last executing test programs: 15.853688687s ago: executing program 2 (id=2913): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x129000, 0x0) read$char_usb(r0, &(0x7f0000001980)=""/179, 0xb3) 15.601852892s ago: executing program 2 (id=2915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 15.377571106s ago: executing program 2 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xe8, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0xb0, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x8c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xe8}}, 0x0) 15.133749561s ago: executing program 2 (id=2921): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0x42, 0x7a, 0x20, 0x46d, 0x960, 0xa5af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x35, 0x1f}}]}}]}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, 0xffffffffffffffff, 0x0) 13.067917142s ago: executing program 2 (id=2927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 12.690595689s ago: executing program 2 (id=2930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xe8, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0xb0, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x8c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xe8}}, 0x0) 10.487868213s ago: executing program 0 (id=2941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 10.442064664s ago: executing program 4 (id=2942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0xffffffffffffffff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 10.12674254s ago: executing program 4 (id=2944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x7c}, 'port1\x00', 0x511e36599023629, 0x100000, 0x480000f, 0x0, 0x0, 0xfffff2e3, 0x4, 0x0, 0x0, 0x4}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee656baa48c19bd1b59cb46"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x4845) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) setsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000240), 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000900)={0x0, @remote, @remote}, &(0x7f0000000940)=0xc) socket$inet_sctp(0x2, 0x4, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x2f, 0x3e, 0x2, 0x1, 0x6b, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x20, 0x700, 0x401, 0x10}}) socket$netlink(0x10, 0x3, 0x10) 9.927310624s ago: executing program 0 (id=2945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffb}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/197, 0xc5}], 0x1}, 0x12000) 9.508435932s ago: executing program 0 (id=2948): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 8.883784104s ago: executing program 0 (id=2949): syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x64000600) socket$inet6_tcp(0xa, 0x1, 0x0) 8.410718964s ago: executing program 1 (id=2950): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) 6.55647991s ago: executing program 1 (id=2951): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000800), 0x9, 0x60c, &(0x7f00000001c0)="$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") r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="00000000010000"], 0x48}}, 0x0) 6.238293056s ago: executing program 1 (id=2953): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020201481000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 6.000473892s ago: executing program 1 (id=2955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/4089, 0xff9}, {&(0x7f0000001700)=""/4082, 0xff2}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40000000, 0x0) 5.794242646s ago: executing program 4 (id=2956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x3, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 5.383781544s ago: executing program 3 (id=2959): sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x8000) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 3.810552035s ago: executing program 3 (id=2960): openat$random(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) r0 = syz_io_uring_setup(0x422d, &(0x7f0000000340)={0x0, 0xfffffffd, 0x10100, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184d, 0x0, 0x42, 0x0, 0x0) 3.684493627s ago: executing program 3 (id=2961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 2.351533453s ago: executing program 1 (id=2962): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000800), 0x9, 0x60c, &(0x7f00000001c0)="$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") r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="00000000010000"], 0x48}}, 0x0) 2.279566825s ago: executing program 4 (id=2963): symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) rename(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2.196470677s ago: executing program 3 (id=2964): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 580.794758ms ago: executing program 1 (id=2965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x7c}, 'port1\x00', 0x511e36599023629, 0x100000, 0x480000f, 0x0, 0x0, 0xfffff2e3, 0x4, 0x0, 0x0, 0x4}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee656baa48c19bd1b59cb46"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x4845) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) setsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000240), 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000900)={0x0, @remote, @remote}, &(0x7f0000000940)=0xc) socket$inet_sctp(0x2, 0x4, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x2f, 0x3e, 0x2, 0x1, 0x6b, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x20, 0x700, 0x401, 0x10}}) socket$netlink(0x10, 0x3, 0x10) 520.27112ms ago: executing program 4 (id=2966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 430.215402ms ago: executing program 3 (id=2967): r0 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x6990, 0x40, 0x2, 0xfffffffe}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) 252.163025ms ago: executing program 0 (id=2968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x251, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5\x00\x00\x00\x00\x00\x00\x00\x80\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x86<\a\xf5\xdcJ\xbd\x18\xa3\x06b\xc2\xf3\x9e\xf1\x00>\xfb\x91>!\x9fY\xc23\x90\x96\x9d\xf2F\xda\x99W\xa9?[\xe8\xe4*e}\x18\x89TLZl6qf\xdec\xd0\xa4\xa8\xb95\xe9\x10\xd5\x8e\xe1k\x8d\xa1\xc85p\xe9\f\x91K\x946B\x19\xfd\x92\'\x10\xab\xf2\x95\xdd@\b\xfb\x13|\xda\xa2%\xeb/\x1d\xd1HD\x9fjI\xc4MT_v\xe8W\xf7R\x03\x10^Vr\xb7\b7\x00\\n\x91\xc8\xde\xaa;$\xeb\x87\x9f\xb52\xc8_\xcd\x9a\xbc\xe73(\x94\x80\x9b\x01\xf0\x05\x00\x00\x00\x00\x00\x00\x00\xb2Qw\x1b\x04\x96\x84\xbf\x13\xae\x83yk\x8c\xd3\x9e\xbe\xcc\r\x9da9\v\xd4\x91\x9aW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\xd7\x1d\x9e\xd4\xf5L\x88\xff\x11\x93~d\xc1\x86rO\x8e4\xd5\b\xd9\x8fb\x96\x9atOpC}{\xc7\xcf\x94\xd2S\x8a\x1f\xecc\xc1= %^p\x91P\x9c\xee\x8ev^\x85\x15&\xc5L?j[K\xeb\xaa\xef\x02\xe5\x82*\b\xcc\"\x89w\x92\x17\xe8\x94=\xe6Q\xa7\x9d^\xb8\xee\xe5\x8aN3\x05\xeaH\xfe\x16\x06f\nW\xb0A\xc1G\x14\xcf\xe0\x9dw\xc1\xddr]N', 0x2) write$binfmt_script(r2, &(0x7f00000196c0)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 228.274516ms ago: executing program 3 (id=2969): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) socket$netlink(0x10, 0x3, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 36.420709ms ago: executing program 0 (id=2970): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) 0s ago: executing program 4 (id=2971): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r6, r4, 0x8, 0x0, 0x0, 0xb, 0x1, 0xb58, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000"], 0x84}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x20008040) kernel console output (not intermixed with test programs): cated [ 317.843134][ T9441] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 317.918666][ T9441] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.1867: Unimplemented hash flags: 0x0001 [ 317.938462][ T9441] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1867: Corrupt directory, running e2fsck is recommended [ 317.972449][ T9441] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1867: path /388/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 318.086626][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 318.182213][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 318.239526][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 318.291638][ T9458] loop2: detected capacity change from 0 to 1024 [ 318.337708][ T9458] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.427336][ T9458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 318.447878][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 318.525646][ T9470] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1876'. [ 318.643050][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 319.388832][ T9500] loop2: detected capacity change from 0 to 1024 [ 319.416157][ T9500] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 319.468590][ T9500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.556143][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 319.650141][ T9510] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1891'. [ 319.677859][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 319.863107][ T26] kauditd_printk_skb: 139 callbacks suppressed [ 319.863122][ T26] audit: type=1326 audit(1746663586.265:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 319.951106][ T26] audit: type=1326 audit(1746663586.295:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 320.053984][ T26] audit: type=1326 audit(1746663586.295:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 320.097308][ T26] audit: type=1326 audit(1746663586.295:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 320.140274][ T26] audit: type=1326 audit(1746663586.295:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 320.233851][ T26] audit: type=1326 audit(1746663586.295:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 320.328368][ T26] audit: type=1326 audit(1746663586.295:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 320.398376][ T26] audit: type=1326 audit(1746663586.295:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 320.473440][ T9534] loop2: detected capacity change from 0 to 1024 [ 320.488392][ T26] audit: type=1326 audit(1746663586.295:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 320.561415][ T9534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.572904][ T26] audit: type=1326 audit(1746663586.295:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 320.677542][ T9541] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1906'. [ 320.688669][ T9534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 320.890484][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 321.104573][ T9557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1913'. [ 321.478439][ T9573] loop1: detected capacity change from 0 to 1024 [ 321.513601][ T9573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.571595][ T9573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 321.624021][ T9581] loop2: detected capacity change from 0 to 128 [ 321.699665][ T9581] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 321.763250][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 321.783467][ T9581] tmpfs: Bad value for 'mpol' [ 322.007654][ T4436] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 322.256804][ T9597] loop0: detected capacity change from 0 to 1024 [ 322.316285][ T9597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 322.473375][ T9597] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 322.545202][ T9597] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 322.573424][ T9597] EXT4-fs (loop0): This should not happen!! Data will be lost [ 322.573424][ T9597] [ 322.608423][ T9597] EXT4-fs (loop0): Total free blocks count 0 [ 322.614648][ T9597] EXT4-fs (loop0): Free/Dirty block details [ 322.638534][ T9597] EXT4-fs (loop0): free_blocks=68451041280 [ 322.647255][ T9597] EXT4-fs (loop0): dirty_blocks=80 [ 322.659729][ T9597] EXT4-fs (loop0): Block reservation details [ 322.678458][ T9597] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 322.772093][ T9614] loop3: detected capacity change from 0 to 128 [ 322.774433][ T4436] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 322.870424][ T9614] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 322.949157][ T9614] tmpfs: Bad value for 'mpol' [ 323.045843][ T9623] loop2: detected capacity change from 0 to 512 [ 323.071976][ T9623] EXT4-fs: Ignoring removed nobh option [ 323.125479][ T9623] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1942: invalid indirect mapped block 256 (level 2) [ 323.140457][ T4612] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 323.153131][ T9623] EXT4-fs (loop2): 2 truncates cleaned up [ 323.159566][ T9623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 323.270496][ T9627] EXT4-fs (loop2): shut down requested (1) [ 323.456367][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 324.391611][ T9648] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1950'. [ 324.457954][ T9643] loop4: detected capacity change from 0 to 512 [ 324.541333][ T9643] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.678930][ T9661] loop3: detected capacity change from 0 to 128 [ 324.716377][ T9661] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 324.772988][ T9661] tmpfs: Bad value for 'mpol' [ 324.879227][ T9667] loop0: detected capacity change from 0 to 512 [ 324.896978][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 324.896992][ T26] audit: type=1326 audit(1746663591.295:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 324.950544][ T26] audit: type=1326 audit(1746663591.335:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 324.984539][ T26] audit: type=1326 audit(1746663591.385:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 325.051655][ T9667] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.068607][ T4373] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 325.182427][ T9673] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1956: Unimplemented hash flags: 0x0001 [ 325.280851][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 325.299775][ T9673] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1956: Corrupt directory, running e2fsck is