last executing test programs: 4m28.279928313s ago: executing program 2 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x8, 0x9, 0x0, 0x0, 0x3, 0x10018}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000000) 4m27.951821881s ago: executing program 2 (id=480): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0x7fffffffffffffff, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x18, 0x1a, 0x8, &(0x7f0000000240)}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000780)=""/174, &(0x7f0000000840)=0xae) io_uring_enter(r1, 0x4e85, 0xf2d1, 0x4, &(0x7f0000000880)={[0x100]}, 0x8) pselect6(0x40, &(0x7f00000008c0)={0x39a, 0x4, 0x80, 0x4, 0x8, 0xfffffffffffffffd, 0x1, 0x955}, &(0x7f0000000900)={0x4, 0xfffffffffffffffb, 0xd410, 0x1ff, 0x4, 0x5, 0x3, 0x8000000000000000}, &(0x7f0000000940)={0x100, 0xfffffffffffffff7, 0x49, 0x81, 0xfffffffffffffffc, 0x1, 0x7ff, 0x7}, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x7]}, 0x8}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, &(0x7f0000000ac0)) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x7fffffff]}, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x0, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x4, 0x10}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0xa, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0xf, 0xa5, 0x2}, &(0x7f0000000d80)={r3, r4/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) io_setup(0x7fffffff, &(0x7f0000000f80)=0x0) io_getevents(r5, 0x3, 0x1, &(0x7f0000000fc0)=[{}], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000001000)={0x0, 'pimreg0\x00', {0x3}, 0x1}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffd) 4m27.799297835s ago: executing program 2 (id=485): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 4m27.57091262s ago: executing program 2 (id=486): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000780)={[{@i_version}, {@nolazytime}, {@errors_remount}, {@grpjquota}, {@acl}]}, 0xfe, 0x28f, &(0x7f0000000280)="$eJzs3c1LBGUcB/Df7Iu2aWJ16VIEEVGC2CEIutQlQQiJiKAEI6xLoYHp1e3UpUP3Ck9dJLplHaOLdOkPsPJgly7SISkoYmN2ZnXV3dza3dloPh/YnZd9Hp/fwH6fGcFxAiit+Yh4OiKqEbEQEfWISLobPJi95vPN/cbRekSr9cLPSbtdtp3p9JuJiGZEPBlR63y2e/jK6a/Hy4+8v1N/+JPDlxtFHV+3s9OT584/Xn3v85XHdyv5vtl82X0co5T02FdLIu4Zx2D/EUlt0hUwmM++S3N/b0Q81M5/PSp5ZD/Ynvq6Ho991Lvf1HmxdQLj0GrV03NgswWUTqV9DZxUFiMiW69UFheza/jvq0m8tbX9zsIbWzubG5OeqYARSJrZ770nz345/cXMtfz/VM3yP5AnxlwpMBZp/l98/uCHdP28OulqgELcny3S/C+8uvdoxJ/yDyVzmX/nfygb+Yfykn/4H+iX3XT/dP9u8g/lJf9QXoPmv1lgTcCI1DsrvRM8/Pn/t/wvCP99iUDR5trvrv+hvK7lP78fN79bdbCL/uXXN94cX4HAqK11VrrzDwCUS2t6wjcgAxMz6fkHAAAAAAAAAAAAAAAAAAC4ab9xtN55FTXmNx9GnD0TEbWr42ePLai2n0cccUf7/c5fkrTZhSTrNpS1IfsP69MR3329+jfPe+hl7sfRjt9H664+H3z7wHgGfPfqZqNfu73NiGbaeKlWu/n9T/Lv3636/vy7b+lYf22wAUYlubb91EvFjp+5+MfE8cfBJMa/tHIc8VU6/yz1mv8qcV972Xv+mb1yJP/IRRze/n2Y6gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACjSXwEAAP//F1F1yw==") r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x62002011}) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0xd, &(0x7f0000000040)={0x6fd, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') 4m26.948172375s ago: executing program 2 (id=494): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000040)={[{@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x3, 0x453, &(0x7f00000004c0)="$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") r0 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4m24.975794613s ago: executing program 2 (id=514): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="64e95e", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone3(&(0x7f0000000100)={0x23800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m24.431785406s ago: executing program 32 (id=514): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="64e95e", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone3(&(0x7f0000000100)={0x23800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m30.771717616s ago: executing program 3 (id=844): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 3m29.185105744s ago: executing program 3 (id=847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m28.918363561s ago: executing program 3 (id=851): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 3m28.582366958s ago: executing program 3 (id=856): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b05c5a, 0x0) 3m28.318238845s ago: executing program 3 (id=860): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480), 0xfc, 0x583, &(0x7f0000000ec0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(0x0, 0x146142, 0x90) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) 3m24.484061668s ago: executing program 3 (id=881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe, 0x5, 0x40, 0x900, 0x3, 0x4080002}) 3m24.087835148s ago: executing program 33 (id=881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe, 0x5, 0x40, 0x900, 0x3, 0x4080002}) 3m5.827803s ago: executing program 0 (id=980): r0 = socket$tipc(0x1e, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xa}, 0x18) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffd, 0x4000008, 0x14032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x80) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000300)={{r0}, r6, 0xa, @unused=[0x1, 0xffff, 0x2, 0x80000000], @name="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"}) 3m5.514191037s ago: executing program 0 (id=983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) sendmmsg(r2, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r2, 0x1}, 0x20) 3m5.129941246s ago: executing program 0 (id=986): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m4.458487603s ago: executing program 0 (id=991): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r3, r8, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendfile(r0, r0, 0x0, 0xe3aa6ea) 3m3.31604887s ago: executing program 0 (id=996): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) openat(0xffffffffffffffff, 0x0, 0x400000, 0xc6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x304) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ftruncate(r5, 0x2007ffb) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3}) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 2m59.379402346s ago: executing program 0 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a000006090002007379"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m58.78574254s ago: executing program 34 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a000006090002007379"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 45.373881861s ago: executing program 4 (id=1440): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 44.802376895s ago: executing program 4 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000890000000800000002"], 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) sendmmsg(r2, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r2, 0x1}, 0x20) 44.1862639s ago: executing program 4 (id=1446): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uni_xlateno}, {@numtail}, {@utf8}, {@numtail}, {@fat=@check_normal}, {@uni_xlate}, {@utf8}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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") writev(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000080)="fda7", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x80, 0x146) 42.507746651s ago: executing program 4 (id=1449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r0, r1, 0x0, r2, r2) 40.168143117s ago: executing program 4 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000340)={0x58, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 38.851193169s ago: executing program 4 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xf, 0xfffd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 23.706241107s ago: executing program 35 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xf, 0xfffd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.849351272s ago: executing program 7 (id=1520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000020) 9.848576902s ago: executing program 1 (id=1521): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.839344392s ago: executing program 5 (id=1522): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x6202, 0x4) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x159}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e0", 0xb9}], 0x2}}], 0x1, 0x2090) 9.827365403s ago: executing program 6 (id=1523): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0x7fffffffffffffff, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000780)=""/174, &(0x7f0000000840)=0xae) io_uring_enter(r1, 0x4e85, 0xf2d1, 0x4, &(0x7f0000000880)={[0x100]}, 0x8) pselect6(0x40, &(0x7f00000008c0)={0x39a, 0x4, 0x80, 0x4, 0x8, 0xfffffffffffffffd, 0x1, 0x955}, &(0x7f0000000900)={0x4, 0xfffffffffffffffb, 0xd410, 0x1ff, 0x4, 0x5, 0x3, 0x8000000000000000}, &(0x7f0000000940)={0x100, 0xfffffffffffffff7, 0x49, 0x81, 0xfffffffffffffffc, 0x1, 0x7ff, 0x7}, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x7]}, 0x8}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, &(0x7f0000000ac0)) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x7fffffff]}, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x0, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x4, 0x10}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0xa, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0xf, 0xa5, 0x2}, &(0x7f0000000d80)={r3, r4/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) io_setup(0x7fffffff, &(0x7f0000000f80)=0x0) io_getevents(r5, 0x3, 0x1, &(0x7f0000000fc0)=[{}], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000001000)={0x0, 'pimreg0\x00', {0x3}, 0x1}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffd) 8.118321584s ago: executing program 7 (id=1524): r0 = socket$tipc(0x1e, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xa}, 0x18) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffd, 0x4000008, 0x14032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x80) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000300)={{r0}, r6, 0xa, @unused=[0x1, 0xffff, 0x2, 0x80000000], @name="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"}) 8.118033344s ago: executing program 1 (id=1525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xf, 0xfffd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.117321024s ago: executing program 5 (id=1526): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58d", 0xd5}], 0x1}}], 0x1, 0x4000000) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2b3173d11d86322843bc6ee4beeff184bfeb2f15cfd1ae189bb68995feab724d720656d528d8b67823c02941343f1f478e74a152bdc0a55b2ce0c3dfb338c25e4b63a3a3063c240ea4a0712507fad227c65b7da6ed66f943a61c724a0db0d774b994b4fc8ddc44a10c32f59e555e5d1b07195df685079189c3140956b641b5617e9bab446bc57bd614e99827f8e1797ec6d59fc7cf1057bd947f233de2e12d217aa517da60e38a648e3a3ef7359bacef04e583e430786d6606bc06d8d48297e76deaecc592b98ff4c4024f7cbb9ab9b3d0c5aa08e940fdc7462fd7e92632f3a36576d83088a30f960b69d972c263d6d5a21f4f69b131f762326bddbcc121602419c39bd32a198a9996df6e84f9f09ffe48c3c9581158c0fdeca83338d36f6e5665f090a667d0c62c967a87b6099f4c03c87ee4c09d2d47724f7b7a69d7c1f06936eb49bb92dd9ff83859c3a0218d618a8831666d7060ef6f39af904daf0bf662f7ae82b1527f3251dbebded35df44065981f486bfff3a3493e6b5c9eaef877d7a74356b1d83a0d65df13789ad181270d98d1f09a9e021354910cf891ae4f027bd4864b8d6888b807b70b499eb0d934c1f899ac1cbb8378da0e43c0161003d0d8107e0367174107436ab7b7199373d30415d89a77a0c91c313a191bb95751ed33cdb641b0a7d2a57166941ec6d68461cfc1d7b01f3f560f2d06669ac83b83c210593f1072f985a623cc7167353272b4aa91e9d1d4f992ba9e38841818850e90f144671f7730a998f58136ef67d1eb18d0f2e46f71c2a9d34f0122295185bdeb2f4172dac7534801ad577c77e962fa2b195e7541772d563df75f2c4667bc4dfa8cbbfc0283e3a299232ba8945f2da080b64e26c44292f097ce185571cd8ed031b26bfef46134a66bd71967bc90cdbe3ff65c589604727d952a46a2f32bc393ef72713c84f6d6b200b8050232009c7066c8c7523d28e451dc6e243955474f885dee66ad9639e90034751cf3d225646d2ed7e16e74887eb8dada57640e6d5b58e5419fb11cf63d1caf311ad24114aac0c0a4095d8e10c0ff9039f099d201b7f3a5ec74d9b220f2b9ba9d67456dd053d872c6f", 0x3d5) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.097464805s ago: executing program 6 (id=1527): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f0005"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 6.289878668s ago: executing program 7 (id=1528): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) setns(0xc9, 0x0) memfd_create(0x0, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r2, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x1c) write(r6, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x11, &(0x7f0000000000)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @exit, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7464}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sk_msg=0x7, r0, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0x5, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, r7], 0x0, 0x10, 0x10000}, 0x94) syz_pidfd_open(0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r7, 0x58, &(0x7f0000000400)}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 6.289622758s ago: executing program 1 (id=1529): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) 6.288830868s ago: executing program 5 (id=1530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 6.267236789s ago: executing program 6 (id=1531): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100000009"], 0x378}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b8200000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 4.1665391s ago: executing program 7 (id=1532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500"], 0x1c}}, 0x0) 4.165826629s ago: executing program 1 (id=1533): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4.14704036s ago: executing program 5 (id=1534): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x25) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r2, @ANYBLOB="83040500000000003000128008000100736974002400028006000f0002000000060011004e210000060010000590000008000300ac14"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4.14635549s ago: executing program 6 (id=1535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000020) 2.229731547s ago: executing program 7 (id=1536): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0x7fffffffffffffff, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000780)=""/174, &(0x7f0000000840)=0xae) io_uring_enter(r1, 0x4e85, 0xf2d1, 0x4, &(0x7f0000000880)={[0x100]}, 0x8) pselect6(0x40, &(0x7f00000008c0)={0x39a, 0x4, 0x80, 0x4, 0x8, 0xfffffffffffffffd, 0x1, 0x955}, &(0x7f0000000900)={0x4, 0xfffffffffffffffb, 0xd410, 0x1ff, 0x4, 0x5, 0x3, 0x8000000000000000}, &(0x7f0000000940)={0x100, 0xfffffffffffffff7, 0x49, 0x81, 0xfffffffffffffffc, 0x1, 0x7ff, 0x7}, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x7]}, 0x8}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, &(0x7f0000000ac0)) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x7fffffff]}, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x0, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x4, 0x10}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0xa, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0xf, 0xa5, 0x2}, &(0x7f0000000d80)={r3, r4/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) io_setup(0x7fffffff, &(0x7f0000000f80)=0x0) io_getevents(r5, 0x3, 0x1, &(0x7f0000000fc0)=[{}], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000001000)={0x0, 'pimreg0\x00', {0x3}, 0x1}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffd) 2.228622387s ago: executing program 1 (id=1537): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.226535067s ago: executing program 5 (id=1538): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 2.168129558s ago: executing program 6 (id=1539): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0x22e, &(0x7f0000000500)="$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") fallocate(0xffffffffffffffff, 0x0, 0x9, 0x10001) 72.380999ms ago: executing program 7 (id=1540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xf, 0xfffd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 71.535189ms ago: executing program 1 (id=1541): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) setns(0xc9, 