last executing test programs: 5.46118879s ago: executing program 3 (id=977): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008054) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="710703"], 0xc) syz_clone(0x7104400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.392624017s ago: executing program 1 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r0, 0xffffffffffffffff, 0x19, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x9b1c93d48c011a49, 0x20880, 0x23456}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.761161726s ago: executing program 1 (id=981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB="0800060026"], 0x24}}, 0x0) 2.233001997s ago: executing program 1 (id=991): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) io_setup(0x29e, &(0x7f0000000140)=0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0, 0x0, 0x2, 0x0, 0x2}]) syncfs(0xffffffffffffffff) fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) shutdown(r0, 0x1) 2.128718348s ago: executing program 3 (id=994): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb, 0x2}]}) write(r0, &(0x7f0000000280)="73a3", 0x2) 2.022789579s ago: executing program 2 (id=995): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0xfff3, 0x10}, {0xffe0, 0x5}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0xe83, 0x3, 0x0, 0x6, 0x80}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.837873527s ago: executing program 3 (id=996): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r2, 0x0, 0xff40) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.675214678s ago: executing program 0 (id=997): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.674914918s ago: executing program 2 (id=998): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000100)="b9ff0b078059268c", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) 1.674041098s ago: executing program 1 (id=999): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 1.251377332s ago: executing program 1 (id=1000): r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x201, 0x2) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.104759447s ago: executing program 2 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB="0800060026"], 0x24}}, 0x0) 902.597351ms ago: executing program 2 (id=1002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x7, 0xfd, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 790.061181ms ago: executing program 0 (id=1003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x58, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x82}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 600.384977ms ago: executing program 0 (id=1004): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 569.118642ms ago: executing program 2 (id=1005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r0, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffffff00000000}, 0x38) 492.780688ms ago: executing program 0 (id=1006): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0xb, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x4f, 0xff, 0x5, 0x0, 0x8, 0x81}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x43}, 0x8) 436.789998ms ago: executing program 3 (id=1007): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0xfff3, 0x10}, {0xffe0, 0x5}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0xe83, 0x3, 0x0, 0x6, 0x80}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 372.596577ms ago: executing program 2 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 338.714891ms ago: executing program 0 (id=1009): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000100)="b9ff0b078059268c", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) 192.544695ms ago: executing program 3 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB="0800060026"], 0x24}}, 0x0) 121.631282ms ago: executing program 1 (id=1011): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 63.005762ms ago: executing program 3 (id=1012): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x2, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp', 0x4) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d53, &(0x7f00000003c0)={0x0, 0xc858, 0x80, 0x0, 0xffffffff}, &(0x7f0000000000), &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f8cc0363acd136c4dbd36a0ea6d6660e2d77a4974c1b7556c8656cab273760edd5b1d9eff7ec4afda31f5a5674b3d52ed839274632a02f8a1a4a41d2a51dba9f6ee47d129c46b8d1d9ecdb9228299700b2f55e30cecbcd995ca49cb4cf", 0x5d}], 0x1}, 0x4000080) 0s ago: executing program 0 (id=1013): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x6687c, 0x153) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 70.170611][ T5754] cgroup: Unknown subsys name 'net' [ 70.309072][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.804716][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.811577][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.018271][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.162438][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.175117][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.185838][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.193918][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.202260][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.210884][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.231251][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.238296][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.247542][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.255145][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.264198][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.264383][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.278919][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.281882][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.288250][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.294342][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.300414][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.308945][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.316387][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.329451][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.337899][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.345135][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.345840][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.361911][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.747664][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 74.886061][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 74.978132][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.986108][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.993708][ T5765] bridge_slave_0: entered allmulticast mode [ 75.001131][ T5765] bridge_slave_0: entered promiscuous mode [ 75.009803][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 75.044603][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.054459][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.062936][ T5765] bridge_slave_1: entered allmulticast mode [ 75.069846][ T5765] bridge_slave_1: entered promiscuous mode [ 75.126127][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.158057][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.166183][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.173607][ T5769] bridge_slave_0: entered allmulticast mode [ 75.180490][ T5769] bridge_slave_0: entered promiscuous mode [ 75.190331][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.199829][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 75.216696][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.225780][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.233031][ T5769] bridge_slave_1: entered allmulticast mode [ 75.239860][ T5769] bridge_slave_1: entered promiscuous mode [ 75.315708][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.340156][ T5765] team0: Port device team_slave_0 added [ 75.359895][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.380779][ T5765] team0: Port device team_slave_1 added [ 75.403563][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.411120][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.418556][ T5767] bridge_slave_0: entered allmulticast mode [ 75.425603][ T5767] bridge_slave_0: entered promiscuous mode [ 75.467142][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.474437][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.482216][ T5767] bridge_slave_1: entered allmulticast mode [ 75.488990][ T5767] bridge_slave_1: entered promiscuous mode [ 75.509752][ T5769] team0: Port device team_slave_0 added [ 75.518501][ T5769] team0: Port device team_slave_1 added [ 75.547088][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.554476][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.580665][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.616206][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.623430][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.630560][ T5768] bridge_slave_0: entered allmulticast mode [ 75.638253][ T5768] bridge_slave_0: entered promiscuous mode [ 75.658001][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.665235][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.691650][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.722132][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.729378][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.737565][ T5768] bridge_slave_1: entered allmulticast mode [ 75.744911][ T5768] bridge_slave_1: entered promiscuous mode [ 75.763490][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.782617][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.790077][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.817291][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.830346][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.838133][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.864486][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.896164][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.931983][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.968988][ T5767] team0: Port device team_slave_0 added [ 75.983007][ T5765] hsr_slave_0: entered promiscuous mode [ 75.989678][ T5765] hsr_slave_1: entered promiscuous mode [ 76.009096][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.033097][ T5767] team0: Port device team_slave_1 added [ 76.093020][ T5769] hsr_slave_0: entered promiscuous mode [ 76.100042][ T5769] hsr_slave_1: entered promiscuous mode [ 76.106692][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.114842][ T5769] Cannot create hsr debugfs directory [ 76.146938][ T5768] team0: Port device team_slave_0 added [ 76.156382][ T5768] team0: Port device team_slave_1 added [ 