recommended [ 325.384312][ T9673] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1956: path /344/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 326.537796][ T9696] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1965'. [ 326.820402][ T9706] loop3: detected capacity change from 0 to 128 [ 326.863893][ T9706] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 326.948959][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1972'. [ 327.119261][ T7361] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 327.415618][ T9723] loop0: detected capacity change from 0 to 164 [ 327.507883][ T9723] Unsupported NM flag settings (8) [ 327.522380][ T9724] loop2: detected capacity change from 0 to 1024 [ 327.711649][ T9724] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 328.184861][ T9724] EXT4-fs mount: 4 callbacks suppressed [ 328.184882][ T9724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 328.338843][ T26] audit: type=1326 audit(1746663594.745:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 328.371010][ T9739] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1982'. [ 328.435391][ T26] audit: type=1326 audit(1746663594.795:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 328.473755][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 328.483218][ T26] audit: type=1326 audit(1746663594.795:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 328.501849][ T9738] unsupported nla_type 52263 [ 328.534302][ T26] audit: type=1326 audit(1746663594.795:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 328.628390][ T26] audit: type=1326 audit(1746663594.795:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 328.704341][ T9745] loop0: detected capacity change from 0 to 128 [ 328.711921][ T26] audit: type=1326 audit(1746663594.795:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 328.746696][ T9745] FAT-fs (loop0): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 328.759865][ T26] audit: type=1326 audit(1746663594.795:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 329.248624][ T4434] FAT-fs (loop0): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 329.352671][ T9768] loop0: detected capacity change from 0 to 1024 [ 329.431634][ T9768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 329.476055][ T9776] loop2: detected capacity change from 0 to 256 [ 329.506468][ T9768] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 329.543075][ T9776] FAT-fs (loop2): Directory bread(block 1285) failed [ 329.568492][ T9768] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 329.587249][ T9781] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1995'. [ 329.589804][ T9768] EXT4-fs (loop0): This should not happen!! Data will be lost [ 329.589804][ T9768] [ 329.609345][ T9768] EXT4-fs (loop0): Total free blocks count 0 [ 329.615539][ T9768] EXT4-fs (loop0): Free/Dirty block details [ 329.644048][ T9768] EXT4-fs (loop0): free_blocks=68451041280 [ 329.653077][ T9776] FAT-fs (loop2): Directory bread(block 1285) failed [ 329.661053][ T9768] EXT4-fs (loop0): dirty_blocks=80 [ 329.666966][ T9768] EXT4-fs (loop0): Block reservation details [ 329.684983][ T9776] FAT-fs (loop2): Directory bread(block 1285) failed [ 329.687487][ T9768] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 329.706902][ T9776] FAT-fs (loop2): Directory bread(block 1285) failed [ 329.825540][ T4434] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 331.134968][ T9815] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2008'. [ 332.145694][ T9858] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2025'. [ 333.740335][ T1169] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 333.756598][ T1169] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 334.847381][ T9892] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2039'. [ 335.148661][ T9900] loop4: detected capacity change from 0 to 4096 [ 335.266067][ T9900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 335.947865][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 335.947881][ T26] audit: type=1326 audit(1746663602.345:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 335.978199][ T26] audit: type=1326 audit(1746663602.345:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 336.000805][ T26] audit: type=1326 audit(1746663602.365:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 336.023351][ T26] audit: type=1326 audit(1746663602.365:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 336.045836][ T26] audit: type=1326 audit(1746663602.365:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 336.069019][ T26] audit: type=1326 audit(1746663602.365:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 336.093176][ T26] audit: type=1326 audit(1746663602.365:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 336.119186][ T26] audit: type=1326 audit(1746663602.365:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 336.144349][ T9911] tipc: Cannot configure node identity twice [ 336.148976][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 336.158179][ T26] audit: type=1326 audit(1746663602.365:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 336.189567][ T26] audit: type=1326 audit(1746663602.365:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 336.504857][ T9917] loop2: detected capacity change from 0 to 8192 [ 336.561683][ T9917] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 336.571528][ T9917] FAT-fs (loop2): Filesystem has been set read-only [ 336.578235][ T9917] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 2068) [ 336.587829][ T9917] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 2068) [ 337.586140][ T9936] smc: net device bond0 erased user defined pnetid SYZ2 [ 338.872367][ T9952] loop1: detected capacity change from 0 to 512 [ 338.957092][ T9952] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 338.982294][ T9952] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 339.058713][ T9958] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.2062: Unimplemented hash flags: 0x0001 [ 339.191107][ T9958] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2062: Corrupt directory, running e2fsck is recommended [ 339.321588][ T9958] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.2062: path /405/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 340.199095][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 341.662058][ T9986] loop4: detected capacity change from 0 to 512 [ 341.685863][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 341.694867][ T9986] EXT4-fs: Ignoring removed orlov option [ 341.739611][ T9986] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2072: inode #1: comm syz.4.2072: iget: illegal inode # [ 341.761765][ T9986] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2072: error while reading EA inode 1 err=-117 [ 341.831849][ T9986] EXT4-fs (loop4): 1 orphan inode deleted [ 341.837766][ T9986] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 341.916641][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'. [ 342.001672][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2073'. [ 342.126999][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 342.145437][ T9995] loop2: detected capacity change from 0 to 4096 [ 342.186185][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 342.186203][ T26] audit: type=1326 audit(1746663608.585:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 342.236973][ T9997] tipc: Cannot configure node identity twice [ 342.251294][ T9995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 342.290516][ T26] audit: type=1326 audit(1746663608.585:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 342.360902][ T26] audit: type=1326 audit(1746663608.615:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 342.412174][T10002] loop4: detected capacity change from 0 to 4096 [ 342.423486][ T26] audit: type=1326 audit(1746663608.615:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 342.461712][ T26] audit: type=1326 audit(1746663608.615:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 342.484675][ T26] audit: type=1326 audit(1746663608.615:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 342.507561][ T26] audit: type=1326 audit(1746663608.615:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 342.595319][ T26] audit: type=1326 audit(1746663608.615:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 342.640624][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 342.642117][T10002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 342.665864][ T26] audit: type=1326 audit(1746663608.615:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 343.103776][ T26] audit: type=1326 audit(1746663608.615:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 343.383617][T10002] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #15: comm syz.4.2078: corrupted inode contents [ 343.479388][T10002] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #15: comm syz.4.2078: mark_inode_dirty error [ 343.512001][T10002] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #15: comm syz.4.2078: corrupted inode contents [ 343.589716][T10002] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.2078: mark_inode_dirty error [ 343.611939][T10002] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #15: comm syz.4.2078: corrupted inode contents [ 343.712536][T10002] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.2078: mark_inode_dirty error [ 343.714959][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2083'. [ 343.744340][T10002] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #15: comm syz.4.2078: corrupted inode contents [ 343.788069][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'. [ 343.898869][T10002] EXT4-fs error (device loop4): ext4_truncate:4312: inode #15: comm syz.4.2078: mark_inode_dirty error [ 343.941225][T10002] EXT4-fs error (device loop4) in ext4_setattr:5657: Corrupt filesystem [ 343.975328][T10014] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #15: comm syz.4.2078: corrupted inode contents [ 344.126029][ T4255] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 344.175525][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 344.524927][T10036] netlink: 'syz.2.2091': attribute type 4 has an invalid length. [ 345.029590][T10040] rdma_rxe: already configured on team_slave_0 [ 345.041264][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2097'. [ 345.099308][T10054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2097'. [ 345.576276][T10072] netlink: 'syz.3.2103': attribute type 4 has an invalid length. [ 346.549615][T10089] loop4: detected capacity change from 0 to 512 [ 346.788964][T10089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 346.799912][T10089] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.663586][ T26] kauditd_printk_skb: 128 callbacks suppressed [ 347.663601][ T26] audit: type=1326 audit(1746663614.065:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 347.798499][ T26] audit: type=1326 audit(1746663614.115:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 348.258035][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2113'. [ 348.287739][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2113'. [ 349.184109][T10107] netlink: 'syz.3.2116': attribute type 4 has an invalid length. [ 349.360794][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 349.504025][ T26] audit: type=1326 audit(1746663615.905:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 349.642854][ T26] audit: type=1326 audit(1746663615.945:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 349.671625][ T26] audit: type=1326 audit(1746663615.945:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 349.724503][ T26] audit: type=1326 audit(1746663615.945:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 349.755728][ T26] audit: type=1326 audit(1746663615.945:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 349.814323][ T26] audit: type=1326 audit(1746663615.955:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 349.871271][ T26] audit: type=1326 audit(1746663615.955:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 349.894780][ T26] audit: type=1326 audit(1746663615.955:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 350.146617][T10129] rdma_rxe: already configured on team_slave_0 [ 351.361482][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2127'. [ 351.419871][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2127'. [ 351.449825][T10151] netlink: 'syz.0.2130': attribute type 4 has an invalid length. [ 351.545634][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 351.637764][T10159] loop4: detected capacity change from 0 to 128 [ 351.718145][T10159] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 351.799525][T10159] ext4 filesystem being mounted at /431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 351.941792][T10159] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.2135: No space for directory leaf checksum. Please run e2fsck -D. [ 352.026565][T10159] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.2135: checksumming directory block 0 [ 353.667335][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2139'. [ 354.158244][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2143'. [ 354.175742][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'. [ 354.220930][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 354.228871][T10194] netlink: 'syz.1.2144': attribute type 4 has an invalid length. [ 354.469362][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2147'. [ 354.774750][T10218] netlink: 'syz.4.2155': attribute type 4 has an invalid length. [ 354.933487][T10223] No such timeout policy "syz0" [ 354.948442][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 354.994851][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 355.015344][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 355.987090][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2164'. [ 356.040041][T10232] loop4: detected capacity change from 0 to 4096 [ 356.130992][T10232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 356.294291][T10253] netlink: 'syz.3.2168': attribute type 4 has an invalid length. [ 356.457899][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 