0x0) memfd_create(0x0, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r2, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x1c) write(r6, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x11, &(0x7f0000000000)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @exit, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7464}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sk_msg=0x7, r0, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0x5, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, r7], 0x0, 0x10, 0x10000}, 0x94) syz_pidfd_open(0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r7, 0x58, &(0x7f0000000400)}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 56.593719ms ago: executing program 5 (id=1542): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) 0s ago: executing program 6 (id=1543): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): [ 137.180384][ T5195] EXT4-fs (loop3): orphan cleanup on readonly fs [ 137.188021][ T5195] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.293: Inode bitmap for bg 0 marked uninitialized [ 137.201120][ T5195] EXT4-fs (loop3): Remounting filesystem read-only [ 137.208231][ T5195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.490941][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 137.626405][ T4323] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 137.708255][ T5190] loop2: detected capacity change from 0 to 8192 [ 137.734387][ T5190] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew" or missing value [ 137.835345][ T4323] usb 5-1: config 1 has an invalid interface number: 103 but max is 0 [ 137.861625][ T4323] usb 5-1: config 1 has no interface number 0 [ 137.876723][ T4323] usb 5-1: config 1 interface 103 has no altsetting 0 [ 137.917934][ T4323] usb 5-1: string descriptor 0 read error: -22 [ 137.940246][ T4323] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 137.970544][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.997023][ T5212] loop1: detected capacity change from 0 to 1024 [ 138.005367][ T4323] ftdi_sio 5-1:1.103: FTDI USB Serial Device converter detected [ 138.032877][ T4323] ftdi_sio ttyUSB0: unknown device type: 0x7c5c [ 138.058648][ T5212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.107274][ T5212] EXT4-fs: inline encryption not supported [ 138.117254][ T5176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 138.121139][ T5212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.144037][ T5212] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.190756][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.232593][ T5212] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.257189][ T5215] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 138.347595][ T5215] EXT4-fs (loop1): Remounting filesystem read-only [ 138.535249][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 138.810029][ T5226] capability: warning: `syz.1.303' uses deprecated v2 capabilities in a way that may be insecure [ 139.390092][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.424543][ T4380] usb 5-1: USB disconnect, device number 3 [ 140.455468][ T4380] ftdi_sio 5-1:1.103: device disconnected [ 140.931529][ T5253] loop4: detected capacity change from 0 to 128 [ 141.097907][ T5253] syz.4.312: attempt to access beyond end of device [ 141.097907][ T5253] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 142.257762][ T5258] loop1: detected capacity change from 0 to 256 [ 143.093149][ T5264] futex_wake_op: syz.1.316 tries to shift op by 144; fix this program [ 143.294492][ T5266] device syzkaller0 entered promiscuous mode [ 143.903457][ T4330] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 144.096138][ T4330] usb 2-1: config 1 has an invalid interface number: 103 but max is 0 [ 144.104905][ T4330] usb 2-1: config 1 has no interface number 0 [ 144.111478][ T4330] usb 2-1: config 1 interface 103 has no altsetting 0 [ 144.122952][ T4330] usb 2-1: string descriptor 0 read error: -22 [ 144.130002][ T4330] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 144.139961][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.433985][ T4330] ftdi_sio 2-1:1.103: FTDI USB Serial Device converter detected [ 145.134902][ T4330] ftdi_sio ttyUSB0: unknown device type: 0x7c5c [ 146.144284][ T5299] futex_wake_op: syz.3.331 tries to shift op by 144; fix this program [ 146.701674][ T4330] usb 2-1: USB disconnect, device number 2 [ 146.722293][ T4330] ftdi_sio 2-1:1.103: device disconnected [ 146.827619][ T5317] loop1: detected capacity change from 0 to 512 [ 146.842675][ T5317] EXT4-fs: inline encryption not supported [ 146.851347][ T5317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.877419][ T5317] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.918868][ T5317] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.341: inode #15: comm syz.1.341: iget: illegal inode # [ 147.062494][ T5317] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.341: couldn't read orphan inode 15 (err -117) [ 147.106764][ T5317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.225972][ T5317] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 147.297663][ T5317] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 147.549006][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 148.269848][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.042447][ T5365] loop3: detected capacity change from 0 to 4096 [ 149.143849][ T5365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.450311][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 149.814224][ T5389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.369'. [ 150.074524][ T5396] loop4: detected capacity change from 0 to 1024 [ 150.185486][ T5396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 150.195393][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 150.255409][ T5396] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.337447][ T26] audit: type=1800 audit(1786780286.675:42): pid=5396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.373" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 150.351484][ T5396] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.373: lblock 0 mapped to illegal pblock 0 (length 1) [ 150.368454][ T26] audit: type=1800 audit(1786780286.675:43): pid=5396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.373" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 150.478112][ T5396] EXT4-fs (loop4): Remounting filesystem read-only [ 150.662186][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 150.931601][ T5424] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.977519][ T5424] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 151.059548][ T5424] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 151.942370][ T5448] device syzkaller0 entered promiscuous mode [ 151.988786][ T5452] loop4: detected capacity change from 0 to 1024 [ 152.022330][ T5452] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 152.084848][ T5452] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 152.120057][ T5452] EXT4-fs (loop4): orphan cleanup on readonly fs [ 152.132518][ T5452] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.398: Inode bitmap for bg 0 marked uninitialized [ 152.191286][ T5452] EXT4-fs (loop4): Remounting filesystem read-only [ 152.233627][ T5452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.542272][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 153.297056][ T5463] loop4: detected capacity change from 0 to 2048 [ 153.418166][ T5463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 153.549753][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 155.390681][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'. [ 155.448550][ T5494] device syzkaller0 entered promiscuous mode [ 155.734213][ T5502] syzkaller0: refused to change device tx_queue_len [ 155.852702][ T5505] loop4: detected capacity change from 0 to 1024 [ 155.893017][ T5505] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 155.938555][ T5505] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 155.969537][ T5505] EXT4-fs (loop4): orphan cleanup on readonly fs [ 156.001792][ T5505] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.415: Inode bitmap for bg 0 marked uninitialized [ 156.022206][ T5505] EXT4-fs (loop4): Remounting filesystem read-only [ 156.029648][ T5505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.919859][ T5522] loop2: detected capacity change from 0 to 2048 [ 156.982973][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 157.085598][ T5522] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 157.114835][ T5522] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #12: block 2: comm syz.2.421: lblock 0 mapped to illegal pblock 2 (length 1) [ 157.174670][ T5529] futex_wake_op: syz.3.425 tries to shift op by 144; fix this program [ 157.265164][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 157.328863][ T5535] device syzkaller0 entered promiscuous mode [ 157.522408][ T5537] syzkaller0: refused to change device tx_queue_len [ 158.023090][ T5553] loop2: detected capacity change from 0 to 1024 [ 158.090779][ T5553] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 158.121923][ T5553] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 158.144587][ T5553] EXT4-fs (loop2): orphan cleanup on readonly fs [ 158.180752][ T5553] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.435: Inode bitmap for bg 0 marked uninitialized [ 158.313652][ T5553] EXT4-fs (loop2): Remounting filesystem read-only [ 158.320396][ T5553] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.622030][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 158.692357][ T5578] loop4: detected capacity change from 0 to 1764 [ 161.348914][ T5616] loop2: detected capacity change from 0 to 128 [ 161.391000][ T5616] EXT4-fs: Ignoring removed i_version option [ 161.455282][ T5616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 161.549058][ T5616] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.599868][ T5616] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.453: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 161.643533][ T5616] EXT4-fs (loop2): Remounting filesystem read-only [ 161.792331][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 162.238477][ T5647] device syzkaller0 entered promiscuous mode [ 162.344318][ T5655] netlink: 'syz.1.471': attribute type 28 has an invalid length. [ 162.499906][ T5658] syzkaller0: refused to change device tx_queue_len [ 162.588328][ T5661] loop1: detected capacity change from 0 to 512 [ 162.642467][ T5661] EXT4-fs: inline encryption not supported [ 162.669283][ T5661] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.724668][ T5661] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.782515][ T5661] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.474: inode #15: comm syz.1.474: iget: illegal inode # [ 162.890179][ T5661] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.474: couldn't read orphan inode 15 (err -117) [ 162.912530][ T5661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.009627][ T5677] loop4: detected capacity change from 0 to 128 [ 163.044402][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 163.421084][ T5691] loop2: detected capacity change from 0 to 128 [ 163.494284][ T5691] EXT4-fs: Ignoring removed i_version option [ 163.550841][ T5691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.610605][ T5691] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.891093][ T4272] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 163.960231][ T4272] EXT4-fs (loop2): Remounting filesystem read-only [ 164.006700][ T4272] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 7: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=16580608, rec_len=1012, size=1024 fake=0 [ 164.077424][ T4272] EXT4-fs (loop2): Remounting filesystem read-only [ 164.099249][ T4272] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=2048, inode=16580608, rec_len=1012, size=1024 fake=0 [ 164.182794][ T4272] EXT4-fs (loop2): Remounting filesystem read-only [ 164.197195][ T4272] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 7: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=16580608, rec_len=1012, size=1024 fake=0 [ 164.219952][ T4272] EXT4-fs (loop2): Remounting filesystem read-only [ 164.227813][ T4272] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=2048, inode=16580608, rec_len=1012, size=1024 fake=0 [ 164.279178][ T4272] EXT4-fs (loop2): Remounting filesystem read-only [ 164.332875][ T4272] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 7: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=16580608, rec_len=1012, size=1024 fake=0 [ 164.421561][ T4272] EXT4-fs (loop2): Remounting filesystem read-only [ 164.430974][ T4272] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=2048, inode=16580608, rec_len=1012, size=1024 fake=0 [ 164.540996][ T4272] EXT4-fs (loop2): Remounting filesystem read-only [ 164.562707][ T4272] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 7: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=16580608, rec_len=1012, size=1024 fake=0 [ 164.669343][ T4272] EXT4-fs (loop2): Remounting filesystem read-only [ 164.681642][ T4272] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=2048, inode=16580608, rec_len=1012, size=1024 fake=0 [ 164.726613][ T4272] EXT4-fs (loop2): Remounting filesystem read-only [ 164.770822][ T4272] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 7: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=16580608, rec_len=1012, size=1024 fake=0 [ 165.946444][ T4302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.989557][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 166.201814][ T4302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.357124][ T4302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.501444][ T4302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.420151][ T5777] tmpfs: Bad value for 'mpol' [ 167.594522][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.613531][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.622550][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.634491][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.653814][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.661237][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.775354][ T5815] loop4: detected capacity change from 0 to 2048 [ 168.913759][ T5815] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 169.158123][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 169.265234][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 169.717883][ T4302] device hsr_slave_0 left promiscuous mode [ 169.724587][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 169.764277][ T4302] device hsr_slave_1 left promiscuous mode [ 169.782735][ T5845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.547'. [ 169.793427][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.802445][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.822906][ T4302] device veth0 left promiscuous mode [ 169.830370][ T4302] bridge0: port 3(veth0) entered disabled state [ 169.870525][ T4302] device bridge_slave_1 left promiscuous mode [ 169.893564][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.907453][ T4302] device bridge_slave_0 left promiscuous mode [ 169.913874][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.947720][ T4302] device veth1_macvtap left promiscuous mode [ 169.954829][ T4302] device veth0_macvtap left promiscuous mode [ 169.961136][ T4302] device veth1_vlan left promiscuous mode [ 169.968081][ T4302] device veth0_vlan left promiscuous mode [ 171.009324][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 171.089839][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 171.140801][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.185428][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.492539][ T4302] bond0 (unregistering): Released all slaves [ 171.588610][ T5842] syzkaller0: refused to change device tx_queue_len [ 171.714259][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.762385][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.803343][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 171.804561][ T5783] device bridge_slave_0 