W+o+07Og9//hmc78/RNKCjgRYwNs8/6F4uXOE+B0G+9d0KevA2eP8f/AUW/06Dt45zedWWnI+QAAAMN37RPF9/+PPp9vOeWHU04nhvOr5/5/Oj2qRIAT177/P+hAHicLcKaUBxoBCJxl/+/9/6Ol6WMlBAAADN1Ue0pKlfzrvakolSqViCvt1wKWk9sr9drNiHgmIn43Xb6Q1WfbeyZHXjMAAAAAAAAAAAAAAAAAAAAAAAAAAB1pmkQKAAAAnGkRpT8nv+o8y//a9EtTvd8PTCT/br8SeCIi3v3R2z+4t9Bsrs9my/++u7z5w3z5K6P4BgMAAADo1b1Ob8//NepsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhrPnj43mJ3GmDzi8OK+9cvRsRMUfzxmGzPJ6McEZf+kcT4vv2SiBgbQvzWTkR8vCh+kqW1G7Io/jB+CK2dpJW2FcaPmfynUBT/8hDiw3l2Pzv+vFnU/0vxQnte3P/GI/6n/qT6H/9i9/g31qf/XxkwxtUHP6/2jX91Kq6OFx//uvGTPvFfHCh6Ob7x9e3tfmvTH0dc6/79aR/x9kfYK1Wbq3erG1vbN1ZWF5Zry7W1ubnZ1+Zfn391/mb19kq9lv9bGOO7z/3iUd/270RcKvz7l+TZ9G//SwWfN1aQ/38e3Hv40W6ldTD+9RcL4v/6J/kWB+OX8jifzsvZ+mvdcqtT3u/5n/32+cPav7TX/vLj/P9f7/ehvQ50lOcG+9UBAI7Fxtb2nYV6vbZ+ugoXImLAjbOr9Kci58cvTMRTkcbZLXw7KzwYcOOxOGKbNE3TrE8VrLofEYMklsSQW1oqzmev0PcIMOojEwAAMGx7J/2jzgQAAAAAAAAAAAAAAAAAAADOr5N4ylpvzL1HICfDeIQ2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBQ/DcAAP//fdvZHw==") 7m14.107335624s ago: executing program 32 (id=5443): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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") 5.528095859s ago: executing program 3 (id=7591): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x7ffb}, 0xfffffd56) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000001, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x45b, &(0x7f0000000480)="$eJzs20tvG0UcAPD/rpOWvkgo5dEHECiIiEfSpAV64AICqRckJDiUY0jTqtRtUBMkWlU0RagcUT8BcETiE3CCCwJOIK5wR0gV6oXCAS1aeze4iR3sxKmT+veTnMysZ3fmv7vjnd2xA+hbI/mfJGJnRPwSEUP17K0FRur/bt64NP3XjUvTSWTZG38ktXJ/3rg0XRYt19tRZEbTiPSjJPY3qXfuwsUzU9XqzPkiPz5/9t3xuQsXnz19durUzKmZc5NHjx45PPHC85PPdSXOXXlb930we2DvsbeuvTZ9/Nrb33+Zt3dn8X5jHHXDbW97oMXykRi5dV82eKLtrW8OuxrSSasdwoZTKc7fwVr/H4pKw9k8FK9+2NPGAesqy7Js67KllTKxkC1XXwm4AyS6M/Sp8kKf3/+Wr9s4/Oi56y/Vb4DyuG8Wr/o7A5EWZQaX3N9200hEHF/4+9P8FU2fQwAAdNfX+fjnmWbjvzTubyh3dzE3NBwR90TE7oi4NyL2RMR9EbWyD0TEgx3WP7IkX9Z/ZXHJT9tWHVwb8vHfi8Xc1q3jv3L0F8OVIrerFv9gcvJ0deZQsU9GY3Brnp9YoY5vXvn5k1bvNY7/8ldefzkWLNrx+8CSB3Qnpuan1hJzo+tXIvYNNIs/WZy7yv/vjYh9q9h+vs9OP/XFgVbv/3/8K+jCPFP2ecST9eO/EEviLyUrz0+O3xXVmUPj5Vmx3A8/Xn29Vf1rir8L8uO/ven5vxj/cNI4XzvXeR1Xf/245T3Nas//LcmbtfSWYtn7U/Pz5ycitiQLy5dP/rdumS/L5/GPHmze/3dH/PNZsd7+iMhP4oci4uGIeKRo+6MR8VhEHFwh/u9efvyd1ce/vvL4T3R0/DtPVM58+1Wr+ts7/kdqqdFiSTuff+02cC37DgAAADaLtPYd+CQdW0yn6dhY/Tv8e2J7Wp2dm3/65Ox7507Uvys/HINp+aRrqOF56ETxbLjMTy7JH649N86yLNtWy49Nz1Z7HTv0ux0t+n/ut0qvWwesu47m0Vr9og3YlPxeE/rXQP1eHuhDrv/Qv/R/6F/N+v/liJs9aApwm7n+Q/9q6P9m96DPuP5D/9L/oS+t5Xf9KyV2H1uvLd9picrGaEbHiUg3RDNWl0g3RjPqia0R0W7hy3G7GtbrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+DcAAP//1P7nZQ==") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 5.088485121s ago: executing program 4 (id=7593): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r0, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x800) dup2(r0, 0xffffffffffffffff) listen(0xffffffffffffffff, 0x5) accept(0xffffffffffffffff, 0x0, 0x0) 4.624731992s ago: executing program 3 (id=7596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) 4.332504889s ago: executing program 3 (id=7599): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x600}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) 4.205950143s ago: executing program 3 (id=7600): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x20000000000000, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) syz_usbip_server_init(0x3) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000380)}}], 0x2, 0x0) 3.824410583s ago: executing program 4 (id=7604): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x7ffb}, 0xfffffd56) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000001, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x45b, &(0x7f0000000480)="$eJzs20tvG0UcAPD/rpOWvkgo5dEHECiIiEfSpAV64AICqRckJDiUY0jTqtRtUBMkWlU0RagcUT8BcETiE3CCCwJOIK5wR0gV6oXCAS1aeze4iR3sxKmT+veTnMysZ3fmv7vjnd2xA+hbI/mfJGJnRPwSEUP17K0FRur/bt64NP3XjUvTSWTZG38ktXJ/3rg0XRYt19tRZEbTiPSjJPY3qXfuwsUzU9XqzPkiPz5/9t3xuQsXnz19durUzKmZc5NHjx45PPHC85PPdSXOXXlb930we2DvsbeuvTZ9/Nrb33+Zt3dn8X5jHHXDbW97oMXykRi5dV82eKLtrW8OuxrSSasdwoZTKc7fwVr/H4pKw9k8FK9+2NPGAesqy7Js67KllTKxkC1XXwm4AyS6M/Sp8kKf3/+Wr9s4/Oi56y/Vb4DyuG8Wr/o7A5EWZQaX3N9200hEHF/4+9P8FU2fQwAAdNfX+fjnmWbjvzTubyh3dzE3NBwR90TE7oi4NyL2RMR9EbWyD0TEgx3WP7IkX9Z/ZXHJT9tWHVwb8vHfi8Xc1q3jv3L0F8OVIrerFv9gcvJ0deZQsU9GY3Brnp9YoY5vXvn5k1bvNY7/8ldefzkWLNrx+8CSB3Qnpuan1hJzo+tXIvYNNIs/WZy7yv/vjYh9q9h+vs9OP/XFgVbv/3/8K+jCPFP2ecST9eO/EEviLyUrz0+O3xXVmUPj5Vmx3A8/Xn29Vf1rir8L8uO/ven5vxj/cNI4XzvXeR1Xf/245T3Nas//LcmbtfSWYtn7U/Pz5ycitiQLy5dP/rdumS/L5/GPHmze/3dH/PNZsd7+iMhP4oci4uGIeKRo+6MR8VhEHFwh/u9efvyd1ce/vvL4T3R0/DtPVM58+1Wr+ts7/kdqqdFiSTuff+02cC37DgAAADaLtPYd+CQdW0yn6dhY/Tv8e2J7Wp2dm3/65Ox7507Uvys/HINp+aRrqOF56ETxbLjMTy7JH649N86yLNtWy49Nz1Z7HTv0ux0t+n/ut0qvWwesu47m0Vr9og3YlPxeE/rXQP1eHuhDrv/Qv/R/6F/N+v/liJs9aApwm7n+Q/9q6P9m96DPuP5D/9L/oS+t5Xf9KyV2H1uvLd9picrGaEbHiUg3RDNWl0g3RjPqia0R0W7hy3G7GtbrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+DcAAP//1P7nZQ==") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.923187065s ago: executing program 1 (id=7606): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000fa24008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000180000007420000000000000095e0007bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1004, &(0x7f00000009c0)=""/4100, 0x41100, 0xc}, 0x94) 2.724464201s ago: executing program 1 (id=7607): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x102) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 2.712296091s ago: executing program 0 (id=7608): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x600}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) 2.542500535s ago: executing program 0 (id=7609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a"], 0xc4}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 2.541848555s ago: executing program 3 (id=7610): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000680)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x7, 0x5, 0xffffff81, 0xffffffff}}, 0x118) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000300)='blacklist\x00', 0x0, 0x0, 0x0, r2) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2.220452203s ago: executing program 0 (id=7611): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000300)="0303ec", 0x3, 0x8894, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2.220182363s ago: executing program 3 (id=7612): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x20000880) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) 2.130233336s ago: executing program 1 (id=7613): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x800) dup2(r1, r0) listen(r0, 0x5) accept(r0, 0x0, 0x0) 2.068322438s ago: executing program 4 (id=7614): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x286, &(0x7f00000009c0)="$eJzs2k1rXFUYB/DnxqSdSUkn4hstiAddqJuhyVqhRSKIAUWNUAXprZnomOtMyB0CI2Ky0q0fQXAhiEt3gnTpJhs/gQt32WRZQRyZt5rE0iodMxJ+v8Xl5OT87z3nnuHyzGUOXvjy482Nsr6Rd2Imy2LmauzF7SwWYybG9uL5Z6//9OSb19959drqamXUu5xSuvjUj+9++t3TtzoX3v7+4g/nY3/xvYPD5V/3H9+/dPDHWx82y9QsU6vdSXm62W538ptFI603y816Sq8XjbxspGarbGwf+/9G0d7a6qa8tb4wv7XdKMuUt7pps9FNnXbqbHdT/kHebKV6vZ4W5oMHsfbt7V4vDntzN6LX61W/igu3YuGXqEX2cMoeuZo9diN7Yi+7dNjr1U5Gq9OZMZM13P9z8a/3nzNh9FBfeSOlSsz2Hwk7axHFF/1jRCWubUQzimjElajG74OPyciw/fIrqytX0sBifF7s7gzzuztrDw3Ofye/lGX9v++WXxrm0zh/PiL6x/mj+eWoxaN3zc+NlpKOX78Szz1zJF+PWvz8frSjiPXBPGJ3lFv5bCmll15bPZG/PBgHAHDW1Iel11wM67d+0XasfquPBvy9vhvmj9SHtfvUhyfqq9m4PDvdtRNRdj/ZzIuisd3/gjdo3OmZQGNcmk/shP9B47eTPdXxbakevT/3aIxfhUx2YuP3bP2emWN7Nu07prF3uhf9+twUVhrx0ak+iZiGvzb9vkMrpzIhAAAAAAAAAAAA/pEH/KngNy8OT3PPwdNeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/2ZwAAAP//1a6yjQ==") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000029c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.066808998s ago: executing program 0 (id=7622): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x7ffb}, 0xfffffd56) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000001, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x45b, &(0x7f0000000480)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a01"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.632030049s ago: executing program 1 (id=7615): r0 = socket(0xa, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7fff, 0x8, 0xa, 0x5, 0x2, 0x6, 0x0, 0xffffffff, r2}, &(0x7f0000000080)=0x20) 1.507053281s ago: executing program 4 (id=7616): syz_emit_ethernet(0x348, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x312, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5"}]}}}}}}, 0x0) 1.392531705s ago: executing program 1 (id=7617): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x600}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) 1.252848548s ago: executing program 4 (id=7618): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0xfe50}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.245092548s ago: executing program 1 (id=7619): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x20000000000000, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) syz_usbip_server_init(0x3) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000380)}}], 0x2, 0x0) 1.150217371s ago: executing program 0 (id=7620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 895.324027ms ago: executing program 4 (id=7621): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x102) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 0s ago: executing program 0 (id=7623): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000080)={[{@quota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nobarrier}, {@errors_remount}]}, 0xfd, 0x485, &(0x7f0000000640)="$eJzs28trXNUfAPDvvXm1vz7SX62P1qrRIgTFpEmrduFGURCpKKhQlzGZltBpI00UW4tNRVwJUtB1cSn6F7hSBFFXQreuXEmhaDdtXUXunXvTyXQmTc2kk8fnA5Occx9zznfOfZx7zkwAG9ZA9ieJ2BoRv0dEfy27cIOB2r/rV8+O37h6djyJubk3/kry7a5dPTteblrut6XIDKYR6SdJUchC06fPHB+rViunivzwzIl3h6dPn3nq/RNjxyrHKidHDx06eGDk2WdGn25LnFlc1/Z8NLV398tvX3h1/MiFd375Nqvv1mJ9fRztMpAF/vdcrnHd4+0urMO21aWT7qXs0bVylWHJslbImqsnP//7oytuNl5/vPRxRysHrKjs3tTXevXsHLCOJdHpGgCdUd7os+ff8nWXuh6rwpXnaw9AWdzXi1dtTXekxTY9Dc+37TQQEUdm/7mYvWKFxiEAAOp9Nv7l4d6I+PDGN69kfY/+iOiLiLfm+4d/5NttL+ZQdkTE/yNiZ0TcExG7IuLeiLgvIu6PiAeWWZ9b+z/p5WW+5aKy/t9zxdzWwv5f2fuLHV1Fblsef09ydLJa2R99+WcyGD19WX5kkTJ+ePHS563W1ff/sldWftkXLOpxubthgG5ibGYs75S2wZXzEXu6m8WfzM8EJBGxOyL23Nlbby8Tk098vbfVRs3jv3ZxSSUsaZ5pcXNfZeHNZvHPRkP8paR+fnLylvnJ4U1Rrewfrh0Vzfz626evtyr/9u2/sq5Uav/r2r9xkx1J/XztdHvL/4/Hf9qbvJnPM/cWyz4Ym5k5NRLRmxzO8wuWj97ct8yX22fH/+C+5uf/zmKfLP4HIyI7iB+KiIcj4pGi7o9GxGMRsW+RGH9+4fbxR9qh9j8fMdH0+jd//De0/50nuo7/9F2r8pu1//e3tP/BPDVYLMmvf7fRrDrZ5aKxgsv57AAAAGCtSPPvwCfp0Hw6TYeGat/h3xX/S6tT0zNPHp167+REXNpeG/9My5Gu/mI8tDpZrYwks8U71sZHR4ux4nK89EAxbvxF1+Y8PzQ+VZ3ocOyw0W1pcf5n/vQTDVjvNjddOtp71ysCdEDjPHq6MHvutXAxgPWqDd+jAdao8vxv8bxf/zsYYJ1x/4eNq9n5f64hby4A1if3f9i4nP+wQaU/LmNnTwWw1rn/w4a0nN/1r2Bi0+qoRmcSq7VR8kREmUhXRX0kVijR6SsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAe/wbAAD//wPT7w0=") execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 67][T26780] can0 (unregistered): slcan off ttyS3. [ 1343.199538][T26776] loop0: detected capacity change from 0 to 8192 [ 1343.243710][T26776] vfat filesystem being mounted at /0/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1343.292792][T19697] blk_print_req_error: 2 callbacks suppressed [ 1343.292809][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1343.332897][ T28] audit: type=1800 audit(6082107235.948:1638): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7084" name="bus" dev="loop0" ino=1048692 res=0 errno=0 [ 1343.392330][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1343.430737][T19697] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 1343.446750][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1343.458827][T19697] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 1343.468014][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1343.486787][T19697] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 1343.508983][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1343.526048][T19697] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 1343.534931][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1343.549956][T19697] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 1344.050736][T26795] Invalid ELF header magic: != ELF [ 1344.270753][T26795] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1344.277352][T26795] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1344.285611][T26795] vhci_hcd vhci_hcd.0: Device attached [ 1344.613005][T26796] vhci_hcd: connection closed [ 1344.626798][ T11] vhci_hcd: stop threads [ 1344.747689][ T11] vhci_hcd: release socket [ 1344.753030][ T11] vhci_hcd: disconnect device [ 1344.756689][ T5823] usb 39-1: new high-speed USB device number 26 using vhci_hcd [ 1344.792252][ T5823] usb 39-1: enqueue for inactive port 0 [ 1344.874944][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1344.890055][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1344.893429][ T5823] vhci_hcd: vhci_device speed not set [ 1344.921303][T19697] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 1344.935565][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1344.962235][T26802] loop1: detected capacity change from 0 to 512 [ 1344.971237][T19697] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 1345.003795][T26802] EXT4-fs: Ignoring removed mblk_io_submit option [ 1345.028384][T26802] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1345.055194][T26802] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1345.083731][T26807] loop0: detected capacity change from 0 to 512 [ 1345.132165][T26802] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.7106: invalid indirect mapped block 1819239214 (level 1) [ 1345.176770][T26807] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1345.268896][T26802] EXT4-fs (loop1): Remounting filesystem read-only [ 1345.277442][T26802] EXT4-fs (loop1): 1 truncate cleaned up [ 1345.314408][T26802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1345.357479][T26807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1345.410600][T26814] loop3: detected capacity change from 0 to 8192 [ 1345.421033][T26807] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1345.473843][T26814] vfat filesystem being mounted at /598/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1345.516795][ T28] audit: type=1800 audit(6082107238.138:1639): pid=26814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7113" name="bus" dev="loop3" ino=1048693 res=0 errno=0 [ 1345.519583][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.867811][T26824] tmpfs: Unknown parameter 'nr_ino' [ 1345.902718][T26824] loop4: detected capacity change from 0 to 2048 [ 1346.351929][T26827] can0: slcan on ttyS3. [ 1346.610398][T26824] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 1346.776143][T26827] can0 (unregistered): slcan off ttyS3. [ 1346.777807][T26824] loop4: partition table partially beyond EOD, truncated [ 1346.789473][T26824] loop4: p1 start 8454147 is beyond EOD, truncated [ 1346.796227][T26824] loop4: p2 start 16908804 is beyond EOD, truncated [ 1346.803710][T26824] loop4: p3 start 4284289 is beyond EOD, truncated [ 1346.840110][T26824] loop4: p5 start 8454147 is beyond EOD, truncated [ 1346.888125][T19891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.891630][T26824] loop4: p6 start 16908804 is beyond EOD, truncated [ 1347.242435][T26836] loop4: detected capacity change from 0 to 512 [ 1347.323641][T26836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1347.475505][T26836] EXT4-fs (loop4): shut down requested (2) [ 1347.506091][T26836] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.7119: Unimplemented hash flags: 0x0001 [ 1347.550506][T26836] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.7119: Corrupt directory, running e2fsck is recommended [ 1347.824067][T26845] Invalid ELF header magic: != ELF [ 1347.853590][T26845] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1347.860202][T26845] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1347.868178][T26845] vhci_hcd vhci_hcd.0: Device attached [ 1348.386233][T26846] vhci_hcd: connection closed [ 1348.387405][ T5823] usb 33-1: new high-speed USB device number 29 using vhci_hcd [ 1348.490544][T25456] vhci_hcd: stop threads [ 1348.494960][T25456] vhci_hcd: release socket [ 1348.553238][T22375] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1348.575845][T26849] loop1: detected capacity change from 0 to 512 [ 1348.582305][T25456] vhci_hcd: disconnect device [ 1348.589667][T22375] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1348.616315][T22375] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 1348.624567][T26849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1348.658334][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.733110][T26849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.827501][T26849] ext4 filesystem being mounted at /551/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.162741][T19891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.209741][T14170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1349.459186][T14170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1349.472499][T14170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1349.619551][T26860] can0: slcan on ttyS3. [ 1349.654927][T14170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1349.681983][T14170] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1349.692456][T14170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1350.118102][T26861] can0 (unregistered): slcan off ttyS3. [ 1350.342801][T26866] loop4: detected capacity change from 0 to 512 [ 1350.373832][T26866] EXT4-fs: Ignoring removed mblk_io_submit option [ 1350.395276][T26866] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1350.417438][T26866] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1350.439036][T26864] loop1: detected capacity change from 0 to 8192 [ 1350.477647][T26866] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7127: invalid indirect mapped block 1819239214 (level 1) [ 1350.495906][T26864] vfat filesystem being mounted at /552/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1350.519281][ T28] audit: type=1800 audit(6082107243.138:1640): pid=26864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7126" name="bus" dev="loop1" ino=1048694 res=0 errno=0 [ 1350.547684][T26866] EXT4-fs (loop4): Remounting filesystem read-only [ 1350.566337][T26866] EXT4-fs (loop4): 1 truncate cleaned up [ 1350.579427][T26866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1350.669334][ T3460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.864840][ T3460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.997595][T26875] tmpfs: Bad value for 'nr_inodes' [ 1351.026574][T26875] loop1: detected capacity change from 0 to 2048 [ 1351.038504][ T3460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.078792][T26875] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 1351.084297][T26875] loop1: partition table partially beyond EOD, truncated [ 1351.092930][T26875] loop1: p1 start 8454147 is beyond EOD, truncated [ 1351.107720][T26875] loop1: p2 start 16908804 is beyond EOD, truncated [ 1351.114415][T26875] loop1: p3 start 4284289 is beyond EOD, truncated [ 1351.128245][T26875] loop1: p5 start 8454147 is beyond EOD, truncated [ 1351.135078][T26875] loop1: p6 start 16908804 is beyond EOD, truncated [ 1351.288674][ T3460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.302059][T19697] udevd[19697]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1351.355530][T19697] udevd[19697]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1351.479747][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.526205][T26856] chnl_net:caif_netlink_parms(): no params data found [ 1351.756452][T26885] loop4: detected capacity change from 0 to 512 [ 1351.816270][T14170] Bluetooth: hci1: command tx timeout [ 1351.839560][T26885] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1351.943160][T26856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.994964][T26894] loop1: detected capacity change from 0 to 512 [ 1351.997014][T26856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.008564][T26885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1352.008813][T26885] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.067841][T26856] bridge_slave_0: entered allmulticast mode [ 1352.137773][T26856] bridge_slave_0: entered promiscuous mode [ 1352.215731][T26894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1352.237473][T26856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.244709][T26856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.336175][T26856] bridge_slave_1: entered allmulticast mode [ 1352.368772][T26856] bridge_slave_1: entered promiscuous mode [ 1352.446340][T26900] Invalid ELF header magic: != ELF [ 1352.473984][T26894] EXT4-fs (loop1): shut down requested (2) [ 1352.486858][T26894] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.7132: Unimplemented hash flags: 0x0001 [ 1352.503487][T26894] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.7132: Corrupt directory, running e2fsck is recommended [ 1352.629929][T26900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1352.636562][T26900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1352.645100][T26900] vhci_hcd vhci_hcd.0: Device attached [ 1352.777320][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.009478][T26901] vhci_hcd: connection reset by peer [ 1353.029036][T13590] vhci_hcd: stop threads [ 1353.033453][T13590] vhci_hcd: release socket [ 1353.070758][T13590] vhci_hcd: disconnect device [ 1353.242310][T19891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.313595][T26856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.439118][T26856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.597229][T26911] loop1: detected capacity change from 0 to 8192 [ 1353.672608][T26917] loop0: detected capacity change from 0 to 512 [ 1353.697587][T26917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1353.706777][T26911] vfat filesystem being mounted at /557/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1353.736393][ T5823] vhci_hcd: vhci_device speed not set [ 1353.753555][T26917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1353.806232][T26917] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1353.826562][ T28] audit: type=1800 audit(6082107246.438:1641): pid=26911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7135" name="bus" dev="loop1" ino=1048695 res=0 errno=0 [ 1353.851037][T26856] team0: Port device team_slave_0 added [ 1353.869790][T26856] team0: Port device team_slave_1 added [ 1353.896089][T14170] Bluetooth: hci1: command tx timeout [ 1353.921740][T26923] tmpfs: Bad value for 'nr_inodes' [ 1353.978389][T26923] loop4: detected capacity change from 0 to 2048 [ 1354.053982][T26923] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 1354.067999][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.098439][T26923] loop4: partition table partially beyond EOD, truncated [ 1354.122887][T26923] loop4: p1 start 8454147 is beyond EOD, truncated [ 1354.162180][T26923] loop4: p2 start 16908804 is beyond EOD, truncated [ 1354.170811][T26923] loop4: p3 start 4284289 is beyond EOD, truncated [ 1354.189020][T26923] loop4: p5 start 8454147 is beyond EOD, truncated [ 1354.195711][T26923] loop4: p6 start 16908804 is beyond EOD, truncated [ 1354.361735][T26856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.422233][T26927] loop0: detected capacity change from 0 to 512 [ 1354.441285][T19697] udevd[19697]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1354.451418][T26856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.485677][T26927] EXT4-fs: Ignoring removed mblk_io_submit option [ 1354.524034][T26927] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1354.540883][T26856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.559349][T26927] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1354.591919][T26856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.621885][T26927] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7138: invalid indirect mapped block 1819239214 (level 1) [ 1354.636789][T26856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.704169][T26927] EXT4-fs (loop0): Remounting filesystem read-only [ 1354.725479][T26927] EXT4-fs (loop0): 1 truncate cleaned up [ 1354.732408][T26856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.771790][T26927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1355.631165][T26944] loop1: detected capacity change from 0 to 512 [ 1355.820942][T26944] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1355.841062][T26941] can0: slcan on ttyS3. [ 1355.926162][T26943] can0 (unregistered): slcan off ttyS3. [ 1355.939724][T26944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1355.955873][T26944] ext4 filesystem being mounted at /559/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.977494][T14170] Bluetooth: hci1: command tx timeout [ 1356.032941][T19891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.459556][T26953] Invalid ELF header magic: != ELF [ 1356.620454][T26953] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1356.627060][T26953] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1356.635798][T26953] vhci_hcd vhci_hcd.0: Device attached [ 1356.679190][ T3460] dvmrp1 (unregistering): left allmulticast mode [ 1357.102263][T26954] vhci_hcd: connection closed [ 1357.116398][T25460] vhci_hcd: stop threads [ 1357.194076][T25460] vhci_hcd: release socket [ 1357.198497][ T5823] usb 35-1: new high-speed USB device number 18 using vhci_hcd [ 1357.198934][T25460] vhci_hcd: disconnect device [ 1357.227506][ T5823] usb 35-1: enqueue for inactive port 0 [ 1357.246536][T26856] hsr_slave_0: entered promiscuous mode [ 1357.258870][T26856] hsr_slave_1: entered promiscuous mode [ 1357.267794][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.278768][T26856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1357.286605][T26856] Cannot create hsr debugfs directory [ 1357.307080][ T5823] vhci_hcd: vhci_device speed not set [ 1357.596734][ T3460] hsr_slave_0: left promiscuous mode [ 1357.746490][ T3460] hsr_slave_1: left promiscuous mode [ 1357.753006][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.773718][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.797059][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.804589][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.826323][T26964] loop0: detected capacity change from 0 to 512 [ 1357.857533][T26964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1357.871062][ T3460] bridge_slave_1: left allmulticast mode [ 1357.887893][ T3460] bridge_slave_1: left promiscuous mode [ 1357.914393][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.925830][T26964] EXT4-fs (loop0): shut down requested (2) [ 1357.932775][T26964] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.7145: Unimplemented hash flags: 0x0001 [ 1357.945122][T26964] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.7145: Corrupt directory, running e2fsck is recommended [ 1357.964545][ T3460] bridge_slave_0: left allmulticast mode [ 1357.992143][ T3460] bridge_slave_0: left promiscuous mode [ 1358.021483][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.058894][T14170] Bluetooth: hci1: command tx timeout [ 1358.094340][ T3460] veth1_macvtap: left promiscuous mode [ 1358.100415][ T3460] veth1_vlan: left promiscuous mode [ 1358.131873][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.440752][ T3460] bond12 (unregistering): Released all slaves [ 1358.454835][T26975] loop0: detected capacity change from 0 to 8192 [ 1358.490369][ T3460] bond11 (unregistering): Released all slaves [ 1358.514229][T26975] vfat filesystem being mounted at /14/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1358.534043][ T3460] bond10 (unregistering): Released all slaves [ 1358.568085][ T28] audit: type=1800 audit(6082107251.188:1642): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7147" name="bus" dev="loop0" ino=1048696 res=0 errno=0 [ 1358.613436][ T3460] bond9 (unregistering): Released all slaves [ 1358.649899][ T3460] bond8 (unregistering): Released all slaves [ 1358.673615][ T3460] bond7 (unregistering): Released all slaves [ 1358.722533][ T3460] bond6 (unregistering): Released all slaves [ 1358.759419][ T3460] bond5 (unregistering): Released all slaves [ 1358.792210][ T3460] bond4 (unregistering): Released all slaves [ 1358.840780][ T3460] bond3 (unregistering): Released all slaves [ 1358.878786][ T3460] bond2 (unregistering): Released all slaves [ 1358.913204][ T3460] bond1 (unregistering): Released all slaves [ 1359.113011][T26982] tmpfs: Bad value for 'nr_inodes' [ 1359.144594][T26982] loop0: detected capacity change from 0 to 2048 [ 1359.225363][T26982] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 1359.231094][T26982] loop0: partition table partially beyond EOD, truncated [ 1359.245644][T26982] loop0: p1 start 8454147 is beyond EOD, truncated [ 1359.252810][T26982] loop0: p2 start 16908804 is beyond EOD, truncated [ 1359.266470][T26982] loop0: p3 start 4284289 is beyond EOD, truncated [ 1359.279397][T26982] loop0: p5 start 8454147 is beyond EOD, truncated [ 1359.286216][T26982] loop0: p6 start 16908804 is beyond EOD, truncated [ 1359.317671][ T5141] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 1359.322960][ T5141] loop0: partition table partially beyond EOD, truncated [ 1359.347468][ T5141] loop0: p1 start 8454147 is beyond EOD, truncated [ 1359.354204][ T5141] loop0: p2 start 16908804 is beyond EOD, truncated [ 1359.361932][ T5141] loop0: p3 start 4284289 is beyond EOD, truncated [ 1359.383412][ T5141] loop0: p5 start 8454147 is beyond EOD, truncated [ 1359.392347][ T5141] loop0: p6 start 16908804 is beyond EOD, truncated [ 1359.467367][T26683] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 1359.476273][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1359.498546][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.516165][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.544210][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.553780][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.563778][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.586962][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.595791][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.606088][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.631295][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.641049][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.704769][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1359.738302][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.751127][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.762552][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.771889][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.781104][T19697] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.790413][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.808479][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.818457][T19697] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1359.824442][T26987] loop0: detected capacity change from 0 to 128 [ 1359.857671][T26987] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1359.889711][T26987] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1359.954111][ T28] audit: type=1800 audit(6082107252.568:1643): pid=26987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7150" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 1359.975049][ T28] audit: type=1804 audit(6082107252.588:1644): pid=26987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7150" name="/newroot/17/file1/file1" dev="loop0" ino=12 res=1 errno=0 [ 1360.098211][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 1360.185792][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 1360.275741][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.340406][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.765984][ T3460] bond0 (unregistering): Released all slaves [ 