356.475569][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 356.611909][T10263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.560040][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 357.786923][T10278] device syzkaller1 entered promiscuous mode [ 357.934332][T10285] loop4: detected capacity change from 0 to 512 [ 357.995259][T10288] netlink: 'syz.3.2182': attribute type 4 has an invalid length. [ 358.120677][T10285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2180: inode #1: comm syz.4.2180: iget: illegal inode # [ 358.168900][T10285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2180: error while reading EA inode 1 err=-117 [ 358.221123][T10285] EXT4-fs (loop4): 1 orphan inode deleted [ 358.227020][T10285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 358.271192][T10295] serio: Serial port ptm0 [ 358.323427][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 358.340320][T10296] loop2: detected capacity change from 0 to 4096 [ 358.384337][T10296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 358.559393][T10308] loop4: detected capacity change from 0 to 1024 [ 358.574420][T10308] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 358.623989][T10308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 358.689158][T10308] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 358.796469][T10319] loop3: detected capacity change from 0 to 128 [ 358.828324][T10320] __nla_validate_parse: 4 callbacks suppressed [ 358.828340][T10320] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.2193'. [ 358.917822][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 358.933177][T10319] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 358.999114][T10319] ext4 filesystem being mounted at /477/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.178105][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 359.239150][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 359.247474][T10328] netlink: 'syz.1.2196': attribute type 4 has an invalid length. [ 359.311743][T10326] loop4: detected capacity change from 0 to 512 [ 359.389909][T10326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 359.413894][T10326] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.496418][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 359.496434][ T26] audit: type=1326 audit(1746663625.895:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 359.623381][ T26] audit: type=1326 audit(1746663625.935:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 359.646042][ T26] audit: type=1326 audit(1746663625.935:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 359.669182][ T26] audit: type=1326 audit(1746663625.935:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 359.692754][ T26] audit: type=1326 audit(1746663625.935:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 359.719231][ T26] audit: type=1326 audit(1746663625.945:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 359.767907][ T26] audit: type=1326 audit(1746663625.945:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 359.770535][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 359.827003][ T26] audit: type=1326 audit(1746663625.945:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 359.906644][T10346] loop3: detected capacity change from 0 to 128 [ 359.953183][ T26] audit: type=1326 audit(1746663625.945:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 360.050746][ T26] audit: type=1326 audit(1746663625.945:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 360.083064][T10349] netlink: 'syz.4.2202': attribute type 2 has an invalid length. [ 360.361678][T10354] loop4: detected capacity change from 0 to 1024 [ 360.390016][T10354] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 360.469663][T10359] netlink: 'syz.0.2206': attribute type 4 has an invalid length. [ 360.481097][T10354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 360.557982][T10354] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 360.593686][T10359] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.2206'. [ 360.739406][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 360.754757][T10361] loop3: detected capacity change from 0 to 4096 [ 360.859855][T10361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 361.015083][T10370] netlink: 'syz.0.2209': attribute type 4 has an invalid length. [ 361.046193][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 361.228524][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2211'. [ 361.280655][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2211'. [ 361.339465][T10379] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 362.600041][T10400] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 362.675793][T10404] netlink: 'syz.1.2219': attribute type 4 has an invalid length. [ 362.690972][T10394] siw: device registration error -23 [ 362.702707][T10404] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2219'. [ 362.723970][T10394] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2217'. [ 363.116273][T10411] netlink: 'syz.1.2222': attribute type 4 has an invalid length. [ 363.369506][T10417] netlink: 'syz.1.2225': attribute type 2 has an invalid length. [ 363.481335][T10419] loop2: detected capacity change from 0 to 128 [ 363.539416][T10419] FAT-fs (loop2): Unrecognized mount option "ÿÿ" or missing value [ 364.366601][T10449] netlink: 'syz.4.2235': attribute type 4 has an invalid length. [ 364.431694][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 364.507684][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2238'. [ 364.574283][T10455] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.583326][T10455] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.592110][T10455] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.600871][T10455] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.624306][T10455] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.633699][T10455] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.643478][T10455] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.652627][T10455] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.768945][T10457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2239'. [ 364.789305][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2239'. [ 364.805661][T10457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2239'. [ 364.819393][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2239'. [ 364.840804][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'. [ 364.961863][T10473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2245'. [ 364.997264][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'. [ 365.141690][T10479] device bridge0 entered promiscuous mode [ 365.148056][T10479] device macvlan0 entered promiscuous mode [ 365.239660][T10479] bridge0: port 3(macvlan0) entered blocking state [ 365.246388][T10479] bridge0: port 3(macvlan0) entered disabled state [ 365.301389][T10479] device bridge0 left promiscuous mode [ 365.371562][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 365.397048][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.405167][T10484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.422308][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.436225][T10484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.507057][T10497] loop2: detected capacity change from 0 to 1024 [ 365.515117][T10497] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.530159][T10495] netlink: 'syz.1.2249': attribute type 4 has an invalid length. [ 365.575864][T10497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 365.670071][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 365.808887][T10510] smc: net device bond0 applied user defined pnetid SYZ2 [ 366.305664][T10529] loop4: detected capacity change from 0 to 4096 [ 366.347256][T10529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 366.417678][T10537] netlink: 'syz.1.2264': attribute type 4 has an invalid length. [ 366.610271][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 366.738071][T10548] loop3: detected capacity change from 0 to 128 [ 366.787344][T10548] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 368.120348][ T4307] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 368.158511][T10570] netlink: 'syz.0.2277': attribute type 4 has an invalid length. [ 368.253115][T10572] loop1: detected capacity change from 0 to 4096 [ 368.359747][T10572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 368.542393][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 368.938103][T10602] loop2: detected capacity change from 0 to 128 [ 368.983496][T10602] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 369.112995][T10608] netlink: 'syz.0.2291': attribute type 4 has an invalid length. [ 369.242995][T10607] loop1: detected capacity change from 0 to 512 [ 369.270966][ T4436] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 369.382864][T10607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 369.437520][T10607] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.538025][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 369.538040][ T26] audit: type=1326 audit(1746663635.935:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 369.590247][T10623] loop2: detected capacity change from 0 to 4096 [ 369.646023][ T26] audit: type=1326 audit(1746663635.975:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 369.735463][ T26] audit: type=1326 audit(1746663635.975:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 369.791610][T10623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 369.805350][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 369.841075][ T26] audit: type=1326 audit(1746663635.975:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 369.877199][ T26] audit: type=1326 audit(1746663635.975:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 369.904281][T10635] __nla_validate_parse: 10 callbacks suppressed [ 369.904298][T10635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2301'. [ 369.909545][ T26] audit: type=1326 audit(1746663635.975:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 370.468767][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 370.683899][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 370.755432][T10643] netlink: 'syz.0.2305': attribute type 4 has an invalid length. [ 370.762254][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 370.917945][ T26] audit: type=1326 audit(1746663635.975:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 370.919837][T10645] loop4: detected capacity change from 0 to 128 [ 370.971671][T10645] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 371.003863][ T26] audit: type=1326 audit(1746663635.975:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 371.078635][ T26] audit: type=1326 audit(1746663635.975:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 371.158484][ T26] audit: type=1326 audit(1746663635.975:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 371.589700][T10677] loop1: detected capacity change from 0 to 512 [ 371.673002][ T75] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 371.684768][T10677] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 372.057621][T10677] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.279212][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'. [ 372.448694][T10685] netlink: 'syz.4.2318': attribute type 4 has an invalid length. [ 372.676484][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2321'. [ 372.713234][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 372.826647][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2321'. [ 373.432099][T10699] rdma_rxe: rxe_register_device failed with error -23 [ 373.438062][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2332'. [ 373.491862][T10699] rdma_rxe: failed to add team_slave_0 [ 373.514417][T10717] netlink: 'syz.4.2331': attribute type 4 has an invalid length. [ 374.557871][T10730] device lo entered promiscuous mode [ 374.604795][T10728] loop4: detected capacity change from 0 to 512 [ 374.694348][T10728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 374.727730][T10728] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.060916][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 375.116293][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2343'. [ 376.050101][T10761] netlink: 'syz.4.2345': attribute type 4 has an invalid length. [ 376.514576][T10774] loop4: detected capacity change from 0 to 128 [ 376.566601][T10774] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 376.654114][T10776] loop2: detected capacity change from 0 to 512 [ 376.972843][T10776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 376.982344][T10776] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.343509][T10769] rdma_rxe: already configured on team_slave_0 [ 377.354722][T10781] loop3: detected capacity change from 0 to 512 [ 377.420516][T10781] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 377.552630][T10781] EXT4-fs (loop3): 1 truncate cleaned up [ 377.597787][T10781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 377.908090][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 378.023494][ T4307] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 378.445104][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2357'. [ 378.596972][T10798] loop3: detected capacity change from 0 to 512 [ 378.610913][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 378.702171][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.714232][T10798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 378.743894][T10803] loop4: detected capacity change from 0 to 128 [ 378.748170][T10798] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.780300][T10803] ext4: Unknown parameter 'defcontext' [ 379.140721][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 379.156678][T10817] netlink: 'syz.0.2362': attribute type 4 has an invalid length. [ 379.221143][T10815] 9pnet: Could not find request transport: 0xffffffffffffffff [ 380.098680][T10827] loop2: detected capacity change from 0 to 128 [ 380.107216][T10827] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 380.250262][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2369'. [ 380.315314][T10836] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 380.388778][ T4433] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 380.416565][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'. [ 380.774518][T10847] loop2: detected capacity change from 0 to 764 [ 380.793008][T10847] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 380.982682][T10850] loop4: detected capacity change from 0 to 512 [ 381.083133][T10850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 381.105775][T10850] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.209137][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 381.209152][ T26] audit: type=1326 audit(1746663647.615:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 381.320326][T10865] netlink: 'syz.1.2376': attribute type 4 has an invalid length. [ 381.333827][ T26] audit: type=1326 audit(1746663647.665:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 381.509266][ T26] audit: type=1326 audit(1746663647.665:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 381.555853][ T26] audit: type=1326 audit(1746663647.665:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 381.956331][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 382.254578][ T26] audit: type=1326 audit(1746663647.665:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 382.642548][ T26] audit: type=1326 audit(1746663647.665:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 382.798910][ T26] audit: type=1326 audit(1746663647.665:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 382.874887][T10874] loop1: detected capacity change from 0 to 512 [ 382.927896][T10874] ext4: Unknown parameter 'seclabel' [ 382.963913][ T26] audit: type=1326 audit(1746663647.665:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 383.009904][ T26] audit: type=1326 audit(1746663647.665:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 383.043089][ T26] audit: type=1326 audit(1746663647.665:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.4.