entered promiscuous mode [ 171.866265][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.882656][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.921021][ T5783] device bridge_slave_1 entered promiscuous mode [ 172.050510][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.125989][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.288139][ T5783] team0: Port device team_slave_0 added [ 172.319312][ T5783] team0: Port device team_slave_1 added [ 172.464583][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.471689][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.636088][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.672467][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.698391][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.811334][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.016177][ T5783] device hsr_slave_0 entered promiscuous mode [ 173.034343][ T5783] device hsr_slave_1 entered promiscuous mode [ 173.053872][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.061551][ T5783] Cannot create hsr debugfs directory [ 173.852661][ T5783] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.883630][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 173.903010][ T5928] syz.1.570 uses obsolete (PF_INET,SOCK_PACKET) [ 173.923323][ T5783] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.985098][ T5783] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.022869][ T5783] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.479108][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.538079][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.560354][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.589886][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.657248][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.672133][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.701515][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.708769][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.795555][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.822911][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.862134][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.869405][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.913978][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.970414][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.136879][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.170409][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.215761][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.249322][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.260790][ T5967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.584'. [ 175.286974][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.311548][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.444989][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.467181][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.504913][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.564294][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.635428][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.963515][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 176.252393][ T6001] futex_wake_op: syz.1.596 tries to shift op by 144; fix this program [ 176.529650][ T6007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'. [ 176.858426][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.880283][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.922923][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.499249][ T6038] syzkaller0: refused to change device tx_queue_len [ 177.771354][ T6043] loop3: detected capacity change from 0 to 1024 [ 177.923873][ T6043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 178.229836][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 178.322059][ T6063] loop1: detected capacity change from 0 to 512 [ 178.434736][ T6063] EXT4-fs: inline encryption not supported [ 178.464604][ T6063] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.526815][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.543468][ T6063] EXT4-fs (loop1): orphan cleanup on readonly fs [ 178.570767][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.600786][ T6063] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.612: inode #15: comm syz.1.612: iget: illegal inode # [ 178.710053][ T6063] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.612: couldn't read orphan inode 15 (err -117) [ 178.720952][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.757927][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.803790][ T6063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 178.834946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.865126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.884217][ T5783] device veth0_vlan entered promiscuous mode [ 178.965816][ T5783] device veth1_vlan entered promiscuous mode [ 179.017515][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 179.091227][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.129426][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.169160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.212311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.242334][ T5783] device veth0_macvtap entered promiscuous mode [ 179.338878][ T6089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.620'. [ 179.360585][ T5783] device veth1_macvtap entered promiscuous mode [ 179.425859][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.455759][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.493327][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.535283][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.560293][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.612791][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.639679][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.672041][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.696320][ T6097] loop3: detected capacity change from 0 to 1024 [ 179.700234][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.735150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.772312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.812039][ T6097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.844068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.875763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.941996][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.983429][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.012077][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.042949][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.082938][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.107187][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.143386][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.168303][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.215501][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 180.231102][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.278260][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 180.323394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.332238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.546772][ T5783] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.581511][ T5783] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.639812][ T5783] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.654912][ T5783] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.729851][ T6129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.626'. [ 180.893870][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.901767][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.977439][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.025092][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.039683][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.051153][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.901707][ T6156] loop0: detected capacity change from 0 to 1024 [ 181.974047][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.636'. [ 182.026156][ T6156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 182.310442][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 182.342861][ T6171] device syzkaller0 entered promiscuous mode [ 183.008979][ T6194] device syzkaller0 entered promiscuous mode [ 183.326723][ T6204] loop1: detected capacity change from 0 to 1024 [ 183.458684][ T6204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 183.643945][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 183.843788][ T6216] device syzkaller0 entered promiscuous mode [ 184.735100][ T6246] loop4: detected capacity change from 0 to 512 [ 184.775608][ T6246] EXT4-fs: inline encryption not supported [ 184.794382][ T6246] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.826112][ T6249] loop3: detected capacity change from 0 to 1024 [ 184.848110][ T6246] EXT4-fs (loop4): orphan cleanup on readonly fs [ 184.856021][ T6246] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.663: inode #15: comm syz.4.663: iget: illegal inode # [ 184.874406][ T6246] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.663: couldn't read orphan inode 15 (err -117) [ 184.933050][ T6249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.947969][ T6246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.162824][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 185.380873][ T6267] hub 8-0:1.0: USB hub found [ 185.387186][ T6267] hub 8-0:1.0: 1 port detected [ 186.235733][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 187.397724][ T6294] loop5: detected capacity change from 0 to 128 [ 187.839584][ T6306] futex_wake_op: syz.4.678 tries to shift op by 144; fix this program [ 187.945252][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz.5.679'. [ 187.975301][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'. [ 188.242868][ T6315] device syzkaller0 entered promiscuous mode [ 188.398333][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'. [ 188.971261][ T6336] loop0: detected capacity change from 0 to 512 [ 189.004518][ T6337] tipc: Started in network mode [ 189.009479][ T6337] tipc: Node identity c6acf476f8f7, cluster identity 4711 [ 189.029956][ T6336] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.053706][ T6337] tipc: Enabled bearer , priority 0 [ 189.076565][ T6336] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.688: bad orphan inode 131083 [ 189.110813][ T6343] loop3: detected capacity change from 0 to 128 [ 189.123743][ T6336] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.166509][ T6343] EXT4-fs: Ignoring removed nobh option [ 189.227167][ T6343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 189.258569][ T6343] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.395567][ T6344] device syzkaller0 entered promiscuous mode [ 189.395924][ T26] audit: type=1800 audit(1786780325.735:44): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.688" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 189.402129][ T6344] tipc: Resetting bearer [ 189.509283][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 189.580328][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 189.714926][ T6353] futex_wake_op: syz.3.692 tries to shift op by 144; fix this program [ 189.814810][ T47] tipc: Resetting bearer [ 189.832923][ T6334] tipc: Resetting bearer [ 192.907723][ T6334] tipc: Disabling bearer [ 192.930579][ T4323] tipc: Node number set to 1046213750 [ 193.003500][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 194.883662][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.890033][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.871664][ T6430] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 196.524724][ T6449] device syzkaller0 entered promiscuous mode [ 196.752687][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 197.662042][ T6481] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 197.722979][ T6481] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 200.670432][ T6540] loop0: detected capacity change from 0 to 1024 [ 200.699247][ T6542] bridge0: port 3(bond0) entered blocking state [ 200.723519][ T6542] bridge0: port 3(bond0) entered disabled state [ 200.736364][ T6540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 200.769352][ T6542] device bond0 entered promiscuous mode [ 200.801238][ T26] audit: type=1800 audit(1786780337.135:45): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.737" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 200.864981][ T6542] device bond_slave_0 entered promiscuous mode [ 200.894363][ T6542] device bond_slave_1 entered promiscuous mode [ 200.951979][ T6542] bridge0: port 3(bond0) entered blocking state [ 200.958929][ T6542] bridge0: port 3(bond0) entered forwarding state [ 201.069100][ T6546] bridge0: port 4(team0) entered blocking state [ 201.124311][ T6546] bridge0: port 4(team0) entered disabled state [ 201.214903][ T6546] device team0 entered promiscuous mode [ 201.251609][ T6546] device team_slave_0 entered promiscuous mode [ 201.291466][ T6546] device team_slave_1 entered promiscuous mode [ 201.338007][ T6546] bridge0: port 4(team0) entered blocking state [ 201.344475][ T6546] bridge0: port 4(team0) entered forwarding state [ 201.366321][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 201.625972][ T6560] futex_wake_op: syz.0.740 tries to shift op by 144; fix this program [ 201.643623][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 201.649792][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 201.656153][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 201.662293][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 203.015292][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 203.034196][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 203.442855][ T6607] loop0: detected capacity change from 0 to 1024 [ 203.529264][ T6607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.538282][ T6607] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.876891][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 208.057976][ T6722] device syzkaller0 entered promiscuous mode [ 212.458166][ T6779] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.649714][ T6816] device syzkaller0 entered promiscuous mode [ 216.913059][ T6875] loop5: detected capacity change from 0 to 1024 [ 217.033560][ T6875] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 217.088083][ T6875] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.198332][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 217.234371][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.823'. [ 217.258821][ T6891] futex_wake_op: syz.4.824 tries to shift op by 144; fix this program [ 217.286284][ T4558] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm kworker/u4:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 217.314799][ T6888] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.324455][ T6888] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.333254][ T6888] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.342034][ T6888] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.342614][ T4558] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 217.381605][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 217.418791][ T4558] EXT4-fs (loop5): This should not happen!! Data will be lost [ 217.418791][ T4558] [ 217.461563][ T5783] EXT4-fs (loop5): unmounting filesystem. [ 217.526102][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.823'. [ 217.970367][ T6903] device syzkaller0 entered promiscuous mode [ 218.025451][ T6913] loop1: detected capacity change from 0 to 128 [ 219.020494][ T6941] loop1: detected capacity change from 0 to 1024 [ 219.145120][ T6941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 219.225955][ T26] audit: type=1800 audit(1786780355.565:46): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.840" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 219.480703][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 219.841651][ T6965] loop3: detected capacity change from 0 to 512 [ 219.868338][ T6965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.911468][ T6965] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.843: invalid indirect mapped