last executing test programs: 27.528666082s ago: executing program 2 (id=7184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) 26.355314492s ago: executing program 2 (id=7189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 25.420128541s ago: executing program 2 (id=7192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207bff00000000bfa100000000000007010000f8ffffffb70200000400b2cd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 23.78862346s ago: executing program 2 (id=7197): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6}]) recvmmsg(r4, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) 22.262102039s ago: executing program 2 (id=7209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2b, 0x0, {}, [{0x50, 0x1, [@m_tunnel_key={0x4c, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffe7f, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 21.084493229s ago: executing program 2 (id=7211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, 0x0, 0x0}, 0x20) 10.566302723s ago: executing program 4 (id=7275): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x0, 0x27f}) 9.055209481s ago: executing program 0 (id=7276): r0 = socket(0x2b, 0x80801, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) 9.054721331s ago: executing program 1 (id=7277): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) 9.054354161s ago: executing program 3 (id=7278): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x22ac81) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) fstat(0xffffffffffffffff, 0x0) 9.054121551s ago: executing program 4 (id=7279): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x46, &(0x7f0000000280)={@random="e33110495bfd", @random="6462a860a14d", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "024b3a", 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x2, 0x0, 0x5}}}}}}, 0x0) 7.449230327s ago: executing program 0 (id=7280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000001040104000000ffffffffffffffee000500010004"], 0x1c}}, 0x0) 7.448717008s ago: executing program 1 (id=7281): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioperm(0x2, 0x7ff, 0x8) readv(r0, 0x0, 0x0) 7.448096408s ago: executing program 3 (id=7282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 7.447572168s ago: executing program 4 (id=7283): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_NAME(0xf, 0x0) r3 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x12, 0x3, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) 5.734449313s ago: executing program 0 (id=7284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[], 0x401}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)) 5.734061823s ago: executing program 1 (id=7285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.733133413s ago: executing program 4 (id=7286): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40030}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r1, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c4609b1680f01000080000000000300060016000000010100000000000040000000000000009e03000000000000ffffffff040038000100050000008f0304000000b70000000100000000000000380400000000000005000000000000000000000000000000090000000000000040000000000000001ed049d5be8ee5fc2e890ecd24bfda9fe2e257d337b16385e5fae316ee7d9e5dccc15eea985051681ed73f62d78a59cd2700"/1188], 0x4ae) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 5.732802833s ago: executing program 3 (id=7287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0) 3.921451037s ago: executing program 0 (id=7288): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1, 0x62, 0x0) 3.920998407s ago: executing program 1 (id=7289): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1a, 0x4, 0xa, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.920498178s ago: executing program 3 (id=7290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a80)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/13}, {&(0x7f0000000fc0)=""/221}, {&(0x7f00000010c0)=""/70}, {&(0x7f0000001140)=""/213}, {&(0x7f0000001240)=""/32}, {&(0x7f0000001280)=""/229}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/64}, {&(0x7f0000001440)=""/162}], 0x0, &(0x7f00000015c0)=""/177}}, {{&(0x7f0000001680)=@qipcrtr, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/240}, {&(0x7f0000001800)=""/162}, {&(0x7f00000018c0)=""/85}, {&(0x7f0000001940)=""/92}], 0x0, &(0x7f0000001a00)=""/88}}], 0x4000059, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000e10000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.919245797s ago: executing program 4 (id=7291): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) poll(&(0x7f0000000240)=[{r5}], 0x1, 0x10000) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)={0x90000004}) 2.00862224s ago: executing program 0 (id=7292): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) accept(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000200)={0x0, 0x0, 0x9}) 2.00786388s ago: executing program 1 (id=7293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c", 0x92, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5}, 0x40000110) 2.00727078s ago: executing program 3 (id=7294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e00000000000000000000000006004482ba31675ce48200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010000000c0000000c00000002000000000000000000000400"/38], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r2, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket(0x10, 0x1, 0xfffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) 2.65584ms ago: executing program 0 (id=7295): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/fscaps', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x8940, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000640), 0x203, 0x0) socket$inet6(0xa, 0x3, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000180)={"bc0a8a66520fb634399ae1b03e0e8961", 0x0, 0x0, {0x2, 0x401}, {0x9, 0xfffffff8}, 0xd, [0x6, 0x0, 0x7, 0x9, 0x80000001, 0x9, 0x8, 0xffffffff80000001, 0x6, 0xffffffffffffffff, 0xfff, 0x7, 0x8, 0xffffffffffffffff, 0x2, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r4, 0x0, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x3f}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 1.73536ms ago: executing program 1 (id=7296): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) socket(0x840000000002, 0x3, 0xff) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x83a2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = dup3(r2, r1, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', r10, 0x40, 0x7, 0x14, 0x0, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0x6, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="060005004e21000008000700", @ANYRES32=r12, @ANYBLOB="080003007f00000114000400fe8000000000000000000000000000bb280006801400040020010000000000000000000000000002060001000a00000008000300ac14143d080002000300000008000300080000004000068005000200040000001400040000000000000000000000000000000001080006001000000008000300ac1e000108000300e00000020600010002000000200006801400040000000000000000000000ffffe0000001080006001000000008000400010400000800040000000100"], 0x130}, 0x1, 0x0, 0x0, 0x8010}, 0x4050) 750.011µs ago: executing program 3 (id=7297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x4e20, @private}, 'syz_tun\x00'}) recvfrom$inet(r0, 0x0, 0x0, 0x60002141, 0x0, 0x0) 0s ago: executing program 4 (id=7298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x11a, &(0x7f00000005c0)={@random="e90c630faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x10c, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0xf8, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x100, @void}, "a36ce97bccaa63cef0daf310ba066e144623cb3b0ecfc959dccf540c4f8bd8cd7483e6a1409b05d3b4ae7673c6b44a93e18c0004ff26bb7894f27e091646df4862b09559e6b10acf121eb7ad6ae9a7b27357a004b3bc7fe14e86b426a0e787631a197747ca618416a1e1c59831d311313cea4f3583f72c680d63f6d4c0a91d829689d9cf8827b9d5a30713a7454854d5a761dd3638c06a47f8f545c5d11e12d45e0b4ddcfa1bdfde0f61b0592e91a6862ed6ef48bbef5dbe6eab54bee067772cb4ffb46148b0f1cd7cec941af002f1bd9f135723c05106f071487efe78aeb337b1c35a63f1f255b505c4ad0c"}}}}}}, 0x0) socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): NETDEV_CHANGE): veth0: link becomes ready [ 2517.205112][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2517.213516][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2517.222345][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 2517.229284][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2517.236458][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2517.244483][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2517.253659][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 2517.260528][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2517.276029][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2517.292384][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2517.345679][ T729] EXT4-fs (loop3): unmounting filesystem. [ 2517.351561][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2517.377175][ T1376] device veth0_vlan entered promiscuous mode [ 2517.413544][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2517.422077][ T1408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6891'. [ 2517.430929][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2517.439532][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2517.446870][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2517.521862][ T1412] overlayfs: failed to resolve './file0': -2 [ 2517.745762][ T1376] device veth1_macvtap entered promiscuous mode [ 2517.764682][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2517.782013][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2517.794128][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2517.822158][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2517.837735][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2517.863236][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2517.884664][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2517.927215][ T1419] loop2: detected capacity change from 0 to 256 [ 2517.952052][ T1419] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2518.113276][ T1423] tmpfs: Unknown parameter 'huce' [ 2518.588645][ T1423] loop3: detected capacity change from 0 to 512 [ 2518.598678][ T1423] EXT4-fs: Ignoring removed nobh option [ 2518.604134][ T1423] journal_path: Lookup failure for './bus' [ 2518.609762][ T1423] EXT4-fs: error: could not find journal device path [ 2518.775530][ T819] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2519.011413][ T1438] loop2: detected capacity change from 0 to 512 [ 2519.030083][ T1438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2519.048874][ T1438] EXT4-fs: Ignoring removed nobh option [ 2519.109609][ T1443] loop3: detected capacity change from 0 to 128 [ 2519.166820][ T1447] overlayfs: failed to resolve './file1': -2 [ 2519.247132][ T1443] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2519.327894][ T1438] EXT4-fs (loop2): 1 orphan inode deleted [ 2519.333940][ T1443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2519.345291][ T1438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2519.355009][ T1443] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038 (0x7fffffff) [ 2519.364579][ T1438] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 2519.393136][ T1438] EXT4-fs (loop2): resizing filesystem from 64 to 1 blocks [ 2519.415678][ T1438] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 2519.475327][ T312] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 2520.668522][ T1461] loop4: detected capacity change from 0 to 128 [ 2520.676799][ T729] EXT4-fs (loop3): unmounting filesystem. [ 2520.686090][ T1461] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2520.728241][ T1461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2520.737050][ T1461] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 2520.876947][ T1467] loop3: detected capacity change from 0 to 128 [ 2520.918171][ T1467] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2521.079786][ T1467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2521.115547][ T1467] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038 (0x7fffffff) [ 2521.177465][ T1376] EXT4-fs (loop2): unmounting filesystem. [ 2521.215486][ T312] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2521.225325][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2521.255094][ T1475] loop1: detected capacity change from 0 to 1024 [ 2521.264212][ T1475] EXT4-fs: Ignoring removed oldalloc option [ 2521.272401][ T1478] loop2: detected capacity change from 0 to 256 [ 2521.281145][ T1475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2521.415307][ T312] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2521.430351][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.453253][ T312] usb 1-1: Product: syz [ 2521.465243][ T312] usb 1-1: Manufacturer: syz [ 2521.477222][ T312] usb 1-1: SerialNumber: syz [ 2521.530796][ T1272] EXT4-fs (loop4): unmounting filesystem. [ 2521.549420][ T312] usb 1-1: config 0 descriptor?? [ 2521.586397][ T312] usb 1-1: selecting invalid altsetting 0 [ 2521.626248][ T1487] loop4: detected capacity change from 0 to 128 [ 2521.652346][ T8635] usb 1-1: USB disconnect, device number 38 [ 2521.698147][ T1487] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2521.754237][ T1487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2521.765458][ T1487] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 2522.748994][ T667] EXT4-fs (loop1): unmounting filesystem. [ 2522.905666][ T1272] EXT4-fs (loop4): unmounting filesystem. [ 2523.182544][ T1500] loop1: detected capacity change from 0 to 512 [ 2523.183306][ T1503] loop4: detected capacity change from 0 to 128 [ 2523.206792][ T1503] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2523.217817][ T729] EXT4-fs (loop3): unmounting filesystem. [ 2523.225433][ T1503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2523.240038][ T1503] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038 (0x7fffffff) [ 2523.247392][ T1500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2523.263812][ T1508] loop3: detected capacity change from 0 to 128 [ 2523.275322][ T1500] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff) [ 2523.286230][ T1508] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2523.321389][ T1508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2523.324466][ T1511] loop2: detected capacity change from 0 to 128 [ 2523.333526][ T1508] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038 (0x7fffffff) [ 2523.351506][ T1511] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2523.369856][ T1511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2523.378575][ T1511] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff) [ 2524.064267][ T1272] EXT4-fs (loop4): unmounting filesystem. [ 2524.107921][ T729] EXT4-fs (loop3): unmounting filesystem. [ 2524.115801][ T1522] overlayfs: failed to resolve './file0': -2 [ 2524.303395][ T1530] tmpfs: Unknown parameter 'huce' [ 2524.355532][ T1530] loop3: detected capacity change from 0 to 512 [ 2524.363094][ T1530] EXT4-fs: Ignoring removed nobh option [ 2524.368611][ T1530] journal_path: Lookup failure for './bus' [ 2524.374307][ T1530] EXT4-fs: error: could not find journal device path [ 2524.460640][ T1531] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 3: comm syz.1.6911: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2524.626155][ T1534] loop4: detected capacity change from 0 to 512 [ 2524.664317][ T1534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2524.675045][ T1534] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 2524.675579][ T667] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2524.761533][ T667] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2524.792928][ T667] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2524.928518][ T1539] EXT4-fs error (device loop4): ext4_search_dir:1548: inode #2: block 3: comm syz.4.6919: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2525.075708][ T667] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2525.091788][ T1542] loop3: detected capacity change from 0 to 128 [ 2525.101357][ T667] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2525.122780][ T1542] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2525.129968][ T667] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2525.135986][ T1542] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2525.152202][ T667] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2525.159905][ T1542] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038 (0x7fffffff) [ 2525.179909][ T667] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2525.203883][ T1376] EXT4-fs (loop2): unmounting filesystem. [ 2525.268594][ T667] EXT4-fs (loop1): unmounting filesystem. [ 2525.910282][ T1272] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2525.932826][ T1272] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2525.973203][ T1272] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2525.996877][ T729] EXT4-fs (loop3): unmounting filesystem. [ 2525.998709][ T1272] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2526.029461][ T1272] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2526.055774][ T1272] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2526.077022][ T1272] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2526.102139][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 2526.109102][ T1554] bridge0: port 1(bridge_slave_0) entered disabled state [ 2526.116527][ T1554] device bridge_slave_0 entered promiscuous mode [ 2526.123326][ T1554] bridge0: port 2(bridge_slave_1) entered blocking state [ 2526.130638][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 2526.138284][ T1554] device bridge_slave_1 entered promiscuous mode [ 2526.173876][ T1272] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2526.217457][ T1554] bridge0: port 2(bridge_slave_1) entered blocking state [ 2526.224303][ T1554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2526.231414][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 2526.238198][ T1554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2526.330488][ T1272] EXT4-fs (loop4): unmounting filesystem. [ 2526.579477][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2526.594656][T25220] bridge0: port 1(bridge_slave_0) entered disabled state [ 2526.624183][T25220] bridge0: port 2(bridge_slave_1) entered disabled state [ 2526.686843][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2526.702435][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2526.736300][T15135] bridge0: port 1(bridge_slave_0) entered blocking state [ 2526.743256][T15135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2526.793478][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2526.826963][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2526.858866][T15135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2526.865760][T15135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2526.924836][ T2006] device bridge_slave_1 left promiscuous mode [ 2526.935044][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2526.969032][ T2006] device bridge_slave_0 left promiscuous mode [ 2526.994372][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2527.073030][ T2006] device veth1_macvtap left promiscuous mode [ 2527.115654][ T2006] device veth0_vlan left promiscuous mode [ 2527.186175][ T1569] loop2: detected capacity change from 0 to 512 [ 2527.217538][ T1569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2527.233707][ T1569] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 2527.282385][ T1554] device veth0_vlan entered promiscuous mode [ 2527.294247][ T1554] device veth1_macvtap entered promiscuous mode [ 2527.305866][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2527.313731][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2527.321474][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2527.329506][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2527.337310][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2527.345526][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2527.353611][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2527.361292][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2527.370287][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2527.370312][ T1574] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.6932: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2527.378251][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2527.405642][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2527.415375][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2527.423299][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2527.431621][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2527.438929][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2527.448916][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2527.456896][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2527.509383][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 2527.516308][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 2527.523495][ T1573] device bridge_slave_0 entered promiscuous mode [ 2527.530354][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 2527.537216][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 2527.544507][ T1573] device bridge_slave_1 entered promiscuous mode [ 2527.656886][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2527.664166][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2527.673783][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2527.682003][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2527.689992][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 2527.696853][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2527.704160][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2527.719042][ T1577] kvm [1576]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 2527.725423][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2527.727433][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x1 [ 2527.734976][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2527.744990][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.760362][T15135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2527.763145][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.767243][T15135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2527.780324][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.784015][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2527.797081][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.802045][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2527.814531][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.831748][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.836632][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2527.844718][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.853986][ T1573] device veth0_vlan entered promiscuous mode [ 2527.866424][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2527.868959][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.874262][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2527.886768][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.891216][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2527.911587][ T1577] kvm [1576]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2527.915886][ T1573] device veth1_macvtap entered promiscuous mode [ 2527.928508][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2527.947633][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2527.962010][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2527.970660][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2527.979079][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2528.092627][ T1588] loop4: detected capacity change from 0 to 1024 [ 2528.099236][ T1376] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2528.129472][ T1588] EXT4-fs: Ignoring removed oldalloc option [ 2528.135526][ T1376] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2528.158894][ T1376] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2528.210432][ T1591] tmpfs: Unknown parameter 'huce' [ 2528.252598][ T1591] loop3: detected capacity change from 0 to 512 [ 2528.260013][ T1591] EXT4-fs: Ignoring removed nobh option [ 2528.265504][ T1591] journal_path: Lookup failure for './bus' [ 2528.271167][ T1591] EXT4-fs: error: could not find journal device path [ 2528.331976][ T1376] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2528.352396][ T1376] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2528.373730][ T819] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2528.393039][ T1376] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2528.414140][ T1376] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2528.434991][ T1376] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2528.436132][ T1588] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2529.286020][ T28] audit: type=1400 audit(1728567505.951:10077): avc: denied { setopt } for pid=1594 comm="syz.1.6934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2529.310140][ T1376] EXT4-fs (loop2): unmounting filesystem. [ 2529.324232][ T1573] EXT4-fs (loop4): unmounting filesystem. [ 2529.662124][ T2006] device bridge_slave_1 left promiscuous mode [ 2529.742695][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2529.834030][ T1618] loop1: detected capacity change from 0 to 512 [ 2529.865780][ T2006] device bridge_slave_0 left promiscuous mode [ 2529.922201][ T1618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2529.973704][ T1618] EXT4-fs: Ignoring removed nobh option [ 2529.991486][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2530.057286][ T2006] device veth1_macvtap left promiscuous mode [ 2530.110703][ T2006] device veth0_vlan left promiscuous mode [ 2530.252399][ T1618] EXT4-fs (loop1): 1 orphan inode deleted [ 2530.267491][ T1618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2530.592098][ T1626] overlayfs: failed to resolve './file0': -2 [ 2530.789638][ T1618] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 2530.811150][ T1618] EXT4-fs (loop1): resizing filesystem from 64 to 1 blocks [ 2530.818229][ T1618] EXT4-fs warning (device loop1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 2531.065895][ T1636] overlayfs: failed to resolve './file1': -2 [ 2531.265302][T25220] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 2531.635464][T25220] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2531.683228][ T1554] EXT4-fs (loop1): unmounting filesystem. [ 2531.740062][T25220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2531.807631][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 2531.848516][ T1637] bridge0: port 1(bridge_slave_0) entered disabled state [ 2531.881892][ T1637] device bridge_slave_0 entered promiscuous mode [ 2531.893110][ T1637] bridge0: port 2(bridge_slave_1) entered blocking state [ 2531.910290][ T1637] bridge0: port 2(bridge_slave_1) entered disabled state [ 2531.995483][T25220] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2532.015008][T25220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2532.052986][T25220] usb 5-1: Product: syz [ 2532.073109][T25220] usb 5-1: Manufacturer: syz [ 2532.096936][T25220] usb 5-1: SerialNumber: syz [ 2532.107962][ T1637] device bridge_slave_1 entered promiscuous mode [ 2532.128506][T25220] usb 5-1: config 0 descriptor?? [ 2532.165891][T25220] usb 5-1: selecting invalid altsetting 0 [ 