1360.990123][T26683] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1361.359316][T27000] loop4: detected capacity change from 0 to 512 [ 1361.413055][T27000] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1361.492407][T27000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1361.538766][T27000] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.671443][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.680465][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.728708][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.221805][T27018] Invalid ELF header magic: != ELF [ 1362.476813][T27018] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1362.483443][T27018] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1362.491433][T27018] vhci_hcd vhci_hcd.0: Device attached [ 1362.770464][T27019] vhci_hcd: connection closed [ 1362.801187][ T11] vhci_hcd: stop threads [ 1362.836474][ T5823] usb 41-1: new high-speed USB device number 17 using vhci_hcd [ 1362.876745][ T11] vhci_hcd: release socket [ 1362.882271][ T11] vhci_hcd: disconnect device [ 1362.916036][ T5823] usb 41-1: enqueue for inactive port 0 [ 1362.950050][T27015] loop1: detected capacity change from 0 to 8192 [ 1362.972143][T27015] vfat filesystem being mounted at /563/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1363.003576][ T28] audit: type=1800 audit(6082107255.608:1645): pid=27015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7155" name="bus" dev="loop1" ino=1048697 res=0 errno=0 [ 1363.025013][ T5823] vhci_hcd: vhci_device speed not set [ 1363.435320][T26856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1363.487813][T26856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1363.503007][T26856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1363.556519][T26856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1363.705339][T26856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.734410][T26856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.748822][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.756073][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.776940][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.784155][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.114220][T26856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.185758][T26856] veth0_vlan: entered promiscuous mode [ 1364.212458][T26856] veth1_vlan: entered promiscuous mode [ 1364.253536][T26856] veth0_macvtap: entered promiscuous mode [ 1364.270344][T26856] veth1_macvtap: entered promiscuous mode [ 1364.303510][T26856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.321452][T26856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.331766][T26856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.346897][T26856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.363675][T26856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.375508][T26856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.393289][T26856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.416820][T26856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.432055][T26856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.444005][T26856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.459427][T26856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.471360][T26856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.482363][T26856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.494253][T26856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.512328][T26856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.523737][T26856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.534460][T26856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.544902][T26856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.653786][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.677383][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.714357][T13590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.723788][T13590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.227176][T27063] Invalid ELF header magic: != ELF [ 1365.276058][T27063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1365.282676][T27063] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1365.290620][T27063] vhci_hcd vhci_hcd.0: Device attached [ 1365.632829][ T27] usb 33-1: new high-speed USB device number 30 using vhci_hcd [ 1365.798411][T27064] vhci_hcd: connection closed [ 1365.817188][ T49] vhci_hcd: stop threads [ 1365.943478][ T49] vhci_hcd: release socket [ 1365.948826][ T49] vhci_hcd: disconnect device [ 1366.035604][T27051] loop4: detected capacity change from 0 to 8192 [ 1366.114505][T27069] loop3: detected capacity change from 0 to 512 [ 1366.124750][T27051] vfat filesystem being mounted at /392/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1366.204672][T27069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1366.222019][T27072] tmpfs: Bad value for 'nr_inodes' [ 1366.232936][ T28] audit: type=1800 audit(6082107258.808:1646): pid=27051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7165" name="bus" dev="loop4" ino=1048701 res=0 errno=0 [ 1366.295180][T27069] EXT4-fs (loop3): shut down requested (2) [ 1366.325680][T27072] loop1: detected capacity change from 0 to 2048 [ 1366.406983][T27069] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.7156: Unimplemented hash flags: 0x0001 [ 1366.471700][T27069] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.7156: Corrupt directory, running e2fsck is recommended [ 1366.532617][T27072] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 1366.570360][T27072] loop1: partition table partially beyond EOD, truncated [ 1366.586009][T21235] blk_print_req_error: 14 callbacks suppressed [ 1366.586027][T21235] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1366.602833][T27072] loop1: p1 start 8454147 is beyond EOD, truncated [ 1366.626345][T27072] loop1: p2 start 16908804 is beyond EOD, truncated [ 1366.635440][T21235] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1366.660510][T21235] buffer_io_error: 10 callbacks suppressed [ 1366.660527][T21235] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1366.686895][T27072] loop1: p3 start 4284289 is beyond EOD, truncated [ 1366.706828][T21235] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1366.728827][T27072] loop1: p5 start 8454147 is beyond EOD, truncated [ 1366.736525][T27072] loop1: p6 start 16908804 is beyond EOD, truncated [ 1366.743461][T21235] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1366.764419][T21235] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1366.816021][T21235] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1366.857906][T21235] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1366.916132][T21235] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1366.950405][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.959065][T21235] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1367.017932][T21235] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1367.069413][T27084] loop4: detected capacity change from 0 to 128 [ 1367.241363][T27092] can0: slcan on ttyS3. [ 1367.261976][T27084] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1367.341706][T22375] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1367.361868][T22375] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1367.375193][T27084] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.385874][T22375] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1367.387331][T22375] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1367.405392][T27096] can0 (unregistered): slcan off ttyS3. [ 1367.462666][T22375] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1367.496560][ T28] audit: type=1800 audit(6082107260.108:1647): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7159" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1367.521253][T22375] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1367.553321][T22375] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1367.572401][T27098] loop3: detected capacity change from 0 to 512 [ 1367.580197][T22375] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1367.596271][ T28] audit: type=1804 audit(6082107260.118:1648): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7159" name="/newroot/393/file1/file1" dev="loop4" ino=12 res=1 errno=0 [ 1367.619993][T22375] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 1367.667968][T27098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1367.680548][T21464] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1367.771675][T27098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.818975][T27098] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.939982][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.426736][T27115] loop1: detected capacity change from 0 to 8192 [ 1368.512987][T27119] Invalid ELF header magic: != ELF [ 1368.545757][T27119] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1368.552352][T27119] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1368.560373][T27119] vhci_hcd vhci_hcd.0: Device attached [ 1368.733591][T27115] vfat filesystem being mounted at /568/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1369.047460][T27120] vhci_hcd: connection reset by peer [ 1369.068225][T13590] vhci_hcd: stop threads [ 1369.072653][T13590] vhci_hcd: release socket [ 1369.201633][T13590] vhci_hcd: disconnect device [ 1369.249877][ T28] audit: type=1800 audit(6082107261.868:1649): pid=27115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7171" name="bus" dev="loop1" ino=1048702 res=0 errno=0 [ 1369.305800][T27125] loop3: detected capacity change from 0 to 512 [ 1369.349741][T27125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1369.447309][T27125] EXT4-fs (loop3): shut down requested (2) [ 1369.462849][T27125] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.7172: Unimplemented hash flags: 0x0001 [ 1369.492987][T27125] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.7172: Corrupt directory, running e2fsck is recommended [ 1369.781514][T27134] tmpfs: Bad value for 'nr_inodes' [ 1369.813139][T27134] loop0: detected capacity change from 0 to 2048 [ 1369.844248][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.939760][T27134] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 1369.967140][T27134] loop0: partition table partially beyond EOD, truncated [ 1369.974473][T27134] loop0: p1 start 8454147 is beyond EOD, truncated [ 1370.032508][T27134] loop0: p2 start 16908804 is beyond EOD, truncated [ 1370.039559][T27134] loop0: p3 start 4284289 is beyond EOD, truncated [ 1370.050691][T27134] loop0: p5 start 8454147 is beyond EOD, truncated [ 1370.059355][T27134] loop0: p6 start 16908804 is beyond EOD, truncated [ 1370.193416][T19697] udevd[19697]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1370.371449][T27144] loop1: detected capacity change from 0 to 128 [ 1370.393287][T27147] loop4: detected capacity change from 0 to 512 [ 1370.447970][T27144] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1370.465333][T27144] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.478078][T27147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1370.524442][T27150] tmpfs: Bad value for 'nr_inodes' [ 1370.567834][T27147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1370.606325][T27147] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.625630][ T28] audit: type=1800 audit(6082107263.238:1650): pid=27144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7177" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1370.653085][ T28] audit: type=1804 audit(6082107263.268:1651): pid=27144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7177" name="/newroot/570/file1/file1" dev="loop1" ino=12 res=1 errno=0 [ 1370.799866][T27150] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 1370.805188][T27150] loop0: partition table partially beyond EOD, truncated [ 1370.826530][T27150] loop0: p1 start 8454147 is beyond EOD, truncated [ 1370.846136][T27150] loop0: p2 start 16908804 is beyond EOD, truncated [ 1370.863107][T19891] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1370.872579][T27150] loop0: p3 start 4284289 is beyond EOD, truncated [ 1370.882899][T27150] loop0: p5 start 8454147 is beyond EOD, truncated [ 1370.901723][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.911292][T27150] loop0: p6 start 16908804 is beyond EOD, truncated [ 1371.016180][ T27] vhci_hcd: vhci_device speed not set [ 1371.217098][T27169] can0: slcan on ttyS3. [ 1371.306438][T27169] can0 (unregistered): slcan off ttyS3. [ 1371.511292][T19697] udevd[19697]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1371.568332][T19697] udevd[19697]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1371.641757][T27179] Invalid ELF header magic: != ELF [ 1371.822599][T27179] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1371.829212][T27179] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1371.837211][T27179] vhci_hcd vhci_hcd.0: Device attached [ 1372.328694][T27180] vhci_hcd: connection closed [ 1372.350208][ T3460] vhci_hcd: stop threads [ 1372.394135][ T3460] vhci_hcd: release socket [ 1372.408225][ T3460] vhci_hcd: disconnect device [ 1372.566069][ T27] vhci_hcd: vhci_device speed not set [ 1372.637471][T27190] set_capacity_and_notify: 1 callbacks suppressed [ 1372.637488][T27190] loop3: detected capacity change from 0 to 512 [ 1372.667958][T27190] EXT4-fs: Ignoring removed mblk_io_submit option [ 1372.779986][T27190] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1372.824957][T27190] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1372.899447][T27190] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7188: invalid indirect mapped block 1819239214 (level 1) [ 1372.937105][T27190] EXT4-fs (loop3): Remounting filesystem read-only [ 1372.944042][T27190] EXT4-fs (loop3): 1 truncate cleaned up [ 1373.008581][T27190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1373.025602][T27199] loop4: detected capacity change from 0 to 128 [ 1373.109347][T27199] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1373.206897][T27199] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.288964][ T28] audit: type=1800 audit(6082107265.908:1652): pid=27199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7190" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1373.338566][ T28] audit: type=1804 audit(6082107265.928:1653): pid=27199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7190" name="/newroot/399/file1/file1" dev="loop4" ino=12 res=1 errno=0 [ 1373.425195][T21464] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1373.518086][T27206] loop0: detected capacity change from 0 to 2048 [ 1373.590017][T27208] loop4: detected capacity change from 0 to 512 [ 1373.601900][T27208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1373.643311][T27206] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 1373.670551][T27206] loop0: partition table partially beyond EOD, truncated [ 1373.700156][T27208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1373.717364][T27206] loop0: p1 start 8454147 is beyond EOD, truncated [ 1373.762154][T27206] loop0: p2 start 16908804 is beyond EOD, truncated [ 1373.782714][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.812898][T27206] loop0: p3 start 4284289 is beyond EOD, truncated [ 1373.819236][T27208] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.858907][T27206] loop0: p5 start 8454147 is beyond EOD, truncated [ 1373.896174][T27206] loop0: p6 start 16908804 is beyond EOD, truncated [ 1373.954292][ T5141] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 1373.972448][ T5141] loop0: partition table partially beyond EOD, truncated [ 1373.980771][ T5141] loop0: p1 start 8454147 is beyond EOD, truncated [ 1373.989051][ T5141] loop0: p2 start 16908804 is beyond EOD, truncated [ 1374.007737][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.008641][ T5141] loop0: p3 start 4284289 is beyond EOD, truncated [ 1374.035719][ T5141] loop0: p5 start 8454147 is beyond EOD, truncated [ 1374.051713][ T5141] loop0: p6 start 16908804 is beyond EOD, truncated [ 1374.273434][T19697] udevd[19697]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1374.424800][T27225] can0: slcan on ttyS3. [ 1374.505722][T27227] loop3: detected capacity change from 0 to 128 [ 1374.620235][T27225] can0 (unregistered): slcan off ttyS3. [ 1374.671303][T27227] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1374.700019][T27227] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.750744][ T28] audit: type=1800 audit(6082107267.368:1654): pid=27227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7200" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 1374.836939][T27233] Invalid ELF header magic: != ELF [ 1375.030228][T27233] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1375.036837][T27233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1375.044812][T27233] vhci_hcd vhci_hcd.0: Device attached [ 1375.278611][T27235] vhci_hcd: connection closed [ 1375.307848][ T3460] vhci_hcd: stop threads [ 1375.551814][ T5823] usb 35-1: new high-speed USB device number 19 using vhci_hcd [ 1375.560265][ T3460] vhci_hcd: release socket [ 1375.592864][ T3460] vhci_hcd: disconnect device [ 1375.653865][T26856] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1375.801731][T27241] loop0: detected capacity change from 0 to 512 [ 1375.831927][T27241] EXT4-fs: Ignoring removed mblk_io_submit option [ 1375.924225][T27241] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1375.959941][T27241] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1375.977493][T27247] loop4: detected capacity change from 0 to 512 [ 1376.022487][T27247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1376.047314][T27241] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7204: invalid indirect mapped block 1819239214 (level 1) [ 1376.075459][T27245] loop1: detected capacity change from 0 to 2048 [ 1376.106576][T27241] EXT4-fs (loop0): Remounting filesystem read-only [ 1376.123905][T27241] EXT4-fs (loop0): 1 truncate cleaned up [ 1376.134769][T27241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1376.158536][T27247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1376.160862][T27245] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 1376.183239][T27245] loop1: partition table partially beyond EOD, truncated [ 1376.193813][T27245] loop1: p1 start 8454147 is beyond EOD, truncated [ 1376.201040][T27245] loop1: p2 start 16908804 is beyond EOD, truncated [ 1376.213268][T27245] loop1: p3 start 4284289 is beyond EOD, truncated [ 1376.220251][T27247] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1376.241561][T27245] loop1: p5 start 8454147 is beyond EOD, truncated [ 1376.252882][T27245] loop1: p6 start 16908804 is beyond EOD, truncated [ 1376.361028][T19697] blk_print_req_error: 14 callbacks suppressed [ 1376.361047][T19697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1376.423970][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.618005][T19697] udevd[19697]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1376.674696][T27258] Driver unsupported XDP return value 0 on prog (id 1012) dev N/A, expect packet loss! [ 1376.838451][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.974472][T27266] can0: slcan on ttyS3. [ 1377.006476][T27265] loop0: detected capacity change from 0 to 128 [ 1377.046424][T27266] can0 (unregistered): slcan off ttyS3. [ 1377.095865][T27265] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1377.186539][T27270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1377.194549][T27270] IPv6: NLM_F_CREATE should be set when creating new route [ 1377.211977][T27265] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1377.353839][T27273] Invalid ELF header magic: != ELF [ 1377.395723][T26683] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1377.418142][T27273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1377.424731][T27273] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1377.505141][T27273] vhci_hcd vhci_hcd.0: Device attached [ 1377.695308][T27282] loop4: detected capacity change from 0 to 512 [ 1377.732229][T27280] loop0: detected capacity change from 0 to 2048 [ 1377.734459][T27282] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1377.748286][T27274] vhci_hcd: connection reset by peer [ 1377.766579][ T1141] vhci_hcd: stop threads [ 1377.789205][ T1141] vhci_hcd: release socket [ 1377.806412][ T1141] vhci_hcd: disconnect device [ 1377.845115][T27280] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 1377.859073][T27282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1377.882389][T27280] loop0: partition table partially beyond EOD, truncated [ 1377.931544][T27280] loop0: p1 start 8454147 is beyond EOD, truncated [ 1377.950343][T27282] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1377.986201][T27280] loop0: p2 start 16908804 is beyond EOD, truncated [ 1378.019742][T27280] loop0: p3 start 4284289 is beyond EOD, truncated [ 1378.066304][T27280] loop0: p5 start 8454147 is beyond EOD, truncated [ 1378.096114][T27280] loop0: p6 start 16908804 is beyond EOD, truncated [ 1378.220518][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.366101][T27290] loop3: detected capacity change from 0 to 512 [ 1378.397815][T27290] EXT4-fs: Ignoring removed mblk_io_submit option [ 1378.428556][T27290] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1378.434969][T27290] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1378.490041][T27290] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7222: invalid indirect mapped block 1819239214 (level 1) [ 1378.551237][T27290] EXT4-fs (loop3): Remounting filesystem read-only [ 1378.576354][T27290] EXT4-fs (loop3): 1 truncate cleaned up [ 1378.583527][T27290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1379.043669][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.083169][T27302] loop1: detected capacity change from 0 to 128 [ 1379.115273][T27302] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1379.230533][T27308] loop0: detected capacity change from 0 to 512 [ 1379.239492][T27302] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.251138][T27308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1379.320659][T19891] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1379.358909][T27308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.405742][T27308] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.475086][T27314] can0: slcan on ttyS3. [ 1379.541180][T27314] can0 (unregistered): slcan off ttyS3. [ 1379.596543][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.997458][T27329] loop1: detected capacity change from 0 to 512 [ 1380.015119][T27329] EXT4-fs: Ignoring removed mblk_io_submit option [ 1380.053213][T27329] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1380.078223][T27329] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1380.118774][T27329] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.7235: invalid indirect mapped block 1819239214 (level 1) [ 1380.168895][T27329] EXT4-fs (loop1): Remounting filesystem read-only [ 1380.255194][T27329] EXT4-fs (loop1): 1 truncate cleaned up [ 1380.275782][T27329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1380.468521][T27339] Invalid ELF header magic: != ELF [ 1380.494453][T27339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1380.501053][T27339] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1380.511035][T27339] vhci_hcd vhci_hcd.0: Device attached [ 1380.710222][ T5823] vhci_hcd: vhci_device speed not set [ 1380.752986][T27348] loop4: detected capacity change from 0 to 128 [ 1380.786324][T27342] vhci_hcd: connection closed [ 1380.790016][ T3448] vhci_hcd: stop threads [ 1380.799892][ T5845] usb 33-1: new high-speed USB device number 31 using vhci_hcd [ 1380.843700][ T3448] vhci_hcd: release socket [ 1380.852630][T27348] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1380.895626][ T3448] vhci_hcd: disconnect device [ 1380.900862][T27352] loop3: detected capacity change from 0 to 512 [ 1380.915654][T27348] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1380.952127][T27352] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1381.074400][T27352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.128921][T27352] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.163222][T21464] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1381.297552][T19891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.370115][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.612098][T27367] loop3: detected capacity change from 0 to 1024 [ 1381.722182][T27367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.964685][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.091989][T27377] can0: slcan on ttyS3. [ 1382.147313][T27377] can0 (unregistered): slcan off ttyS3. [ 1382.215538][T27382] loop0: detected capacity change from 0 to 512 [ 1382.225636][T27382] EXT4-fs: Ignoring removed mblk_io_submit option [ 1382.273888][T27382] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1382.319594][T27382] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1382.379236][T27382] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7250: invalid indirect mapped block 1819239214 (level 1) [ 1382.416798][T27382] EXT4-fs (loop0): Remounting filesystem read-only [ 1382.450211][T27382] EXT4-fs (loop0): 1 truncate cleaned up [ 1382.462644][T27382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1382.648517][T27395] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1382.814420][T27395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.831975][T27395] ext4 filesystem being mounted at /588/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.023274][T27407] set_capacity_and_notify: 1 callbacks suppressed [ 1383.023294][T27407] loop4: detected capacity change from 0 to 1024 [ 1383.102451][T19891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.132915][T27407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.146480][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.375746][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.837558][T27428] random: crng reseeded on system resumption [ 1385.415356][ T970] IPVS: starting estimator thread 0... [ 1385.546232][T27449] IPVS: using max 16 ests per chain, 38400 per kthread [ 1385.549857][T27450] Invalid ELF header magic: != ELF [ 1385.611729][T27444] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1385.618332][T27444] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1385.638729][T27444] vhci_hcd vhci_hcd.0: Device attached [ 1385.674900][T27454] loop1: detected capacity change from 0 to 512 [ 1385.696557][T27454] EXT4-fs: Ignoring removed mblk_io_submit option [ 1385.729382][T27456] loop3: detected capacity change from 0 to 512 [ 1385.752315][T27454] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1385.763310][T27451] vhci_hcd: connection reset by peer [ 1385.779892][T25456] vhci_hcd: stop threads [ 1385.784221][T25456] vhci_hcd: release socket [ 1385.790613][T27454] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1385.804050][T27456] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1385.832351][T25456] vhci_hcd: disconnect device [ 1385.845350][T27454] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.7265: invalid indirect mapped block 1819239214 (level 1) [ 1385.885474][T27456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.917155][T27456] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.927568][T27454] EXT4-fs (loop1): Remounting filesystem read-only [ 1385.934449][T27454] EXT4-fs (loop1): 1 truncate cleaned up [ 1385.959895][T27454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1385.980135][ T5845] vhci_hcd: vhci_device speed not set [ 1386.084338][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.278696][T19891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.482227][T27466] loop1: detected capacity change from 0 to 1024 [ 1386.541872][T27466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1386.652145][T27471] loop4: detected capacity change from 0 to 512 [ 1386.716015][T27471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1386.787397][T27471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1386.825542][T27471] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1386.848579][T19891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.136712][T27480] can0: slcan on ttyS3. [ 1387.320629][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.338778][T27480] can0 (unregistered): slcan off ttyS3. [ 1387.507246][T27485] loop0: detected capacity change from 0 to 512 [ 1387.514644][T27485] EXT4-fs: Ignoring removed orlov option [ 1387.530375][T27485] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1387.558710][T27485] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.7276: attempt to clear invalid blocks 2 len 1 [ 1387.617826][T27485] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1387.649172][T27485] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7276: invalid indirect mapped block 1819239214 (level 0) [ 1387.713341][T27490] loop4: detected capacity change from 0 to 512 [ 1387.721164][T27485] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7276: invalid indirect mapped block 1819239214 (level 1) [ 1387.743427][T27490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1387.809758][T27492] loop1: detected capacity change from 0 to 512 [ 1387.817504][T27492] EXT4-fs: Ignoring removed mblk_io_submit option [ 1387.833160][T27485] EXT4-fs (loop0): 1 truncate cleaned up [ 1387.889842][T27485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1387.915002][T27490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1387.956703][T27492] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1387.963114][T27492] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1387.980165][T27490] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1388.021975][T27497] loop3: detected capacity change from 0 to 128 [ 1388.071577][T27492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.7278: invalid indirect mapped block 1819239214 (level 1) [ 1388.123193][T27497] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1388.144774][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.155645][T27492] EXT4-fs (loop1): Remounting filesystem read-only [ 1388.223256][T27492] EXT4-fs (loop1): 1 truncate cleaned up [ 1388.228153][T27497] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1388.243716][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.258793][T27492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1388.415482][T26856] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1388.560347][T27505] loop4: detected capacity change from 0 to 1024 [ 1388.623005][T27505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1388.728094][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.881070][T19891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.072153][T27516] xt_hashlimit: size too large, truncated to 1048576 [ 1389.186247][T27519] @0Ù: renamed from bond_slave_1 (while UP) [ 1389.342414][T27524] can0: slcan on ttyS3. [ 1389.737299][T27524] can0 (unregistered): slcan off ttyS3. [ 1389.861083][T27531] Invalid ELF header magic: != ELF [ 1389.938171][T27531] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1389.944762][T27531] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1389.953750][T27531] vhci_hcd vhci_hcd.0: Device attached [ 1390.047020][T27532] vhci_hcd: connection closed [ 1390.090313][T25460] vhci_hcd: stop threads [ 1390.153895][T25460] vhci_hcd: release socket [ 1390.197009][T25460] vhci_hcd: disconnect device [ 1390.260948][ T970] usb 33-1: new high-speed USB device number 32 using vhci_hcd [ 1390.275665][ T970] usb 33-1: enqueue for inactive port 0 [ 1390.285659][T27536] loop4: detected capacity change from 0 to 128 [ 1390.358325][T27536] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1390.406065][ T970] vhci_hcd: vhci_device speed not set [ 1390.414319][T27536] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1390.509561][T21464] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1390.741773][T27540] loop4: detected capacity change from 0 