76.174459][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.181604][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.208146][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.227978][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.235714][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.261990][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.353701][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.360692][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.388316][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.430201][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.437940][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.442035][ T5771] Bluetooth: hci1: command tx timeout [ 76.464908][ T51] Bluetooth: hci3: command tx timeout [ 76.470505][ T5771] Bluetooth: hci0: command tx timeout [ 76.476162][ T51] Bluetooth: hci2: command tx timeout [ 76.488694][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.534491][ T5767] hsr_slave_0: entered promiscuous mode [ 76.541215][ T5767] hsr_slave_1: entered promiscuous mode [ 76.547332][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.555070][ T5767] Cannot create hsr debugfs directory [ 76.689570][ T5768] hsr_slave_0: entered promiscuous mode [ 76.697281][ T5768] hsr_slave_1: entered promiscuous mode [ 76.704015][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.711745][ T5768] Cannot create hsr debugfs directory [ 76.843172][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.856395][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.897539][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.909534][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.029598][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.056950][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.068492][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.080711][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.175118][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.189347][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.208599][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.220731][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.336420][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.347051][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.368542][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.379891][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.416506][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.471448][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.491897][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.536021][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.543489][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.587397][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.596323][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.603638][ T4203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.620298][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.659206][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.666430][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.677154][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.684320][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.720588][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.759367][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.766595][ T4203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.800329][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.816697][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.824503][ T4203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.948324][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.975891][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.014008][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.021595][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.034923][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.042259][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.457617][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.489598][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.521963][ T5771] Bluetooth: hci1: command tx timeout [ 78.526632][ T5774] Bluetooth: hci2: command tx timeout [ 78.527516][ T5771] Bluetooth: hci0: command tx timeout [ 78.533819][ T51] Bluetooth: hci3: command tx timeout [ 78.608954][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.637769][ T5769] veth0_vlan: entered promiscuous mode [ 78.676380][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.695264][ T5769] veth1_vlan: entered promiscuous mode [ 78.738523][ T5765] veth0_vlan: entered promiscuous mode [ 78.759032][ T5768] veth0_vlan: entered promiscuous mode [ 78.784307][ T5765] veth1_vlan: entered promiscuous mode [ 78.800037][ T5768] veth1_vlan: entered promiscuous mode [ 78.852156][ T5769] veth0_macvtap: entered promiscuous mode [ 78.886562][ T5765] veth0_macvtap: entered promiscuous mode [ 78.896714][ T5769] veth1_macvtap: entered promiscuous mode [ 78.918461][ T5767] veth0_vlan: entered promiscuous mode [ 78.935987][ T5767] veth1_vlan: entered promiscuous mode [ 78.946261][ T5765] veth1_macvtap: entered promiscuous mode [ 78.978211][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.997070][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.038356][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.048053][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.057336][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.066848][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.086602][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.099206][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.111608][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.125804][ T5768] veth0_macvtap: entered promiscuous mode [ 79.140444][ T5768] veth1_macvtap: entered promiscuous mode [ 79.151494][ T5767] veth0_macvtap: entered promiscuous mode [ 79.165653][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.176593][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.188612][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.199416][ T5767] veth1_macvtap: entered promiscuous mode [ 79.244458][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.256145][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.265697][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.275032][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.294509][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.306618][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.318109][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.329277][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.342497][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.369701][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.380762][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.392074][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.404612][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.415069][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.425737][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.439788][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.470250][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.485780][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.496315][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.507165][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.518409][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.534688][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.545569][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.554893][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.565491][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.578536][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.596461][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.606748][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.617259][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.627499][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.638315][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.651446][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.696857][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.701497][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.708122][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.725375][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.734523][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.734547][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.875603][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.889001][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.897441][ T4203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.910283][ T4203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.967106][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.001767][ T4203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.004927][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.025785][ T4203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.152451][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.207294][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.264030][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.285940][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.360183][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.371523][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.603485][ T5836] Zero length message leads to an empty skb [ 80.604340][ T51] Bluetooth: hci3: command tx timeout [ 80.616028][ T5774] Bluetooth: hci2: command tx timeout [ 80.616064][ T5771] Bluetooth: hci0: command tx timeout [ 80.621578][ T5774] Bluetooth: hci1: command tx timeout [ 80.652831][ T5836] syz.2.3[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.783317][ T5836] loop2: detected capacity change from 0 to 1764 [ 81.387490][ T5845] loop3: detected capacity change from 0 to 512 [ 81.587603][ T5845] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.4: corrupted in-inode xattr: invalid ea_ino [ 81.612197][ T5845] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 81.658323][ T5845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.208024][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.587652][ T5857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 82.681950][ T5083] Bluetooth: hci3: command tx timeout [ 82.682487][ T51] Bluetooth: hci1: command tx timeout [ 82.687409][ T5083] Bluetooth: hci2: command tx timeout [ 82.698514][ T5771] Bluetooth: hci0: command tx timeout [ 82.711330][ T5859] bridge_slave_0: left allmulticast mode [ 82.733085][ T5859] bridge_slave_0: left promiscuous mode [ 82.742184][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.804811][ T5859] bridge_slave_1: left allmulticast mode [ 82.826886][ T5859] bridge_slave_1: left promiscuous mode [ 82.845182][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.864103][ T5863] process 'syz.3.10' launched '/dev/fd/5' with NULL argv: empty string added [ 82.899052][ T5859] bond0: (slave bond_slave_0): Releasing backup interface [ 82.972069][ T5859] bond0: (slave bond_slave_1): Releasing backup interface [ 83.050232][ T5859] team0: Port device team_slave_0 removed [ 83.090220][ T5859] team0: Port device team_slave_1 removed [ 