2532.179616][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2532.187087][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2532.199130][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2532.207944][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2532.216126][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2532.222984][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2532.240594][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2532.248595][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2532.257407][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2532.265662][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 2532.272513][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2532.280222][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2532.280957][ T1653] overlayfs: failed to resolve './file0': -2 [ 2532.294648][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2532.314203][ T1637] device veth0_vlan entered promiscuous mode [ 2532.323696][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2532.332177][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2532.340034][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2532.348096][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2532.361757][ T1637] device veth1_macvtap entered promiscuous mode [ 2532.371288][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2532.385298][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2532.393557][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2532.497151][ T1657] loop2: detected capacity change from 0 to 512 [ 2532.518534][ T1657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2532.525121][ T1657] EXT4-fs: Ignoring removed nobh option [ 2532.801610][ T1657] EXT4-fs (loop2): 1 orphan inode deleted [ 2532.807387][ T1657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2532.816547][ T1657] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 2532.872779][ T1657] EXT4-fs (loop2): resizing filesystem from 64 to 1 blocks [ 2532.882290][ T1657] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 2532.889003][ T1667] loop1: detected capacity change from 0 to 128 [ 2532.903440][ T1667] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2532.912667][ T1667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2532.927433][ T2006] device bridge_slave_1 left promiscuous mode [ 2532.928292][ T1667] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff) [ 2532.933437][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2532.956674][ T2006] device bridge_slave_0 left promiscuous mode [ 2532.962894][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2534.022912][ T1308] usb 5-1: USB disconnect, device number 40 [ 2534.057721][ T1554] EXT4-fs (loop1): unmounting filesystem. [ 2534.063510][ T2006] device veth1_macvtap left promiscuous mode [ 2534.074359][ T2006] device veth0_vlan left promiscuous mode [ 2534.089047][ T1637] EXT4-fs (loop2): unmounting filesystem. [ 2534.118221][ T1684] loop2: detected capacity change from 0 to 256 [ 2534.134581][ T1686] loop3: detected capacity change from 0 to 128 [ 2534.812365][ T1686] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2534.822862][ T1680] loop1: detected capacity change from 0 to 512 [ 2534.842279][ T1686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2534.895606][ T1686] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038 (0x7fffffff) [ 2534.911529][ T1680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2534.923866][ T1680] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 2535.689821][ T1705] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2535.698421][ T1705] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2535.709482][ T1707] overlayfs: failed to resolve './file0': -2 [ 2535.804329][ T1704] loop4: detected capacity change from 0 to 512 [ 2536.022498][ T1710] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 3: comm syz.1.6955: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2536.114250][ T729] EXT4-fs (loop3): unmounting filesystem. [ 2536.218238][ T1704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2536.224842][ T1704] EXT4-fs: Ignoring removed nobh option [ 2536.260836][ T1704] EXT4-fs (loop4): 1 orphan inode deleted [ 2536.305219][ T1704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2536.314003][ T1704] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 2536.334341][ T1554] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2536.381439][ T1704] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 2536.395286][ T1704] EXT4-fs warning (device loop4): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 2536.406405][ T1554] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2536.491173][ T1554] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2536.520350][ T1713] kvm [1712]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 2536.528490][ T1554] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2536.563335][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x1 [ 2536.574605][ T1713] vmx_set_msr: 45 callbacks suppressed [ 2536.574620][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2536.585427][ T1554] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2536.594934][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2536.610271][ T1554] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2536.624575][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2536.653334][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2536.666686][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2536.679646][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2536.745243][ T1731] tmpfs: Unknown parameter 'huce' [ 2536.786508][ T1731] loop3: detected capacity change from 0 to 512 [ 2536.793804][ T1731] EXT4-fs: Ignoring removed nobh option [ 2536.799279][ T1731] journal_path: Lookup failure for './bus' [ 2536.804935][ T1731] EXT4-fs: error: could not find journal device path [ 2536.904977][ T1554] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2536.928636][ T1554] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2536.931911][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2536.969957][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2536.980676][ T1573] EXT4-fs (loop4): unmounting filesystem. [ 2537.003600][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2537.018807][ T1713] kvm [1712]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2537.073026][ T1554] EXT4-fs (loop1): unmounting filesystem. [ 2537.178947][ T1737] tmpfs: Unknown parameter 'huce' [ 2537.221590][ T1737] loop4: detected capacity change from 0 to 512 [ 2537.228995][ T1737] EXT4-fs: Ignoring removed nobh option [ 2537.234456][ T1737] journal_path: Lookup failure for './bus' [ 2537.240064][ T1737] EXT4-fs: error: could not find journal device path [ 2537.247506][T25220] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 2537.336199][ T819] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2537.766113][ T1750] overlayfs: failed to resolve './file0': -2 [ 2538.590954][ T1756] loop4: detected capacity change from 0 to 512 [ 2538.644246][ T1756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2538.653657][ T1756] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 2538.670488][T25220] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2538.680985][T25220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2538.697640][ T1757] bridge0: port 1(bridge_slave_0) entered blocking state [ 2538.704476][ T1757] bridge0: port 1(bridge_slave_0) entered disabled state [ 2538.712055][ T1757] device bridge_slave_0 entered promiscuous mode [ 2538.718960][ T1757] bridge0: port 2(bridge_slave_1) entered blocking state [ 2538.726418][ T1757] bridge0: port 2(bridge_slave_1) entered disabled state [ 2538.733646][ T1757] device bridge_slave_1 entered promiscuous mode [ 2538.740570][ T1764] overlayfs: failed to resolve './file0': -2 [ 2539.027337][ T1770] EXT4-fs error (device loop4): ext4_search_dir:1548: inode #2: block 3: comm syz.4.6978: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2539.090714][ T2006] device bridge_slave_1 left promiscuous mode [ 2539.099577][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2539.107103][T25220] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2539.117466][T25220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2539.126622][T25220] usb 3-1: Product: syz [ 2539.132201][T25220] usb 3-1: Manufacturer: syz [ 2539.137956][T25220] usb 3-1: SerialNumber: syz [ 2539.143164][ T2006] device bridge_slave_0 left promiscuous mode [ 2539.156390][T25220] usb 3-1: config 0 descriptor?? [ 2539.186923][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2539.200873][T25220] usb 3-1: selecting invalid altsetting 0 [ 2539.220332][ T2006] device veth1_macvtap left promiscuous mode [ 2539.243484][ T2006] device veth0_vlan left promiscuous mode [ 2539.459874][ T1573] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2539.695160][ T1573] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2539.858916][ T1573] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2540.015456][ T1573] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2540.092724][ T1781] binder: 1780:1781 ioctl 4018620d 0 returned -22 [ 2540.106156][ T1573] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2540.137160][ T1573] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2540.160797][ T1573] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2540.186337][ T1573] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2540.234845][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2540.242459][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2540.262772][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2540.273198][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2540.281389][T25452] bridge0: port 1(bridge_slave_0) entered blocking state [ 2540.281702][ T1573] EXT4-fs (loop4): unmounting filesystem. [ 2540.288250][T25452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2540.288480][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2540.310391][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2540.318496][T25452] bridge0: port 2(bridge_slave_1) entered blocking state [ 2540.325359][T25452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2540.332471][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2540.351913][ T1757] device veth0_vlan entered promiscuous mode [ 2540.359010][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2540.367569][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2540.375491][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2540.382703][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2540.390505][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2540.405588][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2540.420357][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2540.431119][ T1757] device veth1_macvtap entered promiscuous mode [ 2540.441517][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2540.449945][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2540.487585][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2540.501958][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2540.589292][ T1793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6985'. [ 2540.595889][T25220] usb 3-1: USB disconnect, device number 6 [ 2540.689963][ T1798] overlayfs: failed to resolve './file1': -2 [ 2541.020411][ T1796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6987'. [ 2541.170811][ T1787] bridge0: port 1(bridge_slave_0) entered blocking state [ 2541.178198][ T1787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2541.185552][ T1787] device bridge_slave_0 entered promiscuous mode [ 2541.202692][ T1807] loop2: detected capacity change from 0 to 128 [ 2541.203268][ T1787] bridge0: port 2(bridge_slave_1) entered blocking state [ 2541.221277][ T1807] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2541.221854][ T1787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2541.235796][ T1787] device bridge_slave_1 entered promiscuous mode [ 2541.252896][ T1807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2541.261493][ T1807] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff) [ 2541.351893][ T1787] bridge0: port 2(bridge_slave_1) entered blocking state [ 2541.358765][ T1787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2541.365888][ T1787] bridge0: port 1(bridge_slave_0) entered blocking state [ 2541.372633][ T1787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2542.216168][ T1817] loop1: detected capacity change from 0 to 128 [ 2542.226940][T25452] bridge0: port 1(bridge_slave_0) entered disabled state [ 2542.241706][T25452] bridge0: port 2(bridge_slave_1) entered disabled state [ 2542.242520][ T1817] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2542.670909][ T1817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2542.869423][ T1826] overlayfs: failed to resolve './file0': -2 [ 2542.937996][ T1817] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 2543.094668][ T1637] EXT4-fs (loop2): unmounting filesystem. [ 2543.119014][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2543.165604][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2543.185669][ T1832] loop2: detected capacity change from 0 to 128 [ 2543.192603][ T1832] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2543.201305][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2543.217917][ T1832] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2543.221677][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2543.477423][ T1832] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 2543.492304][ T1836] loop3: detected capacity change from 0 to 128 [ 2543.504876][ T2848] bridge0: port 1(bridge_slave_0) entered blocking state [ 2543.511761][ T2848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2543.533651][ T1836] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2543.556593][ T1836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2543.565080][ T1836] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038 (0x7fffffff) [ 2543.611575][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2543.648667][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2543.657506][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2543.695003][ T2848] bridge0: port 2(bridge_slave_1) entered blocking state [ 2543.701884][ T2848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2543.709937][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2544.748565][ T1844] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2544.757365][ T1844] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2544.864901][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2544.882163][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2544.884850][ T1851] loop1: detected capacity change from 0 to 256 [ 2544.890084][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2544.968461][ T1637] EXT4-fs (loop2): unmounting filesystem. [ 2544.974765][ T729] EXT4-fs (loop3): unmounting filesystem. [ 2544.988226][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2544.996762][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2545.006438][ T1787] device veth0_vlan entered promiscuous mode [ 2545.013315][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2545.021060][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2545.034402][ T1787] device veth1_macvtap entered promiscuous mode [ 2545.061213][ T1855] loop3: detected capacity change from 0 to 128 [ 2545.073256][ T1857] loop2: detected capacity change from 0 to 512 [ 2545.080613][ T2006] device bridge_slave_1 left promiscuous mode [ 2545.086066][ T1855] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2545.100298][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2545.113702][ T1855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2545.122760][ T2006] device bridge_slave_0 left promiscuous mode [ 2545.132122][ T1857] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2545.132157][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2545.155319][ T1857] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 2545.165032][ T1855] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038 (0x7fffffff) [ 2545.188726][ T2006] device veth1_macvtap left promiscuous mode [ 2545.194697][ T2006] device veth0_vlan left promiscuous mode [ 2545.255278][ T1308] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 2545.605540][ T1866] overlayfs: missing 'lowerdir' [ 2546.010930][ T1869] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.7000: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2546.123321][ T729] EXT4-fs (loop3): unmounting filesystem. [ 2546.177771][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2546.187195][ T1872] loop3: detected capacity change from 0 to 512 [ 2546.195704][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2546.211172][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2546.276708][ T1637] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2546.297389][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2546.297888][ T1872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2546.305622][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2546.321327][ T1637] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2546.331312][ T1872] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038 (0x7fffffff) [ 2546.342155][ T1637] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2546.373375][ T1637] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2546.397536][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2546.405964][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2546.414091][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2546.422767][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2546.430915][ T1308] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2546.441182][ T1308] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2546.442469][ T1637] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2546.470625][ T1637] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2546.492749][ T1637] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2546.513421][ T1637] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2546.603155][ T1878] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 3: comm syz.3.7001: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2546.804193][ T1880] loop4: detected capacity change from 0 to 128 [ 2546.811672][ T1880] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2546.820291][ T1882] loop1: detected capacity change from 0 to 128 [ 2546.828636][ T1882] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2546.832257][ T1880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2546.836880][ T1882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2546.844226][ T1637] EXT4-fs (loop2): unmounting filesystem. [ 2546.852143][ T1882] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038 (0x7fffffff) [ 2546.861495][ T1880] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 2546.905318][ T1308] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2546.919669][ T1308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2546.974571][ T1308] usb 1-1: config 0 descriptor?? [ 2546.995283][ T1308] usb 1-1: can't set config #0, error -71 [ 2547.005678][ T1308] usb 1-1: USB disconnect, device number 39 [ 2548.628161][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2548.638745][ T729] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /62/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2548.661364][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2548.667342][ T729] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /62/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2548.700439][ T1896] loop4: detected capacity change from 0 to 128 [ 2548.713769][ T1896] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2548.713760][ T729] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /62/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2548.744930][ T729] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /62/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2548.769144][ T1896] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2548.777107][ T729] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /62/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2548.784994][ T1896] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038 (0x7fffffff) [ 2548.798046][ T729] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /62/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2548.836593][ T729] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /62/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2548.898559][ T1904] overlayfs: failed to resolve './file0': -2 [ 2548.916878][ T729] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2549.010135][ T1902] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.017044][ T1902] bridge0: port 1(bridge_slave_0) entered disabled state [ 2549.024260][ T1902] device bridge_slave_0 entered promiscuous mode [ 2549.032406][ T1902] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.039442][ T1902] bridge0: port 2(bridge_slave_1) entered disabled state [ 2549.046882][ T1902] device bridge_slave_1 entered promiscuous mode [ 2549.061357][ T729] EXT4-fs (loop3): unmounting filesystem. [ 2549.107744][ T1912] overlayfs: missing 'workdir' [ 2550.010094][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2550.125013][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2550.171215][ T1922] loop4: detected capacity change from 0 to 256 [ 2550.181018][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2550.387175][ T2006] device bridge_slave_1 left promiscuous mode [ 2550.406816][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2550.454211][ T2006] device bridge_slave_0 left promiscuous mode [ 2550.482321][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2550.564281][ T2006] device veth1_macvtap left promiscuous mode [ 2550.612025][ T2006] device veth0_vlan left promiscuous mode [ 2550.995210][ C0] sched: RT throttling activated [ 2551.121407][ T1933] loop1: detected capacity change from 0 to 128 [ 2551.140937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2551.153162][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2551.168626][ T1933] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2551.186055][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 2551.192908][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2551.202962][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2551.213169][ T1933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2551.222455][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2551.232277][ T1933] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 2551.243028][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.249880][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.350217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2551.358191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2551.372821][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2551.380247][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2551.387999][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2551.414751][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2551.424627][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2551.681747][ T1902] device veth0_vlan entered promiscuous mode [ 2551.691883][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2551.699962][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2551.708515][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2551.715532][ T1920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2551.721013][T15135] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 2551.730760][ T1920] device bridge_slave_0 entered promiscuous mode [ 2551.738229][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2551.745487][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2551.752918][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.759828][ T1920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2551.767279][ T1920] device bridge_slave_1 entered promiscuous mode [ 2551.799602][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2551.810588][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2551.833941][ T1902] device veth1_macvtap entered promiscuous mode [ 2552.049605][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2552.058131][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2552.064974][ T1920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2552.072110][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2552.078876][ T1920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2552.089750][T25452] bridge0: port 1(bridge_slave_0) entered disabled state [ 2552.097156][T25452] bridge0: port 2(bridge_slave_1) entered disabled state [ 2552.104279][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2552.112402][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2552.120520][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2552.128639][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2552.136637][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2552.167943][ T1950] loop2: detected capacity change from 0 to 512 [ 2552.176781][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2552.184231][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2552.201903][ T1950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2552.210713][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2552.213789][ T1950] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 2552.221074][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2552.236163][T15135] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2552.281590][T15135] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2552.288778][ T2848] bridge0: port 1(bridge_slave_0) entered blocking state [ 2552.294230][ T1954] loop1: detected capacity change from 0 to 512 [ 2552.295636][ T2848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2552.296118][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2552.317079][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2552.324987][ T2848] bridge0: port 2(bridge_slave_1) entered blocking state [ 2552.331741][ T2848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2552.336686][ T1954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2552.348229][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2552.356748][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2552.365151][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2552.373909][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2552.393134][ T1954] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 2552.412407][ T1958] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.7007: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2552.465508][T15135] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2552.534920][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2552.543166][T15135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2552.551711][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2552.553377][ T1960] loop4: detected capacity change from 0 to 128 [ 2552.559851][T15135] usb 1-1: Product: syz [ 2552.576460][ T1920] device veth0_vlan entered promiscuous mode [ 2552.576840][ T1960] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2552.582336][T15135] usb 1-1: Manufacturer: syz [ 2552.590160][ T1960] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2552.599418][ T1920] device veth1_macvtap entered promiscuous mode [ 2552.602327][ T1962] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 3: comm syz.1.7020: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2552.607982][T15135] usb 