to 512 [ 1390.799536][T27540] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.7291: corrupted in-inode xattr: invalid ea_ino [ 1390.844119][T27540] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.7291: couldn't read orphan inode 15 (err -117) [ 1390.973496][T27543] loop3: detected capacity change from 0 to 1024 [ 1390.981664][T27540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1391.104470][T27543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1391.154934][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.215007][T27549] loop0: detected capacity change from 0 to 512 [ 1391.224040][T27549] EXT4-fs: Ignoring removed mblk_io_submit option [ 1391.249260][T27549] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1391.266128][T27549] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1391.287272][T27549] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7295: invalid indirect mapped block 1819239214 (level 1) [ 1391.341788][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.416114][T27549] EXT4-fs (loop0): Remounting filesystem read-only [ 1391.501351][T27549] EXT4-fs (loop0): 1 truncate cleaned up [ 1391.517362][T27549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1391.843792][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.061547][T27562] can0: slcan on ttyS3. [ 1392.166941][T27562] can0 (unregistered): slcan off ttyS3. [ 1392.282821][T27566] loop3: detected capacity change from 0 to 128 [ 1392.320684][T27566] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1392.373539][T27566] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1392.438959][T26856] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1392.832577][T27577] loop3: detected capacity change from 0 to 1024 [ 1392.950145][T27577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.051722][T27583] loop0: detected capacity change from 0 to 512 [ 1393.066310][T27584] Invalid ELF header magic: != ELF [ 1393.097261][T27584] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1393.103844][T27584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1393.111655][T27584] vhci_hcd vhci_hcd.0: Device attached [ 1393.148562][T27583] EXT4-fs: Ignoring removed mblk_io_submit option [ 1393.219986][T27583] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1393.235601][T27585] vhci_hcd: connection closed [ 1393.257168][ T1141] vhci_hcd: stop threads [ 1393.302363][T27583] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1393.321733][ T1141] vhci_hcd: release socket [ 1393.349988][ T1141] vhci_hcd: disconnect device [ 1393.371353][T27583] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7308: invalid indirect mapped block 1819239214 (level 1) [ 1393.392705][ T970] usb 41-1: new high-speed USB device number 18 using vhci_hcd [ 1393.431009][ T970] usb 41-1: enqueue for inactive port 0 [ 1393.455390][T27583] EXT4-fs (loop0): Remounting filesystem read-only [ 1393.485855][T27583] EXT4-fs (loop0): 1 truncate cleaned up [ 1393.523000][T27583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1393.547585][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.561678][ T970] vhci_hcd: vhci_device speed not set [ 1394.054923][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.188665][T27598] can0: slcan on ttyS3. [ 1394.342027][T27603] loop0: detected capacity change from 0 to 128 [ 1394.375385][T27603] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1394.440608][T27603] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.482225][ T28] audit: type=1800 audit(6082107287.098:1655): pid=27603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7313" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 1394.770344][T27598] can0 (unregistered): slcan off ttyS3. [ 1394.821666][T26683] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1395.420729][T27621] loop0: detected capacity change from 0 to 512 [ 1395.447159][T27621] EXT4-fs: Ignoring removed mblk_io_submit option [ 1395.488984][T27621] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1395.495421][T27621] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1395.526501][T27621] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7319: invalid indirect mapped block 1819239214 (level 1) [ 1395.608685][T27621] EXT4-fs (loop0): Remounting filesystem read-only [ 1395.648073][T27621] EXT4-fs (loop0): 1 truncate cleaned up [ 1395.701185][T27621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1395.898854][T27624] Invalid ELF header magic: != ELF [ 1395.924297][T27624] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1395.930886][T27624] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1395.938810][T27624] vhci_hcd vhci_hcd.0: Device attached [ 1396.213283][T27625] vhci_hcd: connection closed [ 1396.216764][ T5845] usb 39-1: new high-speed USB device number 27 using vhci_hcd [ 1396.238365][ T1141] vhci_hcd: stop threads [ 1396.242717][ T1141] vhci_hcd: release socket [ 1396.280793][ T1141] vhci_hcd: disconnect device [ 1396.886690][T27632] loop0: detected capacity change from 0 to 128 [ 1396.972471][T27632] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1397.088001][ T28] audit: type=1800 audit(6082107289.708:1656): pid=27632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7322" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 1397.720249][T27639] can0: slcan on ttyS3. [ 1397.817928][T27639] can0 (unregistered): slcan off ttyS3. [ 1398.250382][T27650] loop4: detected capacity change from 0 to 512 [ 1398.260516][T27650] EXT4-fs: Ignoring removed mblk_io_submit option [ 1398.337431][T27650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1398.386059][T27650] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1398.399212][T27650] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7328: invalid indirect mapped block 1819239214 (level 1) [ 1398.489129][T27654] Invalid ELF header magic: != ELF [ 1398.523756][T27650] EXT4-fs (loop4): Remounting filesystem read-only [ 1398.667320][T27654] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1398.673932][T27654] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1398.681884][T27654] vhci_hcd vhci_hcd.0: Device attached [ 1398.780066][T27650] EXT4-fs (loop4): 1 truncate cleaned up [ 1399.009183][T27656] vhci_hcd: connection closed [ 1399.017530][ T970] usb 33-1: new high-speed USB device number 33 using vhci_hcd [ 1399.072747][T25456] vhci_hcd: stop threads [ 1399.225523][T25456] vhci_hcd: release socket [ 1399.244925][T25456] vhci_hcd: disconnect device [ 1399.532875][T27663] loop3: detected capacity change from 0 to 128 [ 1399.705591][T27663] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.775050][ T28] audit: type=1800 audit(6082107292.388:1657): pid=27663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7331" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 1400.099311][T27673] loop3: detected capacity change from 0 to 512 [ 1400.106931][T27673] EXT4-fs: Ignoring removed mblk_io_submit option [ 1400.139019][T27673] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1400.146439][T27673] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1400.199147][T27673] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7343: invalid indirect mapped block 1819239214 (level 1) [ 1400.277556][T27673] EXT4-fs (loop3): Remounting filesystem read-only [ 1400.284471][T27673] EXT4-fs (loop3): 1 truncate cleaned up [ 1400.556218][T27678] can0: slcan on ttyS3. [ 1400.682088][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1400.694059][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1400.711228][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1400.721894][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1400.738021][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1400.745464][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1401.077335][T27679] can0 (unregistered): slcan off ttyS3. [ 1401.416324][ T5845] vhci_hcd: vhci_device speed not set [ 1401.583142][T27680] chnl_net:caif_netlink_parms(): no params data found [ 1401.758504][T27680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.765812][T27680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.775417][T27680] bridge_slave_0: entered allmulticast mode [ 1401.783502][T27680] bridge_slave_0: entered promiscuous mode [ 1401.804539][T27680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.820346][T27680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.827878][T27680] bridge_slave_1: entered allmulticast mode [ 1401.835461][T27680] bridge_slave_1: entered promiscuous mode [ 1401.882967][T27680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.899006][T27680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.969077][T27680] team0: Port device team_slave_0 added [ 1401.984500][T27680] team0: Port device team_slave_1 added [ 1402.018703][T27680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.025728][T27680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.058608][T27680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.077897][T27680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.084910][T27680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.118675][T27680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.160285][T13590] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.235584][T27680] hsr_slave_0: entered promiscuous mode [ 1402.244855][T27680] hsr_slave_1: entered promiscuous mode [ 1402.259790][T27680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1402.271242][T27680] Cannot create hsr debugfs directory [ 1402.303415][T13590] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.398117][T13590] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.519146][T13590] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.861418][T14170] Bluetooth: hci0: command tx timeout [ 1403.745443][T13590] hsr_slave_0: left promiscuous mode [ 1403.759673][T13590] hsr_slave_1: left promiscuous mode [ 1403.768627][T13590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.779589][T13590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.791342][T13590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.802641][T13590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.819808][T13590] bridge_slave_1: left allmulticast mode [ 1403.825523][T13590] bridge_slave_1: left promiscuous mode [ 1403.834099][T13590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.851883][T13590] bridge_slave_0: left allmulticast mode [ 1403.859058][T13590] bridge_slave_0: left promiscuous mode [ 1403.864874][T13590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.913278][T13590] veth1_macvtap: left promiscuous mode [ 1403.919223][T13590] veth0_macvtap: left promiscuous mode [ 1403.935325][T13590] veth1_vlan: left promiscuous mode [ 1403.942866][T13590] veth0_vlan: left promiscuous mode [ 1404.136366][T13590] bond5 (unregistering): Released all slaves [ 1404.163071][T13590] bond4 (unregistering): Released all slaves [ 1404.193681][T13590] bond3 (unregistering): Released all slaves [ 1404.231611][T13590] bond2 (unregistering): Released all slaves [ 1404.254115][T13590] bond1 (unregistering): Released all slaves [ 1404.383074][ T970] vhci_hcd: vhci_device speed not set [ 1404.922732][T13590] team0 (unregistering): Port device team_slave_1 removed [ 1404.943439][T14170] Bluetooth: hci0: command tx timeout [ 1404.982553][T13590] team0 (unregistering): Port device team_slave_0 removed [ 1405.035159][T13590] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1405.097033][T13590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1405.529472][T13590] bond0 (unregistering): Released all slaves [ 1405.724190][T27680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1405.746763][T27680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1405.781313][T27680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1405.804889][T27680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1405.923230][T27680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.953781][T27680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.983101][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.990350][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.002180][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.009409][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.237458][T27680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.288409][T27680] veth0_vlan: entered promiscuous mode [ 1406.303573][T27680] veth1_vlan: entered promiscuous mode [ 1406.334784][T27680] veth0_macvtap: entered promiscuous mode [ 1406.344955][T27680] veth1_macvtap: entered promiscuous mode [ 1406.364511][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.377319][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.390705][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.402391][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.412359][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.423025][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.434676][T27680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.445141][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.455839][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.467549][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.480086][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.490028][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.502165][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.514079][T27680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.543466][T27680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.552788][T27680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.563262][T27680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.572514][T27680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.659884][T25456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.674496][T25456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.708790][T25460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.716838][T25460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.823189][T27760] loop1: detected capacity change from 0 to 512 [ 1406.837782][T27760] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1406.852507][T27758] loop4: detected capacity change from 0 to 512 [ 1406.878811][T27758] EXT4-fs: Ignoring removed mblk_io_submit option [ 1406.965093][T27760] EXT4-fs (loop1): 1 truncate cleaned up [ 1406.983212][T27760] EXT4-fs mount: 9 callbacks suppressed [ 1406.983232][T27760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1407.016194][T14170] Bluetooth: hci0: command tx timeout [ 1407.094195][T27758] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1407.129056][T27758] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1407.161978][T27758] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7346: invalid indirect mapped block 1819239214 (level 1) [ 1407.223297][T27758] EXT4-fs (loop4): Remounting filesystem read-only [ 1407.230502][T27758] EXT4-fs (loop4): 1 truncate cleaned up [ 1407.237745][T27758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1407.368819][T27680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.424836][T27767] can0: slcan on ttyS3. [ 1407.620354][T27772] can0 (unregistered): slcan off ttyS3. [ 1407.734838][T27779] loop3: detected capacity change from 0 to 512 [ 1407.788056][T27779] EXT4-fs: Ignoring removed oldalloc option [ 1407.827749][T27779] EXT4-fs (loop3): filesystem is read-only [ 1407.847066][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.855127][T27779] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1407.898032][T27779] EXT4-fs (loop3): filesystem is read-only [ 1407.903926][T27779] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1407.945645][T27779] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.7339: bg 0: block 64: padding at end of block bitmap is not set [ 1408.068553][T27779] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1408.101041][T27779] EXT4-fs (loop3): 1 orphan inode deleted [ 1408.118835][T27779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1408.238335][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.771060][T27796] Invalid