block 256 (level 2) [ 219.939888][ T6965] EXT4-fs (loop3): 2 truncates cleaned up [ 219.945850][ T6965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.070878][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 222.572872][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 222.595082][ T7000] device syzkaller0 entered promiscuous mode [ 222.608435][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 222.849071][ T7017] 9pnet_fd: Insufficient options for proto=fd [ 223.306803][ T7033] random: crng reseeded on system resumption [ 224.428888][ T7049] 9pnet_fd: Insufficient options for proto=fd [ 224.557485][ T7054] process 'syz.5.875' launched './file0' with NULL argv: empty string added [ 226.529370][ T4579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.560344][ T4579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.755427][ T4579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.812361][ T4579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.025413][ T4579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.093367][ T4579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.291757][ T4579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.348621][ T4579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.397079][ T7100] loop1: detected capacity change from 0 to 1024 [ 227.536901][ T7100] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.640038][ T7097] device syzkaller0 entered promiscuous mode [ 227.772708][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 227.845597][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.858032][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.866526][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.875034][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.882871][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 227.890582][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.969336][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 230.695297][ T7148] loop5: detected capacity change from 0 to 1024 [ 230.829023][ T7148] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 230.953861][ T5783] EXT4-fs (loop5): unmounting filesystem. [ 231.456024][ T7117] chnl_net:caif_netlink_parms(): no params data found [ 232.043514][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 232.151362][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.198030][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.220076][ T7117] device bridge_slave_0 entered promiscuous mode [ 232.321613][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.343375][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.351899][ T7117] device bridge_slave_1 entered promiscuous mode [ 232.615327][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.810163][ T7218] loop0: detected capacity change from 0 to 1024 [ 232.819858][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.935145][ T7218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 232.939882][ T7117] team0: Port device team_slave_0 added [ 233.282550][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 233.305546][ T7117] team0: Port device team_slave_1 added [ 233.520445][ T4579] device hsr_slave_0 left promiscuous mode [ 233.542921][ T4579] device hsr_slave_1 left promiscuous mode [ 233.591872][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.595479][ T7239] loop5: detected capacity change from 0 to 256 [ 233.612045][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.671129][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.699856][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.764142][ T4579] device bridge_slave_1 left promiscuous mode [ 233.790850][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.836526][ T4579] device bridge_slave_0 left promiscuous mode [ 233.864479][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.890140][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.926'. [ 234.014251][ T4579] device veth1_macvtap left promiscuous mode [ 234.020404][ T4579] device veth0_macvtap left promiscuous mode [ 234.083524][ T4579] device veth1_vlan left promiscuous mode [ 234.093828][ T4579] device veth0_vlan left promiscuous mode [ 234.126132][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 235.655121][ T4579] team0 (unregistering): Port device team_slave_1 removed [ 235.726498][ T4579] team0 (unregistering): Port device team_slave_0 removed [ 235.779526][ T7293] hub 8-0:1.0: USB hub found [ 235.785356][ T7293] hub 8-0:1.0: 1 port detected [ 236.221677][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 236.297788][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.500310][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.988175][ T4579] bond0 (unregistering): Released all slaves [ 237.096730][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.104000][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.130073][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.195257][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.202605][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.236760][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.400409][ T7117] device hsr_slave_0 entered promiscuous mode [ 237.432631][ T7117] device hsr_slave_1 entered promiscuous mode [ 237.473893][ T7117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.481549][ T7117] Cannot create hsr debugfs directory [ 238.114278][ T7320] 9pnet_fd: Insufficient options for proto=fd [ 238.220692][ T7117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 238.333048][ T7117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.369646][ T7117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.407686][ T7117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.786505][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.993474][ T7117] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.227198][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.246828][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.316659][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.359403][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.424265][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.431459][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.495241][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.533019][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.555562][ T7354] loop5: detected capacity change from 0 to 1024 [ 239.572410][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.579667][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.655395][ T7354] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 239.674211][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.714409][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.759410][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.835205][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.856841][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.874674][ T5783] EXT4-fs (loop5): unmounting filesystem. [ 239.894753][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.939316][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.981912][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.019456][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.055996][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.086622][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.117920][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.159088][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.188859][ T7370] 9pnet_fd: Insufficient options for proto=fd [ 240.681231][ T7383] loop1: detected capacity change from 0 to 512 [ 240.780398][ T7383] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.929203][ T7383] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.956: invalid indirect mapped block 256 (level 2) [ 241.009472][ T7383] EXT4-fs (loop1): 2 truncates cleaned up [ 241.057798][ T7383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.186877][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.229187][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.297140][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.317693][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 241.517058][ T7403] loop5: detected capacity change from 0 to 1024 [ 241.611142][ T7403] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 241.930132][ T5783] EXT4-fs (loop5): unmounting filesystem. [ 242.372405][ T7428] 9pnet_fd: Insufficient options for proto=fd [ 242.950672][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.972283][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.122815][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.137600][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.156760][ T7117] device veth0_vlan entered promiscuous mode [ 243.168402][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.198003][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.225358][ T7117] device veth1_vlan entered promiscuous mode [ 243.348143][ T7117] device veth0_macvtap entered promiscuous mode [ 243.403656][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.412735][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.443086][ T7457] loop5: detected capacity change from 0 to 1024 [ 243.464274][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.504374][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.530644][ T7117] device veth1_macvtap entered promiscuous mode [ 243.549771][ T7457] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 243.555462][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.597589][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.651397][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.709142][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.755738][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.789877][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.820673][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.849216][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.864014][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.902471][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.937666][ T5783] EXT4-fs (loop5): unmounting filesystem. [ 244.156420][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.224564][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.254200][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.293125][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.321384][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.348199][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.389216][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.413025][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.482180][ T7478] 9pnet_fd: Insufficient options for proto=fd [ 244.495026][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.505439][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.516340][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.550739][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.584627][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.605047][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.646712][ T7117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.673280][ T7117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.691901][ T7117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.727786][ T7117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.816471][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 244.941224][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.968932][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.014439][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.104526][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.122729][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.174697][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.731746][ T7505] loop6: detected capacity change from 0 to 1024 [ 245.877247][ T7505] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 245.973952][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 246.044179][ T7511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.986'. [ 246.098940][ T7511] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.107940][ T7511] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.116925][ T7511] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.126437][ T7511] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.178275][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 246.188173][ T7511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.986'. [ 246.216239][ T7117] EXT4-fs (loop6): unmounting filesystem. [ 246.520263][ T7522] loop0: detected capacity change from 0 to 512 [ 246.579759][ T7522] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 246.673006][ T7522] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 246.742509][ T7522] EXT4-fs (loop0): 1 truncate cleaned up [ 246.767371][ T7522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.849569][ T26] audit: type=1800 audit(1786780383.185:47): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.991" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 247.488807][ T4283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /196/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 247.569575][ T4283] EXT4-fs (loop0): Remounting filesystem read-only [ 247.597340][ T4283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 247.653332][ T4283] EXT4-fs (loop0): Remounting filesystem read-only [ 247.660501][ T4283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /196/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 247.745188][ T4283] EXT4-fs (loop0): Remounting filesystem read-only [ 247.752314][ T4283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 247.828968][ T4283] EXT4-fs (loop0): Remounting filesystem read-only [ 247.846628][ T4283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /196/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 247.913994][ T4283] EXT4-fs (loop0): Remounting filesystem read-only [ 247.933783][ T4283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 248.004891][ T4283] EXT4-fs (loop0): Remounting filesystem read-only [ 248.012605][ T4283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /196/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 248.083726][ T4283] EXT4-fs (loop0): Remounting filesystem read-only [ 248.099346][ T4283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 248.143719][ T4283] EXT4-fs (loop0): Remounting filesystem read-only [ 248.161420][ T4283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /196/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 248.265518][ T4283] EXT4-fs (loop0): Remounting filesystem read-only [ 248.294454][ T4283] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 248.917650][ T4260] infiniband syz1: ib_query_port failed (-19) [ 248.996341][ T7569] loop4: detected capacity change from 0 to 1024 [ 249.078866][ T7569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 250.200949][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 251.629644][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.662720][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.837078][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.873598][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.036237][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.064109][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.179933][ T7610] loop6: detected capacity change from 0 to 128 [ 252.336544][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.387140][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.198820][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.209354][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.219108][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.227305][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.235895][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 253.273752][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.345258][ T7628] loop4: detected capacity change from 0 to 1024 [ 253.764142][ T7628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 253.979729][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 255.323377][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 