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 383.122411][T10879] loop2: detected capacity change from 0 to 128 [ 383.201836][T10879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 383.250802][T10886] loop4: detected capacity change from 0 to 128 [ 383.259907][T10879] ext4 filesystem being mounted at /482/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 383.281587][T10886] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 383.339359][T10887] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 383.462017][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 383.544319][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 383.688726][ T41] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 384.142225][T10911] loop2: detected capacity change from 0 to 764 [ 384.268989][T10911] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 386.498168][T10928] netlink: 'syz.4.2398': attribute type 10 has an invalid length. [ 386.548458][T10928] device hsr_slave_0 left promiscuous mode [ 386.585661][T10931] loop1: detected capacity change from 0 to 128 [ 386.602721][T10928] device hsr_slave_1 left promiscuous mode [ 386.657330][T10931] FAT-fs (loop1): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 387.336429][ T46] FAT-fs (loop1): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 387.659322][T10942] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.735777][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2402'. [ 389.204460][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2410'. [ 390.362684][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2413'. [ 390.412803][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 390.784958][T10991] loop3: detected capacity change from 0 to 512 [ 390.843526][T10991] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 390.889655][T10991] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 390.908588][T10991] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.2417: Unimplemented hash flags: 0x0001 [ 390.920303][T10991] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2417: Corrupt directory, running e2fsck is recommended [ 390.933913][T10991] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2417: path /515/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 391.110043][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 391.339576][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 393.054670][T11021] loop3: detected capacity change from 0 to 512 [ 393.122948][T11021] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 393.333755][ T26] kauditd_printk_skb: 113 callbacks suppressed [ 393.333771][ T26] audit: type=1326 audit(1746663659.735:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 393.407130][T11021] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 393.413582][ T26] audit: type=1326 audit(1746663659.755:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 393.428900][ T4242] Process accounting resumed [ 393.558889][ T26] audit: type=1326 audit(1746663659.775:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 393.608920][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 393.648585][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 393.660239][ T26] audit: type=1326 audit(1746663659.775:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 393.695287][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2428'. [ 393.735232][T11045] loop2: detected capacity change from 0 to 128 [ 393.744355][ T26] audit: type=1326 audit(1746663659.775:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 393.805409][ T26] audit: type=1326 audit(1746663659.775:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 393.849820][T11045] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 393.870998][ T26] audit: type=1326 audit(1746663659.775:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 393.898090][T11045] ext4 filesystem being mounted at /491/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 393.958909][ T26] audit: type=1326 audit(1746663659.775:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 393.981768][ T26] audit: type=1326 audit(1746663659.775:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 394.004588][ T26] audit: type=1326 audit(1746663659.775:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35f8e969 code=0x7ffc0000 [ 394.881632][T11058] loop4: detected capacity change from 0 to 128 [ 394.906960][T11061] loop3: detected capacity change from 0 to 1024 [ 394.925982][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 394.951555][T11058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 394.960873][T11061] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 395.038807][T11061] jbd2_journal_init_inode: Cannot locate journal superblock [ 395.056603][T11061] EXT4-fs (loop3): Could not load journal inode [ 395.078799][T11058] ext4 filesystem being mounted at /488/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.325863][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 395.822924][T11085] loop4: detected capacity change from 0 to 512 [ 396.214130][T11085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 396.223681][T11085] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.062379][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 397.865774][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 400.003985][T11119] loop4: detected capacity change from 0 to 128 [ 400.101001][T11119] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 400.146921][T11119] ext4 filesystem being mounted at /491/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 400.284585][T11117] loop1: detected capacity change from 0 to 4096 [ 400.338077][T11117] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 400.379253][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 400.442070][T11117] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #15: comm syz.1.2448: corrupted inode contents [ 400.511847][T11117] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #15: comm syz.1.2448: mark_inode_dirty error [ 400.552592][T11117] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #15: comm syz.1.2448: corrupted inode contents [ 400.609290][T11117] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.2448: mark_inode_dirty error [ 400.691095][T11117] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #15: comm syz.1.2448: corrupted inode contents [ 400.699275][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2456'. [ 400.752660][T11117] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.2448: mark_inode_dirty error [ 400.815418][T11117] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #15: comm syz.1.2448: corrupted inode contents [ 400.815982][T11139] 9pnet: Could not find request transport: 0xffffffffffffffff [ 400.852108][T11145] loop4: detected capacity change from 0 to 512 [ 400.894394][T11145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 400.948378][T11117] EXT4-fs error (device loop1): ext4_truncate:4312: inode #15: comm syz.1.2448: mark_inode_dirty error [ 400.979266][T11145] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.009907][T11117] EXT4-fs error (device loop1) in ext4_setattr:5657: Corrupt filesystem [ 401.068221][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 401.076558][ T26] audit: type=1800 audit(1746663667.465:2126): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2458" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 401.120858][T11125] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #15: comm \!Á**+: corrupted inode contents [ 401.181284][ T26] audit: type=1800 audit(1746663667.585:2127): pid=11150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2458" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 401.353689][T11156] syz.3.2460[11156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.353803][T11156] syz.3.2460[11156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.383731][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 401.405896][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 401.427473][T11156] loop3: detected capacity change from 0 to 256 [ 401.500927][T11156] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.579903][T11156] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.925721][T11171] loop3: detected capacity change from 0 to 128 [ 402.009404][T11171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 402.059278][T11171] ext4 filesystem being mounted at /526/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.279479][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 402.441159][T11186] loop1: detected capacity change from 0 to 512 [ 402.484084][T11188] loop3: detected capacity change from 0 to 512 [ 402.546068][T11186] EXT4-fs (loop1): orphan cleanup on readonly fs [ 402.560196][T11181] 9pnet: Could not find request transport: 0xffffffffffffffff [ 402.633873][T11186] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2468: bad orphan inode 13 [ 402.645131][T11188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 402.654318][T11186] ext4_test_bit(bit=12, block=18) = 1 [ 402.661724][T11186] is_bad_inode(inode)=0 [ 402.666039][T11186] NEXT_ORPHAN(inode)=2130706432 [ 402.671425][T11186] max_ino=32 [ 402.671638][T11188] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 402.674639][T11186] i_nlink=1 [ 402.695421][T11186] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 403.388602][T11188] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.2470: Unimplemented hash flags: 0x0001 [ 403.429526][T11188] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2470: Corrupt directory, running e2fsck is recommended [ 403.511321][T11188] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2470: path /527/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 403.734814][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2470'. [ 403.896640][ T26] audit: type=1326 audit(1746663670.295:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 403.948347][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 403.978520][ T26] audit: type=1326 audit(1746663670.295:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 404.044121][ T26] audit: type=1326 audit(1746663670.295:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 404.094143][T11214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2478'. [ 404.115693][ T26] audit: type=1326 audit(1746663670.295:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 404.138661][ T27] usb 2-1: device descriptor read/64, error -71 [ 404.147364][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2478'. [ 404.158512][T11214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2478'. [ 404.177942][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2478'. [ 404.191465][ T26] audit: type=1326 audit(1746663670.295:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 404.299353][T11217] loop4: detected capacity change from 0 to 128 [ 404.367866][T11217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 404.388780][T11217] ext4 filesystem being mounted at /500/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.418513][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 404.608324][ T27] usb 2-1: device descriptor read/64, error -71 [ 404.658191][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 404.729452][ T27] usb usb2-port1: attempt power cycle [ 405.134229][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 405.158566][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 405.209093][ T27] usb 2-1: device descriptor read/8, error -71 [ 405.350138][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2490'. [ 405.378539][T11246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2490'. [ 405.400220][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2490'. [ 405.454648][T11249] loop2: detected capacity change from 0 to 512 [ 405.470454][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 405.488478][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 405.501514][T11249] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 405.718462][ T27] usb 2-1: device not accepting address 5, error -71 [ 405.734444][ T27] usb usb2-port1: unable to enumerate USB device [ 405.849499][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 