ELF header magic: != ELF [ 1408.924811][T27796] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1408.931409][T27796] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1408.939647][T27796] vhci_hcd vhci_hcd.0: Device attached [ 1409.107903][T14170] Bluetooth: hci0: command tx timeout [ 1409.348860][T27797] vhci_hcd: connection closed [ 1409.362318][T25460] vhci_hcd: stop threads [ 1409.465311][T25460] vhci_hcd: release socket [ 1409.525821][T25460] vhci_hcd: disconnect device [ 1409.588020][ T5823] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 1409.614451][ T5823] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 1409.645549][ T5823] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 1409.679693][ T5823] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 1409.700139][ T5823] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 1409.712964][ T5823] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 1409.738111][ T5823] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 1409.757172][ T5823] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 1409.771452][T27804] loop1: detected capacity change from 0 to 1024 [ 1409.779129][ T5823] hid-generic 0000:0000:0001.0004: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1409.866338][T27804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1409.905402][T27810] loop0: detected capacity change from 0 to 512 [ 1409.913138][T27810] EXT4-fs: Ignoring removed mblk_io_submit option [ 1409.994209][T27810] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1410.006016][T27810] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1410.018752][T27810] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7352: invalid indirect mapped block 1819239214 (level 1) [ 1410.035832][T27810] EXT4-fs (loop0): Remounting filesystem read-only [ 1410.045382][T27810] EXT4-fs (loop0): 1 truncate cleaned up [ 1410.054990][T27810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1410.099454][T27680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.211082][T27807] fido_id[27807]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1410.673591][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.775321][T27829] Invalid ELF header magic: != ELF [ 1410.856619][T27829] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1410.863215][T27829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1410.871075][T27829] vhci_hcd vhci_hcd.0: Device attached [ 1411.284441][T27830] vhci_hcd: connection closed [ 1411.286094][T25460] vhci_hcd: stop threads [ 1411.327298][T25460] vhci_hcd: release socket [ 1411.379174][T25460] vhci_hcd: disconnect device [ 1411.733438][T27834] can0: slcan on ttyS3. [ 1412.058999][T27835] can0 (unregistered): slcan off ttyS3. [ 1412.150456][T27847] netlink: 'syz.4.7361': attribute type 4 has an invalid length. [ 1412.164167][T27850] loop0: detected capacity change from 0 to 1024 [ 1412.175551][T27847] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7361'. [ 1412.206563][T27850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1412.264367][T27847] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1412.458816][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.871717][T27863] loop0: detected capacity change from 0 to 512 [ 1412.897178][T27863] EXT4-fs: Ignoring removed mblk_io_submit option [ 1412.961153][T27863] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1413.010352][T27863] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1413.039704][T27863] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7368: invalid indirect mapped block 1819239214 (level 1) [ 1413.106478][T27863] EXT4-fs (loop0): Remounting filesystem read-only [ 1413.138695][T27863] EXT4-fs (loop0): 1 truncate cleaned up [ 1413.145804][T27863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1413.577117][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.670824][T27872] Invalid ELF header magic: != ELF [ 1413.683960][T27872] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1413.690550][T27872] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1413.700172][T27872] vhci_hcd vhci_hcd.0: Device attached [ 1413.968387][ T970] usb 39-1: new high-speed USB device number 28 using vhci_hcd [ 1414.045044][T27880] loop1: detected capacity change from 0 to 1024 [ 1414.089743][T27880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.206075][T27873] vhci_hcd: connection reset by peer [ 1414.235996][ T3460] vhci_hcd: stop threads [ 1414.240324][ T3460] vhci_hcd: release socket [ 1414.263811][T27889] loop4: detected capacity change from 0 to 512 [ 1414.279388][ T3460] vhci_hcd: disconnect device [ 1414.297507][T27889] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1414.373766][T27680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.418191][T27889] vfat filesystem being mounted at /451/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1414.729563][T27893] loop1: detected capacity change from 0 to 512 [ 1414.763372][T27893] EXT4-fs: Ignoring removed mblk_io_submit option [ 1415.017395][T27896] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1415.217703][T27893] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1415.224124][T27893] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1415.302723][T27893] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.7379: invalid indirect mapped block 1819239214 (level 1) [ 1415.404693][T27893] EXT4-fs (loop1): Remounting filesystem read-only [ 1415.456550][T27893] EXT4-fs (loop1): 1 truncate cleaned up [ 1415.463210][T27893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1416.587003][T27906] can0: slcan on ttyS3. [ 1416.666309][T27907] can0 (unregistered): slcan off ttyS3. [ 1416.761092][T27680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.102621][T27920] loop1: detected capacity change from 0 to 1024 [ 1417.159927][T27920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1417.268800][T27680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.438428][T27928] loop0: detected capacity change from 0 to 512 [ 1417.470637][T27928] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1417.544231][T27928] vfat filesystem being mounted at /81/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1417.559225][T27933] loop4: detected capacity change from 0 to 512 [ 1417.566846][T27933] EXT4-fs: Ignoring removed mblk_io_submit option [ 1417.628981][T27933] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1417.743311][T27933] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1417.793716][T27933] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7392: invalid indirect mapped block 1819239214 (level 1) [ 1417.856545][T27933] EXT4-fs (loop4): Remounting filesystem read-only [ 1417.863443][T27933] EXT4-fs (loop4): 1 truncate cleaned up [ 1417.872893][T27933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1418.049594][T27941] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1418.997538][T27946] loop0: detected capacity change from 0 to 256 [ 1419.028396][T27946] vfat filesystem being mounted at /82/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1419.054943][ T28] audit: type=1804 audit(6082107311.668:1658): pid=27946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7396" name="/newroot/82/file0/bus" dev="loop0" ino=1048710 res=1 errno=0 [ 1419.100041][ T970] vhci_hcd: vhci_device speed not set [ 1419.120923][T27944] Invalid ELF header magic: != ELF [ 1419.158751][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.194643][T27944] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1419.201245][T27944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1419.230536][T27944] vhci_hcd vhci_hcd.0: Device attached [ 1419.354929][T27949] vhci_hcd: connection closed [ 1419.355188][ T3448] vhci_hcd: stop threads [ 1419.376046][ T3448] vhci_hcd: release socket [ 1419.406073][ T3448] vhci_hcd: disconnect device [ 1419.413781][T27955] loop3: detected capacity change from 0 to 1024 [ 1419.456400][ T5790] vhci_hcd: vhci_device speed not set [ 1419.474187][T27955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1419.663746][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.602118][T27970] can0: slcan on ttyS3. [ 1420.798709][T27970] can0 (unregistered): slcan off ttyS3. [ 1421.463825][T27980] loop0: detected capacity change from 0 to 512 [ 1421.489933][T27980] EXT4-fs: Ignoring removed mblk_io_submit option [ 1421.523084][T27983] loop3: detected capacity change from 0 to 1024 [ 1421.548744][T27980] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1421.556205][T27980] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1421.585376][T27980] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7406: invalid indirect mapped block 1819239214 (level 1) [ 1421.617145][T27983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.674856][T27980] EXT4-fs (loop0): Remounting filesystem read-only [ 1421.715239][T27987] loop1: detected capacity change from 0 to 512 [ 1421.720639][T27980] EXT4-fs (loop0): 1 truncate cleaned up [ 1421.728118][T27987] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1421.753360][T27987] vfat filesystem being mounted at /13/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1421.779948][T27980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1421.841470][T27989] loop4: detected capacity change from 0 to 256 [ 1421.871353][T27989] vfat filesystem being mounted at /458/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1421.977988][ T28] audit: type=1804 audit(6082107314.598:1659): pid=27989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7410" name="/newroot/458/file0/bus" dev="loop4" ino=1048711 res=1 errno=0 [ 1422.158458][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.306057][T27996] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1423.102182][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.109630][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.321424][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.546999][T28008] can0: slcan on ttyS3. [ 1423.758752][T28010] can0 (unregistered): slcan off ttyS3. [ 1424.677313][T28024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1424.708999][T28024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1424.722067][T28026] Invalid ELF header magic: != ELF [ 1424.741848][T28024] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.750706][T28024] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.759544][T28024] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.768423][T28024] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.797440][T28026] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1424.804049][T28026] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1424.833409][T28026] vhci_hcd vhci_hcd.0: Device attached [ 1424.835709][T28024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1424.852571][T28024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1425.096306][ T970] usb 35-1: new high-speed USB device number 21 using vhci_hcd [ 1425.115450][ T28] audit: type=1326 audit(6082107317.728:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28030 comm="syz.4.7422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0cd9e0d9 code=0x7ffc0000 [ 1425.184443][ T28] audit: type=1326 audit(6082107317.728:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28030 comm="syz.4.7422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0cd9e0d9 code=0x7ffc0000 [ 1425.215549][T28035] loop3: detected capacity change from 0 to 512 [ 1425.241551][T28027] vhci_hcd: connection reset by peer [ 1425.274981][ T28] audit: type=1326 audit(6082107317.748:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28030 comm="syz.4.7422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f4a0cd9e0d9 code=0x7ffc0000 [ 1425.290693][T28035] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1425.300222][T25460] vhci_hcd: stop threads [ 1425.347349][T25460] vhci_hcd: release socket [ 1425.376360][T25460] vhci_hcd: disconnect device [ 1425.416139][T28035] vfat filesystem being mounted at /76/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1425.424485][ T28] audit: type=1326 audit(6082107317.758:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28030 comm="syz.4.7422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0cd9e0d9 code=0x7ffc0000 [ 1425.451157][T28037] loop4: detected capacity change from 0 to 512 [ 1425.453136][T28037] EXT4-fs: Ignoring removed mblk_io_submit option [ 1425.515934][ T28] audit: type=1326 audit(6082107317.758:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28030 comm="syz.4.7422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0cd9e0d9 code=0x7ffc0000 [ 1425.692206][T28037] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1425.744972][T28037] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1425.807469][T28037] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7423: invalid indirect mapped block 1819239214 (level 1) [ 1425.842360][T28037] EXT4-fs (loop4): Remounting filesystem read-only [ 1425.850608][T28037] EXT4-fs (loop4): 1 truncate cleaned up [ 1425.969198][T28042] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1426.146194][T28037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1426.925642][T28049] loop3: detected capacity change from 0 to 256 [ 1426.950406][T28049] vfat filesystem being mounted at /77/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1427.066517][ T28] audit: type=1804 audit(6082107319.668:1665): pid=28049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7425" name="/newroot/77/file0/bus" dev="loop3" ino=1048716 res=1 errno=0 [ 1427.106926][T28051] can0: slcan on ttyS3. [ 1427.211334][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.257833][T28051] can0 (unregistered): slcan off ttyS3. [ 1428.231727][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1428.270008][T28070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1428.321031][T28070] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.321133][T28070] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.321168][T28070] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.321202][T28070] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.366233][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1428.366260][T28070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1428.793712][T28086] loop3: detected capacity change from 0 to 512 [ 1428.817190][T28086] EXT4-fs: Ignoring removed mblk_io_submit option [ 1428.878858][T28086] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1428.885331][T28086] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1428.921120][T28086] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7437: invalid indirect mapped block 1819239214 (level 1) [ 1428.951588][T28086] EXT4-fs (loop3): Remounting filesystem read-only [ 1428.995378][T28086] EXT4-fs (loop3): 1 truncate cleaned up [ 1429.023149][T28086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1429.109158][T28089] loop4: detected capacity change from 0 to 512 [ 1429.187850][T28089] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1429.309665][T28089] vfat filesystem being mounted at /466/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1429.455643][T28095] Invalid ELF header magic: != ELF [ 1429.478147][T28095] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1429.484761][T28095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1429.492580][T28095] vhci_hcd vhci_hcd.0: Device attached [ 1429.507059][T28097] vhci_hcd: connection closed [ 1429.509271][ T3460] vhci_hcd: stop threads [ 1429.529088][ T3460] vhci_hcd: release socket [ 1429.547433][ T3460] vhci_hcd: disconnect device [ 1429.810406][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.916609][T28106] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1430.806696][ T970] vhci_hcd: vhci_device speed not set [ 1430.821661][T28111] loop1: detected capacity change from 0 to 256 [ 1430.874755][T28111] vfat filesystem being mounted at /21/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1430.976054][T28116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7445'. [ 