1-1: SerialNumber: syz [ 2552.631214][ T1962] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2552.638521][ T1960] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 2552.639981][ T1962] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2552.651420][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2552.657597][ T1962] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2552.676763][T15135] usb 1-1: config 0 descriptor?? [ 2552.712439][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2552.720486][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2552.728749][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2552.736717][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2552.744057][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2552.752455][T15135] usb 1-1: selecting invalid altsetting 0 [ 2552.758207][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2552.770035][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2552.778126][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2552.815958][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2552.964100][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2552.992423][ T1966] binder: 1965:1966 ioctl 4018620d 0 returned -22 [ 2553.034295][ T1902] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2553.066831][ T1902] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2553.089138][ T1902] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2553.110801][ T1902] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2553.131275][ T1902] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2553.175347][ T1902] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2553.196699][ T1902] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2553.218106][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2553.224621][ T1902] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2553.241290][ T1971] loop1: detected capacity change from 0 to 1024 [ 2553.257513][ T1971] EXT4-fs: Ignoring removed orlov option [ 2553.263120][ T1971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2553.277941][ T1971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2553.327387][ T1902] EXT4-fs (loop2): unmounting filesystem. [ 2553.450799][ T2006] device bridge_slave_1 left promiscuous mode [ 2553.497101][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.513616][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2553.546369][ T2006] device bridge_slave_0 left promiscuous mode [ 2553.553919][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.561959][ T2006] device veth1_macvtap left promiscuous mode [ 2553.568254][ T2006] device veth0_vlan left promiscuous mode [ 2553.630080][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2554.010503][ T1984] tmpfs: Unknown parameter 'huce' [ 2554.019814][ T1984] loop4: detected capacity change from 0 to 512 [ 2554.026130][ T1984] EXT4-fs: Ignoring removed nobh option [ 2554.031495][ T1984] journal_path: Lookup failure for './bus' [ 2554.037141][ T1984] EXT4-fs: error: could not find journal device path [ 2554.044480][ T1990] tmpfs: Unknown parameter 'huce' [ 2554.053912][ T1990] loop1: detected capacity change from 0 to 512 [ 2554.060202][ T1990] EXT4-fs: Ignoring removed nobh option [ 2554.065588][ T1990] journal_path: Lookup failure for './bus' [ 2554.071218][ T1990] EXT4-fs: error: could not find journal device path [ 2554.359043][ T1308] usb 1-1: USB disconnect, device number 40 [ 2554.512322][ T1997] loop4: detected capacity change from 0 to 256 [ 2554.530777][ T1999] overlayfs: missing 'lowerdir' [ 2554.631059][ T2002] loop1: detected capacity change from 0 to 128 [ 2554.769557][ T1983] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.837458][ T2002] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2554.868867][ T1983] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.919572][ T2002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2554.942040][ T1983] device bridge_slave_0 entered promiscuous mode [ 2554.985093][ T2002] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038 (0x7fffffff) [ 2555.029834][ T1983] bridge0: port 2(bridge_slave_1) entered blocking state [ 2555.072703][ T1983] bridge0: port 2(bridge_slave_1) entered disabled state [ 2555.182255][ T1983] device bridge_slave_1 entered promiscuous mode [ 2555.735109][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2555.742601][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2555.767649][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2555.786065][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2555.794167][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2555.801025][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2555.808666][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2556.017960][ T2018] tmpfs: Unknown parameter 'huce' [ 2556.066070][ T2018] loop3: detected capacity change from 0 to 512 [ 2556.073487][ T2018] EXT4-fs: Ignoring removed nobh option [ 2556.078978][ T2018] journal_path: Lookup failure for './bus' [ 2556.084633][ T2018] EXT4-fs: error: could not find journal device path [ 2556.259831][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2556.296453][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2556.303306][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2556.320743][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2556.376283][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2556.385025][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2556.399261][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2556.410495][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2556.425640][ T1983] device veth0_vlan entered promiscuous mode [ 2556.431926][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2556.444988][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2556.461507][ T1983] device veth1_macvtap entered promiscuous mode [ 2556.474984][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2556.482782][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2556.490200][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2556.499177][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2556.507271][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2556.526290][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2556.549733][ T2024] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2556.558269][ T2024] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2556.566408][ T2024] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2556.566802][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2556.586613][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2556.594641][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2556.626844][ T2006] device bridge_slave_1 left promiscuous mode [ 2557.415823][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2557.423780][ T2006] device bridge_slave_0 left promiscuous mode [ 2557.456528][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2558.388829][ T2006] device veth1_macvtap left promiscuous mode [ 2558.415550][ T2006] device veth0_vlan left promiscuous mode [ 2558.845821][T25220] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 2559.086421][ T2047] overlayfs: failed to resolve './file0': -2 [ 2559.108192][ T2049] loop2: detected capacity change from 0 to 128 [ 2559.121654][ T2051] loop3: detected capacity change from 0 to 512 [ 2559.147722][ T2049] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2559.165014][ T2051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2559.186839][ T2051] EXT4-fs: Ignoring removed nobh option [ 2559.198744][ T2049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2559.220897][ T2049] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 2559.245364][T25220] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2559.258385][ T2051] EXT4-fs (loop3): 1 orphan inode deleted [ 2559.267564][ T2051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2559.276331][ T2051] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 2559.355171][T25220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2559.363111][ T2051] EXT4-fs (loop3): resizing filesystem from 64 to 1 blocks [ 2559.374069][ T2051] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 2560.051638][ T2063] overlayfs: failed to resolve './file0': -2 [ 2560.944485][ T1983] EXT4-fs (loop2): unmounting filesystem. [ 2560.983842][ T2065] loop1: detected capacity change from 0 to 128 [ 2561.047024][ T2065] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2561.285377][T25220] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2561.294388][T25220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.306586][T25220] usb 5-1: config 0 descriptor?? [ 2561.348304][ T2065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2561.393635][ T2065] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 2561.448777][T25220] usb 5-1: can't set config #0, error -71 [ 2561.457495][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2561.458845][T25220] usb 5-1: USB disconnect, device number 41 [ 2563.058354][ T2087] overlayfs: failed to resolve './file1': -2 [ 2563.203793][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2563.331023][ T2095] loop4: detected capacity change from 0 to 128 [ 2563.346414][ T2095] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2563.357805][ T2095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2563.366778][ T2095] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff) [ 2564.050015][ T2102] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2564.058660][ T2102] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2564.066862][ T2102] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2564.160293][ T2107] loop2: detected capacity change from 0 to 512 [ 2564.186962][ T2107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2564.211395][ T2107] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 2564.666009][ T2112] tmpfs: Unknown parameter 'huce' [ 2564.679990][ T2112] loop1: detected capacity change from 0 to 512 [ 2564.686839][ T2112] EXT4-fs: Ignoring removed nobh option [ 2564.692256][ T2112] journal_path: Lookup failure for './bus' [ 2564.697910][ T2112] EXT4-fs: error: could not find journal device path [ 2565.049416][ T2117] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.7053: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2565.246828][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2565.267465][ T2122] loop1: detected capacity change from 0 to 256 [ 2565.280223][ T1983] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2566.762825][ T1983] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2566.770517][ T2135] loop4: detected capacity change from 0 to 128 [ 2566.827619][ T2135] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2566.835795][ T1983] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2566.861122][ T2135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2566.985469][ T2135] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038 (0x7fffffff) [ 2566.995503][ T1983] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2567.123431][ T1983] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2567.217099][ T1983] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2567.239912][ T1983] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2567.261581][ T1983] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2567.668980][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2567.689141][ T2142] loop4: detected capacity change from 0 to 128 [ 2567.692868][ T2144] loop3: detected capacity change from 0 to 1024 [ 2567.695744][ T2142] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2567.708359][ T2144] EXT4-fs: Ignoring removed orlov option [ 2567.713830][ T2144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2567.714889][ T2142] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2567.728853][ T2142] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff) [ 2567.747892][ T1983] EXT4-fs (loop2): unmounting filesystem. [ 2567.754451][ T2144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2568.236577][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2568.379110][ T2161] bridge0: port 1(bridge_slave_0) entered blocking state [ 2568.386482][ T2161] bridge0: port 1(bridge_slave_0) entered disabled state [ 2568.393811][ T2161] device bridge_slave_0 entered promiscuous mode [ 2568.408617][ T2161] bridge0: port 2(bridge_slave_1) entered blocking state [ 2568.416947][ T2161] bridge0: port 2(bridge_slave_1) entered disabled state [ 2568.439165][ T2161] device bridge_slave_1 entered promiscuous mode [ 2568.913191][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2568.979532][T26728] device bridge_slave_1 left promiscuous mode [ 2568.985706][T26728] bridge0: port 2(bridge_slave_1) entered disabled state [ 2568.994062][T26728] device bridge_slave_0 left promiscuous mode [ 2569.000464][T26728] bridge0: port 1(bridge_slave_0) entered disabled state [ 2569.009996][T26728] device veth1_macvtap left promiscuous mode [ 2569.015922][T26728] device veth0_vlan left promiscuous mode [ 2569.311698][ T2178] loop3: detected capacity change from 0 to 128 [ 2569.365832][ T2178] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2569.439768][ T2178] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2569.448517][ T2178] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038 (0x7fffffff) [ 2569.574549][T23676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2569.582130][T23676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2569.598710][ T2098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2570.692059][ T2197] tmpfs: Unknown parameter 'huce' [ 2570.732095][ T2197] loop4: detected capacity change from 0 to 512 [ 2570.739465][ T2197] EXT4-fs: Ignoring removed nobh option [ 2570.744921][ T2197] journal_path: Lookup