83.107436][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.121321][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.139528][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.151362][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.452751][ T5866] capability: warning: `syz.1.11' uses 32-bit capabilities (legacy support in use) [ 83.600340][ T5869] loop2: detected capacity change from 0 to 512 [ 83.734131][ T5869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.767437][ T5872] loop1: detected capacity change from 0 to 512 [ 83.804184][ T5869] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.899784][ T5869] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.12: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 83.964976][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.981506][ T5883] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 18: comm syz.2.12: lblock 23 mapped to illegal pblock 18 (length 1) [ 84.004325][ T5872] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.058970][ T5869] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.12: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 84.146263][ T5869] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.12: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 84.209174][ T5869] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 14: comm syz.2.12: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 84.257993][ T5869] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 15: comm syz.2.12: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 84.330457][ T5869] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.12: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 84.375978][ T5869] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 17: comm syz.2.12: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 84.409621][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.428703][ T5869] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 18: comm syz.2.12: lblock 23 mapped to illegal pblock 18 (length 1) [ 84.573963][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.420009][ T5909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 87.044369][ T5923] loop0: detected capacity change from 0 to 8192 [ 87.146537][ T5923] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.172482][ T27] cfg80211: failed to load regulatory.db [ 87.236454][ T28] audit: type=1800 audit(1772945587.585:2): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file2" dev="loop0" ino=1048592 res=0 errno=0 [ 87.263536][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 87.288602][ T5923] FAT-fs (loop0): Filesystem has been set read-only [ 87.306422][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 87.323138][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 87.361317][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 87.370460][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 87.411067][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 87.429997][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 88.432974][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 88.500090][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 88.551421][ T5923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 88.779737][ T5945] netlink: 'syz.2.32': attribute type 5 has an invalid length. [ 89.983774][ T5947] pimreg: entered allmulticast mode [ 90.021851][ T5947] pimreg: left allmulticast mode [ 90.105992][ T5959] loop3: detected capacity change from 0 to 128 [ 90.163346][ T5959] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.210384][ T5959] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.344641][ T5961] loop0: detected capacity change from 0 to 512 [ 90.440284][ T5961] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.37: inode has both inline data and extents flags [ 90.471864][ T5958] Process accounting resumed [ 90.477765][ T5958] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 546) [ 90.577302][ T5961] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.37: couldn't read orphan inode 15 (err -117) [ 90.589442][ T5958] FAT-fs (loop3): Filesystem has been set read-only [ 90.621671][ T5958] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 90.636247][ T5961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.676901][ T5768] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.937926][ T5965] netlink: 168 bytes leftover after parsing attributes in process `syz.3.38'. [ 91.006139][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.289651][ T5972] loop3: detected capacity change from 0 to 512 [ 91.342376][ T5972] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 91.407474][ T5972] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 91.484349][ T28] audit: type=1800 audit(1772945591.835:3): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.41" name="file0" dev="loop3" ino=1048595 res=0 errno=0 [ 91.940734][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 92.081577][ T5981] bridge_slave_1: left allmulticast mode [ 92.087309][ T5981] bridge_slave_1: left promiscuous mode [ 92.131235][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.171411][ T5982] ======================================================= [ 92.171411][ T5982] WARNING: The mand mount option has been deprecated and [ 92.171411][ T5982] and is ignored by this kernel. Remove the mand [ 92.171411][ T5982] option from the mount to silence this warning. [ 92.171411][ T5982] ======================================================= [ 92.218244][ T5981] bridge_slave_0: left allmulticast mode [ 92.248077][ T5981] bridge_slave_0: left promiscuous mode [ 92.312000][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.264185][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.52'. [ 96.280085][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.53'. [ 96.818142][ T5934] Set syz1 is full, maxelem 65536 reached [ 98.209982][ T6033] loop2: detected capacity change from 0 to 512 [ 98.249668][ T28] audit: type=1326 audit(1772945598.595:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.3.60" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d8ad9c799 code=0x0 [ 98.250136][ T6033] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.62: inode has both inline data and extents flags [ 98.250445][ T6033] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.62: couldn't read orphan inode 15 (err -117) [ 98.324934][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 98.415638][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.422053][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'. [ 98.741886][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.848311][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.337625][ T6064] loop0: detected capacity change from 0 to 512 [ 99.398809][ T6064] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.74: corrupted in-inode xattr: invalid ea_ino [ 99.468328][ T6064] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.74: couldn't read orphan inode 15 (err -117) [ 99.552219][ T6064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.879393][ T28] audit: type=1326 audit(1772945600.225:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.81" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d8ad9c799 code=0x0 [ 100.016568][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 100.365770][ T6094] loop2: detected capacity change from 0 to 512 [ 100.695515][ T6094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.104854][ T6094] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.299489][ T6094] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.88: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 101.327633][ T6094] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.88: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 101.369894][ T6094] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.88: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 101.414393][ T6094] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 14: comm syz.2.88: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 101.448136][ T6094] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 15: comm syz.2.88: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 101.578228][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.159294][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.216666][ T6121] netlink: 168 bytes leftover after parsing attributes in process `syz.1.99'. [ 102.309342][ T28] audit: type=1326 audit(1772945602.655:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.98" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fd5f9c799 code=0x0 [ 102.469596][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 103.558062][ T6152] netlink: 168 bytes leftover after parsing attributes in process `syz.2.111'. [ 103.915566][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 103.987063][ T6156] ipvlan2: entered promiscuous mode [ 104.187852][ T6162] loop1: detected capacity change from 0 to 512 [ 104.287726][ T6162] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.117: inode has both inline data and extents flags [ 104.342393][ T6162] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.117: couldn't read orphan inode 15 (err -117) [ 104.357926][ T6162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.430167][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.652454][ T6180] netlink: 168 bytes leftover after parsing attributes in process `syz.3.125'. [ 105.968204][ T6199] loop0: detected capacity change from 0 to 512 [ 106.048939][ T6199] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.134: corrupted in-inode xattr: invalid ea_ino [ 106.103485][ T6199] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.134: couldn't read orphan inode 15 (err -117) [ 106.153540][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.266563][ T6210] loop1: detected capacity change from 0 to 512 [ 106.287561][ T6210] EXT4-fs: Ignoring removed oldalloc option [ 106.336013][ T6210] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.366627][ T6210] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.388464][ T6210] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 106.421317][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.439696][ T6210] EXT4-fs (loop1): 1 truncate cleaned up [ 106.446094][ T5830] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.472624][ T6210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.494098][ T5830] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.732673][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.684826][ T6266] loop0: detected capacity change from 0 to 512 [ 111.766258][ T6266] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.160: inode has both inline data and extents flags [ 111.834692][ T6266] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.160: couldn't read orphan inode 15 (err -117) [ 111.876161][ T6266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.146901][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.328985][ T6283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.168'. [ 113.076673][ T6304] loop0: detected