1430.977933][ T28] audit: type=1804 audit(6082107323.588:1666): pid=28111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7443" name="/newroot/21/file0/bus" dev="loop1" ino=1048719 res=1 errno=0 [ 1430.984975][T28116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7445'. [ 1431.218502][T28116] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.227584][T28116] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.236517][T28116] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.245266][T28116] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.322127][T28116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7445'. [ 1431.359404][T28116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7445'. [ 1432.123454][T28142] loop4: detected capacity change from 0 to 512 [ 1432.178550][T28137] can0: slcan on ttyS3. [ 1432.197246][T28142] EXT4-fs: Ignoring removed mblk_io_submit option [ 1432.228468][T28142] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1432.287602][T28142] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1432.299184][T28142] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7451: invalid indirect mapped block 1819239214 (level 1) [ 1432.346532][T28142] EXT4-fs (loop4): Remounting filesystem read-only [ 1432.353515][T28142] EXT4-fs (loop4): 1 truncate cleaned up [ 1432.448088][T28142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1432.549540][T28146] Invalid ELF header magic: != ELF [ 1432.584870][T28146] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1432.591483][T28146] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1432.599361][T28146] vhci_hcd vhci_hcd.0: Device attached [ 1432.606463][T28149] vhci_hcd: connection closed [ 1432.609318][ T11] vhci_hcd: stop threads [ 1432.640620][ T11] vhci_hcd: release socket [ 1432.645118][ T11] vhci_hcd: disconnect device [ 1432.777135][T28137] can0 (unregistered): slcan off ttyS3. [ 1432.992846][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.998772][T28185] loop4: detected capacity change from 0 to 256 [ 1434.011595][T28186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7460'. [ 1434.054520][T28186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7460'. [ 1434.056536][T28185] vfat filesystem being mounted at /473/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1434.113475][T28186] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.122421][T28186] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.131686][T28186] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.140894][T28186] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.177565][ T28] audit: type=1804 audit(6082107326.788:1667): pid=28185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7461" name="/newroot/473/file0/bus" dev="loop4" ino=1048720 res=1 errno=0 [ 1434.205434][T28186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7460'. [ 1434.253589][T28191] loop3: detected capacity change from 0 to 512 [ 1434.261451][T28186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7460'. [ 1434.278152][T28191] EXT4-fs: Ignoring removed mblk_io_submit option [ 1434.316526][T28191] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1434.322938][T28191] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1434.344529][T28191] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7463: invalid indirect mapped block 1819239214 (level 1) [ 1434.360972][T28191] EXT4-fs (loop3): Remounting filesystem read-only [ 1434.376587][T28191] EXT4-fs (loop3): 1 truncate cleaned up [ 1434.394046][T28191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1434.697823][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.929816][T28199] Invalid ELF header magic: != ELF [ 1434.956097][T28199] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1434.962712][T28199] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1434.971326][T28199] vhci_hcd vhci_hcd.0: Device attached [ 1434.978109][T28208] vhci_hcd: connection closed [ 1435.014205][ T11] vhci_hcd: stop threads [ 1435.062686][ T11] vhci_hcd: release socket [ 1435.078449][ T11] vhci_hcd: disconnect device [ 1435.457753][T28223] can0: slcan on ttyS3. [ 1435.636015][T28223] can0 (unregistered): slcan off ttyS3. [ 1435.981123][T28238] loop3: detected capacity change from 0 to 512 [ 1435.990909][T28238] EXT4-fs: Ignoring removed mblk_io_submit option [ 1436.016937][T28236] sg_write: data in/out 295068/136 bytes for SCSI command 0x0-- guessing data in; [ 1436.016937][T28236] program syz.4.7474 not setting count and/or reply_len properly [ 1436.082405][T28238] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1436.096212][T28238] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1436.196365][T28238] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7476: invalid indirect mapped block 1819239214 (level 1) [ 1436.278430][T28238] EXT4-fs (loop3): Remounting filesystem read-only [ 1436.306326][T28238] EXT4-fs (loop3): 1 truncate cleaned up [ 1436.313530][T28238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1436.368290][T28245] netlink: 'syz.4.7479': attribute type 21 has an invalid length. [ 1437.012857][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.132063][T28257] loop4: detected capacity change from 0 to 512 [ 1437.167709][T28257] EXT4-fs: Ignoring removed mblk_io_submit option [ 1437.231472][T28257] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1437.275816][T28257] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1437.296005][T28251] Invalid ELF header magic: != ELF [ 1437.331356][T28251] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1437.337994][T28251] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1437.346176][T28251] vhci_hcd vhci_hcd.0: Device attached [ 1437.353036][T28259] vhci_hcd: connection closed [ 1437.365485][T28257] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7492: invalid indirect mapped block 1819239214 (level 1) [ 1437.372327][T25460] vhci_hcd: stop threads [ 1437.441320][T28257] EXT4-fs (loop4): Remounting filesystem read-only [ 1437.469275][T28257] EXT4-fs (loop4): 1 truncate cleaned up [ 1437.475212][T25460] vhci_hcd: release socket [ 1437.479862][T25460] vhci_hcd: disconnect device [ 1437.488096][T28257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1437.858636][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.030563][T28272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7489'. [ 1438.467171][T28289] can0: slcan on ttyS3. [ 1439.247769][T28289] can0 (unregistered): slcan off ttyS3. [ 1439.301799][T28296] loop4: detected capacity change from 0 to 512 [ 1439.345966][T28296] EXT4-fs: Ignoring removed mblk_io_submit option [ 1439.422561][T28296] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1439.472152][T28296] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1439.542320][T28296] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7499: invalid indirect mapped block 1819239214 (level 1) [ 1439.602057][T28296] EXT4-fs (loop4): Remounting filesystem read-only [ 1439.650974][T28296] EXT4-fs (loop4): 1 truncate cleaned up [ 1439.693057][T28296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1440.104957][T28300] Invalid ELF header magic: != ELF [ 1440.122515][T28300] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1440.129112][T28300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1440.137150][T28300] vhci_hcd vhci_hcd.0: Device attached [ 1440.153414][T28309] vhci_hcd: connection closed [ 1440.172462][ T11] vhci_hcd: stop threads [ 1440.189574][ T11] vhci_hcd: release socket [ 1440.194081][ T11] vhci_hcd: disconnect device [ 1440.397208][T28315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7504'. [ 1440.471373][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.221658][T28338] can0: slcan on ttyS3. [ 1442.053676][T28346] loop4: detected capacity change from 0 to 512 [ 1442.061461][T28338] can0 (unregistered): slcan off ttyS3. [ 1442.072416][T28345] loop0: detected capacity change from 0 to 512 [ 1442.088433][T28346] EXT4-fs: Ignoring removed mblk_io_submit option [ 1442.161571][T28345] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1442.175685][T28345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.7515: ea_inode with extended attributes [ 1442.193500][T28345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.7515: error while reading EA inode 11 err=-117 [ 1442.212216][T28345] EXT4-fs (loop0): 1 orphan inode deleted [ 1442.220687][T28346] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1442.227650][T28346] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1442.251060][T28345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1442.308783][T28346] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7516: invalid indirect mapped block 1819239214 (level 1) [ 1442.329995][T28346] EXT4-fs (loop4): Remounting filesystem read-only [ 1442.344439][T28346] EXT4-fs (loop4): 1 truncate cleaned up [ 1442.357842][T28346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1442.477424][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.882176][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.121717][T28354] Invalid ELF header magic: != ELF [ 1443.134515][T28354] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1443.141114][T28354] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1443.148931][T28354] vhci_hcd vhci_hcd.0: Device attached [ 1443.165274][T28362] vhci_hcd: connection closed [ 1443.197157][ T49] vhci_hcd: stop threads [ 1443.232692][ T49] vhci_hcd: release socket [ 1443.242719][ T49] vhci_hcd: disconnect device [ 1443.448018][T28373] loop4: detected capacity change from 0 to 2048 [ 1443.642540][T28376] can0: slcan on ttyS3. [ 1443.661166][T28373] loop4: p1 p2 p3 [ 1443.661166][T28373] p1: [ 1444.325378][T28373] loop4: p2 size 458752 extends beyond EOD, truncated [ 1444.524881][T28373] loop4: p3 start 65280 is beyond EOD, truncated [ 1444.569285][T28376] can0 (unregistered): slcan off ttyS3. [ 1444.677822][T28384] loop0: detected capacity change from 0 to 512 [ 1444.686819][T28384] EXT4-fs: Ignoring removed mblk_io_submit option [ 1444.712660][T28384] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1444.765056][T28384] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1444.886179][T28384] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7529: invalid indirect mapped block 1819239214 (level 1) [ 1445.006601][T28384] EXT4-fs (loop0): Remounting filesystem read-only [ 1445.026323][T28384] EXT4-fs (loop0): 1 truncate cleaned up [ 1445.033667][T28384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1445.358156][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.888813][T28407] Invalid ELF header magic: != ELF [ 1445.907654][T28407] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1445.914253][T28407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1445.922109][T28407] vhci_hcd vhci_hcd.0: Device attached [ 1446.258401][T28416] can0: slcan on ttyS3. [ 1446.436972][T28408] vhci_hcd: connection closed [ 1446.439781][ T59] vhci_hcd: stop threads [ 1446.490234][ T59] vhci_hcd: release socket [ 1446.515269][ T59] vhci_hcd: disconnect device [ 1446.661854][ T9] vhci_hcd: vhci_device speed not set [ 1446.748310][T28416] can0 (unregistered): slcan off ttyS3. [ 1446.883491][T28425] loop0: detected capacity change from 0 to 512 [ 1446.897906][T28425] EXT4-fs: Ignoring removed mblk_io_submit option [ 1446.917309][T28425] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1446.953235][T28425] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1446.964137][T28425] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7543: invalid indirect mapped block 1819239214 (level 1) [ 1446.983822][T28425] EXT4-fs (loop0): Remounting filesystem read-only [ 1446.991222][T28425] EXT4-fs (loop0): 1 truncate cleaned up [ 1447.003071][T28425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1447.096506][T28428] 9pnet_fd: Insufficient options for proto=fd [ 1447.443633][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.590164][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888026443c00: rx timeout, send abort [ 1448.077151][T28452] Invalid ELF header magic: != ELF [ 1448.088716][T28452] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1448.095409][T28452] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1448.103153][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801fbc3800: rx timeout, send abort [ 1448.111544][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888026443c00: abort rx timeout. Force session deactivation [ 1448.124347][T28452] vhci_hcd vhci_hcd.0: Device attached [ 1448.406023][ T9] usb 41-1: new high-speed USB device number 19 using vhci_hcd [ 1448.592236][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805dc57400: rx timeout, send abort [ 1448.611520][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801fbc3800: abort rx timeout. Force session deactivation [ 1448.667210][T28458] can0: slcan on ttyS3. [ 1448.674937][T28453] vhci_hcd: connection reset by peer [ 1448.692055][T13590] vhci_hcd: stop threads [ 1448.704973][T13590] vhci_hcd: release socket [ 1448.709678][T13590] vhci_hcd: disconnect device [ 1448.769927][T28458] can0 (unregistered): slcan off ttyS3. [ 1449.100653][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805dc57400: abort rx timeout. Force session deactivation [ 1449.146183][T28464] loop3: detected capacity change from 0 to 512 [ 1449.153629][T28464] EXT4-fs: Ignoring removed mblk_io_submit option [ 1449.249397][T28464] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1449.285519][T28464] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1449.341334][T28464] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7557: invalid indirect mapped block 1819239214 (level 1) [ 1449.369715][T28467] loop1: detected capacity change from 0 to 164 [ 1449.403550][T28464] EXT4-fs (loop3): Remounting filesystem read-only [ 1449.426371][T28464] EXT4-fs (loop3): 1 truncate cleaned up [ 1449.439915][T28464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1450.286425][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.592866][T28503] Invalid ELF header magic: != ELF [ 1450.623909][T28503] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1450.630508][T28503] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1450.639289][T28503] vhci_hcd vhci_hcd.0: Device attached [ 1451.011901][T28517] can0: slcan on ttyS3. [ 1451.186402][T28504] vhci_hcd: connection closed [ 1451.193772][T13590] vhci_hcd: stop threads [ 1451.278399][T13590] vhci_hcd: release socket [ 1451.312675][T13590] vhci_hcd: disconnect device [ 1451.426072][T28517] can0 (unregistered): slcan off ttyS3. [ 1451.904804][T28535] loop4: detected capacity change from 0 to 512 [ 1451.937381][T28535] EXT4-fs: Ignoring removed mblk_io_submit option [ 1451.966873][T28537] random: crng reseeded on system resumption [ 1451.992525][ T5845] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1452.021322][T28535] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1452.047488][ T5845] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1452.084211][T28535] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1452.144099][T28535] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7576: invalid indirect mapped block 1819239214 (level 1) [ 1452.206721][T28535] EXT4-fs (loop4): Remounting filesystem read-only [ 1452.228367][T28535] EXT4-fs (loop4): 1 truncate cleaned up [ 1452.246651][T28535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1452.414004][T28550] fido_id[28550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1452.903700][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.275790][T28573] loop3: detected capacity change from 0 to 1024 [ 1453.307952][T28573] EXT4-fs: Ignoring removed bh option [ 1453.334986][T28573] EXT4-fs: Ignoring removed orlov option [ 1453.384164][T28573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1453.460303][T28583] Invalid ELF header magic: != ELF [ 1453.650224][T28583] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1453.656831][T28583] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1453.664936][T28583] vhci_hcd