255.887252][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.004721][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.338425][ T7627] chnl_net:caif_netlink_parms(): no params data found [ 256.471902][ T7673] futex_wake_op: syz.5.1021 tries to shift op by 144; fix this program [ 256.819692][ T39] device hsr_slave_0 left promiscuous mode [ 256.862279][ T39] device hsr_slave_1 left promiscuous mode [ 256.915209][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.945549][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.973904][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.981387][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.034152][ T39] device bridge_slave_1 left promiscuous mode [ 257.056744][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.086363][ T39] device bridge_slave_0 left promiscuous mode [ 257.092690][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.204248][ T39] device veth1_macvtap left promiscuous mode [ 257.245402][ T39] device veth0_macvtap left promiscuous mode [ 257.272035][ T39] device veth1_vlan left promiscuous mode [ 257.277954][ T39] device veth0_vlan left promiscuous mode [ 257.403396][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 257.918340][ T7698] loop4: detected capacity change from 0 to 1024 [ 258.034442][ T7698] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 258.227292][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 259.074807][ T39] team0 (unregistering): Port device team_slave_1 removed [ 259.136123][ T39] team0 (unregistering): Port device team_slave_0 removed [ 259.200679][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.260250][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.498434][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 259.735907][ T39] bond0 (unregistering): Released all slaves [ 259.890491][ T39] smc: removing net device lo with user defined pnetid SYZ0 [ 259.915514][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.922915][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.945253][ T7627] device bridge_slave_0 entered promiscuous mode [ 259.957491][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.980255][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.990973][ T7627] device bridge_slave_1 entered promiscuous mode [ 260.089884][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.156676][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.343636][ T7627] team0: Port device team_slave_0 added [ 260.394851][ T7627] team0: Port device team_slave_1 added [ 261.209061][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.234158][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.400114][ T7627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.474323][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.489758][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.532661][ T7627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.563386][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 261.798786][ T7627] device hsr_slave_0 entered promiscuous mode [ 261.834463][ T7627] device hsr_slave_1 entered promiscuous mode [ 261.863387][ T7627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.872119][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1035'. [ 261.884645][ T7627] Cannot create hsr debugfs directory [ 262.483794][ T7627] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 262.514515][ T7627] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 262.567157][ T7627] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 262.636311][ T7627] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 262.973687][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.035009][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.074220][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.114984][ T7627] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.156083][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.194123][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.243618][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.250851][ T7670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.346615][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.415782][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.732768][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.941244][ T7670] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.948512][ T7670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.126204][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.186012][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.277471][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.310898][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.347461][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.394546][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.413081][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.447660][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.465125][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.505312][ T7627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.526718][ T7627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.540879][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.554044][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.454331][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.465436][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.523527][ T7627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.778281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.820415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.900030][ T7627] device veth0_vlan entered promiscuous mode [ 267.921688][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.954225][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.985744][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.009015][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.046429][ T7627] device veth1_vlan entered promiscuous mode [ 268.142456][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.200176][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.224731][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.263606][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.304473][ T7627] device veth0_macvtap entered promiscuous mode [ 268.327925][ T7627] device veth1_macvtap entered promiscuous mode [ 268.401811][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.459337][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.483380][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.510413][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.541047][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.562502][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.581085][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.613205][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.638941][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.654715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.682574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.731385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.773867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.857208][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.902746][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.940067][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.983565][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.015893][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.053270][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.098114][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.129921][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.180880][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.233380][ T7627] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.282910][ T7627] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.331590][ T7627] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.396928][ T7627] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.216855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.257999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.456321][ T7889] jffs2: notice: (7889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 270.595287][ T4601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.645801][ T4601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.669247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.698239][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.759033][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.273185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 271.373189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 271.383178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 271.393180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 271.753206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 271.763210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 271.773208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 271.783232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 271.793213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 271.803210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 272.246885][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.365569][ T7924] 0x000000000000-0x000000020000 : "" [ 274.477665][ T7924] ftl_cs: FTL header not found. [ 275.159465][ T7949] loop4: detected capacity change from 0 to 512 [ 275.227451][ T7949] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 275.328692][ T7949] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1068: invalid indirect mapped block 256 (level 2) [ 275.439035][ T7949] EXT4-fs (loop4): 2 truncates cleaned up [ 275.445260][ T7949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.657812][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 277.939749][ T8013] loop4: detected capacity change from 0 to 512 [ 277.955963][ T8013] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.056708][ T8013] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1100: invalid indirect mapped block 256 (level 2) [ 278.203080][ T8013] EXT4-fs (loop4): 2 truncates cleaned up [ 278.223430][ T8013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.469937][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 279.696772][ T8066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1115'. [ 280.189241][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1118'. [ 280.287935][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1118'. [ 280.365691][ T8078] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.375601][ T8078] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.384722][ T8078] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.393504][ T8078] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.530530][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1118'. [ 280.539815][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1118'. [ 280.783780][ T8083] futex_wake_op: syz.7.1119 tries to shift op by 144; fix this program [ 285.290160][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1130'. [ 285.303129][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1130'. [ 285.319860][ T8123] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.329442][ T8123] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.338297][ T8123] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.347231][ T8123] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.365405][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1130'. [ 285.391871][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1130'. [ 286.628704][ T8164] futex_wake_op: syz.7.1140 tries to shift op by 144; fix this program [ 291.825719][ T7] smpboot: CPU 1 is now offline [ 291.991645][ T8236] loop6: detected capacity change from 0 to 16 [ 292.037227][ T8233] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.7.1157: No space for directory leaf checksum. Please run e2fsck -D. [ 292.097521][ T8236] erofs: (device loop6): mounted with root inode @ nid 36. [ 292.182932][ T8233] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.7.1157: checksumming directory block 0 [ 292.209807][ T26] audit: type=1800 audit(1786780428.545:48): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1158" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 292.317409][ T8233] netdevsim netdevsim7: loading /lib/firmware/updates/syzkaller/ÿ failed with error -74 [ 292.409917][ T8233] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.7.1157: No space for directory leaf checksum. Please run e2fsck -D. [ 292.546074][ T8233] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.7.1157: checksumming directory block 0 [ 292.628297][ T8233] netdevsim netdevsim7: loading /lib/firmware/updates/ÿ failed with error -74 [ 292.681264][ T8233] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.7.1157: No space for directory leaf checksum. Please run e2fsck -D. [ 292.821523][ T8233] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.7.1157: checksumming directory block 0 [ 292.920472][ T8233] netdevsim netdevsim7: loading /lib/firmware/syzkaller/ÿ failed with error -74 [ 292.974773][ T8233] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.7.1157: No space for directory leaf checksum. Please run e2fsck -D. [ 293.079095][ T8233] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.7.1157: checksumming directory block 0 [ 293.140967][ T8233] netdevsim netdevsim7: loading /lib/firmware/ÿ failed with error -74 [ 293.185334][ T8233] netdevsim netdevsim7: Direct firmware load for ÿ failed with error -74 [ 293.243047][ T8233] netdevsim netdevsim7: Falling back to sysfs fallback for: ÿ [ 293.804374][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 297.167498][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1171'. [ 297.231192][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1171'. [ 302.523894][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1186'. [ 302.571641][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1186'. [ 305.997559][ T8385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.014067][ T4380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.648117][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1200'. [ 306.689783][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1200'. [ 311.657674][ T8477] futex_wake_op: syz.5.1215 tries to shift op by 144; fix this program [ 312.095294][ T4380] libceph: connect (1)[c::]:6789 error -101 [ 312.121776][ T4380] libceph: mon0 (1)[c::]:6789 connect error [ 312.148161][ T4380] libceph: connect (1)[c::]:6789 error -101 [ 312.165237][ T4380] libceph: mon0 (1)[c::]:6789 connect error [ 312.190296][ T4380] libceph: connect (1)[c::]:6789 error -101 [ 312.209179][ T4380] libceph: mon0 (1)[c::]:6789 connect error [ 312.494550][ T14] libceph: connect (1)[c::]:6789 error -101 [ 312.500889][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 312.519529][ T14] libceph: connect (1)[c::]:6789 error -101 [ 312.529472][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 312.861028][ T8483] ceph: No mds server is up or the cluster is laggy [ 312.881010][ T8487] ceph: No mds server is up or the cluster is laggy [ 315.087629][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 315.130399][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 315.340270][ T8508] futex_wake_op: syz.7.1218 tries to shift op by 144; fix this program [ 316.050175][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.057584][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.227588][ T8534] loop1: detected capacity change from 0 to 764 [ 317.208396][ T8545] loop7: detected capacity change from 0 to 1024 [ 317.287032][ T8545] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 2: comm syz.7.1229: lblock 2 mapped to illegal pblock 2 (length 1) [ 317.394419][ T8545] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 317.428442][ T8545] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.1229: lblock 0 mapped to illegal pblock 48 (length 1) [ 317.466182][ T8545] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 317.495932][ T8545] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1229: Failed to acquire dquot type 0 [ 317.529740][ T8545] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 317.557041][ T8545] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.1229: mark_inode_dirty error [ 317.591513][ T8545] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 317.621624][ T8545] EXT4-fs (loop7): 1 orphan inode deleted [ 317.638407][ T7670] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 317.659437][ T8545] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 317.759677][ T7670] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 317.820689][ T8545] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.1229: Invalid inode table block 1 in block_group 0 [ 317.837065][ T7670] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 0 [ 317.909470][ T8545] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 317.967514][ T8545] EXT4-fs error (device loop7): ext4_setattr:5538: inode #2: comm syz.7.1229: mark_inode_dirty error [ 318.106238][ T7627] EXT4-fs (loop7): unmounting filesystem. [ 318.143905][ T4579] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 318.196940][ T4579] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 318.217197][ T4579] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 0 [ 318.241035][ T7627] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 318.287586][ T7627] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 318.308479][ T7627] EXT4-fs error (device loop7): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 320.300440][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1231'. [ 320.338334][ T8563] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1231'. [ 320.577202][ T8566] futex_wake_op: syz.6.1232 tries to shift op by 144; fix this program [ 320.737617][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'. [ 320.844674][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'. [ 324.315367][ T8616] futex_wake_op: syz.4.1247 tries to shift op by 144; fix this program [ 326.490536][ T8629] loop6: detected capacity change from 0 to 1024 [ 332.267130][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 332.301593][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1254'. [ 332.364062][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1254'. [ 332.789961][ T8669] futex_wake_op: syz.5.1259 tries to shift op by 144; fix this program [ 335.029375][ T8721] futex_wake_op: syz.1.1273 tries to shift op by 144; fix this program [ 335.569831][ T8739] loop5: detected capacity change from 0 to 512 [ 335.671189][ T8739] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 336.137111][ T8739] EXT4-fs (loop5): 1 truncate cleaned up [ 336.189540][ T8739] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 336.307229][ T26] audit: type=1800 audit(1786780472.645:49): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1276" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 337.325488][ T8767] device syzkaller0 entered promiscuous mode [ 337.426839][ T5783] EXT4-fs (loop5): unmounting filesystem. [ 337.857499][ T26] audit: type=1800 audit(1786780474.195:50): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1287" name="local" dev="configfs" ino=50507 res=0 errno=0 [ 338.038461][ T26] audit: type=1800 audit(1786780474.235:51): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1287" name="scan_secs" dev="configfs" ino=50511 res=0 errno=0 [ 338.305441][ T8802] futex_wake_op: syz.6.1288 tries to shift op by 144; fix this program [ 339.333307][ T4325] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 339.534120][ T4325] usb 7-1: Using ep0 maxpacket: 32 [ 339.547434][ T4325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.575335][ T4325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.606213][ T4325] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.626125][ T4325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.652024][ T4325] usb 7-1: config 0 descriptor?? [ 339.670931][ T4325] hub 7-1:0.0: USB hub found [ 339.872391][ T4325] hub 7-1:0.0: 1 port detected [ 341.191000][ T4325] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 341.202061][ T4325] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 341.246688][ T4325] usbhid 7-1:0.0: can't add hid device: -32 [ 341.252692][ T4325] usbhid: probe of 7-1:0.0 failed with error -32 [ 342.262617][ T4325] usb 7-1: USB disconnect, device number 2 [ 343.102510][ T8829] loop1: detected capacity change from 0 to 512 [ 343.523821][ T8829] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 343.619274][ T8829] EXT4-fs (loop1): 1 truncate cleaned up [ 343.666756][ T8829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 343.744739][ T26] audit: type=1800 audit(1786780480.085:52): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1296" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 344.231165][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 344.237608][ T26] audit: type=1326 audit(1786780480.585:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.7.1298" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9a0f9e0d9 code=0x0 [ 347.740222][ T8876] device syzkaller0 entered promiscuous mode [ 349.062885][ T8922] loop4: detected capacity change from 0 to 512 [ 349.151221][ T8922] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 349.229066][ T8922] EXT4-fs (loop4): 1 truncate cleaned up [ 350.354040][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 350.406595][ T8922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 350.516587][ T26] audit: type=1800 audit(1786780486.855:54): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1313" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 350.855905][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 351.835608][ T8969] loop6: detected capacity change from 0 to 512 [ 351.882688][ T8969] FAT-fs (loop6): Directory bread(block 199916) failed [ 351.917027][ T8969] FAT-fs (loop6): Directory bread(block 199917) failed [ 351.946958][ T8969] FAT-fs (loop6): Directory bread(block 199918) failed [ 351.969634][ T8969] FAT-fs (loop6): Directory bread(block 199919) failed [ 351.988110][ T8969] FAT-fs (loop6): Directory bread(block 199920) failed [ 352.007988][ T8969] FAT-fs (loop6): Directory bread(block 199921) failed [ 352.028374][ T8969] FAT-fs (loop6): Directory bread(block 199922) failed [ 352.048231][ T8969] FAT-fs (loop6): Directory bread(block 199923) failed [ 352.157117][ T8969] FAT-fs (loop6): FAT read failed (blocknr 128) [ 354.469024][ T8946] device syzkaller0 entered promiscuous mode [ 357.465182][ T1182] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 357.668985][ T1182] usb 7-1: Using ep0 maxpacket: 8 [ 357.698410][ T1182] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 357.751815][ T1182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.810319][ T1182] usb 7-1: Product: syz [ 357.839931][ T1182] usb 7-1: Manufacturer: syz [ 357.886967][ T1182] usb 7-1: SerialNumber: syz [ 357.928038][ T1182] usb 7-1: config 0 descriptor?? [ 357.987442][ T1182] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 359.899282][ T1182] gspca_sonixj: i2c_w8 err -71 [ 359.968237][ T1182] sonixj: probe of 7-1:0.0 failed with error -71 [ 359.989266][ T1182] usb 7-1: USB disconnect, device number 3 [ 361.012878][ T9059] loop6: detected capacity change from 0 to 1156 [ 361.040291][ T9059] ISOFS: unable to read i-node block [ 361.068884][ T9059] isofs_fill_super: get root inode failed [ 361.135961][ T9059] overlayfs: failed to verify upper (87/file0, ino=473, err=-116) [ 361.177602][ T9059] overlayfs: failed to verify index dir 'upper' xattr [ 361.206084][ T9059] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 361.948594][ T9066] loop5: detected capacity change from 0 to 32768 [ 362.022156][ T9066] XFS (loop5): Mounting V5 Filesystem [ 362.121286][ T9066] XFS (loop5): Ending clean mount [ 362.180773][ T9066] XFS (loop5): Quotacheck needed: Please wait. [ 362.302161][ T9066] XFS (loop5): Quotacheck: Done. [ 362.476577][ T26] audit: type=1800 audit(1786780498.815:55): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1343" name="ipv4_address" dev="configfs" ino=51112 res=0 errno=0 [ 362.528247][ T5783] XFS (loop5): Unmounting Filesystem [ 362.621346][ T26] audit: type=1800 audit(1786780498.845:56): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1343" name="ipv4_port" dev="configfs" ino=51113 res=0 errno=0 [ 362.766845][ T26] audit: type=1800 audit(1786780498.845:57): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1343" name="num" dev="configfs" ino=51114 res=0 errno=0 [ 365.000924][ T9115] futex_wake_op: syz.4.1355 tries to shift op by 144; fix this program [ 365.601619][ T9127] loop4: detected capacity change from 0 to 2048 [ 365.691841][ T9127] UDF-fs: bad mount option "func=FILE_MMAP" or missing value [ 366.257028][ T9141] loop7: detected capacity change from 0 to 128 [ 366.423441][ T9141] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 367.463756][ T4287] Bluetooth: hci4: command 0x0405 tx timeout [ 367.522726][ T9141] hpfs: filesystem error: improperly stopped [ 367.570845][ T9141] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 367.616190][ T9141] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 367.660552][ T9151] device syzkaller0 entered promiscuous mode [ 367.669280][ T9141] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 367.699056][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1367'. [ 367.756223][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 367.987337][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 368.032975][ T14] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 79, changing to 7 [ 368.089519][ T14] usb 5-1: New USB device found, idVendor=0499, idProduct=1004, bcdDevice= 0.40 [ 368.114975][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.148758][ T14] usb 5-1: Product: syz [ 368.167971][ T14] usb 5-1: Manufacturer: syz [ 368.186980][ T14] usb 5-1: SerialNumber: syz [ 368.423436][ T14] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 368.545634][ T14] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 368.650157][ T14] usb 5-1: USB disconnect, device number 4 [ 368.656657][ T6884] udevd[6884]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.007047][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1367'. [ 374.567709][ T9211] loop5: detected capacity change from 0 to 32768 [ 374.579730][ T9207] loop6: detected capacity change from 0 to 32768 [ 374.734268][ T9211] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1382 (9211) [ 374.770297][ T9237] device syzkaller0 entered promiscuous mode [ 374.915501][ T9207] JBD2: Ignoring recovery information on journal [ 375.066832][ T9211] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 375.179577][ T9207] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 375.203425][ T9211] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 375.212356][ T9211] BTRFS info (device loop5): force clearing of disk cache [ 375.368522][ T9211] BTRFS info (device loop5): turning on async discard [ 375.441311][ T9211] BTRFS info (device loop5): enabling auto defrag [ 375.503329][ T9211] BTRFS info (device loop5): max_inline at 0 [ 375.509722][ T9211] BTRFS info (device loop5): enabling disk space caching [ 376.420869][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 376.543537][ T9211] BTRFS info (device loop5): disk space caching is enabled [ 376.803547][ T9211] BTRFS error (device loop5): open_ctree failed: -12 [ 377.335798][ T7117] ocfs2: Unmounting device (7,6) on (node local) [ 378.774927][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.781246][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.833472][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'. [ 381.283094][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1403'. [ 381.331445][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1403'. [ 381.638066][ T9331] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.4.1409: No space for directory leaf checksum. Please run e2fsck -D. [ 381.655052][ T9331] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.4.1409: checksumming directory block 0 [ 381.668192][ T9331] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 381.679500][ T9331] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.4.1409: No space for directory leaf checksum. Please run e2fsck -D. [ 381.694998][ T9331] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.4.1409: checksumming directory block 0 [ 381.707211][ T9331] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 381.718747][ T9331] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.4.1409: No space for directory leaf checksum. Please run e2fsck -D. [ 381.735078][ T9331] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.4.1409: checksumming directory block 0 [ 381.748160][ T9331] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 381.758515][ T9331] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.4.1409: No space for directory leaf checksum. Please run e2fsck -D. [ 381.774686][ T9331] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.4.1409: checksumming directory block 0 [ 381.787334][ T9331] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 381.796826][ T9331] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 381.806582][ T9331] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 381.982933][ T9335] loop7: detected capacity change from 0 to 512 [ 382.129319][ T9335] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 382.222518][ T9335] EXT4-fs (loop7): 1 truncate cleaned up [ 382.251268][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1413'. [ 382.680776][ T9347] No such timeout policy "syz1" [ 382.708617][ T9335] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 382.759432][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1413'. [ 382.800069][ T26] audit: type=1800 audit(1786780519.135:58): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1411" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 383.598570][ T7627] EXT4-fs (loop7): unmounting filesystem. [ 384.084442][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1422'. [ 384.167223][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1422'. [ 384.597243][ T4281] Bluetooth: Unknown LE signaling command 0x11 [ 384.604188][ T4281] Bluetooth: Wrong link type (-22) [ 384.646217][ T9394] loop5: detected capacity change from 0 to 256 [ 385.579561][ T9409] device syzkaller0 entered promiscuous mode [ 385.674859][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1440'. [ 385.807086][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1440'. [ 386.433642][ T9443] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7627] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9443] [ 388.111695][ T9455] loop4: detected capacity change from 0 to 256 [ 389.560243][ T94] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 389.571949][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 96294) [ 389.584082][ T94] Buffer I/O error on device sda1, logical block 96256 [ 389.591715][ T94] device offline error, dev sda, sector 778510 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 389.602771][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 97313) [ 389.614801][ T94] Buffer I/O error on device sda1, logical block 97275 [ 389.621686][ T94] Buffer I/O error on device sda1, logical block 97276 [ 389.629552][ T94] Buffer I/O error on device sda1, logical block 97277 [ 389.636498][ T94] Buffer I/O error on device sda1, logical block 97278 [ 389.643703][ T94] Buffer I/O error on device sda1, logical block 97279 [ 389.650614][ T94] device offline error, dev sda, sector 782574 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 389.661340][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 97821) [ 389.673062][ T94] Buffer I/O error on device sda1, logical block 97783 [ 389.680011][ T94] Buffer I/O error on device sda1, logical block 97784 [ 389.687775][ T94] Buffer I/O error on device sda1, logical block 97785 [ 389.694758][ T94] Buffer I/O error on device sda1, logical block 97786 [ 389.703571][ T94] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 389.714150][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2036 starting block 100390) [ 389.726790][ T94] device offline error, dev sda, sector 811302 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 389.738475][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2036 starting block 101412) [ 