405.858493][T11249] EXT4-fs (loop2): failed to open journal device unknown-block(11,131) -6 [ 405.891744][T11261] loop1: detected capacity change from 0 to 128 [ 405.979420][T11261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 406.084093][T11261] ext4 filesystem being mounted at /488/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 406.324955][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 406.529579][T11274] loop1: detected capacity change from 0 to 1764 [ 406.546210][T11281] __nla_validate_parse: 1 callbacks suppressed [ 406.546226][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2503'. [ 406.618044][T11281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2503'. [ 406.656424][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2503'. [ 406.678754][T11281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2503'. [ 408.073943][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2509'. [ 408.086157][T11301] loop2: detected capacity change from 0 to 128 [ 408.238821][T11304] loop1: detected capacity change from 0 to 512 [ 408.508756][T11304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 408.518376][T11304] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.111576][T11301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 410.215277][T11301] ext4 filesystem being mounted at /514/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 410.472888][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 410.774105][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 410.927526][T11327] syz.1.2518 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 410.978160][T11327] loop1: detected capacity change from 0 to 512 [ 411.007329][T11327] EXT4-fs: Ignoring removed mblk_io_submit option [ 411.031420][T11327] EXT4-fs: Ignoring removed bh option [ 411.042404][T11324] 9pnet: Could not find request transport: 0xffffffffffffffff [ 411.050124][T11327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 411.103117][T11327] EXT4-fs (loop1): 1 truncate cleaned up [ 411.116922][T11327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 411.192082][T11334] tipc: Enabled bearer , priority 0 [ 411.290734][T11333] tipc: Resetting bearer [ 411.470422][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 414.901139][T11333] tipc: Disabling bearer [ 415.281439][T11363] netlink: 'syz.2.2529': attribute type 7 has an invalid length. [ 415.343815][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'. [ 415.411721][T11370] loop1: detected capacity change from 0 to 764 [ 415.432759][T11370] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 415.651189][T11375] 9pnet: Could not find request transport: 0xffffffffffffffff [ 416.847366][T11390] loop3: detected capacity change from 0 to 512 [ 416.873549][T11390] EXT4-fs: Ignoring removed nobh option [ 416.954024][T11390] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.2537: corrupted inode contents [ 417.007796][T11398] loop1: detected capacity change from 0 to 128 [ 417.029771][T11390] EXT4-fs (loop3): Remounting filesystem read-only [ 417.046585][T11390] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #16: comm syz.3.2537: mark_inode_dirty error [ 417.090687][T11390] EXT4-fs (loop3): Remounting filesystem read-only [ 417.097312][T11390] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.2537: corrupted inode contents [ 417.112898][T11398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 417.122661][T11398] ext4 filesystem being mounted at /495/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.134138][T11390] EXT4-fs (loop3): Remounting filesystem read-only [ 417.161562][T11390] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.2537: mark_inode_dirty error [ 417.175345][T11390] EXT4-fs (loop3): Remounting filesystem read-only [ 417.199548][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2541'. [ 417.218519][T11390] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.2537: corrupted inode contents [ 417.258854][T11390] EXT4-fs (loop3): Remounting filesystem read-only [ 417.291351][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 417.307508][T11390] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 417.336319][T11390] EXT4-fs (loop3): Remounting filesystem read-only [ 417.392241][T11390] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.2537: corrupted inode contents [ 417.445388][T11390] EXT4-fs (loop3): Remounting filesystem read-only [ 417.465421][T11390] EXT4-fs error (device loop3): ext4_truncate:4312: inode #16: comm syz.3.2537: mark_inode_dirty error [ 417.507395][T11390] EXT4-fs (loop3): Remounting filesystem read-only [ 417.519518][T11390] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 417.550536][T11390] EXT4-fs (loop3): Remounting filesystem read-only [ 417.573007][T11390] EXT4-fs (loop3): 1 truncate cleaned up [ 417.589048][ T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 417.604725][T11390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 417.618517][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 417.646907][T11390] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.662511][ T11] EXT4-fs (loop3): Remounting filesystem read-only [ 417.803710][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2537'. [ 418.019028][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 418.106218][T11418] 9pnet: Could not find request transport: 0xffffffffffffffff [ 418.175349][T11426] loop3: detected capacity change from 0 to 512 [ 418.379951][T11426] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 418.414449][T11426] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 418.435038][T11430] loop1: detected capacity change from 0 to 764 [ 418.443676][T11430] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 418.471405][T11433] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.2549: Unimplemented hash flags: 0x0001 [ 418.506214][T11433] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2549: Corrupt directory, running e2fsck is recommended [ 418.539571][T11433] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2549: path /539/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 418.617467][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2549'. [ 418.944538][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 419.057123][T11442] loop3: detected capacity change from 0 to 128 [ 419.118397][T11442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 419.149690][T11442] ext4 filesystem being mounted at /540/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.362252][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'. [ 419.391407][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 419.844188][T11461] 9pnet: Could not find request transport: 0xffffffffffffffff [ 419.967628][T11468] loop2: detected capacity change from 0 to 512 [ 419.984466][T11468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 420.017027][T11468] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 420.035706][T11468] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2564: Unimplemented hash flags: 0x0001 [ 420.052590][T11468] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2564: Corrupt directory, running e2fsck is recommended [ 420.066457][T11468] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.2564: path /524/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 420.164077][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 420.432542][T11481] loop1: detected capacity change from 0 to 764 [ 420.441200][T11481] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 420.558551][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 421.650582][T11509] loop3: detected capacity change from 0 to 512 [ 421.898544][T11509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 421.907981][T11509] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.678803][T11515] loop1: detected capacity change from 0 to 512 [ 422.743248][T11515] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 422.778933][T11515] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 422.839405][T11515] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 422.891226][T11516] 9pnet: Could not find request transport: 0xffffffffffffffff [ 422.899199][T11515] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 422.981657][T11515] EXT4-fs (loop1): 1 truncate cleaned up [ 422.987367][T11515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 423.104262][T11515] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 423.241064][T11520] loop2: detected capacity change from 0 to 512 [ 423.308068][T11520] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 423.385077][T11520] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 423.411381][T11520] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2579: Unimplemented hash flags: 0x0001 [ 423.459990][T11520] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2579: Corrupt directory, running e2fsck is recommended [ 423.473203][T11520] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.2579: path /530/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 423.583509][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 423.612196][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 423.740522][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 423.915029][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 424.242863][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2585'. [ 424.312757][T11536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2585'. [ 424.352870][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2585'. [ 424.432918][T11539] loop3: detected capacity change from 0 to 764 [ 424.447756][T11539] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 424.696867][T11406] Set syz1 is full, maxelem 65536 reached [ 425.427401][T11578] IPVS: Unknown mcast interface: veth0_virt_wifi [ 425.462490][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2599'. [ 426.165093][T11580] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2599'. [ 426.184450][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2599'. [ 426.694377][T11600] 9pnet: Could not find request transport: 0xffffffffffffffff [ 426.787145][T11609] netlink: 'syz.2.2610': attribute type 4 has an invalid length. [ 426.959985][ T26] audit: type=1326 audit(1746663693.365:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 427.009948][ T26] audit: type=1326 audit(1746663693.365:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 427.191200][ T26] audit: type=1326 audit(1746663693.365:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 427.216007][ T26] audit: type=1326 audit(1746663693.365:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 428.280821][ T26] audit: type=1326 audit(1746663693.365:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 428.361105][T11626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2618'. [ 428.373898][T11626] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2618'. [ 428.384251][T11626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2618'. [ 428.392607][ T26] audit: type=1326 audit(1746663693.365:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 428.476819][ T26] audit: type=1326 audit(1746663693.365:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 428.500740][ T26] audit: type=1326 audit(1746663693.365:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 428.523910][ T26] audit: type=1326 audit(1746663693.365:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 428.549581][ T26] audit: type=1326 audit(1746663693.365:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.4.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 428.651175][T11639] loop1: detected capacity change from 0 to 512 [ 428.693730][T11639] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 428.722220][T11639] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.122804][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'. [ 430.239420][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 431.479179][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2635'. [ 431.528341][T11683] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2635'. [ 431.583685][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2635'. [ 432.641022][T11709] netlink: 'syz.3.2643': attribute type 1 has an invalid length. [ 432.700551][T11709] netlink: 'syz.3.2643': attribute type 4 has an invalid length. [ 432.784120][T11709] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.2643'. [ 432.827996][T11716] loop1: detected capacity change from 0 to 512 [ 432.887297][T11716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 432.998882][T11716] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 433.038401][T11716] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.2645: Unimplemented hash flags: 0x0001 [ 433.061216][T11716] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2645: Corrupt directory, running e2fsck is recommended [ 433.117696][T11726] loop2: detected capacity change from 0 to 512 [ 433.132697][T11716] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.2645: path /519/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 433.166093][T11726] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 433.578042][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2645'. [ 433.919232][T11734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2651'. [ 433.948955][T11734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2651'. [ 433.974036][T11734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2651'. [ 434.162914][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 434.167160][T11726] EXT4-fs (loop2): failed to open journal device unknown-block(11,131) -6 [ 434.272215][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 434.272231][ T26] audit: type=1326 audit(1746663700.675:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0e38e969 code=0x7ffc0000 [ 434.500751][ T26] audit: type=1326 audit(1746663700.735:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0e38e969 code=0x7ffc0000 [ 434.576670][ T26] audit: type=1326 audit(1746663700.735:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0e38e969 code=0x7ffc0000 [ 434.677350][ T26] audit: type=1326 audit(1746663700.735:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0e38e969 