failure for './bus' [ 2570.750518][ T2197] EXT4-fs: error: could not find journal device path [ 2570.770275][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2570.868378][ T2098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2570.876441][ T2098] bridge0: port 1(bridge_slave_0) entered blocking state [ 2570.883286][ T2098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2570.890540][ T2098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2570.915065][ T2098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2570.923299][ T2098] bridge0: port 2(bridge_slave_1) entered blocking state [ 2570.930175][ T2098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2570.938141][ T2098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2570.946626][T23676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2570.968736][T23676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2570.980587][ T2201] loop3: detected capacity change from 0 to 1024 [ 2570.980795][T23676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2570.994600][ T2201] EXT4-fs: Ignoring removed oldalloc option [ 2571.001864][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2571.012129][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2571.738745][ T2205] overlayfs: failed to resolve './file0': -2 [ 2571.983565][ T2161] device veth0_vlan entered promiscuous mode [ 2572.006612][ T2161] device veth1_macvtap entered promiscuous mode [ 2572.032530][ T2201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2572.041909][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2572.187211][ T2218] tmpfs: Unknown parameter 'huce' [ 2572.378223][ T2218] loop4: detected capacity change from 0 to 512 [ 2572.389034][ T2218] EXT4-fs: Ignoring removed nobh option [ 2572.394767][ T2218] journal_path: Lookup failure for './bus' [ 2572.400553][ T2218] EXT4-fs: error: could not find journal device path [ 2572.457080][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2572.506018][ T2220] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2572.514656][ T2220] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2572.522772][ T2220] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2572.531725][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2572.540286][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2572.550028][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2572.559845][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2572.572072][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2572.647763][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2572.660901][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2572.669666][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2572.669970][ T819] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2572.677306][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2573.531427][ T2234] loop4: detected capacity change from 0 to 128 [ 2573.582891][ T2234] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2573.609336][ T2239] loop1: detected capacity change from 0 to 128 [ 2573.619514][ T2239] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2573.629719][ T2234] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2573.638345][ T2234] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038 (0x7fffffff) [ 2574.471335][ T2239] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2574.966994][ T2239] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038 (0x7fffffff) [ 2575.051172][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2575.915463][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2575.953795][ T2256] loop1: detected capacity change from 0 to 128 [ 2575.962671][ T2256] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2576.020917][ T2256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2576.041720][ T2259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7086'. [ 2576.055248][ T2259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7086'. [ 2576.190724][ T2256] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038 (0x7fffffff) [ 2577.117517][ T2265] overlayfs: failed to resolve './file0': -2 [ 2578.042885][ T2271] bridge0: port 3(erspan0) entered blocking state [ 2578.049223][ T2271] bridge0: port 3(erspan0) entered disabled state [ 2578.057928][ T2271] device erspan0 entered promiscuous mode [ 2578.063923][ T2271] bridge0: port 3(erspan0) entered blocking state [ 2578.070164][ T2271] bridge0: port 3(erspan0) entered forwarding state [ 2578.128761][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2578.174557][ T2274] loop2: detected capacity change from 0 to 512 [ 2578.239848][ T2274] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2578.252998][ T2274] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 2578.384576][ T2282] tmpfs: Unknown parameter 'huce' [ 2578.510087][ T2282] loop3: detected capacity change from 0 to 512 [ 2578.519134][ T2282] EXT4-fs: Ignoring removed nobh option [ 2578.524786][ T2282] journal_path: Lookup failure for './bus' [ 2578.530797][ T2282] EXT4-fs: error: could not find journal device path [ 2578.680148][ T2284] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.7090: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2579.108854][ T2291] overlayfs: missing 'workdir' [ 2579.127584][ T2161] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2579.285753][ T2294] loop3: detected capacity change from 0 to 256 [ 2579.306627][ T2161] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2579.334274][ T2294] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2579.338015][ T2161] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2579.367661][ T2161] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2579.392762][ T2161] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2579.426790][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2579.432539][ T2161] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2579.473932][ T2161] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2579.498193][ T2161] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2579.522918][ T2300] binder: 2299:2300 ioctl 4018620d 0 returned -22 [ 2579.827985][ T2161] EXT4-fs (loop2): unmounting filesystem. [ 2580.321142][ T2315] loop4: detected capacity change from 0 to 1024 [ 2580.438430][ T2315] EXT4-fs: Ignoring removed orlov option [ 2580.444134][ T2315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2580.481073][ T2317] overlayfs: missing 'workdir' [ 2580.640702][ T2314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2580.659642][ T2314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2580.663962][ T2315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2580.668204][ T2314] device bridge_slave_0 entered promiscuous mode [ 2580.716183][ T2314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2580.794414][ T2314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2580.911674][ T2314] device bridge_slave_1 entered promiscuous mode [ 2581.020108][T10231] device bridge_slave_1 left promiscuous mode [ 2581.028204][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 2581.388320][T10231] device bridge_slave_0 left promiscuous mode [ 2581.429554][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2581.459230][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2581.478762][T10231] device veth1_macvtap left promiscuous mode [ 2581.504434][T10231] device veth0_vlan left promiscuous mode [ 2581.762247][ T2333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7104'. [ 2581.773127][ T2333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7104'. [ 2581.948663][ T2336] loop1: detected capacity change from 0 to 512 [ 2582.872664][ T2336] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2582.890520][ T2347] loop3: detected capacity change from 0 to 128 [ 2582.937229][ T2336] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 2583.011075][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2583.018656][ T2347] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2583.027193][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2583.044363][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2583.052921][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2583.061463][T25221] bridge0: port 1(bridge_slave_0) entered blocking state [ 2583.068328][T25221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2583.075770][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2583.083985][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2583.084354][ T2347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2583.092456][T25221] bridge0: port 2(bridge_slave_1) entered blocking state [ 2583.100539][ T2347] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 2583.106884][T25221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2583.107079][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2583.131390][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2583.200911][ T2352] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 3: comm syz.1.7105: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2583.382675][ T1757] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2583.396066][ T2314] device veth0_vlan entered promiscuous mode [ 2583.924359][ T2314] device veth1_macvtap entered promiscuous mode [ 2583.946551][ T1757] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2584.035174][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2584.042775][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2584.050773][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2584.060187][ T1757] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2584.060578][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2584.089378][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2584.097915][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2584.105438][ T1757] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2584.125906][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2584.126699][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2584.133756][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2584.139730][ T1757] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2584.146957][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2584.188305][ T1757] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2584.209974][T23676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2584.217366][T23676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2584.227565][ T1757] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2584.248336][ T1757] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2584.318033][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2584.324264][ T2367] loop2: detected capacity change from 0 to 512 [ 2584.326414][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2584.341198][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2584.349768][ T2367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2584.349895][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2584.421562][ T2368] overlayfs: failed to resolve './file1': -2 [ 2584.528954][ T1757] EXT4-fs (loop1): unmounting filesystem. [ 2584.555426][ T2367] EXT4-fs: Ignoring removed nobh option [ 2584.678058][ T2367] EXT4-fs (loop2): 1 orphan inode deleted [ 2584.683654][ T2367] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2584.692814][ T2367] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 2584.719642][ T2367] EXT4-fs (loop2): resizing filesystem from 64 to 1 blocks [ 2584.726765][ T2367] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 2585.001193][ T2380] bridge0: port 1(bridge_slave_0) entered blocking state [ 2585.013774][ T2314] EXT4-fs (loop2): unmounting filesystem. [ 2585.019424][ T2380] bridge0: port 1(bridge_slave_0) entered disabled state [ 2585.026918][ T2380] device bridge_slave_0 entered promiscuous mode [ 2585.033938][ T2380] bridge0: port 2(bridge_slave_1) entered blocking state [ 2585.040864][ T2380] bridge0: port 2(bridge_slave_1) entered disabled state [ 2585.048492][ T2380] device bridge_slave_1 entered promiscuous mode [ 2585.466792][ T2388] loop2: detected capacity change from 0 to 128 [ 2585.579255][ T2388] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2585.590170][ T2388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2585.599799][ T2388] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 2585.625963][ T2399] loop3: detected capacity change from 0 to 1024 [ 2585.632441][ T2399] EXT4-fs: Ignoring removed oldalloc option [ 2585.647627][ T2399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2586.105834][ T2406] overlayfs: missing 'workdir' [ 2586.151425][ T2314] EXT4-fs (loop2): unmounting filesystem. [ 2586.196956][T26728] device bridge_slave_1 left promiscuous mode [ 2586.226319][T26728] bridge0: port 2(bridge_slave_1) entered disabled state [ 2586.238859][ T2408] loop4: detected capacity change from 0 to 128 [ 2586.300052][T26728] device bridge_slave_0 left promiscuous mode [ 2586.308306][ T2408] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2586.336548][T26728] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.377276][T26728] device veth1_macvtap left promiscuous mode [ 2586.389197][ T2408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2586.439762][ T2408] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038 (0x7fffffff) [ 2586.463394][T26728] device veth0_vlan left promiscuous mode [ 2586.897597][ T2412] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2586.906220][ T2412] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2587.237211][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2587.257378][ T2415] loop2: detected capacity change from 0 to 128 [ 2587.275763][ T2415] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2587.606984][ T2420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7124'. [ 2587.615907][ T2423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7124'. [ 