389.750384][ T94] device offline error, dev sda, sector 815254 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 2 [ 389.761084][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2036 starting block 101906) [ 389.773454][ T94] device offline error, dev sda, sector 717110 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 2 [ 389.784222][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2031 starting block 89638) [ 389.796891][ T94] device offline error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 389.808071][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 92198) [ 389.850222][ T94] device offline error, dev sda, sector 745734 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 2 [ 389.860970][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 93216) [ 389.872949][ T94] device offline error, dev sda, sector 749774 op 0x1:(WRITE) flags 0x0 phys_seg 13 prio class 2 [ 389.883556][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 93721) [ 389.944030][ T3600] Aborting journal on device sda1-8. [ 389.995239][ T94] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 390.009231][ T3600] JBD2: I/O error when updating journal superblock for sda1-8. [ 390.108543][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 390.126338][ T9465] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1450: Detected aborted journal [ 390.195344][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 390.207184][ T4258] EXT4-fs (sda1): I/O error while writing superblock [ 390.268361][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 390.297184][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 390.339161][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 390.357764][ T9465] EXT4-fs (sda1): I/O error while writing superblock [ 390.440675][ T9433] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4643: inode #271: block 161: comm dhcpcd-run-hook: unable to read itable block [ 390.463709][ T4258] EXT4-fs (sda1): previous I/O error to superblock detected [ 390.471678][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 390.503360][ T4258] EXT4-fs (sda1): I/O error while writing superblock [ 390.510075][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 390.516982][ T9465] EXT4-fs (sda1): Remounting filesystem read-only [ 390.548789][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 390.558147][ T4325] EXT4-fs (sda1): I/O error while writing superblock [ 390.566257][ T9433] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4643: inode #272: block 161: comm dhcpcd-run-hook: unable to read itable block [ 390.590082][ T9465] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1450: Detected aborted journal [ 390.622602][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 390.643331][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 390.652975][ T9299] EXT4-fs (sda1): I/O error while writing superblock [ 390.698813][ T4258] EXT4-fs (sda1): previous I/O error to superblock detected [ 390.731412][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 390.753462][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 390.766570][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 390.793424][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 390.812531][ T9298] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 390.821796][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 390.858949][ T4258] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 390.987516][ T9468] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 391.462544][ T9480] loop7: detected capacity change from 0 to 128 [ 394.005601][ T9507] loop6: detected capacity change from 0 to 8 [ 395.081045][ T9511] loop6: detected capacity change from 0 to 32768 [ 395.182078][ T9510] EXT4-fs error: 40 callbacks suppressed [ 395.182094][ T9510] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1460: Detected aborted journal [ 395.263315][ T9510] EXT4-fs: 31 callbacks suppressed [ 395.263330][ T9510] EXT4-fs (sda1): Remounting filesystem read-only [ 395.579784][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 395.598678][ T9512] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1461: Detected aborted journal [ 395.622516][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 395.641764][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 395.653936][ T9512] EXT4-fs (sda1): Remounting filesystem read-only [ 395.678348][ T9513] loop6: detected capacity change from 0 to 128 [ 395.685973][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 395.717936][ T9513] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 395.762218][ T9513] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.807131][ T9512] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1461: Detected aborted journal [ 395.862782][ T9512] EXT4-fs (sda1): Remounting filesystem read-only [ 395.921639][ T7117] EXT4-fs (loop6): unmounting filesystem. [ 396.016425][ T9516] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1462: Detected aborted journal [ 396.049703][ T9516] EXT4-fs (sda1): Remounting filesystem read-only [ 396.070076][ T9516] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1462: Detected aborted journal [ 396.097373][ T9516] EXT4-fs (sda1): Remounting filesystem read-only [ 396.349124][ T9519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1463: Detected aborted journal [ 396.373864][ T9519] EXT4-fs (sda1): Remounting filesystem read-only [ 396.396035][ T9519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1463: Detected aborted journal [ 396.431386][ T9519] EXT4-fs (sda1): Remounting filesystem read-only [ 396.548295][ T9521] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1464: Detected aborted journal [ 396.580377][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 398.086594][ T9525] device syzkaller0 entered promiscuous mode [ 398.102485][ T9535] kvm: pic: non byte write [ 398.159003][ T9535] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2943232592 (2943232592 ns) > initial count (1420284373 ns). Using initial count to start timer. [ 399.233307][ T9298] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 400.552916][ T9298] usb 8-1: Using ep0 maxpacket: 32 [ 400.577458][ T9298] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 400.588931][ T4258] EXT4-fs error: 44 callbacks suppressed [ 400.588945][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 400.766015][ T9298] usb 8-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 400.781860][ T4258] EXT4-fs: 31 callbacks suppressed [ 400.781871][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 400.816051][ T9298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.836900][ T9298] usb 8-1: Product: syz [ 400.849683][ T9298] usb 8-1: Manufacturer: syz [ 400.859086][ T9561] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1477: Detected aborted journal [ 400.872802][ T9298] usb 8-1: SerialNumber: syz [ 400.880154][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 400.910264][ T9561] EXT4-fs (sda1): Remounting filesystem read-only [ 400.940150][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 400.960462][ T9561] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1477: Detected aborted journal [ 400.984806][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 401.010674][ T9561] EXT4-fs (sda1): Remounting filesystem read-only [ 401.032197][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 401.059268][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 401.086976][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 401.104532][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 401.118556][ T9551] EXT4-fs (sda1): Remounting filesystem read-only [ 401.139852][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 401.140008][ T9298] usb 8-1: selecting invalid altsetting 1 [ 401.346840][ T9298] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 401.346983][ T9298] dvb_usb_lmedm04: probe of 8-1:2.0 failed with error -22 [ 401.575038][ T9298] usb 8-1: USB disconnect, device number 2 [ 401.581404][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 402.083570][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 402.197017][ T9572] EXT4-fs (sda1): Remounting filesystem read-only [ 402.217641][ T9572] EXT4-fs (sda1): Remounting filesystem read-only [ 402.260144][ T9573] gadgetfs: bound to dummy_udc driver [ 402.317030][ T26] audit: type=1800 audit(1786780538.655:59): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1478" name="ep1in-bulk" dev="gadgetfs" ino=52368 res=0 errno=0 [ 402.486040][ T9575] EXT4-fs (sda1): Remounting filesystem read-only [ 403.390022][ T9582] loop7: detected capacity change from 0 to 1024 [ 403.417167][ T9582] EXT4-fs: Ignoring removed bh option [ 403.471955][ T9582] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 403.626427][ T7627] EXT4-fs (loop7): unmounting filesystem. [ 405.702423][ T9592] EXT4-fs error: 33 callbacks suppressed [ 405.702438][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 405.746432][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 405.770386][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 405.801325][ T9592] EXT4-fs: 20 callbacks suppressed [ 405.801338][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 405.832402][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 405.870140][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 405.888494][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 405.912251][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 406.036714][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 406.062578][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 406.148765][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 406.182349][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 406.201355][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 406.225618][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 406.244290][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 406.284422][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 406.290976][ T9592] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1484: Detected aborted journal [ 406.320172][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 406.342467][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 406.367227][ T9592] EXT4-fs (sda1): Remounting filesystem read-only [ 409.912597][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1489'. [ 410.042535][ T9630] Can't find ip_set type h [ 410.074822][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.084138][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.800240][ T4258] EXT4-fs error: 56 callbacks suppressed [ 410.800254][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 410.836751][ T4302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.858604][ T9645] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 410.877895][ T4258] EXT4-fs: 28 callbacks suppressed [ 410.877907][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 410.898200][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 410.917253][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 410.952958][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 410.970391][ T4302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.986368][ T9646] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1493: Detected aborted journal [ 410.997625][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 411.009399][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 411.021637][ T9646] EXT4-fs (sda1): Remounting filesystem read-only [ 411.039883][ T9646] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1493: Detected aborted journal [ 411.064244][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 411.072224][ T4302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.087967][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 411.099799][ T9646] EXT4-fs (sda1): Remounting filesystem read-only [ 411.110565][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 411.129492][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 411.142548][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 411.157516][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 411.210018][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 411.230964][ T4302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.256464][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 411.352373][ T9654] loop5: detected capacity change from 0 to 512 [ 411.463038][ T9654] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 411.604733][ T9654] EXT4-fs (loop5): 1 truncate cleaned up [ 411.666073][ T9654] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 411.748978][ T4302] tipc: Left network mode [ 411.760262][ T26] audit: type=1800 audit(1786780548.095:60): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1495" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 411.952925][ T5783] EXT4-fs (loop5): unmounting filesystem. [ 412.305365][ T9671] loop7: detected capacity change from 0 to 128 [ 412.344494][ T9673] netlink: 'syz.5.1499': attribute type 10 has an invalid length. [ 412.506586][ T9671] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 412.550920][ T9673] device dummy0 entered promiscuous mode [ 412.598187][ T9673] team0: Port device dummy0 added [ 413.641030][ T9690] loop7: detected capacity change from 0 to 4096 [ 413.717030][ T9690] ntfs3: Unknown parameter 'hide_dot_files' [ 413.937974][ T4302] device hsr_slave_0 left promiscuous mode [ 413.955552][ T4302] device hsr_slave_1 left promiscuous mode [ 413.975156][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.982616][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.064046][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.071477][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.096626][ T4302] device bridge_slave_1 left promiscuous mode [ 414.116112][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.137128][ T4302] device bridge_slave_0 left promiscuous mode [ 414.156196][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.201947][ T4302] device veth1_macvtap left promiscuous mode [ 414.223294][ T4302] device veth0_macvtap left promiscuous mode [ 414.229391][ T4302] device veth1_vlan left promiscuous mode [ 414.256071][ T4302] device veth0_vlan left promiscuous mode [ 415.301835][ T9701] loop5: detected capacity change from 0 to 32768 [ 415.348347][ T9701] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.1507 (9701) [ 415.442662][ T9701] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 415.503267][ T9701] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 415.512093][ T9701] BTRFS info (device loop5): using free space tree [ 415.631988][ T9718] udevd[9718]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 415.693256][ T9701] BTRFS info (device loop5): enabling ssd optimizations [ 415.855632][ T9697] EXT4-fs error: 97 callbacks suppressed [ 415.855649][ T9697] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1507: Detected aborted journal [ 415.976323][ T9697] EXT4-fs: 51 callbacks suppressed [ 415.976337][ T9697] EXT4-fs (sda1): Remounting filesystem read-only [ 416.036932][ T9725] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1509: Detected aborted journal [ 416.055267][ T9724] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1510: Detected aborted journal [ 416.078492][ T9723] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 416.090851][ T9697] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1507: Detected aborted journal [ 416.145740][ T9724] EXT4-fs (sda1): Remounting filesystem read-only [ 416.154413][ T9725] EXT4-fs (sda1): Remounting filesystem read-only [ 416.165940][ T9697] EXT4-fs (sda1): Remounting filesystem read-only [ 416.172524][ T9697] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1507: Detected aborted journal [ 416.201448][ T9724] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1510: Detected aborted journal [ 416.221128][ T9728] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1481: comm udevd: reading directory lblock 0 [ 416.239421][ T9726] loop7: detected capacity change from 0 to 512 [ 416.248339][ T9727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1511: Detected aborted journal [ 416.280517][ T9697] EXT4-fs (sda1): Remounting filesystem read-only [ 416.288346][ T9726] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 416.301989][ T9724] EXT4-fs (sda1): Remounting filesystem read-only [ 416.310771][ T9728] udevd[9728]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 416.361941][ T9697] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1507: Detected aborted journal [ 416.377139][ T9724] EXT4-fs (sda1): Remounting filesystem read-only [ 416.405147][ T9726] EXT4-fs (loop7): 1 truncate cleaned up [ 416.410936][ T9727] EXT4-fs (sda1): Remounting filesystem read-only [ 416.429123][ T9726] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 416.453330][ T9697] EXT4-fs (sda1): Remounting filesystem read-only [ 416.490550][ T9697] EXT4-fs (sda1): Remounting filesystem read-only [ 416.548995][ T26] audit: type=1800 audit(1786780552.885:61): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1509" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 416.582240][ T9731] loop6: detected capacity change from 0 to 512 [ 416.667107][ T5783] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 416.747015][ T7627] EXT4-fs (loop7): unmounting filesystem. [ 416.776595][ T9731] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 416.865584][ T9731] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.238840][ T7117] EXT4-fs (loop6): unmounting filesystem. [ 417.368919][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 417.471929][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 417.532529][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.653037][ T9744] loop6: detected capacity change from 0 to 512 [ 418.057458][ T9744] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 418.119037][ T9744] EXT4-fs (loop6): 1 truncate cleaned up [ 418.140422][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.160992][ T9744] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 418.210127][ T26] audit: type=1800 audit(1786780554.545:62): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1515" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 418.359511][ T7117] EXT4-fs (loop6): unmounting filesystem. [ 418.905280][ T4302] bond0 (unregistering): Released all slaves [ 419.332337][ T4281] Bluetooth: hci4: unexpected event 0x3d length: 4 < 14 [ 419.372695][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1518'. [ 419.433036][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1518'. [ 420.914151][ T4258] EXT4-fs error: 74 callbacks suppressed [ 420.914166][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 420.956781][ T9792] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 421.017813][ T9793] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1520: Detected aborted journal [ 421.031682][ T9796] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1523: Detected aborted journal [ 421.047546][ T9794] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1521: Detected aborted journal [ 421.061168][ T9795] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1522: Detected aborted journal [ 421.085311][ T9793] EXT4-fs: 37 callbacks suppressed [ 421.085323][ T9793] EXT4-fs (sda1): Remounting filesystem read-only [ 421.100302][ T9794] EXT4-fs (sda1): Remounting filesystem read-only [ 421.107204][ T9796] EXT4-fs (sda1): Remounting filesystem read-only [ 421.116741][ T9795] EXT4-fs (sda1): Remounting filesystem read-only [ 421.126148][ T9794] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1521: Detected aborted journal [ 421.142745][ T9796] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1523: Detected aborted journal [ 421.158075][ T9795] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1522: Detected aborted journal [ 421.177703][ T9793] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1520: Detected aborted journal [ 421.192219][ T9794] EXT4-fs (sda1): Remounting filesystem read-only [ 421.201654][ T9796] EXT4-fs (sda1): Remounting filesystem read-only [ 421.208508][ T9795] EXT4-fs (sda1): Remounting filesystem read-only [ 421.217521][ T9793] EXT4-fs (sda1): Remounting filesystem read-only [ 421.229874][ T9795] EXT4-fs (sda1): Remounting filesystem read-only [ 421.255743][ T9795] EXT4-fs (sda1): Remounting filesystem read-only [ 422.786360][ T9809] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1527'. [ 424.624713][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1531'. [ 425.034725][ T9834] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1531'. [ 426.586337][ T4258] EXT4-fs error: 41 callbacks suppressed [ 426.586350][ T4258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 426.621812][ T9841] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 426.637516][ T4258] EXT4-fs: 24 callbacks suppressed [ 426.637527][ T4258] EXT4-fs (sda1): Remounting filesystem read-only [ 426.700437][ T9843] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1532: Detected aborted journal [ 426.718388][ T9844] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1533: Detected aborted journal [ 426.738027][ T9845] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1534: Detected aborted journal [ 426.751315][ T9842] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1535: Detected aborted journal [ 426.766246][ T9843] EXT4-fs (sda1): Remounting filesystem read-only [ 426.773977][ T9844] EXT4-fs (sda1): Remounting filesystem read-only [ 426.781503][ T9845] EXT4-fs (sda1): Remounting filesystem read-only [ 426.790572][ T9842] EXT4-fs (sda1): Remounting filesystem read-only [ 426.808572][ T9843] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1532: Detected aborted journal [ 426.822425][ T9842] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1535: Detected aborted journal [ 426.839363][ T9845] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1534: Detected aborted journal [ 426.876348][ T9843] EXT4-fs (sda1): Remounting filesystem read-only [ 426.883518][ T9845] EXT4-fs (sda1): Remounting filesystem read-only [ 426.890071][ T9842] EXT4-fs (sda1): Remounting filesystem read-only [ 426.918718][ T9845] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1534: Detected aborted journal [ 426.968472][ T9845] EXT4-fs (sda1): Remounting filesystem read-only [ 426.992936][ T9845] EXT4-fs (sda1): Remounting filesystem read-only [ 428.718206][ T9859] loop6: detected capacity change from 0 to 128 SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=8 req=1488 state=1 status=67 (errno 9: Bad file descriptor) [ 432.001647][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.161008][ T5754] EXT4-fs error: 65 callbacks suppressed [ 432.161024][ T5754] EXT4-fs error (device sda1): ext4_wait_block_bitmap:573: comm syz-executor: Cannot read block bitmap - block_group = 2, block_bitmap = 131 [ 432.275114][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.308061][ T5754] EXT4-fs error (device sda1): ext4_discard_preallocations:5132: comm syz-executor: Error -5 reading block bitmap for 2 [ 432.393626][ T5754] EXT4-fs error (device sda1): ext4_wait_block_bitmap:573: comm syz-executor: Cannot read block bitmap - block_group = 3, block_bitmap = 132 [ 432.473603][ T5754] EXT4-fs error (device sda1): ext4_discard_preallocations:5132: comm syz-executor: Error -5 reading block bitmap for 3 [ 432.529170][ T5754] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 432.558799][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.584037][ T5754] EXT4-fs: 35 callbacks suppressed [ 432.584052][ T5754] EXT4-fs (sda1): Remounting filesystem read-only [ 432.615804][ T5754] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted [ 432.656287][ T9880] EXT4-fs error (device sda1): ext4_wait_block_bitmap:573: comm syz.6.1543: Cannot read block bitmap - block_group = 3, block_bitmap = 132 [ 432.685552][ T9245] EXT4-fs error (device sda1): ext4_wait_block_bitmap:573: comm syz.1.1391: Cannot read block bitmap - block_group = 2, block_bitmap = 131 [ 432.703432][ T5754] EXT4-fs error (device sda1): ext4_wait_block_bitmap:573: comm syz-executor: Cannot read block bitmap - block_group = 2, block_bitmap = 131 [ 432.721809][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.743649][ T9880] EXT4-fs error (device sda1): ext4_discard_preallocations:5132: comm syz.6.1543: Error -5 reading block bitmap for 3 [ 432.776684][ T5754] EXT4-fs (sda1): Remounting filesystem read-only [ 432.801721][ T9245] EXT4-fs (sda1): Remounting filesystem read-only [ 432.859395][ T9880] EXT4-fs (sda1): Remounting filesystem read-only [ 432.880849][ T9245] EXT4-fs (sda1): Remounting filesystem read-only [ 432.933016][ T9880] EXT4-fs (sda1): Remounting filesystem read-only [ 433.578639][ T8856] EXT4-fs (sda1): Remounting filesystem read-only [ 433.628786][ T8856] EXT4-fs (sda1): Remounting filesystem read-only [ 433.900599][ T8856] EXT4-fs (sda1): Remounting filesystem read-only [ 434.112419][ T57] device hsr_slave_0 left promiscuous mode [ 434.122343][ T57] device hsr_slave_1 left promiscuous mode [ 434.130667][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.139941][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.148672][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.158553][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.166990][ T57] device team0 left promiscuous mode [ 434.175209][ T57] device team_slave_0 left promiscuous mode [ 434.181643][ T57] device team_slave_1 left promiscuous mode [ 434.188501][ T57] device dummy0 left promiscuous mode [ 434.195954][ T57] bridge0: port 4(team0) entered disabled state [ 434.204955][ T57] device bond0 left promiscuous mode [ 434.210692][ T57] device bond_slave_0 left promiscuous mode [ 434.219848][ T57] device bond_slave_1 left promiscuous mode [ 434.228345][ T57] bridge0: port 3(bond0) entered disabled state [ 434.237796][ T57] device bridge_slave_1 left promiscuous mode [ 434.245208][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.255836][ T57] device bridge_slave_0 left promiscuous mode [ 434.262026][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.285274][ T57] device veth1_vlan left promiscuous mode [ 434.291079][ T57] device veth0_vlan left promiscuous mode [ 434.839591][ T57] team0 (unregistering): Port device team_slave_1 removed [ 434.897248][ T57] team0 (unregistering): Port device team_slave_0 removed [ 434.948207][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.011827][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.369376][ T57] team0 (unregistering): Port device dummy0 removed [ 435.447865][ T57] bond0 (unregistering): Released all slaves [ 435.970270][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.034400][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.097492][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.164613][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.336223][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.348603][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.416499][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.429370][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.497625][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.509367][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.588290][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.599724][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.820888][ T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.834773][ T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.902832][ T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.916469][ T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.976542][ T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.988585][ T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.058064][ T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.068991][ T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.168462][ T9943] EXT4-fs error: 117 callbacks suppressed [ 437.168475][ T9943] EXT4-fs error (device sda1): ext4_get_inode_loc:4658: inode #90: block 150: comm dhcpcd: unable to read itable block [ 437.272275][ T3933] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4643: inode #125: block 152: comm dhcpcd: unable to read itable block [ 437.326538][ T9944] EXT4-fs error (device sda1): ext4_get_inode_loc:4658: inode #90: block 150: comm dhcpcd: unable to read itable block [ 437.389257][ T3933] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4643: inode #125: block 152: comm dhcpcd: unable to read itable block [ 437.432592][ T9945] EXT4-fs error (device sda1): ext4_get_inode_loc:4658: inode #90: block 150: comm dhcpcd: unable to read itable block [ 437.456351][ T9946] EXT4-fs error (device sda1): ext4_get_inode_loc:4658: inode #90: block 150: comm dhcpcd: unable to read itable block [ 437.499650][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2001: comm dhcpcd: reading directory lblock 0 [ 437.655625][ T3933] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4643: inode #125: block 152: comm dhcpcd: unable to read itable block [ 437.692089][ T9948] EXT4-fs error (device sda1): ext4_get_inode_loc:4658: inode #90: block 150: comm dhcpcd: unable to read itable block [ 437.721167][ T9949] EXT4-fs error (device sda1): ext4_get_inode_loc:4658: inode #90: block 150: comm dhcpcd: unable to read itable block [ 439.089957][ T57] device hsr_slave_0 left promiscuous mode [ 439.097320][ T57] device hsr_slave_1 left promiscuous mode [ 439.105479][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.112883][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.126742][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.135224][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.145292][ T57] device bridge_slave_1 left promiscuous mode [ 439.151585][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.161027][ T57] device bridge_slave_0 left promiscuous mode [ 439.169619][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.181425][ T57] device hsr_slave_0 left promiscuous mode [ 439.189914][ T57] device hsr_slave_1 left promiscuous mode [ 439.197324][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.206284][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.215027][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.222455][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.234935][ T57] device bridge_slave_1 left promiscuous mode [ 439.241127][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.251294][ T57] device bridge_slave_0 left promiscuous mode [ 439.258972][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.271179][ T57] device hsr_slave_0 left promiscuous mode [ 439.279275][ T57] device hsr_slave_1 left promiscuous mode [ 439.288129][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.297141][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.306375][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.314690][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.322256][ T57] device bridge_slave_1 left promiscuous mode [ 439.329837][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.339320][ T57] device bridge_slave_0 left promiscuous mode [ 439.347335][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.388971][ T57] device veth1_macvtap left promiscuous mode [ 439.396767][ T57] device veth0_macvtap left promiscuous mode [ 439.402915][ T57] device veth1_vlan left promiscuous mode [ 439.411369][ T57] device veth0_vlan left promiscuous mode [ 439.419380][ T57] device veth1_macvtap left promiscuous mode [ 439.427527][ T57] device veth0_macvtap left promiscuous mode [ 439.434353][ T57] device veth1_vlan left promiscuous mode [ 439.440181][ T57] device veth0_vlan left promiscuous mode [ 439.450962][ T57] device veth1_macvtap left promiscuous mode [ 439.458334][ T57] device veth0_macvtap left promiscuous mode [ 439.466104][ T57] device veth1_vlan left promiscuous mode [ 439.471914][ T57] device veth0_vlan left promiscuous mode [ 440.209566][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.216006][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.240137][ T57] team0 (unregistering): Port device team_slave_1 removed [ 440.293896][ T57] team0 (unregistering): Port device team_slave_0 removed [ 440.345001][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.398140][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.790814][ T57] bond0 (unregistering): Released all slaves