capacity change from 0 to 512 [ 113.144276][ T6304] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.176: inode has both inline data and extents flags [ 113.166562][ T6306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.179'. [ 113.186341][ T6304] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.176: couldn't read orphan inode 15 (err -117) [ 113.200968][ T6304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.429235][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.312269][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.355831][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.535450][ T6343] loop0: detected capacity change from 0 to 512 [ 115.584117][ T6345] loop1: detected capacity change from 0 to 512 [ 115.597675][ T6343] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.191: inode has both inline data and extents flags [ 115.704587][ T6343] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.191: couldn't read orphan inode 15 (err -117) [ 115.718712][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.794652][ T6345] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.853132][ T6343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.942303][ T6345] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.192: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 116.065944][ T6360] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 18: comm syz.1.192: lblock 23 mapped to illegal pblock 18 (length 1) [ 116.156860][ T6345] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.192: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 116.206176][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.211515][ T6345] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.192: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 116.364926][ T6345] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 14: comm syz.1.192: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 116.611543][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.382965][ T6261] Set syz1 is full, maxelem 65536 reached [ 118.823249][ T6419] loop3: detected capacity change from 0 to 8192 [ 118.874853][ T6419] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.768811][ T6451] loop3: detected capacity change from 0 to 8192 [ 119.809987][ T6451] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.298796][ T6479] netlink: 'syz.1.252': attribute type 5 has an invalid length. [ 121.311163][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 121.901650][ T6495] loop3: detected capacity change from 0 to 512 [ 122.001719][ T6502] netlink: 'syz.1.262': attribute type 5 has an invalid length. [ 122.006212][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.009427][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 122.033158][ T6495] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.198513][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.785953][ T6526] loop2: detected capacity change from 0 to 512 [ 122.818919][ T6526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.843292][ T6526] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.921123][ T6526] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 18: comm syz.2.273: lblock 23 mapped to illegal pblock 18 (length 1) [ 122.998230][ T6530] netlink: 'syz.0.274': attribute type 5 has an invalid length. [ 123.026781][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 123.044308][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.703877][ T6546] netlink: 168 bytes leftover after parsing attributes in process `syz.3.281'. [ 123.770136][ T6548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.282'. [ 123.935101][ T6555] netlink: 'syz.1.285': attribute type 5 has an invalid length. [ 123.951927][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 124.813369][ T6572] loop2: detected capacity change from 0 to 2048 [ 124.922531][ T6572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.014902][ T6575] loop3: detected capacity change from 0 to 8192 [ 125.065908][ T6575] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.120049][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.147561][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.157456][ T28] audit: type=1800 audit(1772945625.485:7): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.293" name="file2" dev="loop3" ino=1048596 res=0 errno=0 [ 125.186115][ T6575] FAT-fs (loop3): Filesystem has been set read-only [ 125.207874][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.261990][ T6580] netlink: 'syz.1.295': attribute type 5 has an invalid length. [ 125.263766][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.269689][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 125.279267][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.343094][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.363093][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.390283][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.416964][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.468383][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.522362][ T6575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 126.175512][ T28] audit: type=1326 audit(1772945626.525:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.1.304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f456019c799 code=0x0 [ 126.915473][ T6661] netlink: 'syz.2.306': attribute type 5 has an invalid length. [ 127.093957][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 128.311056][ T28] audit: type=1326 audit(1772945628.655:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.3.317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d8ad9c799 code=0x0 [ 128.943393][ T6709] netlink: 'syz.0.324': attribute type 5 has an invalid length. [ 128.951861][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 129.207213][ T6715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.328'. [ 130.241117][ T6728] netlink: 'syz.3.333': attribute type 5 has an invalid length. [ 130.484411][ T5830] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.522019][ T6732] syzkaller0: entered promiscuous mode [ 130.527745][ T6732] syzkaller0: entered allmulticast mode [ 130.553750][ T5830] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.256274][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.266873][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.166433][ T6764] netlink: 'syz.1.344': attribute type 5 has an invalid length. [ 134.482377][ T6779] loop0: detected capacity change from 0 to 1024 [ 134.500120][ T6779] EXT4-fs: inline encryption not supported [ 134.544651][ T6779] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.725007][ T6779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.834030][ T6779] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 135.591559][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.058412][ T6796] netlink: 168 bytes leftover after parsing attributes in process `syz.2.354'. [ 136.128808][ T6800] netlink: 'syz.0.356': attribute type 5 has an invalid length. [ 139.643760][ T6824] loop3: detected capacity change from 0 to 2048 [ 139.669336][ T6824] EXT4-fs: Ignoring removed i_version option [ 139.788773][ T6824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.851348][ T6824] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.031296][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 141.770266][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.948281][ T6869] loop0: detected capacity change from 0 to 512 [ 142.113662][ T6869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.154629][ T6869] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.189496][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 142.261501][ T6869] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.376: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 142.371205][ T6869] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 12: comm syz.0.376: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 142.442407][ T6869] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.376: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 142.554955][ T6869] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 14: comm syz.0.376: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 142.631500][ T6869] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 15: comm syz.0.376: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 142.664661][ T6869] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.376: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 142.815036][ T6882] syzkaller0: entered promiscuous mode [ 142.856747][ T6882] syzkaller0: entered allmulticast mode [ 142.924336][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.205730][ T6882] tipc: Started in network mode [ 143.211951][ T6882] tipc: Node identity e68fa58ecec1, cluster identity 4711 [ 143.219612][ T6882] tipc: Enabled bearer , priority 0 [ 143.240216][ T6882] tipc: Resetting bearer [ 143.255692][ T6881] tipc: Resetting bearer [ 143.282137][ T6881] tipc: Disabling bearer [ 143.508514][ T6891] syz.0.383 uses obsolete (PF_INET,SOCK_PACKET) [ 144.532493][ T6889] sched: RT throttling activated [ 145.996378][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 149.587981][ T6937] loop3: detected capacity change from 0 to 512 [ 149.657214][ T6939] loop0: detected capacity change from 0 to 128 [ 149.703980][ T6937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.785242][ T6937] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.949987][ T6937] EXT4-fs error (device loop3): ext4_get_first_dir_block:3584: inode #12: comm syz.3.400: Attempting to read directory block (0) that is past i_size (3) [ 150.014663][ T6937] EXT4-fs (loop3): Remounting filesystem read-only [ 150.119683][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.142860][ T6642] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 150.161483][ T6642] Quota error (device loop3): write_blk: dquota write failed [ 150.179087][ T6642] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 152.834388][ T6979] syzkaller0: entered promiscuous mode [ 152.840331][ T6979] syzkaller0: entered allmulticast mode [ 153.089186][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 153.117299][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 155.312251][ T7007] loop1: detected capacity change from 0 to 764 [ 155.453327][ T7007] Symlink component flag not implemented [ 155.471493][ T7007] Symlink component flag not implemented (122) [ 156.391065][ T7018] syzkaller0: entered promiscuous mode [ 156.412209][ T7018] syzkaller0: entered allmulticast mode [ 156.787701][ T7024] loop3: detected capacity change from 0 to 128 [ 156.829385][ T7024] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.559086][ T7031] loop0: detected capacity change from 0 to 256 [ 158.020474][ T7038] netlink: 56 bytes leftover after parsing attributes in process `syz.1.432'. [ 159.509680][ T7056] netlink: 56 bytes leftover after parsing attributes in process `syz.3.441'. [ 159.578647][ T7061] loop1: detected capacity