code=0x7ffc0000 [ 435.258666][ T26] audit: type=1326 audit(1746663700.735:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea0e38e969 code=0x7ffc0000 [ 435.339698][ T26] audit: type=1326 audit(1746663700.745:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0e38e969 code=0x7ffc0000 [ 435.362702][ T26] audit: type=1326 audit(1746663700.745:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fea0e38e969 code=0x7ffc0000 [ 435.385070][ T26] audit: type=1326 audit(1746663700.745:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0e38e969 code=0x7ffc0000 [ 435.408180][ T26] audit: type=1326 audit(1746663700.745:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fea0e38e969 code=0x7ffc0000 [ 435.441227][T11764] loop4: detected capacity change from 0 to 1024 [ 435.467890][T11767] netlink: 'syz.0.2660': attribute type 1 has an invalid length. [ 435.477309][T11764] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 435.499256][ T26] audit: type=1326 audit(1746663700.745:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea0e38e9a3 code=0x7ffc0000 [ 435.517439][T11767] netlink: 'syz.0.2660': attribute type 4 has an invalid length. [ 435.529750][T11767] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.2660'. [ 435.548697][T11764] jbd2_journal_init_inode: Cannot locate journal superblock [ 435.566313][T11764] EXT4-fs (loop4): Could not load journal inode [ 436.561680][T11777] loop3: detected capacity change from 0 to 512 [ 436.639497][T11777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 436.711038][T11777] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 436.735196][T11777] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.2665: Unimplemented hash flags: 0x0001 [ 436.753869][T11786] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 436.779445][T11777] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2665: Corrupt directory, running e2fsck is recommended [ 436.811280][T11777] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2665: path /567/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 436.944672][T11799] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2668'. [ 437.000857][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 437.272668][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'. [ 437.441964][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 438.155353][T11815] loop1: detected capacity change from 0 to 1024 [ 438.190198][T11815] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 438.240559][T11815] jbd2_journal_init_inode: Cannot locate journal superblock [ 438.247953][T11815] EXT4-fs (loop1): Could not load journal inode [ 438.621020][T11838] loop1: detected capacity change from 0 to 256 [ 438.644826][T11838] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 438.921027][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 440.152114][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.840116][T11865] loop3: detected capacity change from 0 to 512 [ 441.986465][T11865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 441.995898][T11865] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.092872][T11879] loop1: detected capacity change from 0 to 1024 [ 442.146999][T11879] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 442.192296][T11879] jbd2_journal_init_inode: Cannot locate journal superblock [ 442.222259][T11879] EXT4-fs (loop1): Could not load journal inode [ 442.647564][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 443.229274][T11903] loop2: detected capacity change from 0 to 1024 [ 443.265888][T11903] ext4: Unknown parameter 'nouser_xattr' [ 443.409966][T11908] loop3: detected capacity change from 0 to 256 [ 444.557209][T11922] loop4: detected capacity change from 0 to 1024 [ 444.565484][T11922] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 444.608684][T11922] jbd2_journal_init_inode: Cannot locate journal superblock [ 444.676452][T11922] EXT4-fs (loop4): Could not load journal inode [ 445.731474][T11936] syz.4.2715[11936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.731584][T11936] syz.4.2715[11936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.810150][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 449.810166][ T26] audit: type=1326 audit(1746663716.215:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 449.819411][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2722'. [ 449.994373][ T26] audit: type=1326 audit(1746663716.225:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 450.021556][T11964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.037274][T11964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.064747][T11964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.068169][ T26] audit: type=1326 audit(1746663716.225:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 450.091015][T11964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.126981][ T26] audit: type=1326 audit(1746663716.225:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 450.185775][ T26] audit: type=1326 audit(1746663716.225:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 450.242175][ T26] audit: type=1326 audit(1746663716.395:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 450.272574][T11974] loop1: detected capacity change from 0 to 512 [ 450.292801][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 450.345409][T11974] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 450.366481][T11974] ext4 filesystem being mounted at /536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 450.763550][T11985] netlink: 'syz.2.2729': attribute type 7 has an invalid length. [ 450.788666][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2729'. [ 450.811977][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 450.957880][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2731'. [ 451.107384][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 451.352019][T12001] loop3: detected capacity change from 0 to 512 [ 452.878371][T12003] loop2: detected capacity change from 0 to 512 [ 455.737581][T12001] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 455.755545][T12003] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 456.031991][T12006] netlink: 'syz.1.2735': attribute type 21 has an invalid length. [ 456.224821][T12011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2736'. [ 456.253185][T12015] device lo entered promiscuous mode [ 456.275720][T12015] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 456.289750][ T26] audit: type=1326 audit(1746663722.695:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.4.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 456.324368][T12015] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 456.344953][ T26] audit: type=1326 audit(1746663722.695:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.4.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 456.434529][ T26] audit: type=1326 audit(1746663722.725:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.4.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 456.461732][ T26] audit: type=1326 audit(1746663722.815:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.4.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 456.484767][ T26] audit: type=1326 audit(1746663722.815:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.4.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 456.549732][T12011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2736'. [ 456.568028][ T26] audit: type=1326 audit(1746663722.835:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12019 comm="syz.4.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb2a7fc1225 code=0x7ffc0000 [ 456.638327][ T26] audit: type=1326 audit(1746663722.995:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12019 comm="syz.4.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb2a7f8e969 code=0x7ffc0000 [ 456.670460][T12024] loop2: detected capacity change from 0 to 1024 [ 456.714618][T12024] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 456.748854][T12024] jbd2_journal_init_inode: Cannot locate journal superblock [ 456.756220][T12024] EXT4-fs (loop2): Could not load journal inode [ 456.904034][T12011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2736'. [ 457.010717][T12032] loop3: detected capacity change from 0 to 128 [ 457.033306][T12032] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 457.240299][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'. [ 458.229858][T12055] loop4: detected capacity change from 0 to 256 [ 458.261548][T12055] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 458.274877][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 459.378983][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'. [ 459.731285][T12086] loop2: detected capacity change from 0 to 128 [ 459.798852][T12086] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 460.809000][ T4299] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 460.951527][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 460.966304][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2776'. [ 461.008912][T12113] team0: Device vlan0 is already an upper device of the team interface [ 461.183112][ T26] audit: type=1326 audit(1746663727.585:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.2778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a84f8e969 code=0x0 [ 462.501384][T12137] loop4: detected capacity change from 0 to 512 [ 462.540695][T12137] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 462.552258][T12137] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 462.561085][T12137] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.2787: Unimplemented hash flags: 0x0001 [ 462.594036][T12137] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2787: Corrupt directory, running e2fsck is recommended [ 462.613728][T12137] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.2787: path /566/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 462.647303][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 462.746229][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 462.878734][T12149] siw: device registration error -23 [ 463.049865][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 463.232667][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 464.959041][T12176] loop4: detected capacity change from 0 to 128 [ 465.026298][T12176] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 465.452549][T12196] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2806'. [ 465.476538][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 465.696918][ T4436] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 466.162628][T12210] netlink: 'syz.1.2812': attribute type 1 has an invalid length. [ 466.435615][T12210] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2812'. [ 466.632025][T12217] smc: net device bond0 erased user defined pnetid SYZ2 [ 467.005368][T12223] tipc: Enabled bearer , priority 0 [ 467.357437][T12223] syzkaller0: MTU too low for tipc bearer [ 467.418520][T12223] tipc: Disabling bearer [ 467.631955][T12234] loop4: detected capacity change from 0 to 512 [ 467.688175][T12234] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 467.735069][T12234] EXT4-fs (loop4): 1 truncate cleaned up [ 467.771473][T12234] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 467.777122][T12240] loop3: detected capacity change from 0 to 128 [ 467.817826][T12240] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 467.840654][ T26] audit: type=1800 audit(1746663734.245:2245): pid=12234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2821" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 467.922857][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 469.929448][T12263] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 469.965427][T12263] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2829'. [ 470.306587][ T4612] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 470.938121][T12292] loop3: detected capacity change from 0 to 128 [ 471.170218][T12292] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 471.781155][T12297] random: crng reseeded on system resumption [ 471.833290][ T26] audit: type=1326 audit(1746663738.235:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.1.2847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x0 [ 471.977311][T12309] netlink: 'syz.2.2845': attribute type 1 has an invalid length. [ 472.099809][T12309] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2845'. [ 472.146220][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 472.870032][T12315] loop4: detected capacity change from 0 to 1024 [ 472.921744][T12315] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.965301][T12315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 473.201065][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 473.639171][ T4261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.652520][ T4261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.662119][ T4261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.671315][ T4261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.679446][ T4261] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 473.686854][ T4261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 474.164149][ T4373] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.304539][ T4373] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.430749][ T4373] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.611184][ T4373] bond1: (slave vlan2): Releasing active interface [ 474.626489][T12352] loop2: detected capacity change from 0 to 128 [ 474.664217][T12352] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 474.685967][ T4373] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.088550][T12359] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 475.101939][T12359] netlink: 15366 bytes leftover after parsing attributes in process `syz.1.2862'. [ 475.111771][ T4433] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 475.738617][ T4261] Bluetooth: hci5: command 0x0409 tx timeout [ 476.021030][T12336] chnl_net:caif_netlink_parms(): no params data found [ 476.144245][ T4373] tipc: Left network mode [ 476.419112][ T26] audit: type=1326 