vhci_hcd.0: Device attached [ 1454.008711][ T5845] usb 35-1: new high-speed USB device number 22 using vhci_hcd [ 1454.017566][T28585] vhci_hcd: connection closed [ 1454.072674][ T3448] vhci_hcd: stop threads [ 1454.160169][ T3448] vhci_hcd: release socket [ 1454.164709][ T3448] vhci_hcd: disconnect device [ 1454.237157][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.248246][ T9] vhci_hcd: vhci_device speed not set [ 1454.427106][T28589] can0: slcan on ttyS3. [ 1454.572056][T28596] loop3: detected capacity change from 0 to 512 [ 1454.583060][T28596] EXT4-fs: Ignoring removed mblk_io_submit option [ 1454.647331][T28596] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1454.653795][T28596] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1454.710119][T28596] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7591: invalid indirect mapped block 1819239214 (level 1) [ 1454.758798][T28599] loop4: detected capacity change from 0 to 2048 [ 1454.797163][T28596] EXT4-fs (loop3): Remounting filesystem read-only [ 1454.804102][T28596] EXT4-fs (loop3): 1 truncate cleaned up [ 1454.818614][T28596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1454.821872][T28599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1454.891773][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.926285][T28594] can0 (unregistered): slcan off ttyS3. [ 1455.043413][T28606] loop1: detected capacity change from 0 to 128 [ 1455.064086][T28606] vfat filesystem being mounted at /56/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 1455.375085][T26856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.540359][T28614] netlink: 'syz.1.7597': attribute type 3 has an invalid length. [ 1455.551546][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7597'. [ 1455.899271][ T5787] Bluetooth: hci4: command 0x0406 tx timeout [ 1456.177788][T28627] loop0: detected capacity change from 0 to 128 [ 1456.194172][T28627] vfat filesystem being mounted at /133/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 1456.290665][T28629] Invalid ELF header magic: != ELF [ 1456.487312][T28629] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1456.493925][T28629] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1456.501880][T28629] vhci_hcd vhci_hcd.0: Device attached [ 1456.836641][T28630] vhci_hcd: connection closed [ 1456.852834][T13590] vhci_hcd: stop threads [ 1456.926102][T28633] 9pnet_fd: Insufficient options for proto=fd [ 1456.988890][T13590] vhci_hcd: release socket [ 1456.996078][T13590] vhci_hcd: disconnect device [ 1457.023396][T28635] loop4: detected capacity change from 0 to 512 [ 1457.035786][ T970] usb 39-1: new high-speed USB device number 30 using vhci_hcd [ 1457.043717][ T970] usb 39-1: enqueue for inactive port 0 [ 1457.054977][T28635] EXT4-fs: Ignoring removed mblk_io_submit option [ 1457.113646][T28635] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1457.143240][T28635] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1457.156154][ T970] vhci_hcd: vhci_device speed not set [ 1457.195558][T28635] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7604: invalid indirect mapped block 1819239214 (level 1) [ 1457.270907][T28635] EXT4-fs (loop4): Remounting filesystem read-only [ 1457.285402][T28635] EXT4-fs (loop4): 1 truncate cleaned up [ 1457.315060][T28635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1457.320185][T28642] loop1: detected capacity change from 0 to 512 [ 1457.492456][T28642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1457.536177][T28642] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1457.663535][T28642] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1457.699359][T28642] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1457.730321][T28642] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.7607: Failed to acquire dquot type 0 [ 1457.753796][T28649] syz.0.7609 (28649) used greatest stack depth: 19976 bytes left [ 1457.888401][T27680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1457.947608][T21464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.080474][T28660] loop0: detected capacity change from 0 to 512 [ 1458.128153][T28660] EXT4-fs: Ignoring removed mblk_io_submit option [ 1458.149690][T28661] can0: slcan on ttyS3. [ 1458.193258][T28665] loop4: detected capacity change from 0 to 128 [ 1458.206841][T28660] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1458.228969][T28660] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1458.237795][T28661] can0 (unregistered): slcan off ttyS3. [ 1458.248863][T28660] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7622: invalid indirect mapped block 1819239214 (level 1) [ 1458.281352][T28660] EXT4-fs (loop0): Remounting filesystem read-only [ 1458.290609][T28665] vfat filesystem being mounted at /508/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 1458.347400][T28660] EXT4-fs (loop0): 1 truncate cleaned up [ 1458.408958][T28660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1458.851553][T26683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.227650][T28685] Invalid ELF header magic: != ELF [ 1459.256506][ T5845] vhci_hcd: vhci_device speed not set [ 1459.265283][T28685] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1459.271866][T28685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1459.279820][T28685] vhci_hcd vhci_hcd.0: Device attached [ 1459.656666][ T5845] usb 35-1: device descriptor read/64, error -110 [ 1459.789322][T28686] vhci_hcd: connection closed [ 1459.815143][ T11] vhci_hcd: stop threads [ 1459.939879][ T11] vhci_hcd: release socket [ 1459.944469][ T11] vhci_hcd: disconnect device [ 1459.962144][T28689] loop4: detected capacity change from 0 to 512 [ 1459.995094][T28689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1460.064304][T28693] loop0: detected capacity change from 0 to 512 [ 1460.073032][T28689] ext4 filesystem being mounted at /511/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1460.106204][ T5845] vhci_hcd: vhci_device speed not set [ 1460.138801][T28689] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1460.149730][T28689] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1460.161108][T28689] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.7621: Failed to acquire dquot type 0 [ 1460.210317][T28693] ------------[ cut here ]------------ [ 1460.218166][T28693] EA inode 11 i_nlink=65535 [ 1460.226766][T28693] WARNING: CPU: 0 PID: 28693 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1460.241712][T28693] Modules linked in: [ 1460.245705][T28693] CPU: 0 PID: 28693 Comm: syz.0.7623 Not tainted syzkaller #0 [ 1460.253449][T28693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1460.264601][T28693] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1460.271839][T28693] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 f1 f0 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 be 3a 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 e8 04 48 08 [ 1460.291700][T28693] RSP: 0018:ffffc900051ff220 EFLAGS: 00010246 [ 1460.297963][T28693] RAX: 98b0aabd075ae200 RBX: ffff888076f340a8 RCX: 0000000000080000 [ 1460.306406][T28693] RDX: ffffc90013eff000 RSI: 000000000003c0c8 RDI: 000000000003c0c9 [ 1460.314436][T28693] RBP: ffffc900051ff318 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 1460.322831][T28693] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff888076f33f00 [ 1460.330913][T28693] R13: ffffc900051ff280 R14: dffffc0000000000 R15: 000000000000ffff [ 1460.339013][T28693] FS: 00007fd6b8da06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1460.348117][T28693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1460.354767][T28693] CR2: 0000001b3170aff8 CR3: 000000005eebc000 CR4: 00000000003506f0 [ 1460.363762][T28693] Call Trace: [ 1460.367337][T28693] [ 1460.370455][T28693] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1460.376332][T28693] ? ext4_xattr_inode_iget+0x3f5/0x5d0 [ 1460.381964][T28693] ext4_xattr_set_entry+0xcc9/0x1ee0 [ 1460.387414][T28693] ext4_xattr_ibody_set+0x262/0x700 [ 1460.392700][T28693] ext4_expand_extra_isize_ea+0x134a/0x1e70 [ 1460.398758][T28693] __ext4_expand_extra_isize+0x306/0x400 [ 1460.404515][T28693] __ext4_mark_inode_dirty+0x458/0x6d0 [ 1460.410208][T28693] ext4_evict_inode+0x7dd/0xe70 [ 1460.415130][T28693] ? evict+0x482/0x8a0 [ 1460.419365][T28693] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1460.425334][T28693] ? do_raw_spin_unlock+0x121/0x230 [ 1460.430709][T28693] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1460.436729][T28693] evict+0x4b7/0x8a0 [ 1460.440703][T28693] ? __lock_acquire+0x7d80/0x7d80 [ 1460.445797][T28693] ? proc_nr_inodes+0x230/0x230 [ 1460.450786][T28693] ? do_raw_spin_unlock+0x121/0x230 [ 1460.456102][T28693] ? _raw_spin_unlock+0x28/0x40 [ 1460.461189][T28693] ext4_orphan_cleanup+0xc33/0x1470 [ 1460.467434][T28693] ? ext4_orphan_del+0xc90/0xc90 [ 1460.472474][T28693] ? ext4_register_li_request+0x182/0x930 [ 1460.478488][T28693] ? errseq_check_and_advance+0x66/0x120 [ 1460.484279][T28693] ext4_fill_super+0x5fb5/0x6870 [ 1460.489399][T28693] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1460.495713][T28693] ? __might_sleep+0xe0/0xe0 [ 1460.500494][T28693] ? read_lock_is_recursive+0x20/0x20 [ 1460.505974][T28693] ? snprintf+0xe9/0x140 [ 1460.510353][T28693] ? down_read_killable+0x340/0x340 [ 1460.515625][T28693] ? setup_bdev_super+0x56b/0x660 [ 1460.520796][T28693] get_tree_bdev+0x3e5/0x520 [ 1460.525461][T28693] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1460.531827][T28693] ? setup_bdev_super+0x660/0x660 [ 1460.537324][T28693] ? apparmor_capable+0x137/0x1a0 [ 1460.542470][T28693] ? bpf_lsm_capable+0x9/0x10 [ 1460.547441][T28693] ? security_capable+0x89/0xb0 [ 1460.552382][T28693] vfs_get_tree+0x8c/0x280 [ 1460.556943][T28693] do_new_mount+0x24a/0xa40 [ 1460.561524][T28693] __se_sys_mount+0x2e7/0x3d0 [ 1460.567127][T28693] ? __x64_sys_mount+0xc0/0xc0 [ 1460.571965][T28693] ? lockdep_hardirqs_on+0x98/0x150 [ 1460.577537][T28693] ? __x64_sys_mount+0x20/0xc0 [ 1460.582361][T28693] do_syscall_64+0x55/0xb0 [ 1460.586880][T28693] ? clear_bhb_loop+0x40/0x90 [ 1460.591701][T28693] ? clear_bhb_loop+0x40/0x90 [ 1460.596526][T28693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1460.602484][T28693] RIP: 0033:0x7fd6b7f9f34a [ 1460.607030][T28693] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.626992][T28693] RSP: 002b:00007fd6b8d9fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1460.635481][T28693] RAX: ffffffffffffffda RBX: 00007fd6b8d9fee0 RCX: 00007fd6b7f9f34a [ 1460.643610][T28693] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00007fd6b8d9fea0 [ 1460.651745][T28693] RBP: 0000200000000180 R08: 00007fd6b8d9fee0 R09: 0000000000000010 [ 1460.659853][T28693] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000040 [ 1460.667925][T28693] R13: 00007fd6b8d9fea0 R14: 0000000000000485 R15: 000000000000002c [ 1460.676985][T28693] [ 1460.680186][T28693] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1460.687520][T28693] CPU: 0 PID: 28693 Comm: syz.0.7623 Not tainted syzkaller #0 [ 1460.695029][T28693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1460.705136][T28693] Call Trace: [ 1460.708462][T28693] [ 1460.711443][T28693] dump_stack_lvl+0x18c/0x250 [ 1460.716183][T28693] ? show_regs_print_info+0x20/0x20 [ 1460.721437][T28693] ? load_image+0x420/0x420 [ 1460.726051][T28693] panic+0x2ca/0x720 [ 1460.730014][T28693] ? bpf_jit_dump+0xd0/0xd0 [ 1460.734594][T28693] __warn+0x2e0/0x470 [ 1460.738650][T28693] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1460.744681][T28693] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1460.750697][T28693] report_bug+0x2be/0x4f0 [ 1460.755063][T28693] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1460.761173][T28693] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1460.767195][T28693] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 1460.773215][T28693] handle_bug+0xcf/0x120 [ 1460.777521][T28693] exc_invalid_op+0x1a/0x50 [ 1460.782053][T28693] asm_exc_invalid_op+0x1a/0x20 [ 1460.786947][T28693] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1460.793587][T28693] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 f1 f0 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 be 3a 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 e8 04 48 08 [ 1460.813226][T28693] RSP: 0018:ffffc900051ff220 EFLAGS: 00010246 [ 1460.819326][T28693] RAX: 98b0aabd075ae200 RBX: ffff888076f340a8 RCX: 0000000000080000 [ 1460.827339][T28693] RDX: ffffc90013eff000 RSI: 000000000003c0c8 RDI: 000000000003c0c9 [ 1460.835394][T28693] RBP: ffffc900051ff318 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 1460.843404][T28693] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff888076f33f00 [ 1460.851434][T28693] R13: ffffc900051ff280 R14: dffffc0000000000 R15: 000000000000ffff [ 1460.859458][T28693] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1460.865141][T28693] ? ext4_xattr_inode_iget+0x3f5/0x5d0 [ 1460.870645][T28693] ext4_xattr_set_entry+0xcc9/0x1ee0 [ 1460.876035][T28693] ext4_xattr_ibody_set+0x262/0x700 [ 1460.881289][T28693] ext4_expand_extra_isize_ea+0x134a/0x1e70 [ 1460.887262][T28693] __ext4_expand_extra_isize+0x306/0x400 [ 1460.892953][T28693] __ext4_mark_inode_dirty+0x458/0x6d0 [ 1460.898467][T28693] ext4_evict_inode+0x7dd/0xe70 [ 1460.903470][T28693] ? evict+0x482/0x8a0 [ 1460.907590][T28693] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1460.913526][T28693] ? do_raw_spin_unlock+0x121/0x230 [ 1460.918774][T28693] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1460.924707][T28693] evict+0x4b7/0x8a0 [ 1460.928642][T28693] ? __lock_acquire+0x7d80/0x7d80 [ 1460.933707][T28693] ? proc_nr_inodes+0x230/0x230 [ 1460.938593][T28693] ? do_raw_spin_unlock+0x121/0x230 [ 1460.943829][T28693] ? _raw_spin_unlock+0x28/0x40 [ 1460.948730][T28693] ext4_orphan_cleanup+0xc33/0x1470 [ 1460.953975][T28693] ? ext4_orphan_del+0xc90/0xc90 [ 1460.958950][T28693] ? ext4_register_li_request+0x182/0x930 [ 1460.964709][T28693] ? errseq_check_and_advance+0x66/0x120 [ 1460.970379][T28693] ext4_fill_super+0x5fb5/0x6870 [ 1460.975386][T28693] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1460.981674][T28693] ? __might_sleep+0xe0/0xe0 [ 1460.986323][T28693] ? read_lock_is_recursive+0x20/0x20 [ 1460.991753][T28693] ? snprintf+0xe9/0x140 [ 1460.996131][T28693] ? down_read_killable+0x340/0x340 [ 1461.001373][T28693] ? setup_bdev_super+0x56b/0x660 [ 1461.006428][T28693] get_tree_bdev+0x3e5/0x520 [ 1461.011053][T28693] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1461.017330][T28693] ? setup_bdev_super+0x660/0x660 [ 1461.022388][T28693] ? apparmor_capable+0x137/0x1a0 [ 1461.027463][T28693] ? bpf_lsm_capable+0x9/0x10 [ 1461.032178][T28693] ? security_capable+0x89/0xb0 [ 1461.037068][T28693] vfs_get_tree+0x8c/0x280 [ 1461.041521][T28693] do_new_mount+0x24a/0xa40 [ 1461.046067][T28693] __se_sys_mount+0x2e7/0x3d0 [ 1461.050781][T28693] ? __x64_sys_mount+0xc0/0xc0 [ 1461.055578][T28693] ? lockdep_hardirqs_on+0x98/0x150 [ 1461.060983][T28693] ? __x64_sys_mount+0x20/0xc0 [ 1461.065787][T28693] do_syscall_64+0x55/0xb0 [ 1461.070230][T28693] ? clear_bhb_loop+0x40/0x90 [ 1461.074933][T28693] ? clear_bhb_loop+0x40/0x90 [ 1461.079638][T28693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1461.085572][T28693] RIP: 0033:0x7fd6b7f9f34a [ 1461.090046][T28693] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.109685][T28693] RSP: 002b:00007fd6b8d9fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1461.118224][T28693] RAX: ffffffffffffffda RBX: 00007fd6b8d9fee0 RCX: 00007fd6b7f9f34a [ 1461.126222][T28693] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00007fd6b8d9fea0 [ 1461.134216][T28693] RBP: 0000200000000180 R08: 00007fd6b8d9fee0 R09: 0000000000000010 [ 1461.142229][T28693] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000040 [ 1461.150239][T28693] R13: 00007fd6b8d9fea0 R14: 0000000000000485 R15: 000000000000002c [ 1461.158262][T28693] [ 1461.161449][T28693] Kernel Offset: disabled [ 1461.165953][T28693] Rebooting in 86400 seconds..