change from 0 to 512 [ 159.627524][ T7061] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.727829][ T7061] EXT4-fs (loop1): 1 truncate cleaned up [ 159.744842][ T7061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.846599][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.314606][ T7083] loop2: detected capacity change from 0 to 128 [ 160.380840][ T7083] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.070064][ T7087] netlink: 56 bytes leftover after parsing attributes in process `syz.0.453'. [ 161.311041][ T7091] loop0: detected capacity change from 0 to 256 [ 161.325147][ T7091] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.461695][ T7095] netlink: 68 bytes leftover after parsing attributes in process `syz.3.457'. [ 161.478416][ T7095] netlink: 168 bytes leftover after parsing attributes in process `syz.3.457'. [ 161.840859][ T7102] bridge1: entered promiscuous mode [ 161.846229][ T7102] bridge1: entered allmulticast mode [ 161.921470][ T7102] loop1: detected capacity change from 0 to 512 [ 162.075545][ T7102] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.458: iget: bad i_size value: 38620345925642 [ 162.090222][ T7102] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.458: couldn't read orphan inode 15 (err -117) [ 162.113844][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.217911][ T28] audit: type=1326 audit(1772945662.505:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 162.533473][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 162.548224][ T28] audit: type=1326 audit(1772945662.505:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 162.571246][ T28] audit: type=1326 audit(1772945662.515:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 162.672796][ T28] audit: type=1326 audit(1772945662.515:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 162.722719][ T28] audit: type=1326 audit(1772945662.515:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 162.781068][ T28] audit: type=1326 audit(1772945662.535:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 162.849331][ T28] audit: type=1326 audit(1772945662.535:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 162.924738][ T28] audit: type=1326 audit(1772945662.535:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 163.001020][ T28] audit: type=1326 audit(1772945662.535:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 163.070903][ T28] audit: type=1326 audit(1772945662.535:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456019c799 code=0x7ffc0000 [ 163.241936][ T7116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.249655][ T7116] IPv6: NLM_F_CREATE should be set when creating new route [ 163.257184][ T7116] IPv6: NLM_F_CREATE should be set when creating new route [ 163.264569][ T7116] IPv6: NLM_F_CREATE should be set when creating new route [ 163.306630][ T7116] loop3: detected capacity change from 0 to 256 [ 163.497514][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.654449][ T7133] loop0: detected capacity change from 0 to 512 [ 164.719571][ T7133] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.469: bg 0: block 5: invalid block bitmap [ 164.738514][ T7136] netlink: 56 bytes leftover after parsing attributes in process `syz.2.472'. [ 164.851037][ T7133] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 164.914729][ T7133] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.469: invalid indirect mapped block 3 (level 2) [ 164.943232][ T7133] EXT4-fs (loop0): 1 orphan inode deleted [ 164.949039][ T7133] EXT4-fs (loop0): 1 truncate cleaned up [ 164.976867][ T7133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.188692][ T7150] 9pnet_fd: Insufficient options for proto=fd [ 166.027589][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.200664][ T7162] loop0: detected capacity change from 0 to 512 [ 166.300011][ T7162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.315411][ T7167] netlink: 56 bytes leftover after parsing attributes in process `syz.3.484'. [ 166.427525][ T7162] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.516823][ T7169] syzkaller0: entered promiscuous mode [ 166.518532][ T7172] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 166.523643][ T7169] syzkaller0: entered allmulticast mode [ 166.529457][ T7172] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.560749][ T7172] vhci_hcd vhci_hcd.0: Device attached [ 166.581203][ T7173] vhci_hcd: connection closed [ 166.593365][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.610315][ T37] vhci_hcd: stop threads [ 166.629350][ T37] vhci_hcd: release socket [ 166.634374][ T37] vhci_hcd: disconnect device [ 166.813035][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 166.829335][ T7182] loop1: detected capacity change from 0 to 512 [ 166.885029][ T7182] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.490: bg 0: block 5: invalid block bitmap [ 166.912587][ T7182] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 166.946060][ T7185] loop2: detected capacity change from 0 to 1024 [ 166.989438][ T7182] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.490: invalid indirect mapped block 3 (level 2) [ 167.015127][ T7185] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 167.039690][ T7185] System zones: 0-1, 3-36 [ 167.050199][ T7182] EXT4-fs (loop1): 1 orphan inode deleted [ 167.066313][ T7182] EXT4-fs (loop1): 1 truncate cleaned up [ 167.074543][ T7185] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.492: bad orphan inode 134217728 [ 167.093324][ T7182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.117411][ T7185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.273681][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 167.273697][ T28] audit: type=1800 audit(1772945667.625:27): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.492" name=06 dev="loop2" ino=18 res=0 errno=0 [ 167.336386][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.425671][ T7193] netlink: 56 bytes leftover after parsing attributes in process `syz.3.494'. [ 167.698543][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.375362][ T7202] 9pnet_fd: Insufficient options for proto=fd [ 168.509367][ T7205] syzkaller0: entered promiscuous mode [ 168.521415][ T7205] syzkaller0: entered allmulticast mode [ 168.676974][ T7214] netlink: 168 bytes leftover after parsing attributes in process `syz.0.503'. [ 168.951981][ T7219] syzkaller0: entered promiscuous mode [ 168.987452][ T7219] syzkaller0: entered allmulticast mode [ 169.054385][ T7219] tipc: Started in network mode [ 169.070118][ T7219] tipc: Node identity ee5b84a0f752, cluster identity 4711 [ 169.090424][ T7219] tipc: Enabled bearer , priority 0 [ 169.129931][ T7218] tipc: Resetting bearer [ 169.272763][ T7218] tipc: Disabling bearer [ 170.250101][ T7237] netlink: 168 bytes leftover after parsing attributes in process `syz.0.512'. [ 170.385457][ T7241] netlink: 56 bytes leftover after parsing attributes in process `syz.2.514'. [ 170.526515][ T7243] syzkaller0: entered promiscuous mode [ 170.539824][ T7243] syzkaller0: entered allmulticast mode [ 170.549155][ T7245] netlink: 68 bytes leftover after parsing attributes in process `syz.2.517'. [ 170.565046][ T7245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.517'. [ 170.826778][ T28] audit: type=1326 audit(1772945671.175:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d8ad9c799 code=0x0 [ 171.225860][ T7262] loop0: detected capacity change from 0 to 256 [ 171.921729][ T7266] netlink: 168 bytes leftover after parsing attributes in process `syz.1.523'. [ 172.269381][ T7274] netlink: 56 bytes leftover after parsing attributes in process `syz.0.525'. [ 172.349789][ T7276] syzkaller0: entered promiscuous mode [ 172.357359][ T7276] syzkaller0: entered allmulticast mode [ 172.564333][ T28] audit: type=1326 audit(1772945672.905:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 172.629519][ T28] audit: type=1326 audit(1772945672.905:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 172.714220][ T28] audit: type=1326 audit(1772945672.915:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 172.772539][ T7288] netlink: 168 bytes leftover after parsing attributes in process `syz.2.535'. [ 172.784251][ T28] audit: type=1326 audit(1772945672.915:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 172.798475][ T7286] loop0: detected capacity change from 0 to 128 [ 172.842569][ T7286] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.936064][ T28] audit: type=1326 audit(1772945672.915:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 173.040742][ T28] audit: type=1326 audit(1772945672.915:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 173.066659][ T28] audit: type=1326 audit(1772945672.915:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 173.090979][ T28] audit: type=1326 audit(1772945672.915:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 173.121269][ T28] audit: type=1326 audit(1772945672.915:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 173.421877][ T28] audit: type=1326 audit(1772945672.915:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d8ad9c799 code=0x7ffc0000 [ 173.726808][ T7296] program syz.0.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.779505][ T7299] netlink: 56 bytes leftover after parsing attributes in process `syz.2.537'. [ 174.168422][ T7308] syzkaller0: entered promiscuous mode [ 174.217475][ T7308] syzkaller0: entered allmulticast mode [ 174.355239][ T7316] loop2: detected capacity change from 0 to 2048 [ 174.368327][ T7319] loop1: detected capacity change from 0 to 128 [ 174.397180][ T7314] syzkaller0: entered promiscuous mode [ 174.405518][ T7319] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.420656][ T7314] syzkaller0: entered allmulticast mode [ 174.445194][ T7319] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.461295][ T7316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.561285][ T7317] tipc: Started in network mode [ 174.566601][ T7317] tipc: Node identity cae2207e969e, cluster identity 4711 [ 174.581892][ T7317] tipc: Enabled bearer , priority 0 [ 174.595218][ T7313] tipc: Resetting bearer [ 174.663421][ T7313] tipc: Disabling bearer [ 174.673291][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.734405][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.893898][ T7330] loop2: detected capacity change from 0 to 512 [ 174.914644][ T7330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.950208][ T7330] EXT4-fs (loop2): 1 truncate cleaned up [ 174.963880][ T7330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.066223][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.288603][ T7340] netlink: 168 bytes leftover after parsing attributes in process `syz.0.555'. [ 175.541834][ T7343] syzkaller0: entered promiscuous mode [ 175.554405][ T7343] syzkaller0: entered allmulticast mode [ 175.723942][ T7345] syzkaller0: entered promiscuous mode [ 175.740560][ T7345] syzkaller0: entered allmulticast mode [ 175.974038][ T7349] loop3: detected capacity change from 0 to 256 [ 176.294070][ T7359] netlink: 68 bytes leftover after parsing attributes in process `syz.1.564'. [ 176.331235][ T7359] netlink: 168 bytes leftover after parsing attributes in process `syz.1.564'. [ 176.500559][ T7365] syzkaller0: entered promiscuous mode [ 176.518294][ T7365] syzkaller0: entered allmulticast mode [ 176.652679][ T7369] loop2: detected capacity change from 0 to 512 [ 176.670090][ T7369] EXT4-fs: Ignoring removed bh option [ 176.713033][ T7369] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 176.767532][ T7369] EXT4-fs (loop2): 1 truncate cleaned up [ 176.776369][ T7369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.830621][ T7375] loop1: detected capacity change from 0 to 256 [ 176.906090][ T7369] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.309950][ T7390] netlink: 68 bytes leftover after parsing attributes in process `syz.0.577'. [ 177.341690][ T7390] netlink: 168 bytes leftover after parsing attributes in process `syz.0.577'. [ 177.587144][ T7397] syzkaller0: entered promiscuous mode [ 177.601311][ T7397] syzkaller0: entered allmulticast mode [ 177.852662][ T7402] syzkaller0: entered promiscuous mode [ 177.870716][ T7402] syzkaller0: entered allmulticast mode [ 177.893522][ T7402] tipc: Enabled bearer , priority 0 [ 177.906991][ T7401] tipc: Resetting bearer [ 178.024698][ T7401] tipc: Disabling bearer [ 178.299656][ T7418] netlink: 68 bytes leftover after parsing attributes in process `syz.1.588'. [ 178.387213][ T7418] netlink: 168 bytes leftover after parsing attributes in process `syz.1.588'. [ 178.536995][ T7427] syzkaller0: entered promiscuous mode [ 178.544611][ T7427] syzkaller0: entered allmulticast mode [ 179.420462][ T7441] syzkaller0: entered promiscuous mode [ 179.436859][ T7441] syzkaller0: entered allmulticast mode [ 180.131462][ T7448] netlink: 68 bytes leftover after parsing attributes in process `syz.3.600'. [ 180.190067][ T7452] loop2: detected capacity change from 0 to 512 [ 180.202674][ T7448] netlink: 168 bytes leftover after parsing attributes in process `syz.3.600'. [ 180.248989][ T7452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.309866][ T7452] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.465979][ T7458] syzkaller0: entered promiscuous mode [ 180.476058][ T7458] syzkaller0: entered allmulticast mode [ 180.486194][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.114055][ T7480] netlink: 68 bytes leftover after parsing attributes in process `syz.2.612'. [ 182.168213][ T7480] netlink: 168 bytes leftover after parsing attributes in process `syz.2.612'. [ 182.503415][ T7489] syzkaller0: entered promiscuous mode [ 182.544772][ T7489] syzkaller0: entered allmulticast mode [ 183.175698][ T7507] netlink: 68 bytes leftover after parsing attributes in process `syz.0.623'. [ 183.190055][ T7507] netlink: 168 bytes leftover after parsing attributes in process `syz.0.623'. [ 184.897527][ T7524] syzkaller0: entered promiscuous mode [ 184.909410][ T7524] syzkaller0: entered allmulticast mode [ 185.523600][ T7536] loop3: detected capacity change from 0 to 512 [ 185.545554][ T7536] EXT4-fs: journaled quota format not specified [ 186.345305][ T7552] syzkaller0: entered promiscuous mode [ 186.360924][ T7552] syzkaller0: entered allmulticast mode [ 186.742792][ T7558] syzkaller0: entered promiscuous mode [ 186.758876][ T7558] syzkaller0: entered allmulticast mode [ 186.861419][ T7558] tipc: Enabled bearer , priority 0 [ 186.891565][ T7558] tipc: Resetting bearer [ 186.916761][ T7557] tipc: Resetting bearer [ 186.981917][ T7557] tipc: Disabling bearer [ 187.575344][ T7574] syzkaller0: entered promiscuous mode [ 187.586845][ T7574] syzkaller0: entered allmulticast mode [ 187.696838][ T7578] netlink: 68 bytes leftover after parsing attributes in process `syz.2.654'. [ 187.709570][ T7578] netlink: 168 bytes leftover after parsing attributes in process `syz.2.654'. [ 187.844968][ T7582] syzkaller0: entered promiscuous mode [ 187.850570][ T7582] syzkaller0: entered allmulticast mode [ 187.864510][ T7582] tipc: Started in network mode [ 187.869695][ T7582] tipc: Node identity 3aaa8e76bd72, cluster identity 4711 [ 187.878042][ T7582] tipc: Enabled bearer , priority 0 [ 187.893034][ T7581] tipc: Resetting bearer [ 187.949969][ T7581] tipc: Disabling bearer [ 188.429055][ T7597] loop0: detected capacity change from 0 to 512 [ 188.523186][ T7597] EXT4-fs: journaled quota format not specified [ 188.620511][ T7599] syzkaller0: entered promiscuous mode [ 188.663402][ T7599] syzkaller0: entered allmulticast mode [ 189.903537][ T7611] loop2: detected capacity change from 0 to 512 [ 190.073111][ T7611] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.666: bg 0: block 5: invalid block bitmap [ 190.184397][ T7611] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 190.243027][ T7611] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.666: invalid indirect mapped block 3 (level 2) [ 190.359996][ T7611] EXT4-fs (loop2): 1 orphan inode deleted [ 190.373713][ T7611] EXT4-fs (loop2): 1 truncate cleaned up [ 190.394864][ T7611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.635611][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.908034][ T7627] netlink: 68 bytes leftover after parsing attributes in process `syz.2.673'. [ 190.920537][ T7627] netlink: 168 bytes leftover after parsing attributes in process `syz.2.673'. [ 192.405181][ T7641] syzkaller0: entered promiscuous mode [ 192.446433][ T7645] loop2: detected capacity change from 0 to 512 [ 192.450839][ T7641] syzkaller0: entered allmulticast mode [ 192.511743][ T7645] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.680: bg 0: block 5: invalid block bitmap [ 192.535809][ T7645] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 192.584178][ T7645] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.680: invalid indirect mapped block 3 (level 2) [ 192.629914][ T7648] tipc: Enabled bearer , priority 0 [ 192.705546][ T7641] tipc: Resetting bearer [ 192.715120][ T7645] EXT4-fs (loop2): 1 orphan inode deleted [ 192.741178][ T7645] EXT4-fs (loop2): 1 truncate cleaned up [ 192.749699][ T7639] tipc: Resetting bearer [ 192.768622][ T7645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.810023][ T7639] tipc: Disabling bearer [ 192.858846][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.121915][ T7655] netlink: 68 bytes leftover after parsing attributes in process `syz.2.683'. [ 193.184201][ T7655] netlink: 168 bytes leftover after parsing attributes in process `syz.2.683'. [ 194.695778][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.703783][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.754016][ T7679] loop0: detected capacity change from 0 to 512 [ 194.797785][ T7679] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.691: bg 0: block 5: invalid block bitmap [ 194.822512][ T7683] tipc: Enabled bearer , priority 0 [ 194.843532][ T7682] tipc: Disabling bearer [ 194.856163][ T7679] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 194.886531][ T7679] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.691: invalid indirect mapped block 3 (level 2) [ 194.911642][ T7679] EXT4-fs (loop0): 1 orphan inode deleted [ 194.931337][ T7679] EXT4-fs (loop0): 1 truncate cleaned up [ 194.946002][ T7679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.122670][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.775796][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 196.782006][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 196.788140][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 196.800864][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 197.107055][ T7710] batadv0: entered promiscuous mode [ 197.209926][ T7713] tipc: Enabled bearer , priority 0 [ 197.235927][ T7717] loop3: detected capacity change from 0 to 512 [ 197.254292][ T7717] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.266520][ T7712] tipc: Disabling bearer [ 197.273464][ T7718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.702'. [ 197.303803][ T7717] EXT4-fs (loop3): 1 truncate cleaned up [ 197.317773][ T7717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.607240][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.522469][ T7729] syzkaller0: entered promiscuous mode [ 198.551665][ T7729] syzkaller0: entered allmulticast mode [ 198.584316][ T7729] tipc: Enabled bearer , priority 0 [ 198.612703][ T7729] tipc: Resetting bearer [ 198.621882][ T7728] tipc: Resetting bearer [ 198.660700][ T7728] tipc: Disabling bearer [ 198.878265][ T7736] loop0: detected capacity change from 0 to 512 [ 198.973619][ T7736] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.710: bg 0: block 5: invalid block bitmap [ 199.054639][ T7736] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 199.103493][ T7736] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.710: invalid indirect mapped block 3 (level 2) [ 199.120552][ T7736] EXT4-fs (loop0): 1 orphan inode deleted [ 199.129718][ T7736] EXT4-fs (loop0): 1 truncate cleaned up [ 199.156935][ T7736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.928076][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.169807][ T7748] loop1: detected capacity change from 0 to 512 [ 200.188085][ T7748] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.232901][ T7750] tipc: Enabled bearer , priority 0 [ 200.282842][ T7748] EXT4-fs (loop1): 1 truncate cleaned up [ 200.298900][ T7748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.319779][ T7748] netlink: 184 bytes leftover after parsing attributes in process `syz.1.715'. [ 200.333254][ T7749] tipc: Disabling bearer [ 200.391589][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.447650][ T7756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.717'. [ 200.513730][ T7758] loop1: detected capacity change from 0 to 1024 [ 200.549565][ T7758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 200.586327][ T7758] System zones: 0-1, 3-36 [ 200.594692][ T7758] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.718: bad orphan inode 134217728 [ 200.612138][ T7758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.674995][ T7762] syzkaller0: entered promiscuous mode [ 200.680645][ T7762] syzkaller0: entered allmulticast mode [ 200.722966][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.006907][ T7768] 9pnet_fd: Insufficient options for proto=fd [ 202.226978][ T7783] loop2: detected capacity change from 0 to 512 [ 202.255126][ T7783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 202.528244][ T7783] EXT4-fs (loop2): 1 truncate cleaned up [ 202.537279][ T7783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.561552][ T7783] netlink: 184 bytes leftover after parsing attributes in process `syz.2.727'. [ 203.273694][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.592279][ T7794] syzkaller0: entered promiscuous mode [ 203.618283][ T7794] syzkaller0: entered allmulticast mode [ 203.955953][ T7800] syzkaller0: entered promiscuous mode [ 203.990920][ T7800] syzkaller0: entered allmulticast mode [ 204.007880][ T7800] tipc: Enabled bearer , priority 0 [ 204.040482][ T7800] tipc: Resetting bearer [ 204.074104][ T7799] tipc: Resetting bearer [ 204.088243][ T7804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.734'. [ 204.148688][ T7799] tipc: Disabling bearer [ 204.165264][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 204.187182][ T7806] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.198098][ T7806] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.208439][ T7806] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.217885][ T7806] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.269742][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 204.425168][ T7808] tipc: Enabled bearer , priority 0 [ 204.485945][ T7807] tipc: Disabling bearer [ 205.223607][ T7826] syzkaller0: entered promiscuous mode [ 205.229314][ T7826] syzkaller0: entered allmulticast mode [ 206.764863][ T7839] syzkaller0: entered promiscuous mode [ 206.783011][ T7839] syzkaller0: entered allmulticast mode [ 206.857640][ T7837] tipc: Enabled bearer , priority 0 [ 206.946511][ T7837] tipc: Resetting bearer [ 207.012178][ T7836] tipc: Resetting bearer [ 207.222106][ T7836] tipc: Disabling bearer [ 207.853564][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.750'. [ 209.148064][ T7868] syzkaller0: entered promiscuous mode [ 209.171241][ T7868] syzkaller0: entered allmulticast mode [ 209.294406][ T7874] loop3: detected capacity change from 0 to 1024 [ 209.323642][ T7874] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 209.361703][ T7874] System zones: 0-1, 3-36 [ 209.380601][ T7874] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.756: bad orphan inode 134217728 [ 209.422198][ T7874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.556557][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 209.556574][ T28] audit: type=1800 audit(1772945709.905:56): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.756" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 209.783168][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.151168][ T7884] syzkaller0: entered promiscuous mode [ 210.160930][ T7884] syzkaller0: entered allmulticast mode [ 210.191217][ T7884] tipc: Enabled bearer , priority 0 [ 210.261605][ T7886] tipc: Resetting bearer [ 210.397261][ T7883] tipc: Resetting bearer [ 210.527526][ T7883] tipc: Disabling bearer [ 211.090016][ T7900] syzkaller0: entered promiscuous mode [ 211.111758][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 211.117450][ T7900] syzkaller0: entered allmulticast mode [ 212.612507][ T7926] tipc: Enabled bearer , priority 0 [ 212.777559][ T7925] tipc: Disabling bearer [ 212.990600][ T7932] syzkaller0: entered promiscuous mode [ 213.025795][ T7932] syzkaller0: entered allmulticast mode [ 213.050154][ T7935] loop3: detected capacity change from 0 to 512 [ 213.055142][ T7936] option changes via remount are deprecated (pid=7934 comm=syz.1.779) [ 213.183673][ T7935] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.780: bg 0: block 5: invalid block bitmap [ 213.247140][ T7935] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 213.287725][ T7935] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.780: invalid indirect mapped block 3 (level 2) [ 213.305293][ T7935] EXT4-fs (loop3): 1 orphan inode deleted [ 213.314100][ T7935] EXT4-fs (loop3): 1 truncate cleaned up [ 213.321663][ T7935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.353042][ T7946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.781'. [ 213.454150][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.688331][ T7958] loop3: detected capacity change from 0 to 256 [ 213.828782][ T7958] syz.3.786: attempt to access beyond end of device [ 213.828782][ T7958] loop3: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 214.083546][ T7963] loop3: detected capacity change from 0 to 512 [ 214.115076][ T7963] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.163954][ T7963] EXT4-fs (loop3): 1 truncate cleaned up [ 214.187573][ T7963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.359654][ T7971] syzkaller0: entered promiscuous mode [ 214.365658][ T7971] syzkaller0: entered allmulticast mode [ 214.393941][ T7963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.790'. [ 214.806112][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.853821][ T7973] loop2: detected capacity change from 0 to 512 [ 214.899786][ T7973] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.794: bg 0: block 5: invalid block bitmap [ 214.976043][ T7973] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 214.988767][ T7973] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.794: invalid indirect mapped block 3 (level 2) [ 215.005878][ T7973] EXT4-fs (loop2): 1 orphan inode deleted [ 215.013398][ T7973] EXT4-fs (loop2): 1 truncate cleaned up [ 215.057002][ T7973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.232496][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.618208][ T7994] loop1: detected capacity change from 0 to 512 [ 215.660331][ T7994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 215.695057][ T7994] EXT4-fs (loop1): 1 truncate cleaned up [ 215.697740][ T7996] syzkaller0: entered promiscuous mode [ 215.706529][ T7996] syzkaller0: entered allmulticast mode [ 215.733788][ T7994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.754146][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.803'. [ 215.850682][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.658480][ T8016] loop0: detected capacity change from 0 to 512 [ 216.698605][ T8016] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.763897][ T8016] EXT4-fs (loop0): 1 truncate cleaned up [ 216.809930][ T8020] syzkaller0: entered promiscuous mode [ 216.815984][ T8020] syzkaller0: entered allmulticast mode [ 216.924427][ T8016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.037029][ T8016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.813'. [ 217.137076][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.492945][ T8030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.819'. [ 218.011512][ T8050] loop1: detected capacity change from 0 to 512 [ 218.390262][ T8050] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.905819][ T8050] EXT4-fs (loop1): 1 truncate cleaned up [ 218.915099][ T8050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.006833][ T8050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.826'. [ 219.107377][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.339951][ T8059] netlink: 68 bytes leftover after parsing attributes in process `syz.3.830'. [ 220.140504][ T8076] bridge1: entered promiscuous mode [ 220.147665][ T8076] bridge1: entered allmulticast mode [ 220.159162][ T8076] team0: Port device bridge1 added [ 220.192169][ T8076] bridge0: port 1(team0) entered blocking state [ 220.199827][ T8076] bridge0: port 1(team0) entered disabled state [ 220.209300][ T8076] team0: entered allmulticast mode [ 220.223480][ T8076] team_slave_0: entered allmulticast mode [ 220.234862][ T8076] team_slave_1: entered allmulticast mode [ 220.245060][ T8076] team0: entered promiscuous mode [ 220.250249][ T8076] team_slave_0: entered promiscuous mode [ 220.257004][ T8076] team_slave_1: entered promiscuous mode [ 220.267147][ T8076] bridge0: port 1(team0) entered blocking state [ 220.274430][ T8076] bridge0: port 1(team0) entered forwarding state [ 220.380302][ T8081] netlink: 68 bytes leftover after parsing attributes in process `syz.3.839'. [ 220.729422][ T8040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.914553][ T8095] netlink: 68 bytes leftover after parsing attributes in process `syz.2.848'. [ 221.660375][ T8118] loop3: detected capacity change from 0 to 128 [ 221.685955][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 221.696289][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 221.854984][ T8118] loop3: detected capacity change from 0 to 1024 [ 221.899798][ T8118] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 222.289594][ T8126] netlink: 68 bytes leftover after parsing attributes in process `syz.1.859'. [ 222.646013][ T8131] loop3: detected capacity change from 0 to 512 [ 222.696471][ T8131] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 222.772626][ T8131] EXT4-fs (loop3): 1 truncate cleaned up [ 222.780400][ T8131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.839975][ T8131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.860'. [ 223.019736][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.245821][ T8152] netlink: 68 bytes leftover after parsing attributes in process `syz.2.869'. [ 223.625561][ T8168] loop2: detected capacity change from 0 to 512 [ 223.644067][ T8168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.717615][ T8173] tipc: Enabling of bearer rejected, failed to enable media [ 223.767427][ T8168] EXT4-fs (loop2): 1 truncate cleaned up [ 223.823062][ T8168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.858035][ T8168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.876'. [ 223.938695][ T8178] tipc: Enabled bearer , priority 0 [ 223.954614][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.975491][ T8178] tipc: Resetting bearer [ 224.084043][ T8176] tipc: Disabling bearer [ 224.287794][ T8183] syzkaller0: entered promiscuous mode [ 224.306194][ T8183] syzkaller0: entered allmulticast mode [ 224.332101][ T8184] netlink: 68 bytes leftover after parsing attributes in process `syz.3.879'. [ 225.512439][ T8211] syzkaller0: entered promiscuous mode [ 225.518162][ T8211] syzkaller0: entered allmulticast mode [ 227.179847][ T8250] syzkaller0: entered promiscuous mode [ 227.203288][ T8250] syzkaller0: entered allmulticast mode [ 227.329368][ T8252] loop1: detected capacity change from 0 to 1024 [ 227.388318][ T8252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 227.397672][ T8252] System zones: 0-1, 3-36 [ 227.491040][ T8252] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.910: bad orphan inode 134217728 [ 227.552294][ T8252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.773747][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.377987][ T8282] loop2: detected capacity change from 0 to 1024 [ 228.411324][ T8282] EXT4-fs: Ignoring removed bh option [ 228.543899][ T8282] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.736423][ T8282] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #3: block 1: comm syz.2.923: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.789229][ T8282] Quota error (device loop2): write_blk: dquota write failed [ 229.010555][ T8282] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 229.022167][ T8282] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.923: Failed to acquire dquot type 0 [ 229.039797][ T8282] EXT4-fs error (device loop2): ext4_free_blocks:6690: comm syz.2.923: Freeing blocks not in datazone - block = 0, count = 4096 [ 229.073802][ T8282] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.923: Invalid inode bitmap blk 0 in block_group 0 [ 229.435197][ T8301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.644940][ T8282] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 229.698279][ T8282] EXT4-fs (loop2): 1 orphan inode deleted [ 229.749118][ T8282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.888828][ T8304] loop3: detected capacity change from 0 to 1024 [ 229.910986][ T1130] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.931524][ T8282] EXT4-fs: Ignoring removed bh option [ 229.952902][ T1130] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 229.971203][ T8282] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 229.984174][ T1130] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:6: Failed to release dquot type 0 [ 230.011548][ T8304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 230.040721][ T8304] System zones: 0-1, 3-36 [ 230.059807][ T8304] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.925: bad orphan inode 134217728 [ 230.062300][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.096409][ T8304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.349289][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.097980][ T8326] syzkaller0: entered promiscuous mode [ 231.120905][ T8326] syzkaller0: entered allmulticast mode [ 231.899702][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 232.521705][ T8364] syzkaller0: entered promiscuous mode [ 232.527598][ T8364] syzkaller0: entered allmulticast mode [ 233.173948][ T8374] loop3: detected capacity change from 0 to 128 [ 233.271047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 233.275142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 233.294517][ T8374] syz.3.957: attempt to access beyond end of device [ 233.294517][ T8374] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 233.321270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 233.491372][ T6642] kworker/u4:14: attempt to access beyond end of device [ 233.491372][ T6642] loop3: rw=1, sector=138, nr_sectors = 2 limit=128 [ 233.607482][ T8385] syzkaller0: entered promiscuous mode [ 233.631210][ T8385] syzkaller0: entered allmulticast mode [ 233.868856][ T8394] tipc: Enabled bearer , priority 0 [ 233.916656][ T8394] tipc: Resetting bearer [ 233.950157][ T8393] tipc: Disabling bearer [ 234.617700][ T8406] loop3: detected capacity change from 0 to 1024 [ 234.666027][ T8406] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 234.749648][ T8406] System zones: 0-1, 3-36 [ 234.793466][ T8406] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.970: bad orphan inode 134217728 [ 234.841965][ T8406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.050036][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.451176][ T6647] nci: nci_ntf_packet: unknown ntf opcode 0x107 [ 237.050415][ T8453] loop2: detected capacity change from 0 to 512 [ 237.075450][ T8453] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 237.083992][ T8453] System zones: 0-2, 18-18, 34-35 [ 237.096939][ T8453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.122769][ T8453] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.220427][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.198938][ T8427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.918785][ T8482] loop1: detected capacity change from 0 to 1024 [ 238.974295][ T8482] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 239.024427][ T8482] System zones: 0-1, 3-36 [ 239.059042][ T8482] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.999: bad orphan inode 134217728 [ 239.130551][ T8482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.259789][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.776418][ T8497] tipc: Enabled bearer , priority 0 [ 239.795377][ T8497] tipc: Resetting bearer [ 239.817925][ T8496] tipc: Disabling bearer [ 256.151456][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.157961][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.690721][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 345.697838][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8520/1:b..l [ 345.706462][ C0] rcu: (detected by 0, t=10502 jiffies, g=30177, q=182 ncpus=2) [ 345.714299][ C0] task:syz.0.1013 state:R running task stack:27528 pid:8520 ppid:5765 flags:0x00004000 [ 345.726219][ C0] Call Trace: [ 345.729625][ C0] [ 345.732588][ C0] __schedule+0x1553/0x45a0 [ 345.737232][ C0] ? verify_lock_unused+0x140/0x140 [ 345.742521][ C0] ? mark_lock+0x94/0x320 [ 345.746904][ C0] ? asan.module_dtor+0x20/0x20 [ 345.752073][ C0] ? preempt_schedule+0xc0/0xd0 [ 345.756970][ C0] preempt_schedule_common+0x82/0xc0 [ 345.762304][ C0] preempt_schedule+0xc0/0xd0 [ 345.767016][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 345.772856][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 345.778067][ C0] preempt_schedule_thunk+0x1a/0x30 [ 345.783948][ C0] _raw_spin_unlock+0x3a/0x40 [ 345.788668][ C0] unmap_page_range+0x2315/0x3000 [ 345.794473][ C0] ? copy_page_range+0x3670/0x3670 [ 345.799972][ C0] ? unmap_single_vma+0x1b0/0x2a0 [ 345.805216][ C0] unmap_vmas+0x286/0x3f0 [ 345.809682][ C0] ? unmap_page_range+0x3000/0x3000 [ 345.815029][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 345.820345][ C0] exit_mmap+0x238/0xb90 [ 345.824643][ C0] ? exit_mm_release+0x1a/0x30 [ 345.829455][ C0] ? vm_brk+0x30/0x30 [ 345.833468][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 345.839250][ C0] ? uprobe_clear_state+0x278/0x290 [ 345.844648][ C0] ? mm_update_next_owner+0x562/0x6c0 [ 345.850149][ C0] __mmput+0x118/0x3c0 [ 345.854255][ C0] exit_mm+0x1f2/0x2c0 [ 345.858547][ C0] ? do_exit+0x2460/0x2460 [ 345.863092][ C0] ? taskstats_exit+0x35e/0x9e0 [ 345.868159][ C0] do_exit+0x8dd/0x2460 [ 345.872642][ C0] ? put_task_struct+0xc0/0xc0 [ 345.877465][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 345.883569][ C0] ? get_signal+0x1068/0x13f0 [ 345.888361][ C0] ? lock_chain_count+0x20/0x20 [ 345.893239][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 345.898294][ C0] do_group_exit+0x21b/0x2d0 [ 345.902923][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 345.908356][ C0] get_signal+0x12fc/0x13f0 [ 345.912929][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 345.918780][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 345.925024][ C0] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 345.932081][ C0] ? get_sigframe_size+0x20/0x20 [ 345.937161][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 345.942915][ C0] exit_to_user_mode_loop+0x70/0x110 [ 345.948230][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 345.953895][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 345.959482][ C0] do_syscall_64+0x61/0xa0 [ 345.964016][ C0] ? clear_bhb_loop+0x40/0x90 [ 345.968746][ C0] ? clear_bhb_loop+0x40/0x90 [ 345.973672][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.979787][ C0] RIP: 0033:0x7f242f59c799 [ 345.984319][ C0] RSP: 002b:00007f24304ba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 345.992938][ C0] RAX: fffffffffffffe00 RBX: 00007f242f815fa8 RCX: 00007f242f59c799 [ 346.001026][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f242f815fa8 [ 346.009109][ C0] RBP: 00007f242f815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 346.017281][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.025451][ C0] R13: 00007f242f816038 R14: 00007ffd73221370 R15: 00007ffd73221458 [ 346.033728][ C0] [ 346.036882][ C0] rcu: rcu_preempt kthread starved for 10239 jiffies! g30177 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 346.048274][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 346.058351][ C0] rcu: RCU grace-period kthread stack dump: [ 346.064279][ C0] task:rcu_preempt state:R running task stack:26568 pid:17 ppid:2 flags:0x00004000 [ 346.075119][ C0] Call Trace: [ 346.078607][ C0] [ 346.081653][ C0] __schedule+0x1553/0x45a0 [ 346.086228][ C0] ? asan.module_dtor+0x20/0x20 [ 346.091140][ C0] ? enqueue_timer+0x23d/0x550 [ 346.095939][ C0] ? __mod_timer+0x984/0xdb0 [ 346.100574][ C0] schedule+0xbd/0x170 [ 346.104765][ C0] schedule_timeout+0x188/0x2d0 [ 346.109740][ C0] ? console_conditional_schedule+0x40/0x40 [ 346.115715][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 346.121642][ C0] ? update_process_times+0x1b0/0x1b0 [ 346.127230][ C0] ? prepare_to_swait_event+0x339/0x360 [ 346.132981][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 346.137866][ C0] ? rcu_gp_init+0x1162/0x1560 [ 346.142662][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 346.147902][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 346.154266][ C0] ? rcu_gp_init+0x1560/0x1560 [ 346.159066][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 346.164039][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.169387][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 346.174884][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 346.179502][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 346.184644][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 346.189710][ C0] ? __kthread_parkme+0x162/0x1c0 [ 346.194763][ C0] kthread+0x2fa/0x390 [ 346.198854][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 346.204080][ C0] ? kthread_blkcg+0xd0/0xd0 [ 346.208714][ C0] ret_from_fork+0x48/0x80 [ 346.213156][ C0] ? kthread_blkcg+0xd0/0xd0 [ 346.217787][ C0] ret_from_fork_asm+0x11/0x20 [ 346.222596][ C0] [ 346.225661][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 346.232095][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 346.239149][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.249229][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 346.255067][ C0] Code: 40 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 29 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 346.275144][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 346.281241][ C0] RAX: 74df3ce76510af00 RBX: ffffffff8162ac40 RCX: 74df3ce76510af00 [ 346.289246][ C0] RDX: 0000000000000001 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 346.297238][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 346.305335][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19d2688 [ 346.313766][ C0] R13: 1ffffffff19c0fbc R14: 0000000000000000 R15: dffffc0000000000 [ 346.321849][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 346.331013][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.337628][ C0] CR2: 00007f9114b66855 CR3: 000000001c3cf000 CR4: 00000000003506f0 [ 346.345813][ C0] Call Trace: [ 346.349205][ C0] [ 346.352162][ C0] default_idle+0x13/0x20 [ 346.356523][ C0] default_idle_call+0x6c/0xa0 [ 346.361396][ C0] do_idle+0x1f0/0x4e0 [ 346.365591][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 346.370836][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 346.376153][ C0] ? do_idle+0x15/0x4e0 [ 346.380431][ C0] cpu_startup_entry+0x43/0x60 [ 346.385484][ C0] rest_init+0x2e2/0x300 [ 346.389757][ C0] ? time_init+0x40/0x40 [ 346.394200][ C0] arch_call_rest_init+0xe/0x10 [ 346.399080][ C0] start_kernel+0x459/0x4e0 [ 346.403623][ C0] x86_64_start_reservations+0x2a/0x30 [ 346.409312][ C0] x86_64_start_kernel+0x60/0x60 [ 346.414422][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 346.420621][ C0]