audit(1746663742.825:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 476.489459][T12336] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.498998][T12336] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.515791][T12336] device bridge_slave_0 entered promiscuous mode [ 476.517212][ T26] audit: type=1326 audit(1746663742.835:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 476.529355][T12336] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.552554][T12336] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.572224][T12336] device bridge_slave_1 entered promiscuous mode [ 476.602957][ T26] audit: type=1326 audit(1746663742.835:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 476.639371][T12397] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2869'. [ 476.682976][ T26] audit: type=1326 audit(1746663742.835:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 476.760560][ T26] audit: type=1326 audit(1746663742.835:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 476.888280][ T26] audit: type=1326 audit(1746663742.835:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 476.980360][ T26] audit: type=1326 audit(1746663742.835:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 477.040002][ T26] audit: type=1326 audit(1746663742.835:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 477.092590][ T26] audit: type=1326 audit(1746663742.835:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 477.128041][ T26] audit: type=1326 audit(1746663742.835:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab338e969 code=0x7ffc0000 [ 477.158918][T12336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.171986][T12336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.224707][T12336] team0: Port device team_slave_0 added [ 477.233940][T12336] team0: Port device team_slave_1 added [ 477.263587][T12336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.271311][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.313067][T12336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.819585][ T4261] Bluetooth: hci5: command 0x041b tx timeout [ 478.084813][T12336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.091931][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.118685][T12336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.132403][T12418] loop4: detected capacity change from 0 to 128 [ 478.290872][T12418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 478.309212][T12418] ext4 filesystem being mounted at /582/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.538648][T12424] netlink: 'syz.1.2874': attribute type 1 has an invalid length. [ 478.562578][T12424] netlink: 15366 bytes leftover after parsing attributes in process `syz.1.2874'. [ 479.023565][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 479.100277][T12336] device hsr_slave_0 entered promiscuous mode [ 479.183534][T12336] device hsr_slave_1 entered promiscuous mode [ 479.219515][T12336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.269798][T12336] Cannot create hsr debugfs directory [ 479.898474][ T4261] Bluetooth: hci5: command 0x040f tx timeout [ 480.902394][T12475] netlink: 'syz.2.2889': attribute type 1 has an invalid length. [ 480.950733][T12475] netlink: 15366 bytes leftover after parsing attributes in process `syz.2.2889'. [ 481.947035][T12336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.999061][ T4261] Bluetooth: hci5: command 0x0419 tx timeout [ 482.157125][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.183161][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.247041][T12336] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.278835][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 482.319281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.347502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.377914][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.385165][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.424306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.452976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.473405][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.480646][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.542812][ T4373] device bridge_slave_1 left promiscuous mode [ 482.562992][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.588916][ T4373] device bridge_slave_0 left promiscuous mode [ 482.596734][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.641635][ T4373] device veth1_macvtap left promiscuous mode [ 482.649341][ T4373] device veth0_macvtap left promiscuous mode [ 483.734872][T12521] loop2: detected capacity change from 0 to 2048 [ 483.817085][T12521] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 484.015701][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 484.712807][ T4373] bond1 (unregistering): (slave veth7): Releasing active interface [ 484.906966][ T4373] bond1 (unregistering): Released all slaves [ 485.267608][ T4373] team0 (unregistering): Port device team_slave_1 removed [ 485.321950][ T4373] team0 (unregistering): Port device team_slave_0 removed [ 485.374284][ T4373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.793939][ T4373] bond0 (unregistering): (slave team0): Releasing backup interface [ 485.976977][ T4373] bond0 (unregistering): Released all slaves [ 486.085538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 486.094503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 486.104573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 486.113582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.124391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.134184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 486.163154][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2897'. [ 486.172454][T12534] netlink: 'syz.2.2901': attribute type 1 has an invalid length. [ 486.187713][T12534] netlink: 15366 bytes leftover after parsing attributes in process `syz.2.2901'. [ 486.217313][T12336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.278732][T12336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.337434][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 486.359503][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 486.383964][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.393047][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.404768][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.414681][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.432695][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 486.905395][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 487.212027][T12336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.655340][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.669625][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 489.484850][T12595] netlink: 'syz.0.2912': attribute type 1 has an invalid length. [ 489.527835][T12595] netlink: 15366 bytes leftover after parsing attributes in process `syz.0.2912'. [ 490.192767][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2918'. [ 490.288959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.319309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.387552][T12336] device veth0_vlan entered promiscuous mode [ 490.442248][ T22] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 490.471069][ T22] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 490.483458][T12336] device veth1_vlan entered promiscuous mode [ 490.603724][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 490.613253][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.680484][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 490.786081][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 490.838836][ T127] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 491.058740][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 491.153414][ T127] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 491.238490][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.271291][ T127] usb 3-1: Product: syz [ 491.284603][ T127] usb 3-1: Manufacturer: syz [ 491.302855][ T127] usb 3-1: SerialNumber: syz [ 491.367529][ T127] usb 3-1: config 0 descriptor?? [ 491.445692][ T127] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 491.473876][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.494340][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.547613][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 491.568695][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.579100][T12336] device veth0_macvtap entered promiscuous mode [ 491.592047][T12336] device veth1_macvtap entered promiscuous mode [ 491.631368][ T127] gspca_sunplus: reg_w_riv err -71 [ 491.636629][ T127] sunplus: probe of 3-1:0.0 failed with error -71 [ 491.681132][T12336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.726332][ T127] usb 3-1: USB disconnect, device number 5 [ 491.732576][T12336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.778313][T12336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.847139][T12336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.897741][T12336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.922486][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 491.939129][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.955364][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.966861][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 492.006695][T12336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.037771][T12336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.058695][T12336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.095592][T12336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.126739][T12336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.152732][T12642] rdma_rxe: rxe_register_device failed with error -23 [ 492.165838][T12647] netlink: 'syz.4.2925': attribute type 1 has an invalid length. [ 492.186865][T12647] netlink: 15366 bytes leftover after parsing attributes in process `syz.4.2925'. [ 492.197314][T12642] rdma_rxe: failed to add team_slave_0 [ 492.209870][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.241071][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.660463][ T6948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.685587][ T6948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.770609][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 492.861843][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.895538][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.957571][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 492.986970][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 493.586742][T12682] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 493.599167][T12682] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 494.497094][T12694] netlink: 'syz.0.2935': attribute type 1 has an invalid length. [ 494.534034][T12694] netlink: 15366 bytes leftover after parsing attributes in process `syz.0.2935'. [ 494.577554][T12698] smc: net device vxcan1 applied user defined pnetid SYZ1 [ 495.150054][ T4261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 495.161462][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 495.166616][T12707] loop3: detected capacity change from 0 to 512 [ 495.176670][ T4261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 495.187121][ T4261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 495.202186][ T4261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 495.210040][ T4261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 495.341629][T12707] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 495.369647][T12707] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.470618][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 495.470633][ T26] audit: type=1326 audit(1746663761.875:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 495.595436][ T26] audit: type=1326 audit(1746663761.875:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 495.689644][ T26] audit: type=1326 audit(1746663761.875:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 495.789889][T12336] EXT4-fs (loop3): unmounting filesystem. [ 495.803805][ T26] audit: type=1326 audit(1746663761.875:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 495.972805][ T26] audit: type=1326 audit(1746663761.885:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 496.047562][ T26] audit: type=1326 audit(1746663761.885:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 496.123648][ T26] audit: type=1326 audit(1746663761.885:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 496.264550][ T26] audit: type=1326 audit(1746663761.885:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 496.287662][ T26] audit: type=1326 audit(1746663761.895:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 496.312237][ T26] audit: type=1326 audit(1746663761.895:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d678e969 code=0x7ffc0000 [ 496.459954][T12745] loop3: detected capacity change from 0 to 512 [ 496.722594][T12745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 496.732238][T12745] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.131390][T12728] rdma_rxe: rxe_register_device failed with error -23 [ 497.202253][T12728] rdma_rxe: failed to add team_slave_0 [ 497.258414][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 498.498071][T12754] tty tty23: ldisc open failed (-12), clearing slot 22 [ 499.035914][T12336] EXT4-fs (loop3): unmounting filesystem. [ 499.186000][T12715] chnl_net:caif_netlink_parms(): no params data found [ 499.338927][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 499.556577][T12715] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.576753][T12715] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.586018][T12715] device bridge_slave_0 entered promiscuous mode [ 499.594846][T12715] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.602941][T12715] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.611290][T12715] device bridge_slave_1 entered promiscuous mode [ 499.739701][T12785] device syzkaller0 entered promiscuous mode [ 499.866084][T12715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.428489][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 