2587.618593][ T2415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2587.637892][ T2415] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038 (0x7fffffff) [ 2588.238608][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2588.248433][T25221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2588.257859][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2588.266210][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2588.274175][T15135] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.281041][T15135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2588.288315][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2588.403115][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2588.655187][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2588.682250][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2588.683461][ T2314] EXT4-fs (loop2): unmounting filesystem. [ 2588.690549][ T2848] bridge0: port 2(bridge_slave_1) entered blocking state [ 2588.702459][ T2848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2588.725736][ T2434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7126'. [ 2588.734560][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2588.743251][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2588.759289][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2588.772437][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2588.793415][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2588.804673][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2588.825420][ T2380] device veth0_vlan entered promiscuous mode [ 2588.836580][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2588.845924][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2588.867167][ T2380] device veth1_macvtap entered promiscuous mode [ 2588.880318][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2588.889633][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2588.903128][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2588.927363][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2588.935413][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2588.950456][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2588.958554][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2588.966685][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2588.974632][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2588.993372][ T2438] kvm [2437]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 2589.001359][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x1 [ 2589.011777][ T2438] vmx_set_msr: 8 callbacks suppressed [ 2589.011792][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.030236][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.044282][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.057546][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.070654][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.083964][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.099336][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.113966][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.128547][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.141734][ T2438] kvm [2437]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2589.792078][ T2451] overlayfs: failed to resolve './file1': -2 [ 2590.029776][ T2455] loop3: detected capacity change from 0 to 128 [ 2590.029776][ T2453] loop1: detected capacity change from 0 to 128 [ 2590.032810][ T2453] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2590.046454][ T2455] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2590.051065][ T2453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2590.056475][ T2455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2590.063704][ T2453] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 2590.072396][ T2455] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038 (0x7fffffff) [ 2590.554834][ T2469] loop2: detected capacity change from 0 to 128 [ 2590.587587][ T2469] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2590.614810][ T2469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2590.654811][ T2469] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 2590.966556][ T2473] overlayfs: failed to resolve './file0': -2 [ 2590.986707][ T2380] EXT4-fs (loop1): unmounting filesystem. [ 2591.427903][ T2314] EXT4-fs (loop2): unmounting filesystem. [ 2591.550156][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2591.939889][ T2493] tmpfs: Unknown parameter 'huce' [ 2591.949733][ T2493] loop2: detected capacity change from 0 to 512 [ 2591.956152][ T2493] EXT4-fs: Ignoring removed nobh option [ 2591.961586][ T2493] journal_path: Lookup failure for './bus' [ 2591.967606][ T2493] EXT4-fs: error: could not find journal device path [ 2592.029621][ T819] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2592.231633][ T2497] loop4: detected capacity change from 0 to 128 [ 2592.246006][ T2497] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2592.254105][ T2497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2592.262861][ T2497] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038 (0x7fffffff) [ 2592.372976][ T2505] loop3: detected capacity change from 0 to 128 [ 2592.415507][ T2505] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2592.421174][ T2507] loop2: detected capacity change from 0 to 512 [ 2592.428835][ T2507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2592.435297][ T2507] EXT4-fs: Ignoring removed nobh option [ 2592.441895][ T2505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2592.454242][ T2505] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038 (0x7fffffff) [ 2592.476957][ T2507] EXT4-fs (loop2): 1 orphan inode deleted [ 2592.505279][ T2507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2592.514113][ T2507] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 2592.527853][ T2507] EXT4-fs (loop2): resizing filesystem from 64 to 1 blocks [ 2592.534957][ T2507] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 2592.758366][ T2314] EXT4-fs (loop2): unmounting filesystem. [ 2593.063022][ T2528] loop1: detected capacity change from 0 to 1024 [ 2593.085694][ T2528] EXT4-fs: Ignoring removed orlov option [ 2593.092565][ T2528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2593.093339][ T2530] binder: 2529:2530 ioctl 4018620d 0 returned -22 [ 2593.123051][ T2528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2593.253414][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2593.299475][ T2541] binder: 2540:2541 ioctl 4018620d 0 returned -22 [ 2593.328320][ T2380] EXT4-fs (loop1): unmounting filesystem. [ 2593.374856][ T2544] loop1: detected capacity change from 0 to 128 [ 2593.408807][ T2544] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2593.421593][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2593.456391][ T2544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2593.475952][ T312] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 2593.487536][ T2544] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 2593.492588][ T2550] loop2: detected capacity change from 0 to 1024 [ 2593.516766][ T2550] EXT4-fs: Ignoring removed orlov option [ 2593.523155][ T2550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2593.577057][ T2550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2593.698014][ T2554] EXT4-fs (loop2): unmounting filesystem. [ 2593.845266][ T312] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2593.866320][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2594.025315][ T312] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2594.034422][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.059564][ T312] usb 1-1: Product: syz [ 2594.063683][ T312] usb 1-1: Manufacturer: syz [ 2594.075693][ T312] usb 1-1: SerialNumber: syz [ 2594.097110][ T312] usb 1-1: config 0 descriptor?? [ 2594.145977][ T312] usb 1-1: selecting invalid altsetting 0 [ 2594.189375][T26728] device bridge_slave_1 left promiscuous mode [ 2594.196254][T26728] bridge0: port 2(bridge_slave_1) entered disabled state [ 2594.225599][T26728] device bridge_slave_0 left promiscuous mode [ 2594.231529][T26728] bridge0: port 1(bridge_slave_0) entered disabled state [ 2594.264043][T26728] device veth1_macvtap left promiscuous mode [ 2594.277700][T26728] device veth0_vlan left promiscuous mode [ 2594.390877][ T2561] loop4: detected capacity change from 0 to 128 [ 2594.401369][ T2561] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2594.432746][ T2561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2594.447201][ T2561] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038 (0x7fffffff) [ 2594.458093][ T2380] EXT4-fs (loop1): unmounting filesystem. [ 2595.543995][ T2578] loop3: detected capacity change from 0 to 1024 [ 2595.552874][ T2578] EXT4-fs: Ignoring removed oldalloc option [ 2595.564532][ T2580] loop1: detected capacity change from 0 to 128 [ 2595.573464][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2595.578146][ T2580] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2595.584043][ T2578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2595.587019][ T2580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2595.605119][ T2580] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 2595.626960][ T2558] bridge0: port 1(bridge_slave_0) entered blocking state [ 2595.674316][ T2558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2595.687706][ T2558] device bridge_slave_0 entered promiscuous mode [ 2595.694581][ T2558] bridge0: port 2(bridge_slave_1) entered blocking state [ 2595.701681][ T2558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2595.716006][ T2558] device bridge_slave_1 entered promiscuous mode [ 2596.969686][T25374] usb 1-1: USB disconnect, device number 41 [ 2597.008458][ T2380] EXT4-fs (loop1): unmounting filesystem. [ 2597.166994][ T2598] loop4: detected capacity change from 0 to 256 [ 2597.222858][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2597.230399][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2598.671501][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2598.708853][ T2614] loop3: detected capacity change from 0 to 512 [ 2599.144949][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2599.153827][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2599.264357][T25220] bridge0: port 1(bridge_slave_0) entered blocking state [ 2599.271235][T25220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2599.288070][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2599.298477][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2599.312580][ T2614] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2599.322284][T25220] bridge0: port 2(bridge_slave_1) entered blocking state [ 2599.325319][ T2614] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 2599.329138][T25220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2599.347616][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2599.366012][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2599.374113][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2599.389163][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2599.397257][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2599.411642][ T2558] device veth0_vlan entered promiscuous mode [ 2599.427381][T23021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2599.435984][T23021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2599.458435][T23021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2599.466919][T23021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2599.602310][ T2624] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 3: comm syz.3.7169: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2599.725755][ T2629] binder: 2626:2629 ioctl 4018620d 0 returned -22 [ 2599.795993][T23021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2599.803313][T23021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2599.832897][T23021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2599.857201][T23021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2599.894853][ T2558] device veth1_macvtap entered promiscuous mode [ 2599.902323][ T1920] EXT4-fs (loop3): unmounting filesystem. [ 2599.976253][ T2634] overlayfs: failed to resolve './file0': -2 [ 2600.167999][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2600.193970][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2600.217510][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2600.226196][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2600.250610][ T2640] loop4: detected capacity change from 0 to 512 [ 2600.264284][ T2640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2600.277991][ T2640] EXT4-fs: Ignoring removed nobh option [ 2600.290227][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2600.323225][ T2640] EXT4-fs (loop4): 1 orphan inode deleted [ 2600.331358][ T2640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2600.340614][ T2640] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 2600.433391][ T2640] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 2600.448438][ T2640] EXT4-fs warning (device loop4): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 2600.832798][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2601.260191][ T2672] bridge0: port 3(erspan0) entered blocking state [ 2601.266495][ T2672] bridge0: port 3(erspan0) entered disabled state [ 2601.275479][ T2672] device erspan0 entered promiscuous mode [ 2601.281515][ T2672] bridge0: port 3(erspan0) entered blocking state [ 2601.287752][ T2672] bridge0: port 3(erspan0) entered forwarding state [ 2601.716508][ T2681] loop2: detected capacity change from 0 to 128 [ 2601.723374][ T2681] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2601.731262][ T2681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2601.740977][ T2681] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038 (0x7fffffff) [ 2602.053548][ T2688] loop1: detected capacity change from 0 to 128 [ 2602.058919][ T2690] binder: 2689:2690 ioctl 4018620d 0 returned -22 [ 2602.095299][ T2688] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2602.130774][ T2688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2602.151588][ T2688] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038 (0x7fffffff) [ 2602.867926][ T2558] EXT4-fs (loop2): unmounting filesystem. [ 2602.939527][ T2706] binder: 2704:2706 ioctl 4018620d 0 returned -22 [ 2602.952804][ T2705] loop2: detected capacity change from 0 to 128 [ 2602.983903][ T2705] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2602.992193][ T2708] overlayfs: failed to resolve './file0': -2 [ 2603.027473][ T2705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2603.046415][ T2705] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff) [ 2603.816703][ T2558] EXT4-fs (loop2): unmounting filesystem. [ 2603.879247][ T2720] loop2: detected capacity change from 0 to 512 [ 2603.938120][ T2720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2603.968069][ T2720] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 2604.037576][ T2726] loop4: detected capacity change from 0 to 128 [ 2604.085869][ T2726] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2604.101425][ T2380] EXT4-fs (loop1): unmounting filesystem. [ 2604.108177][ T2726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2604.250401][ T2732] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.7192: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 2604.308315][ T2726] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038 (0x7fffffff) [ 2605.274283][ T2558] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 2605.453291][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2605.481960][ T2558] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2605.526528][ T2558] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2605.628797][ T2558] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2605.656492][ T2558] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2605.677159][ T2558] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 2606.550225][ T2558] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2606.827735][ T2558] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 2606.931720][ T2558] EXT4-fs (loop2): unmounting filesystem. [ 2606.936718][ T2767] 9pnet_virtio: no channels available for device syz [ 2607.000444][ T2778] netlink: 'syz.3.7213': attribute type 25 has an invalid length. [ 2607.008509][ T28] audit: type=1400 audit(1728567584.081:10078): avc: denied { create } for pid=2779 comm="syz.4.7214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2607.029022][ T2778] netlink: 'syz.3.7213': attribute type 7 has an invalid length. [ 2607.062201][ T28] audit: type=1400 audit(1728567584.131:10079): avc: denied { set_context_mgr } for pid=2784 comm="syz.0.7215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2607.082702][ T2785] binder: BINDER_SET_CONTEXT_MGR already set [ 2607.090303][ T28] audit: type=1400 audit(1728567584.151:10080): avc: denied { map } for pid=2784 comm="syz.0.7215" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2607.121384][ T2785] binder: 2784:2785 ioctl 4018620d 20000040 returned -16 [ 2607.139786][ T28] audit: type=1326 audit(1728567584.211:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.3.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975c17dff9 code=0x7ffc0000 [ 2607.178282][ T28] audit: type=1326 audit(1728567584.211:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.3.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975c17dff9 code=0x7ffc0000 [ 2607.206946][ T28] audit: type=1326 audit(1728567584.211:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.0.7220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ca9b7dff9 code=0x0 [ 2607.236177][ T28] audit: type=1326 audit(1728567584.231:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.3.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f975c17dff9 code=0x7ffc0000 [ 2607.264488][ T28] audit: type=1326 audit(1728567584.231:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.3.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975c17dff9 code=0x7ffc0000 [ 2607.288190][ T28] audit: type=1326 audit(1728567584.231:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.3.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975c17dff9 code=0x7ffc0000 [ 2607.311671][ T28] audit: type=1326 audit(1728567584.231:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.3.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f975c17dff9 code=0x7ffc0000 [ 2607.347314][ T2797] bridge0: port 1(bridge_slave_0) entered blocking state [ 2607.354158][ T2797] bridge0: port 1(bridge_slave_0) entered disabled state [ 2607.362982][ T2797] device bridge_slave_0 entered promiscuous mode [ 2607.372558][ T2797] bridge0: port 2(bridge_slave_1) entered blocking state [ 2607.379620][ T2797] bridge0: port 2(bridge_slave_1) entered disabled state [ 2607.385231][T23021] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2607.387007][ T2797] device bridge_slave_1 entered promiscuous mode [ 2607.459320][ T2797] bridge0: port 2(bridge_slave_1) entered blocking state [ 2607.466201][ T2797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2607.473273][ T2797] bridge0: port 1(bridge_slave_0) entered blocking state [ 2607.480093][ T2797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2607.514188][T28295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2607.523440][T28295] bridge0: port 1(bridge_slave_0) entered disabled state [ 2607.531042][T28295] bridge0: port 2(bridge_slave_1) entered disabled state [ 2607.549520][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2607.557720][T15135] bridge0: port 1(bridge_slave_0) entered blocking state [ 2607.564587][T15135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2607.573145][T15135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2607.581194][T15135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2607.588069][T15135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2607.615667][T25374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2607.623787][T25374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2607.643459][T25374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2607.660185][ T2797] device veth0_vlan entered promiscuous mode [ 2607.663788][ T2817] kvm [2816]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 2607.676075][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x1 [ 2607.684045][ T2797] device veth1_macvtap entered promiscuous mode [ 2607.692778][ T2817] vmx_set_msr: 103 callbacks suppressed [ 2607.692793][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.709395][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2607.711242][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.717482][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2607.730925][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.733662][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2607.746496][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.750332][T25220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2607.762828][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.777463][T23021] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2607.780248][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.791562][T23021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2607.799295][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.816398][T20908] device bridge_slave_1 left promiscuous mode [ 2607.822551][T20908] bridge0: port 2(bridge_slave_1) entered disabled state [ 2607.829134][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.842382][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.849280][T20908] device bridge_slave_0 left promiscuous mode [ 2607.856651][ T2817] kvm [2816]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 2607.858579][T20908] bridge0: port 1(bridge_slave_0) entered disabled state [ 2607.876825][ T2840] random: crng reseeded on system resumption [ 2607.885299][T23021] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2607.894917][T20908] device veth1_macvtap left promiscuous mode [ 2607.900904][T23021] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2607.905507][T20908] device veth0_vlan left promiscuous mode [ 2607.914856][T23021] usb 5-1: Manufacturer: syz [ 2607.927196][T23021] usb 5-1: config 0 descriptor?? [ 2608.059080][T25374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2608.067492][T25374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2608.179547][T15135] usb 5-1: USB disconnect, device number 42 [ 2609.045804][T20908] device bridge_slave_1 left promiscuous mode [ 2609.051798][T20908] bridge0: port 2(bridge_slave_1) entered disabled state [ 2609.059428][T20908] device bridge_slave_0 left promiscuous mode [ 2609.065632][T20908] bridge0: port 1(bridge_slave_0) entered disabled state [ 2609.073193][T20908] device veth1_macvtap left promiscuous mode [ 2609.079138][T20908] device veth0_vlan left promiscuous mode [ 2609.332240][ T2871] overlayfs: failed to resolve './file0': -2 [ 2612.193735][ T2908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7255'. [ 2612.243461][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 2612.243476][ T28] audit: type=1400 audit(1728567589.311:10095): avc: denied { shutdown } for pid=2905 comm="syz.1.7254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2615.664595][ T2945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7265'. [ 2618.683930][ T2965] usb usb8: usbfs: process 2965 (syz.0.7272) did not claim interface 0 before use [ 2620.190465][ T28] audit: type=1400 audit(1728567597.261:10096): avc: denied { create } for pid=2974 comm="syz.0.7276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2620.211855][ T2979] xt_hashlimit: size too large, truncated to 1048576 [ 2620.215642][ T28] audit: type=1400 audit(1728567597.281:10097): avc: denied { read } for pid=2975 comm="syz.3.7278" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2620.248159][ T28] audit: type=1400 audit(1728567597.281:10098): avc: denied { open } for pid=2975 comm="syz.3.7278" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2620.274012][ T28] audit: type=1400 audit(1728567597.291:10099): avc: denied { ioctl } for pid=2975 comm="syz.3.7278" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2623.519832][ T3005] loop4: detected capacity change from 0 to 1024 [ 2623.526507][ T3005] EXT4-fs: Ignoring removed orlov option [ 2623.532027][ T3005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2623.556999][ T3005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2623.793580][ T1787] EXT4-fs (loop4): unmounting filesystem. [ 2627.235137][ T28] audit: type=1400 audit(1728567604.301:10100): avc: denied { name_bind } for pid=3033 comm="syz.1.7293" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2627.256205][ T28] audit: type=1400 audit(1728567604.301:10101): avc: denied { watch } for pid=3031 comm="syz.0.7292" path="/282/file0" dev="tmpfs" ino=2329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2627.278766][ T28] audit: type=1400 audit(1728567604.301:10102): avc: denied { accept } for pid=3031 comm="syz.0.7292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2628.326221][ T3024] syz.4.7291 (3024) used greatest stack depth: 17928 bytes left SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=2 req=7211 state=1 status=67 (errno 9: Bad file descriptor) [ 2629.307477][ T28] audit: type=1400 audit(1728567606.381:10103): avc: denied { call } for pid=3047 comm="syz.1.7296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2629.755908][T20908] bridge0: port 3(erspan0) entered disabled state [ 2629.762566][T20908] device erspan0 left promiscuous mode [ 2629.767861][T20908] bridge0: port 3(erspan0) entered disabled state [ 2629.956173][T20908] device bridge_slave_1 left promiscuous mode [ 2629.962088][T20908] bridge0: port 2(bridge_slave_1) entered disabled state [ 2629.969350][T20908] device bridge_slave_0 left promiscuous mode [ 2629.975296][T20908] bridge0: port 1(bridge_slave_0) entered disabled state [ 2629.982822][T20908] device veth1_macvtap left promiscuous mode [ 2629.988674][T20908] device veth0_vlan left promiscuous mode [ 2630.767078][T20908] bridge0: port 3(erspan0) entered disabled state [ 2630.774827][T20908] device erspan0 left promiscuous mode [ 2630.780172][T20908] bridge0: port 3(erspan0) entered disabled state [ 2630.945939][T20908] device bridge_slave_1 left promiscuous mode [ 2630.951850][T20908] bridge0: port 2(bridge_slave_1) entered disabled state [ 2630.959226][T20908] device bridge_slave_0 left promiscuous mode [ 2630.965128][T20908] bridge0: port 1(bridge_slave_0) entered disabled state [ 2630.972872][T20908] device bridge_slave_1 left promiscuous mode [ 2630.978841][T20908] bridge0: port 2(bridge_slave_1) entered disabled state [ 2630.986351][T20908] device bridge_slave_0 left promiscuous mode [ 2630.992256][T20908] bridge0: port 1(bridge_slave_0) entered disabled state [ 2630.999809][T20908] device bridge_slave_1 left promiscuous mode [ 2631.005735][T20908] bridge0: port 2(bridge_slave_1) entered disabled state [ 2631.012892][T20908] device bridge_slave_0 left promiscuous mode [ 2631.019018][T20908] bridge0: port 1(bridge_slave_0) entered disabled state [ 2631.027159][T20908] device veth1_macvtap left promiscuous mode [ 2631.032961][T20908] device veth0_vlan left promiscuous mode [ 2631.038789][T20908] device veth1_macvtap left promiscuous mode [ 2631.044585][T20908] device veth0_vlan left promiscuous mode [ 2631.050463][T20908] device veth1_macvtap left promiscuous mode [ 2631.056284][T20908] device veth0_vlan left promiscuous mode