501.590242][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.013421][T12715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.164216][T12715] team0: Port device team_slave_0 added [ 503.211902][T12715] team0: Port device team_slave_1 added [ 503.521472][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 504.859376][T12715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.866379][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.966812][T12715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.060731][T12715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.067745][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.253060][T12715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.332523][T12845] siw: device registration error -23 [ 505.389932][T12847] loop3: detected capacity change from 0 to 512 [ 505.416023][T12715] device hsr_slave_0 entered promiscuous mode [ 505.449597][T12847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 505.464406][T12715] device hsr_slave_1 entered promiscuous mode [ 505.491064][T12847] EXT4-fs (loop3): 1 truncate cleaned up [ 505.496787][T12847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 505.521634][T12715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.541372][T12715] Cannot create hsr debugfs directory [ 505.699324][T12847] [ 505.701713][T12847] ====================================================== [ 505.708754][T12847] WARNING: possible circular locking dependency detected [ 505.715810][T12847] 6.1.137-syzkaller #0 Not tainted [ 505.720936][T12847] ------------------------------------------------------ [ 505.727994][T12847] syz.3.2969/12847 is trying to acquire lock: [ 505.734086][T12847] ffff888073105440 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}, at: ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 505.746000][T12847] [ 505.746000][T12847] but task is already holding lock: [ 505.753390][T12847] ffff8880731034b0 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 505.762761][T12847] [ 505.762761][T12847] which lock already depends on the new lock. [ 505.762761][T12847] [ 505.773196][T12847] [ 505.773196][T12847] the existing dependency chain (in reverse order) is: [ 505.782244][T12847] [ 505.782244][T12847] -> #1 (&ei->i_data_sem/3){++++}-{3:3}: [ 505.790119][T12847] down_write+0x36/0x60 [ 505.794848][T12847] ext4_xattr_inode_lookup_create+0x15c4/0x1d10 [ 505.799414][T12842] rdma_rxe: already configured on team_slave_0 [ 505.801640][T12847] ext4_xattr_ibody_set+0x1fe/0x690 [ 505.813581][T12847] ext4_xattr_set_handle+0xd47/0x12b0 [ 505.819526][T12847] __ext4_set_acl+0x528/0x610 [ 505.824760][T12847] ext4_set_acl+0x35a/0x580 [ 505.829823][T12847] posix_acl_xattr_set+0x387/0x3f0 [ 505.835501][T12847] __vfs_setxattr+0x3e0/0x420 [ 505.840786][T12847] __vfs_setxattr_noperm+0x129/0x5e0 [ 505.846646][T12847] vfs_setxattr+0x168/0x2f0 [ 505.851721][T12847] setxattr+0x2b2/0x2d0 [ 505.856445][T12847] path_setxattr+0x142/0x280 [ 505.861597][T12847] __x64_sys_lsetxattr+0xb4/0xd0 [ 505.867185][T12847] do_syscall_64+0x4c/0xa0 [ 505.872161][T12847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.878645][T12847] [ 505.878645][T12847] -> #0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}: [ 505.887480][T12847] __lock_acquire+0x2cf8/0x7c50 [ 505.892898][T12847] lock_acquire+0x1b4/0x490 [ 505.897971][T12847] down_write+0x36/0x60 [ 505.902680][T12847] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 505.909489][T12847] ext4_xattr_block_set+0x23a/0x32a0 [ 505.915338][T12847] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 505.921794][T12847] __ext4_expand_extra_isize+0x301/0x3e0 [ 505.927985][T12847] __ext4_mark_inode_dirty+0x47f/0x770 [ 505.934002][T12847] ext4_setattr+0x1457/0x19f0 [ 505.939238][T12847] notify_change+0xc74/0xf40 [ 505.944395][T12847] do_truncate+0x197/0x220 [ 505.949375][T12847] vfs_truncate+0x262/0x2f0 [ 505.954439][T12847] do_sys_truncate+0xdc/0x190 [ 505.959682][T12847] do_syscall_64+0x4c/0xa0 [ 505.964725][T12847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.971171][T12847] [ 505.971171][T12847] other info that might help us debug this: [ 505.971171][T12847] [ 505.981411][T12847] Possible unsafe locking scenario: [ 505.981411][T12847] [ 505.988874][T12847] CPU0 CPU1 [ 505.994246][T12847] ---- ---- [ 505.999619][T12847] lock(&ei->i_data_sem/3); [ 506.004228][T12847] lock(&sb->s_type->i_mutex_key#8/1); [ 506.012316][T12847] lock(&ei->i_data_sem/3); [ 506.019445][T12847] lock(&sb->s_type->i_mutex_key#8/1); [ 506.025008][T12847] [ 506.025008][T12847] *** DEADLOCK *** [ 506.025008][T12847] [ 506.033188][T12847] 5 locks held by syz.3.2969/12847: [ 506.038400][T12847] #0: ffff88802404a460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 506.047663][T12847] #1: ffff888073103628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x183/0x220 [ 506.057970][T12847] #2: ffff8880731037c8 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xe6f/0x19f0 [ 506.068174][T12847] #3: ffff8880731034b0 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 506.077971][T12847] #4: ffff8880731032f0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 506.088270][T12847] [ 506.088270][T12847] stack backtrace: [ 506.094179][T12847] CPU: 0 PID: 12847 Comm: syz.3.2969 Not tainted 6.1.137-syzkaller #0 [ 506.102355][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 506.112426][T12847] Call Trace: [ 506.115711][T12847] [ 506.118682][T12847] dump_stack_lvl+0x168/0x22e [ 506.123560][T12847] ? load_image+0x3b0/0x3b0 [ 506.128078][T12847] ? show_regs_print_info+0x12/0x12 [ 506.133294][T12847] ? print_circular_bug+0x12b/0x1a0 [ 506.138515][T12847] check_noncircular+0x274/0x310 [ 506.143475][T12847] ? add_chain_block+0x940/0x940 [ 506.148423][T12847] ? lockdep_lock+0xdc/0x1e0 [ 506.153022][T12847] ? verify_lock_unused+0x140/0x140 [ 506.158231][T12847] ? _find_first_zero_bit+0xcf/0x100 [ 506.163566][T12847] __lock_acquire+0x2cf8/0x7c50 [ 506.168439][T12847] ? __lock_acquire+0x7c50/0x7c50 [ 506.173486][T12847] ? verify_lock_unused+0x140/0x140 [ 506.178699][T12847] ? mark_buffer_dirty+0x2d8/0x7a0 [ 506.183833][T12847] lock_acquire+0x1b4/0x490 [ 506.188343][T12847] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 506.194771][T12847] ? __might_sleep+0xd0/0xd0 [ 506.199377][T12847] ? read_lock_is_recursive+0x10/0x10 [ 506.204759][T12847] ? __ext4_mark_inode_dirty+0x4eb/0x770 [ 506.210399][T12847] down_write+0x36/0x60 [ 506.214561][T12847] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 506.220988][T12847] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 506.227251][T12847] ? ext4_xattr_ibody_set+0x690/0x690 [ 506.232630][T12847] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 506.238620][T12847] ? lock_chain_count+0x20/0x20 [ 506.243484][T12847] ext4_xattr_block_set+0x23a/0x32a0 [ 506.248866][T12847] ? __might_sleep+0xd0/0xd0 [ 506.253485][T12847] ? __getblk_gfp+0x4f/0xb20 [ 506.258091][T12847] ? xattr_find_entry+0x12b/0x2f0 [ 506.263129][T12847] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 506.268603][T12847] ? ext4_xattr_block_find+0x241/0x2b0 [ 506.274077][T12847] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 506.279993][T12847] __ext4_expand_extra_isize+0x301/0x3e0 [ 506.285638][T12847] __ext4_mark_inode_dirty+0x47f/0x770 [ 506.291112][T12847] ext4_setattr+0x1457/0x19f0 [ 506.295797][T12847] ? ext4_write_inode+0x5e0/0x5e0 [ 506.300829][T12847] notify_change+0xc74/0xf40 [ 506.305434][T12847] do_truncate+0x197/0x220 [ 506.309861][T12847] ? put_page_bootmem+0x2c0/0x2c0 [ 506.314901][T12847] ? bpf_lsm_path_truncate+0x5/0x10 [ 506.320114][T12847] vfs_truncate+0x262/0x2f0 [ 506.324628][T12847] do_sys_truncate+0xdc/0x190 [ 506.329315][T12847] ? break_lease+0xd0/0xd0 [ 506.333774][T12847] ? lockdep_hardirqs_on+0x94/0x140 [ 506.339004][T12847] do_syscall_64+0x4c/0xa0 [ 506.343446][T12847] ? clear_bhb_loop+0x45/0xa0 [ 506.348123][T12847] ? clear_bhb_loop+0x45/0xa0 [ 506.352804][T12847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.358732][T12847] RIP: 0033:0x7f92d678e969 [ 506.363164][T12847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.382783][T12847] RSP: 002b:00007f92d76d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 506.391204][T12847] RAX: ffffffffffffffda RBX: 00007f92d69b5fa0 RCX: 00007f92d678e969 [ 506.399177][T12847] RDX: 0000000000000000 RSI: 0000000000008008 RDI: 00002000000000c0 [ 506.407170][T12847] RBP: 00007f92d6810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 506.415143][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.423117][T12847] R13: 0000000000000000 R14: 00007f92d69b5fa0 R15: 00007ffdf651bd38 [ 506.431099][T12847] [ 506.450420][T12857] netlink: 'syz.4.2971': attribute type 1 has an invalid length. [ 506.482220][T12857] netlink: 15366 bytes leftover after parsing attributes in process `syz.4.2971'. [ 506.614902][T12336] EXT4-fs (loop3): unmounting filesystem. [ 506.831744][ T4307] tipc: Left network mode [ 506.948844][T12715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.002044][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 507.011767][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 507.023938][T12715] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.035921][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 507.046731][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 507.056222][ T4987] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.063372][ T4987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.113069][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 507.121834][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 507.132164][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 507.141606][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.148758][ T4987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.157064][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 507.166599][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.175482][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.185292][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.197391][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.207494][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.237945][T12715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.261108][T12715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.296713][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.304992][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.316987][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.326609][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 507.337283][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.379420][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 507.535256][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.546136][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.575380][T12715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.025143][T11112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 508.038812][T11112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 508.064299][ T4307] device hsr_slave_0 left promiscuous mode [ 508.074797][ T4307] device hsr_slave_1 left promiscuous mode [ 508.081599][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.091500][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.103314][ T4307] device bridge_slave_1 left promiscuous mode [ 508.109945][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.118079][ T4307] device bridge_slave_0 left promiscuous mode [ 508.124354][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.850402][ T4307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.207677][ T4307] bond0 (unregistering): Released all slaves [ 509.328046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.342742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.364046][T12715] device veth0_vlan entered promiscuous mode [ 509.375481][T12715] device veth1_vlan entered promiscuous mode [ 509.395231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.403437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.423740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.457458][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.465919][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 509.475062][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.487047][T12715] device veth0_macvtap entered promiscuous mode [ 509.497978][T12715] device veth1_macvtap entered promiscuous mode [ 509.536011][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.547016][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.557129][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.572248][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.582821][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.594089][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.605587][T12715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.614013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 509.625171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 509.634858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 509.647726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 509.660172][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.674572][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.685952][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.700221][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.711413][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.724433][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.749381][T12715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.764432][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 509.776375][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 509.827713][T12715] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 509.872486][ T6208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.873529][T12715] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 509.889897][ T6208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.910239][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 509.950242][ T4987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.958156][ T4987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.968902][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready