last executing test programs: 2m44.538276574s ago: executing program 0 (id=1698): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0) 2m44.217285773s ago: executing program 0 (id=1703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8235, 0x4, 0x9, 0x20a02, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x8, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x2) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x20008054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x86980, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000007540)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000640)=':', 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r6, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000980)=0x59) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90) 2m43.13865997s ago: executing program 0 (id=1712): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg$inet6(r2, &(0x7f0000001580)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) 2m42.93652131s ago: executing program 0 (id=1714): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000100)=0x6aba4864, 0x4) 2m42.716602369s ago: executing program 0 (id=1718): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x8) 2m42.028308407s ago: executing program 0 (id=1724): ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d2023d6ffff756d7461696c3d302c6e6f6e75617461692c69010068619615f9a9d8fc3435392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466b83d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72706e616d653d6d697865642c726f6469722c7558b161690ebea4d224aa44b2a03f19e29ce5a380829b252cb2ba9d01000080000000002c4fb4e27388a38ca91b346d2e5535414e8214d26a"], 0x1, 0x371, &(0x7f00000020c0)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0xfffff, 0x0, 0x0) open(0x0, 0x44000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 2m26.938182697s ago: executing program 32 (id=1724): ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d2023d6ffff756d7461696c3d302c6e6f6e75617461692c69010068619615f9a9d8fc3435392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466b83d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72706e616d653d6d697865642c726f6469722c7558b161690ebea4d224aa44b2a03f19e29ce5a380829b252cb2ba9d01000080000000002c4fb4e27388a38ca91b346d2e5535414e8214d26a"], 0x1, 0x371, &(0x7f00000020c0)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0xfffff, 0x0, 0x0) open(0x0, 0x44000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 2m21.644917372s ago: executing program 2 (id=1883): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000d40)='./file1\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x1, 0x7b9, &(0x7f0000000d80)="$eJzs3U1sHGf5APBnXDtxXCmq+v+rRFGaTpIiJSK4u+vWxeqhbNdjZ1p71+yuUXJAbdU4VRT3Q60qaA6UXFpAIMSJY+m14sINxAGJA3BCogcuHJAq9YSKBBICISSjmd2NP7K28+WkH7/fKvvOzrzzvs/MTubZWe/MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSWO2UqkmsZA3l8+m22vMtluLO0wftPfrTcUO/UYkxb8YH49DvVGH/n998gPF0/E40nt1JMaLYjwu3/vAfU/83+jIYP4dArpZx66zXhLxnSKoS8+vrq68tgeB3EHf/9UNz/LvteJ5PmvmnVa+WJ/P0rzTSmempyuPnJnrpHP5QtY51+lmi2mjndW7rXZ6snEqrc7MTKXZ5LnWcnN+tr6QDUY+/uVapTKdPj25lNXbnVbzkacnO40z+cJC3pwv69Qq34yizuPFhvhM3k27WX0xTS9cXF2Z2i3UolJ105j9mzacIw/f99EbH/7j4kqxQW7XSNLfMGvVaq1WnX5s5rHHK5XRWqW2eURli7haI0Yiihp7stHyKXL7dt5wi0b6+T8WIo9mLMfZSCONkfJ5/TEW4zEb7WjFYvH6T2Nbpl+T/7/4yN/+sFO/G/P/IMsfWp98OMr8f7T36ug2+b/YKW+NY68e91yNbePY1+PNuByX4vlYjdVYidfuWDw3+Ri5ve3NRxbNyGN/ROSxGPVyTBp5dKIVaczEdExHJZ6NMzEXnUhjLvJYiCw6cS460Y2s3KIa0Y4s6tGNVrQjjZPRiFORRjVmYiamIo0sJuNctGI5mjEfs1EvW7kQF8v1PrUlrge+/dwvX/zjR+8Ww1crVXdYkKT4MFdU+vsOlfrJ/KG4ifw/qCH/f9aMD/YL1+m27bvhVq2V+X/0bocBAAAA7KGk/PY9iYixeLAcmsu/dreDAgAAAG6r8nfNR4pirBh6MJK5fCGrDKn5wR2PDQAAALg9kvIcuyQiJuKh3tDgdKlhXwIAAAAAn0Ll3/+PFsVExFvlCMf/AAAA8Bnz3e2usf/hvv41ejtL+5PBxW+Xzj6cvFQvhuov9cf1i69fbbE7dzg52G+kLKZHL9+bRMRoIzuSDK5++d/9vfLj8vnw+gUIt7vWf9JujyVXtg8gdg6gfBU/iGO9OsfO98rzgym9Xibm8oVsstFaeKKa9L8c6b7x8sVvRRS9f6+5eDCJCxdXVyZfeGX1fBnLlaKVKy/1Lw+f3EAsa/01EA8OX+Kx8kSMfr8TvX4rG5d/pDf7yM59Jhv7fDuO9+ocn+iVE5uXf7zoszr5RDXq9YMj3exs9421DUvfj6J6i0v+dpzo1Tlx8kSvGBJFbVMUL18bRW1jFNe3Lq47inePvXX2n79tJdnUblFM3WIUAHfLhfKqP+tZ6ECZhf6z1lPk/y1598Ag4d7IXu7C+qeMA/3aG3LdaNxQdh8kmyF79JO9Oid7nydGDw/JK5Uhe/RXL776u/4e/dH3f/LTbxz9/c9vPru9H6d6dfpF3P+bbXJsscw/3JJV3yvmeG+bfouXtSTGevdOWJ+88uLKy7Xa1HTl0UrlsVqMlR8V+oXcA8AQu95j5zruwvPo8KPqGGS8+6/+pGAyXohXYjXOx+nybIOIeGh4qxMbfoZwepej1okNd3g5vfOx5aH10xtqW+vuP5HEvftiSLubUuUXflwW/9qztwQA9tzxXfLwDvl/bJD/T+9y3L05l5/q3Th3cHQc2+fyYb6y1ysEAD4HsvbHyUT3naTdzpeerc7MVOvdM1nabjWeSdv57HyW5s1u1m4MvmludVuNwdHwbNZJO8tLS612N51rtdOlVic/W975Pe3f+r2TLdab3bzRWVrI6p0sbbSa3Xqjm87mnUa6tPzUQt45k7XLmTtLWSOfyxv1bt5qpp3WcruRTaZpJ8s2VMxns2Y3n8uLwWa61M4X6+0rEbGwvJils1mn0c6Xuq1eg4O+8uZcq71YNjt57eL/9U6uawD4pHj9zcuXnl9dXXlt88BasnXM8IE/v3n50uBP9NtWjli7y0sJAGy0MUsDAAAAAAAAAAAAAACfTNeerleM3e20v00DY3EDlbcM7N/+rMHP5cCXftZ7W25Hg7fSzoFN7+m+/sayJ4t8T0Ts3Vp97sknL21X56m3Dp35y/7r6X34/5Rhp7q+czBi3y9+1Bvz1Tu12XzQX4cxekOzryU71LlruyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Nb/AgAA///rrkcE") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x64c159d03152c38, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}}, {{&(0x7f0000005840)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4800}}], 0x2, 0x0) 2m20.85945939s ago: executing program 2 (id=1888): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x41, 0x2f9, &(0x7f0000000e40)="$eJzs3M9rE1sUwPGTNK9JU9pk8XjwFOlFN7oZ2rgXgrQgBpTaiD9AmDYTDRmTkAmViNi4cuu/YeiyGylo/QO6cefKjbjpRnBT0BpJZmIn7aRNou205PuBck/n3pPcyZ2EMwMzW3dePc5nLS2rVyQYURIUqcmOSLwZOZYmRCQgAWk1o/bGiN3U5NL4t4/nlIgkU6nZeaXmkguXE0qpyam3T56tnt+ojN9em1wPy2b8wdbXxOfN/zb/3/q58ChnqZylCsWK0tVi8VNFXzQNlclZeU2pm6ahW4bKFSyjbPcXK87bSqlUVXohMxEtlQ3LUnqhqvJGVVWKqlKuKv2hnisoTdPURFSGx/ZUqyn1m5euz8/ryQHfdGnAPPx1Gwf2lsvtL8/7RmdPun50cwIAACdVu/4Pu+v/7c76P+C0QXf976hJrVn/37p773oP9f/6aJf6v7iv/nfOL6SjP2sWqf8HFdm/KV0fGbz+xylRHhOpr8ruN/rF/dXpVkD9DwAAAAAAAAAAAAAAAAAAAADAabDdaMQajUas2QbFjpt/YeeGkfb/fs8TR8O9/vZah5qrzvoPCdeNexER8+Vyejltt3Z/Mis5McWQaYnJj9bx4LDjuWup2YBqics7c8XJX1lOj3Tmz0hM4t75M3a+6sz/R6Lu/ITE5F/v/IRn/qhcvODK1yQmH5akKKZkWsf1bv7zGaWu3kjtyR+TjMcdcwAAAAAAnEaa+s3z/F3TuvXb+b1cH5j2PD8PyZmQv/sOAAAAAMCwsKpP87ppGuVDg9dOxqGDvzgDe37lPwwi/exFr8GbVhDo9sqRvj66Iwjaz2Q+cPCYM6ijy7k8s+Lj5F1BoJ/jcMqXqYaaB71rS7Tr4MkRrw/8oCDsPJW5uWWnsWfMlbWz3/1bnWP7CQIAAABwTHaLfr9nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8DqOx4n5vY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASfErAAD//zVaEmc=") fstatfs(0xffffffffffffffff, 0x0) 2m20.445626719s ago: executing program 2 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) 2m20.119020818s ago: executing program 2 (id=1894): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18086a000000000200000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) clock_gettime(0x2, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r7, r6, 0x0, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40001) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) getpgrp(0xffffffffffffffff) 2m18.056405253s ago: executing program 2 (id=1904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000009c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m17.385643681s ago: executing program 2 (id=1910): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r0, 0x0) 2m16.832895579s ago: executing program 33 (id=1910): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r0, 0x0) 23.933645304s ago: executing program 4 (id=2832): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000280)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) 23.580024003s ago: executing program 4 (id=2837): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23.200819053s ago: executing program 4 (id=2842): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) 22.532376031s ago: executing program 4 (id=2845): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00006dbffc)=0x10000, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 22.35835453s ago: executing program 4 (id=2848): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e80)=@newtfilter={0x44, 0x2c, 0xd27, 0x40000, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x20000000) 22.098121889s ago: executing program 4 (id=2851): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000080, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$char_usb(r0, &(0x7f0000000100)=""/124, 0xfffffd77) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) fallocate(0xffffffffffffffff, 0x10, 0x2, 0x7fff) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a000000000000000000", 0x6e, 0x0, 0x0, 0x0) 2.415420557s ago: executing program 1 (id=2969): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 2.348312716s ago: executing program 5 (id=2970): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2.347855766s ago: executing program 3 (id=2971): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000"], 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.081927025s ago: executing program 3 (id=2973): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000080000000c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.988040865s ago: executing program 1 (id=2974): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.987698695s ago: executing program 5 (id=2975): r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r0) close(r0) 1.793570855s ago: executing program 6 (id=2976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.792601005s ago: executing program 3 (id=2977): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmdt(0x0) 1.636459584s ago: executing program 5 (id=2978): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xbfd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x7c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x48, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x101, 0x3, 0x4}, {0x4, 0x2, 0xf, 0xffffffb5}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x4}, {0x3, 0x1d58dd73, 0x6, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x7c}, 0x1, 0x100000000000000}, 0x20040054) 1.528853054s ago: executing program 1 (id=2979): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000280)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) 1.352602893s ago: executing program 6 (id=2980): r0 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000d40)='./file1\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x2, 0x7ba, &(0x7f0000000300)="$eJzs3U1sHGf5APBnXDt2XCmq+v+rRFGaTpIiJSK4u+vWxeqhbNfjZFp71+yuUXJAbdU4VRT3Q60qaA6UXFpAIMSJY+m14sINxAGJA3BCogcuHJAq9YSKBBICISSjmd2NP7K28+WkH7/fKvvOzrzzvs/MTubZWe/MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSWOuUqkmsZA3l8+m22vMtVuLO0wftPfrTcUO/UYkxb+YmIiDvVEH/3998gPF07E43Ht1OCaKYiIu3/vAfU/83+jIYP4dArpZR6+zXhLxnSKoS8+vrq68tgeB3EHf/9UNz/LvteL5dNbMO618sX46S/NOK52dmak8cma+k87nC1nnXKebLaaNdlbvttrpicbJtDo7O51mU+day0nM1ReywcjHv1yrVGbSp6eWsnq702o+8vRUp3EmX1jIm6fLOrXKN6Oo83ixIT6Td9NuVl9M0wsXV1emdwu1qFTdNGZ804Zz+OH7Pnrjw39cXCk2yO0aSfobZq1ardWqM4/NPvZ4pTJaq9Q2j6hsEVdrxEhEUWNPNlo+RW7fzhtu0Ug//8dC5NGM5TgbaaQxUj6vP8ZiIuaiHa1YLF7/aWzL9Gvy/xcf+dsfdup3Y/4fZPmD65MPRZn/j/ReHdkm/xc75a1x7NXjnquxbRz7erwZl+NSPB+rsRor8dodi+cmHyO3t73TkUUz8hiPiDwWo16OSSOPTrQijdmYiZmoxLNxJuajE2nMRx4LkUUnzkUnupGVW1Qj2pFFPbrRinakcSIacTLSqMZszMZ0pJHFVJyLVixHM07HXNTLVi7ExXK9T2+J64FvP/fLF//40bvF8NVK1R0WJCk+zBWV/r5DpX4yfyhuIv8Pasj/nzUTg/3Cdbpt+264VWtl/h+922EAAAAAeygpv31PImIsHiyH5vOv3e2gAAAAgNuq/F3z4aIYK4YejGQ+X8gqQ2p+cMdjAwAAAG6PpDzHLomIyXioNzQ4XWrYlwAAAADAp1D59/8jRTEZ8VY5wvE/AAAAfMZ8d7tr7H+4r3+N3s7SeDK4+O3S2YeTl+rFUP2l/rh+8fWrLXbnDyUH+o2Uxczo5XuTiBhtZIeTwdUv/zveKz8unw+tX4Bwu2v9J+32WHJl+wBi5wDKV/GDONqrc/R8rzw/mNLrZXI+X8imGq2FJ6pJ/8uR7hsvX/xWRNH795qLB5K4cHF1ZeqFV1bPl7FcKVq58lL/8vDJDcSy1l8D8eDwJR4rT8To9zvZ67eycflHerOP7NxnsrHPt+NYr86xyV45uXn5J4o+q1NPVKNePzDSzc5231jbsPT9KKq3uORvx/FeneMnjveKIVHUNkXx8rVR1DZGcX3r4rqjePfoW2f/+dtWkk3vFsX0LUYBcLdcKK/6s56F9pdZ6D9rPUX+35J39w8S7o3s5S6sf8rY36+9IdeNxg1l90GyGbJHP9Grc6L3eWL00JC8UhmyR3/14qu/6+/RH33/Jz/9xpHf//zms9v7cbJXp1/E/b/ZJscWy/zDLVn1vWKO97bpt3hZS2Ksd++E9ckrL668XKtNz1QerVQeq8VY+VGhV5S9yj0AbLHrPXau4y48jw4/qo5Bxrv/6k8KpuKFeCVW43ycKs82iIiHhrc6ueFnCKd2OWqd3HCHl1M7H1seXD+9oba17vjxJO7dF0Pa3ZQqv/DjsvjXnr0lALDnju2Sh3fI/2OD/H9ql+Puzbn8ZO/GuYOj49g+lw/zlb1eIQDwOZC1P04mu+8k7Xa+9Gx1drZa757J0nar8UzazudOZ2ne7GbtxuCb5la31RgcDc9lnbSzvLTUanfT+VY7XWp18rPlnd/T/q3fO9livdnNG52lhazeydJGq9mtN7rpXN5ppEvLTy3knTNZu5y5s5Q18vm8Ue/mrWbaaS23G9lUmnaybEPFfC5rdvP5vBhspkvtfLHevhIRC8uLWTqXdRrtfKnb6jU46Ctvzrfai2WzU9cu/l/v5LoGgE+K19+8fOn51dWV1zYPrCVbxwwf+PObly8N/kS/beWItbu8lADARhuzNAAAAAAAAAAAAAAA8Ml07el6xdjdTvvbNDAWN1B5y8D49mcNfi4HvvSz3ttyOxq8lXb2b3pP9/U3lj1Z5HsiYu/W6nNPPnlpuzpPvXXwzF/Gr6f34f9Thp3q+s6BiH2/+FFvzFfv1GbzQX8dxugNzb6W7FDnru2SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBb/wsAAP//LNdFkA==") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2, 0x1a8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file1\x00', 0x0, 0x0, r0}, 0x18) 1.212470553s ago: executing program 3 (id=2981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 958.375202ms ago: executing program 6 (id=2982): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000"], 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 945.178722ms ago: executing program 5 (id=2983): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000080, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$char_usb(r0, &(0x7f0000000100)=""/124, 0xfffffd77) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) fallocate(0xffffffffffffffff, 0x10, 0x2, 0x7fff) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a000000000000000000", 0x6e, 0x0, 0x0, 0x0) 744.441572ms ago: executing program 3 (id=2984): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 696.506822ms ago: executing program 6 (id=2985): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 695.938012ms ago: executing program 1 (id=2994): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000000000000000"], 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 605.405032ms ago: executing program 5 (id=2986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtaction={0x48, 0x30, 0xffff, 0x70bd2b, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x24008844) 447.747691ms ago: executing program 1 (id=2987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) 446.757781ms ago: executing program 6 (id=2988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 190.96207ms ago: executing program 6 (id=2989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r3, 0xffffffffffffffff, 0x0) 190.77045ms ago: executing program 1 (id=2990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001000000080003"], 0x28}}, 0x40) 491.33µs ago: executing program 5 (id=2991): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@ipv6_getroute={0x1c, 0x1a, 0x101}, 0x1c}}, 0x0) 0s ago: executing program 3 (id=2992): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xbfd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x7c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x48, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x101, 0x3, 0x4}, {0x4, 0x2, 0xf, 0xffffffb5}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x4}, {0x3, 0x1d58dd73, 0x6, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x7c}, 0x1, 0x100000000000000}, 0x20040054) kernel console output (not intermixed with test programs): v: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.329164][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.395067][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.433985][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.471598][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.505464][T11910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.541983][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 793.576417][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 793.612269][ T4777] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.627372][ T4257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 793.637399][ T4257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 793.654336][ T4257] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 793.676557][T11911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 793.705066][T11911] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 793.714541][T11911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 793.798633][T11910] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.814141][T11910] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.823074][T11910] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.832042][T11910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.935266][T12088] lo speed is unknown, defaulting to 1000 [ 794.236980][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.250383][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.312116][T12099] loop4: detected capacity change from 0 to 764 [ 794.388462][T12101] loop1: detected capacity change from 0 to 1024 [ 794.454841][T12101] EXT4-fs: Ignoring removed orlov option [ 794.460591][T12101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 794.485244][T12101] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 794.555207][T12101] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 794.574622][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 794.796458][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.806171][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.919543][ T26] audit: type=1800 audit(1737246212.789:263): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1923" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 795.122203][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 795.162738][T12101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 795.224751][T12101] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 795.585278][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 795.627634][T12088] chnl_net:caif_netlink_parms(): no params data found [ 795.784212][T11911] Bluetooth: hci4: command 0x0409 tx timeout [ 796.780270][T12141] lo speed is unknown, defaulting to 1000 [ 797.255186][T12163] loop4: detected capacity change from 0 to 512 [ 797.299853][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.316644][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.327519][T12088] device bridge_slave_0 entered promiscuous mode [ 797.371093][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.401039][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.418675][T12163] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 797.440238][T12163] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 797.463542][T12088] device bridge_slave_1 entered promiscuous mode [ 797.464405][T12163] System zones: 0-2, 18-18, 34-35 [ 797.531397][T12163] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 797.693765][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 797.864421][T11911] Bluetooth: hci4: command 0x041b tx timeout [ 797.883783][T12182] usb usb1: usbfs: process 12182 (syz.1.1941) did not claim interface 0 before use [ 797.908474][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.982290][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.266004][T12192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1943'. [ 798.419973][T12192] loop1: detected capacity change from 0 to 2048 [ 798.501004][ T4777] device hsr_slave_0 left promiscuous mode [ 798.540925][ T4777] device hsr_slave_1 left promiscuous mode [ 798.676736][ T26] audit: type=1326 audit(1737246216.549:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 798.687453][T12192] loop1: detected capacity change from 0 to 512 [ 798.720217][T12204] loop5: detected capacity change from 0 to 512 [ 798.774391][ T26] audit: type=1326 audit(1737246216.579:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 798.819631][T12205] loop4: detected capacity change from 0 to 1764 [ 798.832380][T12192] EXT4-fs (loop1): can't mount with commit=4, fs mounted w/o journal [ 798.854783][ T4777] device veth1_macvtap left promiscuous mode [ 798.873580][ T4777] device veth0_macvtap left promiscuous mode [ 798.887983][T12205] ISOFS: unable to read i-node block [ 798.893380][T12205] isofs_fill_super: get root inode failed [ 798.914007][ T26] audit: type=1326 audit(1737246216.579:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 798.942744][T12204] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 798.951979][T12204] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 798.964287][ T4777] device veth1_vlan left promiscuous mode [ 798.970425][ T4777] device veth0_vlan left promiscuous mode [ 799.029180][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 799.040053][T10698] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 799.066018][ T26] audit: type=1326 audit(1737246216.579:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe773b85d63 code=0x7ffc0000 [ 799.095149][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 799.140199][T12205] loop4: detected capacity change from 0 to 256 [ 799.160228][ T26] audit: type=1326 audit(1737246216.589:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe773b847df code=0x7ffc0000 [ 799.231359][T11910] EXT4-fs (loop5): unmounting filesystem. [ 799.322897][ T26] audit: type=1326 audit(1737246216.589:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe773b85db7 code=0x7ffc0000 [ 799.474691][ T26] audit: type=1326 audit(1737246216.589:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe773b84690 code=0x7ffc0000 [ 799.494689][T12220] loop5: detected capacity change from 0 to 512 [ 799.576742][T12220] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 799.611058][ T26] audit: type=1326 audit(1737246216.589:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe773b8592b code=0x7ffc0000 [ 799.644095][T12220] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 799.653196][T12220] System zones: 0-2, 18-18, 34-35 [ 799.741677][T12220] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 799.761969][ T26] audit: type=1326 audit(1737246216.719:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe773b8498a code=0x7ffc0000 [ 799.815079][ T26] audit: type=1326 audit(1737246216.719:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe773b8498a code=0x7ffc0000 [ 799.945235][T11911] Bluetooth: hci4: command 0x040f tx timeout [ 800.033830][T11910] EXT4-fs (loop5): unmounting filesystem. [ 800.416391][ T4777] bond3 (unregistering): Released all slaves [ 800.989938][T12255] loop3: detected capacity change from 0 to 512 [ 801.107680][T12255] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 801.117800][ T4777] bond2 (unregistering): Released all slaves [ 801.121574][T12255] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 801.153749][T12255] System zones: 0-2, 18-18, 34-35 [ 801.165391][T12255] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 801.360455][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 801.701819][ T4777] bond1 (unregistering): Released all slaves [ 801.846272][T12276] 9pnet_fd: Insufficient options for proto=fd [ 802.024088][T11911] Bluetooth: hci4: command 0x0419 tx timeout [ 802.892236][T12293] loop3: detected capacity change from 0 to 1764 [ 802.931003][T12293] ISOFS: unable to read i-node block [ 802.964224][T12293] isofs_fill_super: get root inode failed [ 803.062109][T12293] loop3: detected capacity change from 0 to 256 [ 803.426140][T12303] 9pnet_fd: Insufficient options for proto=fd [ 803.610721][T12309] sg_write: data in/out 58720220/8 bytes for SCSI command 0xd0-- guessing data in; [ 803.610721][T12309] program syz.3.1985 not setting count and/or reply_len properly [ 803.796871][ T4777] team0 (unregistering): Port device team_slave_1 removed [ 804.034659][ T4777] team0 (unregistering): Port device team_slave_0 removed [ 804.219465][ T4777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.465525][ T4777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.694873][T12334] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1992'. [ 804.735218][T12337] 9pnet_fd: Insufficient options for proto=fd [ 805.029805][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 805.029824][ T26] audit: type=1326 audit(1737246222.899:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 805.140690][ T26] audit: type=1326 audit(1737246222.899:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 805.200436][ T26] audit: type=1326 audit(1737246222.939:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 805.254492][ T26] audit: type=1326 audit(1737246222.939:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 805.312069][ T26] audit: type=1326 audit(1737246222.939:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 805.359936][ T26] audit: type=1326 audit(1737246222.939:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 805.388817][ T26] audit: type=1326 audit(1737246222.939:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 805.421821][ T26] audit: type=1326 audit(1737246222.939:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 805.454957][ T26] audit: type=1326 audit(1737246223.029:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 805.478389][ T26] audit: type=1326 audit(1737246223.059:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 805.895450][ T4777] bond0 (unregistering): Released all slaves [ 805.949739][T12088] team0: Port device team_slave_0 added [ 805.979338][ T4299] lo speed is unknown, defaulting to 1000 [ 806.010383][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1960'. [ 806.124222][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1998'. [ 806.133317][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1998'. [ 806.174293][T12351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1998'. [ 806.214228][T12088] team0: Port device team_slave_1 added [ 806.417719][T12088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.442641][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.537562][T12088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.573194][T12088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.602269][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.680816][T12365] loop3: detected capacity change from 0 to 512 [ 806.696778][T12365] EXT4-fs: Ignoring removed orlov option [ 806.738336][T12088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.779736][T12371] 9pnet_fd: Insufficient options for proto=fd [ 806.827561][T12365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 806.853723][T12365] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 806.866669][T12373] loop1: detected capacity change from 0 to 764 [ 806.939558][T12088] device hsr_slave_0 entered promiscuous mode [ 806.991528][T12088] device hsr_slave_1 entered promiscuous mode [ 807.029236][T12088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.062454][T12088] Cannot create hsr debugfs directory [ 807.199470][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 807.548395][T12383] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.731845][T12383] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.871368][T12383] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.993855][T12383] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.069763][T12088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 808.226564][T12088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 808.251097][T12088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 808.320423][T12088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 808.417216][T12383] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.496951][T12383] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.575649][T12383] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.586212][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.592540][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.670520][T12383] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.856970][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.910404][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 808.923841][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 808.958347][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.008643][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 809.030891][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 809.180801][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.188077][ T6054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.247824][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 809.264955][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 809.278654][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 809.557422][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.564627][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.027921][T12434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.055048][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 810.132768][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 810.239114][T12434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.284025][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 810.293500][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 810.383939][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 810.453307][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 810.717045][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 811.139388][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 811.172336][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 811.181050][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 811.461899][T12456] loop3: detected capacity change from 0 to 764 [ 811.472037][T12434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.542752][T12088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 811.561690][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 811.753826][T12434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.788416][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2032'. [ 811.870976][T12434] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.888358][T12434] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.904012][T12434] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.919889][T12434] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.212407][T12474] loop4: detected capacity change from 0 to 512 [ 812.290670][T12474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 812.322697][T12474] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.514262][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 812.521796][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 812.551236][T12088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.562138][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 813.019903][T12498] batman_adv: batadv0: Adding interface: dummy0 [ 813.064511][T12498] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.224365][T12498] batman_adv: batadv0: Interface activated: dummy0 [ 813.294913][T12509] loop5: detected capacity change from 0 to 764 [ 813.617169][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 813.648721][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 813.763512][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 813.790701][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 813.822859][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 813.849667][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 813.886220][T12088] device veth0_vlan entered promiscuous mode [ 813.946680][T12088] device veth1_vlan entered promiscuous mode [ 814.014500][T11057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 814.106617][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 814.122052][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 814.131301][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2050'. [ 814.155683][T12088] device veth0_macvtap entered promiscuous mode [ 814.175355][T12088] device veth1_macvtap entered promiscuous mode [ 814.229674][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.259890][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.324206][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.354374][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.367667][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 814.367683][ T26] audit: type=1326 audit(1737246232.239:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 814.404483][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.416630][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.444169][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.450082][ T26] audit: type=1326 audit(1737246232.239:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 814.464050][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.521964][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.533375][ T26] audit: type=1326 audit(1737246232.279:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 814.539584][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.574552][T12088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.588838][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.601898][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.616573][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.637687][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.649396][ T26] audit: type=1326 audit(1737246232.279:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 814.656082][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.724097][ T26] audit: type=1326 audit(1737246232.279:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 814.735742][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.767693][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.779263][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.789947][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.801197][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.801307][ T26] audit: type=1326 audit(1737246232.289:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 814.823692][T12088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.854938][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 814.864580][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 814.872957][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 814.882662][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 814.893089][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 814.902868][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 814.916507][ T26] audit: type=1326 audit(1737246232.289:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 814.946809][T12088] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.963353][ T26] audit: type=1326 audit(1737246232.289:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 815.004171][T12088] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.022047][T12088] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.031083][ T26] audit: type=1326 audit(1737246232.299:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 815.064805][T12088] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.143714][ T26] audit: type=1326 audit(1737246232.299:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 815.183935][T12548] loop3: detected capacity change from 0 to 764 [ 815.338725][ T7068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.354904][ T7068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.417958][T11057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 815.512623][T12553] loop5: detected capacity change from 0 to 512 [ 815.522964][ T7068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.570992][ T7068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.595517][T12553] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 815.611537][T12553] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 815.613546][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 815.622321][T12553] System zones: 0-2, 18-18, 34-35 [ 815.634807][T12553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 815.650513][T12553] EXT4-fs (loop5): shut down requested (0) [ 816.030619][T11910] EXT4-fs (loop5): unmounting filesystem. [ 816.708997][T12594] loop5: detected capacity change from 0 to 2048 [ 816.769895][T12594] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 816.788089][T12594] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.895008][T12594] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2068: bg 0: block 345: padding at end of block bitmap is not set [ 816.975313][T12594] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 817.002963][T12594] EXT4-fs (loop5): This should not happen!! Data will be lost [ 817.002963][T12594] [ 817.183744][T11910] EXT4-fs (loop5): unmounting filesystem. [ 818.487653][T12647] loop3: detected capacity change from 0 to 1024 [ 818.523433][T12647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 818.599288][T12647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 818.779952][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 818.828570][T12656] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 818.901532][T12655] IPv6: NLM_F_CREATE should be specified when creating new route [ 818.966794][T12658] loop3: detected capacity change from 0 to 764 [ 819.536043][T12667] loop3: detected capacity change from 0 to 1764 [ 819.591373][T12667] ISOFS: unable to read i-node block [ 819.624576][T12667] isofs_fill_super: get root inode failed [ 819.778610][T12667] loop3: detected capacity change from 0 to 256 [ 820.374714][T12697] loop6: detected capacity change from 0 to 764 [ 820.867377][T12709] loop6: detected capacity change from 0 to 128 [ 820.900475][T12712] loop4: detected capacity change from 0 to 512 [ 821.031129][T12712] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 821.058862][T12712] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 821.101495][T12712] System zones: 0-2, 18-18, 34-35 [ 821.154867][T12712] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 821.259264][T12712] EXT4-fs (loop4): shut down requested (0) [ 821.330753][ T4777] kworker/u4:15: attempt to access beyond end of device [ 821.330753][ T4777] loop6: rw=1, sector=145, nr_sectors = 176 limit=128 [ 821.543701][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 821.727205][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2111'. [ 821.868232][T12739] loop5: detected capacity change from 0 to 764 [ 822.020939][T12743] loop6: detected capacity change from 0 to 512 [ 822.103466][T12745] loop3: detected capacity change from 0 to 512 [ 822.115310][T12745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 822.145685][T12743] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 822.220976][T12743] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 822.275048][T12743] System zones: 0-2, 18-18, 34-35 [ 822.285028][T12745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 822.339743][T12745] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.358146][T12743] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 822.449843][T12743] EXT4-fs (loop6): shut down requested (0) [ 822.625601][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 822.634287][T12088] EXT4-fs (loop6): unmounting filesystem. [ 822.872251][T12767] loop5: detected capacity change from 0 to 1764 [ 822.916981][T12767] ISOFS: unable to read i-node block [ 822.940027][T12767] isofs_fill_super: get root inode failed [ 823.078227][T12767] loop5: detected capacity change from 0 to 256 [ 823.324658][T12780] loop4: detected capacity change from 0 to 764 [ 823.887551][T12780] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 824.231246][T12784] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.396502][T12784] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.575870][T12784] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.651916][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 824.651933][ T26] audit: type=1326 audit(1737246242.519:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 824.784828][T12784] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.794058][ T26] audit: type=1326 audit(1737246242.519:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 824.881961][T12784] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.894580][ T26] audit: type=1326 audit(1737246242.519:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 824.897221][T12784] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.932529][T12784] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.947978][T12784] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.081584][ T26] audit: type=1326 audit(1737246242.519:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 825.115939][ T26] audit: type=1326 audit(1737246242.519:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 825.216827][ T26] audit: type=1326 audit(1737246242.529:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 825.261245][T12809] loop6: detected capacity change from 0 to 1764 [ 825.308955][T12809] ISOFS: unable to read i-node block [ 825.328134][T12809] isofs_fill_super: get root inode failed [ 825.341251][ T26] audit: type=1326 audit(1737246242.529:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 825.418802][T12813] loop5: detected capacity change from 0 to 764 [ 825.439478][ T26] audit: type=1326 audit(1737246242.529:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 825.506282][T12809] loop6: detected capacity change from 0 to 256 [ 826.010330][T12825] device bond1 entered promiscuous mode [ 826.039261][T12825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.964730][T12825] bond1 (unregistering): Released all slaves [ 827.013786][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2154'. [ 827.029174][T12851] device bridge_slave_1 left promiscuous mode [ 827.036641][T12851] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.070797][T12851] device bridge_slave_0 left promiscuous mode [ 827.095518][T12851] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.654872][T12876] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2162'. [ 827.962635][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'. [ 827.993728][T12885] loop6: detected capacity change from 0 to 1024 [ 828.045984][T12885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 828.151725][T12885] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 828.243516][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2167'. [ 828.288216][T12088] EXT4-fs (loop6): unmounting filesystem. [ 828.569091][T12901] IPv6: NLM_F_CREATE should be specified when creating new route [ 828.646956][T12903] loop6: detected capacity change from 0 to 2048 [ 828.773742][T12903] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 828.976274][T12918] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 829.122395][T12918] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 829.277897][T12918] EXT4-fs (loop6): This should not happen!! Data will be lost [ 829.277897][T12918] [ 829.389145][T12918] EXT4-fs (loop6): Total free blocks count 0 [ 829.413518][T12918] EXT4-fs (loop6): Free/Dirty block details [ 829.434246][T12918] EXT4-fs (loop6): free_blocks=4096 [ 829.439645][T12918] EXT4-fs (loop6): dirty_blocks=16 [ 829.464322][T12918] EXT4-fs (loop6): Block reservation details [ 829.472340][T12918] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 829.560969][T12922] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 829.579510][T12938] loop3: detected capacity change from 0 to 1024 [ 829.602856][T12938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 829.680606][T12938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 829.980799][T12946] syz.4.2182[12946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.980909][T12946] syz.4.2182[12946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 830.012905][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 830.521080][T12962] loop3: detected capacity change from 0 to 164 [ 830.742495][T12968] netlink: '+}[@': attribute type 1 has an invalid length. [ 830.803116][T12968] netlink: '+}[@': attribute type 2 has an invalid length. [ 830.840473][T12968] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 830.893606][T12970] loop4: detected capacity change from 0 to 1024 [ 830.931719][T12970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 830.996462][T12970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 831.153056][T12980] loop6: detected capacity change from 0 to 128 [ 831.222178][T12980] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 831.222628][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 831.297591][T12980] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 831.332600][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'. [ 831.585959][T12088] EXT4-fs (loop6): unmounting filesystem. [ 831.673034][T12985] device hsr_slave_1 left promiscuous mode [ 831.987913][T13003] loop4: detected capacity change from 0 to 764 [ 832.021306][T13003] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 832.500483][ T26] audit: type=1326 audit(1737246250.369:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.5.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 832.545132][ T26] audit: type=1326 audit(1737246250.369:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.5.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 832.631269][ T26] audit: type=1326 audit(1737246250.399:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.5.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 833.003116][T13030] syz.3.2217[13030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 833.003216][T13030] syz.3.2217[13030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 833.571818][T13050] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2223'. [ 833.765443][T13057] loop6: detected capacity change from 0 to 764 [ 833.795661][T13057] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 834.190158][T13071] loop3: detected capacity change from 0 to 128 [ 834.245958][T13071] EXT4-fs: Ignoring removed nobh option [ 834.325070][T13071] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 834.440433][T13071] ext4 filesystem being mounted at /453/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 834.602264][T13081] loop4: detected capacity change from 0 to 128 [ 834.615578][T13081] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 835.147395][T13096] loop5: detected capacity change from 0 to 512 [ 835.239112][T13096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 835.264140][T13096] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.434978][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 835.675333][T13105] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2236'. [ 835.709414][T13105] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2236'. [ 835.913072][T11910] EXT4-fs (loop5): unmounting filesystem. [ 836.119027][T13121] loop5: detected capacity change from 0 to 512 [ 836.185289][T13121] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 836.200501][T13121] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 836.228707][T13121] System zones: 0-2, 18-18, 34-35 [ 836.253472][T13121] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 836.363909][T13121] EXT4-fs (loop5): shut down requested (0) [ 836.841336][T13147] loop6: detected capacity change from 0 to 1024 [ 836.858528][T13147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 836.907990][T13147] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 837.073363][T11910] EXT4-fs (loop5): unmounting filesystem. [ 837.086641][T13153] loop4: detected capacity change from 0 to 1024 [ 837.203597][T13153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 837.223471][T13153] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.237707][ T26] audit: type=1326 audit(1737246255.109:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 837.299416][T12088] EXT4-fs (loop6): unmounting filesystem. [ 837.327046][ T26] audit: type=1326 audit(1737246255.159:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 837.351742][ T26] audit: type=1326 audit(1737246255.159:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 837.374792][ T26] audit: type=1326 audit(1737246255.159:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 837.400204][ T26] audit: type=1326 audit(1737246255.199:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 837.539454][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 837.588806][ T26] audit: type=1326 audit(1737246255.199:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 837.733967][ T26] audit: type=1326 audit(1737246255.199:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 837.805698][T13177] loop4: detected capacity change from 0 to 128 [ 837.824989][ T26] audit: type=1326 audit(1737246255.199:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 837.879655][T13177] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 837.907667][ T26] audit: type=1326 audit(1737246255.219:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 837.931557][T13177] ext4 filesystem being mounted at /476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 838.119242][ T26] audit: type=1326 audit(1737246255.219:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 838.273991][ T26] audit: type=1326 audit(1737246255.219:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 838.835121][ T26] audit: type=1326 audit(1737246255.309:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 839.009250][T13188] loop3: detected capacity change from 0 to 512 [ 839.047264][T13189] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.091450][T13188] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 839.126006][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 839.154231][ T26] audit: type=1326 audit(1737246255.309:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 839.164110][T13188] System zones: [ 839.230009][T13189] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.269140][ T26] audit: type=1326 audit(1737246255.309:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 839.317902][T13188] 1-12 [ 839.351525][T13188] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2255: inode #1: comm syz.3.2255: iget: illegal inode # [ 839.363955][ T26] audit: type=1326 audit(1737246255.309:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 839.482345][T13189] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.492640][T13188] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2255: error while reading EA inode 1 err=-117 [ 839.511147][T13188] EXT4-fs (loop3): 1 orphan inode deleted [ 839.575564][T13188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 839.655247][T13189] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.756339][T13189] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.772988][T13189] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.787548][T13189] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.803527][T13189] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.172050][T13214] loop4: detected capacity change from 0 to 512 [ 840.198471][T13214] EXT4-fs: Ignoring removed nobh option [ 840.249149][T13214] EXT4-fs: inline encryption not supported [ 840.274506][T13214] ext2: Unknown parameter 'mask' [ 841.209681][T13236] loop5: detected capacity change from 0 to 1024 [ 841.214785][T13230] loop6: detected capacity change from 0 to 512 [ 841.271867][T13230] EXT4-fs: Ignoring removed oldalloc option [ 841.288669][T13230] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 841.291045][T13236] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 841.314138][T13236] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.344566][T13230] EXT4-fs (loop6): 1 truncate cleaned up [ 841.374201][T13230] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 841.609229][T13247] loop4: detected capacity change from 0 to 1764 [ 841.706327][T10698] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 841.745418][T12088] EXT4-fs (loop6): unmounting filesystem. [ 841.775081][T11910] EXT4-fs (loop5): unmounting filesystem. [ 842.100685][T13257] loop4: detected capacity change from 0 to 512 [ 842.264214][T13257] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 842.272191][T13257] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 842.324264][T13257] System zones: 0-2, 18-18, 34-35 [ 842.330615][T13257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 842.404136][T13257] EXT4-fs (loop4): shut down requested (0) [ 843.015034][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 843.036480][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 843.389742][T13291] loop5: detected capacity change from 0 to 512 [ 843.444827][T13291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 843.535224][T13291] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 843.554753][T13291] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.746468][T11910] EXT4-fs (loop5): unmounting filesystem. [ 843.949940][T13310] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2287'. [ 843.990037][T13310] netem: unknown loss type 13 [ 844.009040][T13310] netem: change failed [ 844.021606][T13314] loop6: detected capacity change from 0 to 512 [ 844.223796][T13314] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 844.233938][T13314] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 844.242038][T13314] System zones: 0-2, 18-18, 34-35 [ 844.285285][T13314] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 844.359225][T13314] EXT4-fs (loop6): shut down requested (0) [ 844.521454][T13330] loop3: detected capacity change from 0 to 2048 [ 844.592368][T13330] Alternate GPT is invalid, using primary GPT. [ 844.622863][T13330] loop3: p2 p3 p7 [ 844.927326][T10698] udevd[10698]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 844.944551][T10683] udevd[10683]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 844.957991][T12088] EXT4-fs (loop6): unmounting filesystem. [ 844.966666][T10759] udevd[10759]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 845.468244][T13356] loop4: detected capacity change from 0 to 128 [ 845.537291][T13356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 845.564223][T13356] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 845.706600][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 845.938016][T13375] loop6: detected capacity change from 0 to 512 [ 846.004266][T13375] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 846.032747][T13375] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002] [ 846.043516][T13375] System zones: 0-2, 18-18, 34-35 [ 846.077072][T13375] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 846.122071][T13375] EXT4-fs (loop6): shut down requested (0) [ 846.795324][T12088] EXT4-fs (loop6): unmounting filesystem. [ 847.028863][T13404] loop3: detected capacity change from 0 to 512 [ 847.071256][T13404] EXT4-fs: inline encryption not supported [ 847.178158][T13404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 847.254053][T13404] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 847.375063][T13412] loop4: detected capacity change from 0 to 764 [ 847.402247][T13404] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.2323: corrupted inode contents [ 847.472059][T13404] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.2323: mark_inode_dirty error [ 847.484824][T13412] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 847.544095][T13404] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.2323: corrupted inode contents [ 847.590841][T13413] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.2323: corrupted inode contents [ 847.646748][T13413] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.2323: mark_inode_dirty error [ 847.666341][T13413] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.2323: corrupted inode contents [ 847.694506][T13413] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.2323: mark_inode_dirty error [ 847.726436][T13413] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.2323: corrupted inode contents [ 847.781670][T13413] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.2323: mark_inode_dirty error [ 847.856253][T13416] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.2323: corrupted inode contents [ 848.044969][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 848.740173][T13435] hub 2-0:1.0: USB hub found [ 848.749387][T13435] hub 2-0:1.0: 1 port detected [ 849.697888][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 849.697905][ T26] audit: type=1326 audit(1737246267.569:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13438 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018585d29 code=0x7ffc0000 [ 849.803403][ T26] audit: type=1326 audit(1737246267.599:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.6.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 849.903197][ T26] audit: type=1326 audit(1737246267.599:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.6.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 850.006202][ T26] audit: type=1326 audit(1737246267.599:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.6.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 850.084025][ T26] audit: type=1326 audit(1737246267.599:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.6.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 850.142792][ T26] audit: type=1326 audit(1737246267.599:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.6.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 850.181538][ T26] audit: type=1326 audit(1737246267.599:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.6.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 850.327198][ T26] audit: type=1326 audit(1737246267.599:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.6.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 850.413956][ T26] audit: type=1326 audit(1737246267.599:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.6.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 850.514003][ T26] audit: type=1326 audit(1737246267.599:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.6.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 850.754785][T13457] loop3: detected capacity change from 0 to 764 [ 850.788955][T13457] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 850.957906][T13448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 850.974117][T13448] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 851.004868][T13448] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 851.022405][T13448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 851.035474][T13448] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 851.053267][T13448] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 851.082307][T13448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 851.102522][T13448] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 851.134526][T13448] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 851.141825][T13448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 851.178451][T13448] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 851.198729][T13448] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 851.240508][T13448] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 851.259450][T13448] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 851.279689][T13448] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 851.300824][T13448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 851.310913][T13448] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 851.330294][T13448] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 851.796905][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2350'. [ 852.169285][T13491] syz.6.2357[13491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 852.169415][T13491] syz.6.2357[13491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 852.224483][T13491] program syz.6.2357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 852.344307][T11911] Bluetooth: hci0: command 0x0c1a tx timeout [ 852.561223][T13503] loop5: detected capacity change from 0 to 764 [ 852.653783][T13503] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 853.065603][T11911] Bluetooth: hci2: command 0x0c1a tx timeout [ 853.144456][T11911] Bluetooth: hci3: command 0x0c1a tx timeout [ 853.150590][T11911] Bluetooth: hci1: command 0x0c1a tx timeout [ 853.304275][T11911] Bluetooth: hci4: command 0x0c1a tx timeout [ 853.310435][T11911] Bluetooth: hci5: command 0x0c1a tx timeout [ 853.978951][T13548] loop4: detected capacity change from 0 to 128 [ 854.037874][T13548] EXT4-fs: Ignoring removed nobh option [ 854.217981][T13548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 854.234522][T13548] ext4 filesystem being mounted at /501/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 854.424060][T11911] Bluetooth: hci0: command 0x0406 tx timeout [ 854.650416][T13573] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.901800][T13573] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.003425][T13573] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.243950][T11911] Bluetooth: hci2: command 0x0406 tx timeout [ 855.250561][T11911] Bluetooth: hci1: command 0x0406 tx timeout [ 855.256897][T11911] Bluetooth: hci3: command 0x0406 tx timeout [ 855.286992][T13573] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.368901][T13573] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.383701][T13573] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.401781][T13573] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.416479][T13573] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.424525][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 855.430704][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 855.610166][T13578] loop6: detected capacity change from 0 to 512 [ 855.693425][T13578] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2386: casefold flag without casefold feature [ 855.758506][T13578] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2386: couldn't read orphan inode 15 (err -117) [ 855.807150][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 855.854176][T13578] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 856.345925][T13599] hub 2-0:1.0: USB hub found [ 856.353007][T13599] hub 2-0:1.0: 1 port detected [ 857.137215][T12088] EXT4-fs (loop6): unmounting filesystem. [ 857.848868][T13624] loop4: detected capacity change from 0 to 128 [ 857.925865][T13624] EXT4-fs: Ignoring removed nobh option [ 858.125628][T13624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 858.196904][T13624] ext4 filesystem being mounted at /504/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 858.522376][ T26] kauditd_printk_skb: 71 callbacks suppressed [ 858.522394][ T26] audit: type=1326 audit(1737246276.389:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.5.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 858.579083][T13649] syz.5.2412[13649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 858.579186][T13649] syz.5.2412[13649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 858.622129][ T26] audit: type=1326 audit(1737246276.399:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 858.801103][ T26] audit: type=1326 audit(1737246276.439:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 858.875729][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 858.881721][ T26] audit: type=1326 audit(1737246276.439:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 859.020739][ T26] audit: type=1326 audit(1737246276.439:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 859.123621][ T26] audit: type=1326 audit(1737246276.439:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 859.208398][ T26] audit: type=1326 audit(1737246276.439:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 859.314345][ T26] audit: type=1326 audit(1737246276.439:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f32d85d63 code=0x7ffc0000 [ 859.404852][ T26] audit: type=1326 audit(1737246276.439:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f32d847df code=0x7ffc0000 [ 859.492325][ T26] audit: type=1326 audit(1737246276.439:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9f32d85db7 code=0x7ffc0000 [ 860.195692][T13689] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.232057][T13691] tipc: Started in network mode [ 860.260381][T13691] tipc: Node identity ac14140f, cluster identity 4711 [ 860.313024][T13691] tipc: New replicast peer: 255.255.255.255 [ 860.360576][T13691] tipc: Enabled bearer , priority 10 [ 860.402838][T13689] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.495434][T13701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 860.520516][T13701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 860.528471][T13701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 860.615170][T13689] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.689299][T13689] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.792103][T13689] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.806893][T13689] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.821656][T13689] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.838174][T13689] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.027181][T13706] loop6: detected capacity change from 0 to 2048 [ 861.195158][T13706] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 861.236835][T13706] EXT4-fs (loop6): resizing filesystem from 512 to 0 blocks [ 861.248688][T13715] loop5: detected capacity change from 0 to 128 [ 861.297364][T13706] EXT4-fs warning (device loop6): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 861.338784][T13715] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 861.365963][ T4304] tipc: Node number set to 2886997007 [ 861.416211][T13715] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 861.457619][T13715] FAT-fs (loop5): Filesystem has been set read-only [ 861.495559][T12088] EXT4-fs (loop6): unmounting filesystem. [ 861.504372][T13715] syz.5.2439: attempt to access beyond end of device [ 861.504372][T13715] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 861.598027][T13715] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 861.630151][T13715] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 861.675070][T13715] syz.5.2439: attempt to access beyond end of device [ 861.675070][T13715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 862.843201][T13765] xt_recent: hitcount (456) is larger than allowed maximum (255) [ 862.872756][T13766] loop4: detected capacity change from 0 to 512 [ 862.905553][T13766] EXT4-fs: Ignoring removed oldalloc option [ 862.915485][T13766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 862.994219][T13766] EXT4-fs (loop4): 1 truncate cleaned up [ 863.024199][T13766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 863.066643][T13772] loop6: detected capacity change from 0 to 764 [ 863.217325][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 863.714574][T13790] device bridge0 entered promiscuous mode [ 863.761929][T13790] device macvlan2 entered promiscuous mode [ 863.806033][T13790] bridge0: port 3(macvlan2) entered blocking state [ 863.834747][T13790] bridge0: port 3(macvlan2) entered disabled state [ 863.856957][T13790] device bridge0 left promiscuous mode [ 863.914146][T13791] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.029247][T13791] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.081245][T13791] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.169969][T13791] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.253452][T13791] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.269451][T13791] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.288108][T13791] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.302775][T13791] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.687809][ T26] kauditd_printk_skb: 93 callbacks suppressed [ 864.687824][ T26] audit: type=1326 audit(1737246282.559:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 864.753232][ T26] audit: type=1326 audit(1737246282.559:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 864.798947][ T26] audit: type=1326 audit(1737246282.559:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 864.852122][ T26] audit: type=1326 audit(1737246282.569:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 864.987202][T13805] loop5: detected capacity change from 0 to 8192 [ 865.394013][ T26] audit: type=1326 audit(1737246283.259:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 865.504056][ T26] audit: type=1326 audit(1737246283.259:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 865.618129][ T26] audit: type=1326 audit(1737246283.259:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 865.662417][ T26] audit: type=1326 audit(1737246283.259:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 865.758794][ T26] audit: type=1326 audit(1737246283.259:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 865.767710][T13828] loop5: detected capacity change from 0 to 128 [ 865.854102][ T26] audit: type=1326 audit(1737246283.269:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 865.894831][T13828] EXT4-fs: Ignoring removed nobh option [ 866.151440][T13828] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 866.177786][T13838] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.219207][T13828] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 866.235423][T13838] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.306346][T13838] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.391975][T13838] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.626101][T11910] EXT4-fs (loop5): unmounting filesystem. [ 866.969896][T13851] loop5: detected capacity change from 0 to 512 [ 867.004677][T13851] EXT4-fs: Ignoring removed oldalloc option [ 867.021650][T13851] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 867.053419][T13851] EXT4-fs (loop5): 1 truncate cleaned up [ 867.065973][T13851] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 867.111491][T11910] EXT4-fs (loop5): unmounting filesystem. [ 867.251342][T13856] loop5: detected capacity change from 0 to 764 [ 867.407408][T11022] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 867.430654][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.451658][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.475468][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.492594][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.501001][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.517356][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.530153][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.542450][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.559181][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.571213][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.583521][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.600887][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.609895][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.626091][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.647457][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.661423][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.672221][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.686880][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.699668][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.721002][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.728709][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.744675][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.752130][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.767190][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.781322][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.792644][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.815720][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.823173][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.850131][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.863673][T11022] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 867.904681][T11022] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 867.913957][T13838] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.929307][T13838] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.946390][T13838] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.961875][T13838] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.441176][T13876] loop5: detected capacity change from 0 to 512 [ 868.505608][T13876] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 868.559669][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2512'. [ 868.655794][T13876] EXT4-fs (loop5): 1 truncate cleaned up [ 868.661610][T13876] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 869.354924][T11910] EXT4-fs (loop5): unmounting filesystem. [ 869.970186][T13926] loop5: detected capacity change from 0 to 128 [ 869.982076][T13923] loop3: detected capacity change from 0 to 512 [ 869.998212][T13926] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 870.010179][T13923] EXT4-fs: Ignoring removed oldalloc option [ 870.026650][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.044900][T13923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 870.093382][T13923] EXT4-fs (loop3): 1 truncate cleaned up [ 870.134213][T13926] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 870.138994][T13923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 870.142061][T13926] FAT-fs (loop5): Filesystem has been set read-only [ 870.158858][T13926] syz.5.2526: attempt to access beyond end of device [ 870.158858][T13926] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 870.175320][T13926] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 870.204509][T13926] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 870.269691][T13926] syz.5.2526: attempt to access beyond end of device [ 870.269691][T13926] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 870.307489][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 870.307506][ T26] audit: type=1800 audit(1737246288.179:713): pid=13926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2526" name="file2" dev="loop5" ino=1048773 res=0 errno=0 [ 870.350500][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 870.737606][T13942] loop5: detected capacity change from 0 to 764 [ 870.812816][T13942] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 871.647928][T13968] 9pnet_fd: Insufficient options for proto=fd [ 872.062795][T13982] loop3: detected capacity change from 0 to 512 [ 872.111926][T13982] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 872.122419][T13985] loop5: detected capacity change from 0 to 128 [ 872.192054][T13982] EXT4-fs (loop3): 1 truncate cleaned up [ 872.197985][T13982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 872.227900][T13985] EXT4-fs: Ignoring removed nobh option [ 872.300636][T13985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 872.353209][T13985] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 872.893610][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 872.944361][ T26] audit: type=1326 audit(1737246290.779:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 873.019009][T14007] loop4: detected capacity change from 0 to 512 [ 873.029204][ T26] audit: type=1326 audit(1737246290.819:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 873.084791][T14007] EXT4-fs: Ignoring removed oldalloc option [ 873.124002][T14007] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 873.172396][ T26] audit: type=1326 audit(1737246290.829:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 873.236545][T11910] EXT4-fs (loop5): unmounting filesystem. [ 873.288175][T14007] EXT4-fs (loop4): 1 truncate cleaned up [ 873.295709][ T26] audit: type=1326 audit(1737246290.829:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 873.319328][ T26] audit: type=1326 audit(1737246290.829:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 873.341676][T14007] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 873.341909][ T26] audit: type=1326 audit(1737246290.829:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 874.008301][ T26] audit: type=1326 audit(1737246290.829:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 874.030870][ T26] audit: type=1326 audit(1737246290.829:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 874.109088][ T26] audit: type=1326 audit(1737246290.829:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb23785d29 code=0x7ffc0000 [ 874.178458][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 874.663941][T14040] loop4: detected capacity change from 0 to 512 [ 874.706630][T14040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 874.776680][T14040] EXT4-fs (loop4): 1 truncate cleaned up [ 874.793774][T14040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 875.548517][T14064] loop6: detected capacity change from 0 to 8192 [ 875.581087][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 877.853796][T14151] loop5: detected capacity change from 0 to 1024 [ 877.922376][T14151] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 877.962972][T14151] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 877.987462][T14151] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 878.037102][T14151] EXT4-fs error (device loop5): ext4_get_journal_inode:5722: inode #5: comm syz.5.2609: unexpected bad inode w/o EXT4_IGET_BAD [ 878.074780][T14151] EXT4-fs (loop5): no journal found [ 878.100038][T14151] EXT4-fs (loop5): can't get journal size [ 878.134259][T14151] EXT4-fs (loop5): failed to initialize system zone (-117) [ 878.159277][T14151] EXT4-fs (loop5): mount failed [ 879.226480][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'. [ 879.676934][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 879.676952][ T26] audit: type=1326 audit(1737246297.539:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 879.731559][T14190] loop6: detected capacity change from 0 to 764 [ 879.767524][T14190] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 879.864132][ T26] audit: type=1326 audit(1737246297.539:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 879.952593][ T26] audit: type=1326 audit(1737246297.599:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 880.056881][ T26] audit: type=1326 audit(1737246297.599:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 880.148289][ T26] audit: type=1326 audit(1737246297.599:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 880.260866][ T26] audit: type=1326 audit(1737246297.599:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 880.303720][T14207] loop3: detected capacity change from 0 to 512 [ 880.335184][T14207] EXT4-fs: Ignoring removed oldalloc option [ 880.362291][T14207] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 880.373997][ T26] audit: type=1326 audit(1737246297.599:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 880.436682][T14207] EXT4-fs (loop3): 1 truncate cleaned up [ 880.450898][T14207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 880.483970][ T26] audit: type=1326 audit(1737246297.599:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 880.641035][ T26] audit: type=1326 audit(1737246297.619:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 880.788026][ T26] audit: type=1326 audit(1737246297.619:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.1.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 880.794543][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 882.582804][T14237] loop5: detected capacity change from 0 to 128 [ 883.192381][T14240] loop4: detected capacity change from 0 to 512 [ 883.555640][T14240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 883.605575][T14240] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 883.709266][T14240] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.2640: corrupted inode contents [ 883.794211][T14240] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.2640: mark_inode_dirty error [ 883.834960][T14240] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.2640: corrupted inode contents [ 883.898721][T14240] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2640: mark_inode_dirty error [ 884.233213][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2645'. [ 884.423630][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 884.707709][T14258] loop4: detected capacity change from 0 to 764 [ 884.743546][T14258] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 884.850088][T14259] loop5: detected capacity change from 0 to 128 [ 884.896980][T14259] EXT4-fs: Ignoring removed nobh option [ 884.976048][T14259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 885.023239][T14259] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 885.720745][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 885.720763][ T26] audit: type=1326 audit(1737246303.589:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 885.789212][T14280] loop6: detected capacity change from 0 to 512 [ 885.815318][T14280] EXT4-fs: Ignoring removed oldalloc option [ 885.831914][ T26] audit: type=1326 audit(1737246303.639:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 885.864390][T14280] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 885.884777][ T26] audit: type=1326 audit(1737246303.639:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 885.927380][T14280] EXT4-fs (loop6): 1 truncate cleaned up [ 885.933103][T14280] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 885.943106][T11910] EXT4-fs (loop5): unmounting filesystem. [ 885.949922][ T26] audit: type=1326 audit(1737246303.639:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 885.973186][ T26] audit: type=1326 audit(1737246303.639:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 885.996108][ T26] audit: type=1326 audit(1737246303.639:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 886.033515][ T26] audit: type=1326 audit(1737246303.639:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 886.057589][ T26] audit: type=1326 audit(1737246303.639:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 886.154218][ T26] audit: type=1326 audit(1737246303.639:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 886.228487][T14290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2657'. [ 886.244434][ T26] audit: type=1326 audit(1737246303.639:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14278 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bf185d29 code=0x7ffc0000 [ 886.245950][T12088] EXT4-fs (loop6): unmounting filesystem. [ 887.165716][T14306] loop4: detected capacity change from 0 to 764 [ 887.208366][T14306] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 887.531636][T14321] loop5: detected capacity change from 0 to 128 [ 887.590284][T14321] EXT4-fs: Ignoring removed nobh option [ 887.636092][T14320] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.688617][T14320] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.689751][T14321] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 887.764667][T14320] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.776979][T14321] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 887.843638][T14320] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.952427][T14320] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.966884][T14320] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.981697][T14320] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.997872][T14320] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.200343][T14331] loop3: detected capacity change from 0 to 128 [ 888.503817][T11910] EXT4-fs (loop5): unmounting filesystem. [ 888.922491][T14346] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2679'. [ 888.969094][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2679'. [ 889.009977][T14348] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 889.367651][T14359] loop3: detected capacity change from 0 to 1024 [ 889.413939][T14359] EXT4-fs: Ignoring removed mblk_io_submit option [ 889.550755][T14359] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 889.919246][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 890.586703][T14396] syz.6.2697[14396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 890.586815][T14396] syz.6.2697[14396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 892.732688][T14434] loop4: detected capacity change from 0 to 8192 [ 892.856946][T14446] netlink: 300 bytes leftover after parsing attributes in process `+}[@'. [ 894.701213][T14479] loop5: detected capacity change from 0 to 8192 [ 895.107806][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 895.107824][ T26] audit: type=1326 audit(1737246312.979:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 895.148222][T14491] loop5: detected capacity change from 0 to 512 [ 895.156138][T14491] EXT4-fs: Ignoring removed oldalloc option [ 895.162797][ T26] audit: type=1326 audit(1737246313.009:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 895.188055][T14491] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 895.199795][ T26] audit: type=1326 audit(1737246313.009:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 895.224094][ T26] audit: type=1326 audit(1737246313.009:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 895.247876][T14491] EXT4-fs (loop5): 1 truncate cleaned up [ 895.253566][T14491] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 895.294483][ T26] audit: type=1326 audit(1737246313.009:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 895.317811][ T26] audit: type=1326 audit(1737246313.009:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 895.319705][T11910] EXT4-fs (loop5): unmounting filesystem. [ 895.341160][ T26] audit: type=1326 audit(1737246313.009:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 895.369331][ T26] audit: type=1326 audit(1737246313.009:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 895.443248][ T26] audit: type=1326 audit(1737246313.009:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe773b85d63 code=0x7ffc0000 [ 895.514293][ T26] audit: type=1326 audit(1737246313.009:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe773b847df code=0x7ffc0000 [ 896.644191][T14527] loop3: detected capacity change from 0 to 2048 [ 896.730680][T14527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 896.955089][T14540] syz.6.2763[14540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 896.967579][T14540] syz.6.2763[14540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 897.262360][ T9] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 897.376676][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 897.427315][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 897.427315][ T9] [ 897.472583][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 897.491715][ T9] EXT4-fs (loop3): Free/Dirty block details [ 897.515709][ T9] EXT4-fs (loop3): free_blocks=2415919104 [ 897.524411][ T9] EXT4-fs (loop3): dirty_blocks=32 [ 897.554008][ T9] EXT4-fs (loop3): Block reservation details [ 897.580226][ T9] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 897.618843][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 897.647154][T14563] syz.4.2775[14563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 897.647275][T14563] syz.4.2775[14563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 898.428599][T14578] capability: warning: `syz.6.2780' uses deprecated v2 capabilities in a way that may be insecure [ 899.928264][T14604] loop6: detected capacity change from 0 to 764 [ 899.975384][T14604] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 901.912981][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 901.953763][T14636] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.962423][T14636] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.970712][T14636] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.978991][T14636] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.987695][T14636] device vxlan0 entered promiscuous mode [ 903.747344][T14667] loop6: detected capacity change from 0 to 1024 [ 903.756895][T14671] loop3: detected capacity change from 0 to 164 [ 903.840359][T14667] EXT4-fs: Ignoring removed mblk_io_submit option [ 903.854570][T14671] Unable to read rock-ridge attributes [ 903.895542][T14671] Unable to read rock-ridge attributes [ 903.962304][T14671] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 903.996451][T14667] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 904.371428][T12088] EXT4-fs (loop6): unmounting filesystem. [ 904.621522][T14692] loop3: detected capacity change from 0 to 512 [ 904.680787][T14694] loop4: detected capacity change from 0 to 256 [ 904.736006][T14692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 904.750500][T14694] FAT-fs (loop4): Directory bread(block 64) failed [ 904.784008][T14694] FAT-fs (loop4): Directory bread(block 65) failed [ 904.792644][T14694] FAT-fs (loop4): Directory bread(block 66) failed [ 904.894393][T14694] FAT-fs (loop4): Directory bread(block 67) failed [ 904.933931][T14692] EXT4-fs (loop3): orphan cleanup on readonly fs [ 904.941393][T14694] FAT-fs (loop4): Directory bread(block 68) failed [ 904.953415][T14692] __quota_error: 42 callbacks suppressed [ 904.953452][T14692] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 904.978298][T14692] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 904.980932][T14694] FAT-fs (loop4): Directory bread(block 69) failed [ 904.995361][T14694] FAT-fs (loop4): Directory bread(block 70) failed [ 905.002227][T14694] FAT-fs (loop4): Directory bread(block 71) failed [ 905.009612][T14694] FAT-fs (loop4): Directory bread(block 72) failed [ 905.020561][T14694] FAT-fs (loop4): Directory bread(block 73) failed [ 905.077226][T14692] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.2825: Failed to acquire dquot type 1 [ 905.116783][T14692] EXT4-fs (loop3): 1 truncate cleaned up [ 905.149791][T14692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 905.162095][T14694] syz.4.2826: attempt to access beyond end of device [ 905.162095][T14694] loop4: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 905.226732][T14692] EXT4-fs (loop3): unmounting filesystem. [ 905.237050][T14694] syz.4.2826: attempt to access beyond end of device [ 905.237050][T14694] loop4: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 905.335699][ T26] audit: type=1800 audit(1737246323.189:904): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2826" name="file2" dev="loop4" ino=1048778 res=0 errno=0 [ 906.887066][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2843'. [ 906.934042][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2843'. [ 907.589852][T14756] loop4: detected capacity change from 0 to 128 [ 907.627853][T14756] EXT4-fs: Ignoring removed nobh option [ 907.665462][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2853'. [ 907.710603][T14756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 907.762428][T14756] ext4 filesystem being mounted at /599/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 907.944345][T11911] Bluetooth: hci5: command 0x0406 tx timeout [ 908.617245][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 908.987251][ T26] audit: type=1326 audit(1737246326.859:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 909.070390][ T26] audit: type=1326 audit(1737246326.859:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 909.171951][ T26] audit: type=1326 audit(1737246326.879:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 909.247400][ T26] audit: type=1326 audit(1737246326.879:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 909.344443][ T26] audit: type=1326 audit(1737246326.879:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 909.562159][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 909.574748][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 909.582956][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 909.592484][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 909.600851][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 909.609533][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 909.793097][ T4650] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.856729][ T4650] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.048825][ T4650] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.081947][ T4650] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.296262][ T4650] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.306626][ T4650] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.404531][ T4650] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.454026][ T4650] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.571237][T14788] chnl_net:caif_netlink_parms(): no params data found [ 910.784060][ T26] audit: type=1326 audit(1737246328.649:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 910.954136][ T26] audit: type=1326 audit(1737246328.689:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 911.072802][ T26] audit: type=1326 audit(1737246328.699:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 911.106723][T14788] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.126661][T14788] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.171570][ T26] audit: type=1326 audit(1737246328.699:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 911.177820][T14788] device bridge_slave_0 entered promiscuous mode [ 911.286622][ T26] audit: type=1326 audit(1737246328.699:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 911.317590][T14788] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.360293][T14788] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.387169][ T26] audit: type=1326 audit(1737246328.699:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 911.410850][T14788] device bridge_slave_1 entered promiscuous mode [ 911.473993][ T26] audit: type=1326 audit(1737246328.699:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 911.552504][ T26] audit: type=1326 audit(1737246328.699:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 911.624095][T11911] Bluetooth: hci1: command 0x0409 tx timeout [ 911.677228][ T26] audit: type=1326 audit(1737246328.699:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 912.099972][ T26] audit: type=1326 audit(1737246328.699:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14809 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 912.713319][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2878'. [ 912.926618][T14788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.978590][T14788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.018883][T14836] loop6: detected capacity change from 0 to 128 [ 913.066498][T14836] EXT4-fs: Ignoring removed nobh option [ 913.137060][T14836] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 913.164701][T14836] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 913.378960][T14788] team0: Port device team_slave_0 added [ 913.487460][T14788] team0: Port device team_slave_1 added [ 913.708324][T14788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.712774][T11911] Bluetooth: hci1: command 0x041b tx timeout [ 913.743091][T14788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.789725][T14788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.915618][T14788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.944569][T14788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.063937][T14788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.530195][T14864] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 914.663624][T14788] device hsr_slave_0 entered promiscuous mode [ 914.671332][T12088] EXT4-fs (loop6): unmounting filesystem. [ 914.689811][T14788] device hsr_slave_1 entered promiscuous mode [ 914.734091][T14788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.741719][T14788] Cannot create hsr debugfs directory [ 914.883521][T14872] loop6: detected capacity change from 0 to 2048 [ 914.964824][T14872] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 915.241879][ T11] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 915.282974][ T11] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 915.364289][ T11] EXT4-fs (loop6): This should not happen!! Data will be lost [ 915.364289][ T11] [ 915.413878][ T11] EXT4-fs (loop6): Total free blocks count 0 [ 915.433906][ T11] EXT4-fs (loop6): Free/Dirty block details [ 915.439867][ T11] EXT4-fs (loop6): free_blocks=2415919104 [ 915.493881][ T11] EXT4-fs (loop6): dirty_blocks=32 [ 915.499055][ T11] EXT4-fs (loop6): Block reservation details [ 915.544722][ T11] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 915.585283][T12088] EXT4-fs (loop6): unmounting filesystem. [ 915.784303][T11911] Bluetooth: hci1: command 0x040f tx timeout [ 916.083123][ T4650] device hsr_slave_0 left promiscuous mode [ 916.099624][ T4650] device hsr_slave_1 left promiscuous mode [ 916.149504][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.159752][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.196034][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.203595][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.297325][ T4650] device veth1_macvtap left promiscuous mode [ 916.306568][ T4650] device veth0_macvtap left promiscuous mode [ 916.326868][ T4650] device veth1_vlan left promiscuous mode [ 916.332732][ T4650] device veth0_vlan left promiscuous mode [ 916.767537][T14918] loop3: detected capacity change from 0 to 256 [ 917.302612][T14928] dccp_close: ABORT with 20 bytes unread [ 917.485502][ T4650] bond1 (unregistering): Released all slaves [ 917.869976][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 918.184038][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 918.721070][ T4650] team0 (unregistering): Port device team_slave_1 removed [ 918.883051][ T4650] team0 (unregistering): Port device team_slave_0 removed [ 919.522514][ T4650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.644240][ T4650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.748238][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 919.748257][ T26] audit: type=1326 audit(1737246337.619:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 919.808483][ T26] audit: type=1326 audit(1737246337.619:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 919.851771][ T26] audit: type=1326 audit(1737246337.619:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 919.877340][ T26] audit: type=1326 audit(1737246337.619:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 919.909206][ T26] audit: type=1326 audit(1737246337.619:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 919.948731][ T26] audit: type=1326 audit(1737246337.619:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 919.998335][ T26] audit: type=1326 audit(1737246337.619:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 920.050463][ T26] audit: type=1326 audit(1737246337.619:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 920.075635][ T26] audit: type=1326 audit(1737246337.619:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 920.131348][ T26] audit: type=1326 audit(1737246337.619:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe773b85d29 code=0x7ffc0000 [ 920.505344][ T4650] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 921.240409][ T4650] bond0 (unregistering): Released all slaves [ 922.456917][T14985] mmap: syz.1.2934 (14985): VmData 176140288 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 922.516878][T14994] loop3: detected capacity change from 0 to 128 [ 922.583712][T14994] EXT4-fs: Ignoring removed nobh option [ 922.675620][T14994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 922.828793][T14994] ext4 filesystem being mounted at /566/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 922.892511][T14788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 922.986275][T14788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 923.064798][T14788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 923.101743][T14788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 923.502108][T14788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.573213][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 923.691292][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 923.720211][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 923.777967][T14788] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.794612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 924.071208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 924.465151][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.472351][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.589312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 924.626484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 924.639209][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.646455][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.655688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 924.806255][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 924.829240][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 924.912740][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 924.934009][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 924.968259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 925.003108][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 925.047981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 925.091657][T14788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 925.106110][T15048] syz.6.2950[15048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 925.106217][T15048] syz.6.2950[15048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 925.159394][T14788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 925.206906][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 925.227941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 925.261953][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 925.270827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 925.297922][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 925.620191][T15065] loop6: detected capacity change from 0 to 1024 [ 925.727847][T15065] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 925.744176][T15065] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 925.880335][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2956'. [ 925.976028][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 925.976046][ T26] audit: type=1800 audit(1737246343.849:954): pid=15065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2956" name="bus" dev="loop6" ino=15 res=0 errno=0 [ 926.027360][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 926.093767][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 926.119667][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 926.158295][T12088] EXT4-fs (loop6): unmounting filesystem. [ 926.159564][T14788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.638692][T15104] syz.1.2965[15104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 926.638802][T15104] syz.1.2965[15104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 927.227192][ T26] audit: type=1326 audit(1737246345.099:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 927.363319][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 927.384674][ T26] audit: type=1326 audit(1737246345.099:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 927.413061][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 927.497850][T14788] device veth0_vlan entered promiscuous mode [ 927.524027][ T26] audit: type=1326 audit(1737246345.139:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 927.548844][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 927.586972][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 927.634635][ T26] audit: type=1326 audit(1737246345.139:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 927.645101][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 927.745468][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 927.754067][ T26] audit: type=1326 audit(1737246345.139:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 927.799712][T14788] device veth1_vlan entered promiscuous mode [ 927.822332][T15136] syz.6.2976[15136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 927.822468][T15136] syz.6.2976[15136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 927.873296][ T26] audit: type=1326 audit(1737246345.139:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 927.926116][ T6478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 927.952138][ T6478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 927.994868][ T6478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 928.014220][ T26] audit: type=1326 audit(1737246345.139:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 928.036546][ T6478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 928.058087][T14788] device veth0_macvtap entered promiscuous mode [ 928.089296][T14788] device veth1_macvtap entered promiscuous mode [ 928.186258][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.204975][ T26] audit: type=1326 audit(1737246345.139:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 928.243471][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.297876][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.298244][ T26] audit: type=1326 audit(1737246345.139:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f32d85d29 code=0x7ffc0000 [ 928.349389][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.381685][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.388184][T15154] loop6: detected capacity change from 0 to 764 [ 928.411935][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.429664][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.494860][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.518543][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.536077][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.567457][T14788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.626024][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 928.676665][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 928.719187][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 928.775057][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 928.827330][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.858611][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.904123][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.957111][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.987840][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.022866][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.068972][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.109221][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.143787][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.173474][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.210787][T14788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.327680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 929.356602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 929.392825][T15182] syz.6.2989[15182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 929.392938][T15182] syz.6.2989[15182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 929.415069][T14788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.505619][T14788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.528400][T14788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.545671][ T28] INFO: task syz.0.1724:11580 blocked for more than 143 seconds. [ 929.554111][ T28] Not tainted 6.1.125-syzkaller #0 [ 929.563348][T14788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.578007][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 929.598099][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'. [ 929.609422][ T28] task:syz.0.1724 state:D stack:27680 pid:11580 ppid:4253 flags:0x00004004 [ 929.621263][ T28] Call Trace: [ 929.659607][ T28] [ 929.669898][ T28] __schedule+0x143f/0x4570 [ 929.680045][ T28] ? release_firmware_map_entry+0x186/0x186 [ 929.689507][ T28] ? print_irqtrace_events+0x210/0x210 [ 929.701402][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 929.716424][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 929.727430][ T28] schedule+0xbf/0x180 [ 929.746708][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 929.759328][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 929.772309][ T28] ? down_write_killable_nested+0x90/0x90 [ 929.784229][ T28] ? read_lock_is_recursive+0x10/0x10 [ 929.796543][ T28] ? rwsem_write_trylock+0x166/0x210 [ 929.815472][ T28] ? clear_nonspinnable+0x60/0x60 [ 929.820732][ T28] path_openat+0x7b6/0x2e60 [ 929.832467][ T28] ? mark_lock+0x9a/0x340 [ 929.837059][ T28] ? do_filp_open+0x480/0x480 [ 929.841934][ T28] do_filp_open+0x230/0x480 [ 929.846651][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 929.851456][ T28] ? _raw_spin_unlock+0x24/0x40 [ 929.856488][ T28] ? alloc_fd+0x5a0/0x640 [ 929.860970][ T28] do_sys_openat2+0x13b/0x4f0 [ 929.871662][ T28] ? do_sys_open+0x220/0x220 [ 929.889660][ T28] __x64_sys_openat+0x243/0x290 [ 929.899323][ T28] ? __ia32_sys_open+0x270/0x270 [ 929.913215][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 929.932920][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 929.948078][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 929.960911][ T28] do_syscall_64+0x3b/0xb0 [ 929.970000][ T28] ? clear_bhb_loop+0x45/0xa0 [ 929.980485][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.998552][ T28] RIP: 0033:0x7fd2e5385d29 [ 930.012883][ T28] RSP: 002b:00007fd2e61a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 930.029670][ T28] RAX: ffffffffffffffda RBX: 00007fd2e5576080 RCX: 00007fd2e5385d29 [ 930.040476][ T28] RDX: 0000000000183341 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 930.053383][ T28] RBP: 00007fd2e5401b08 R08: 0000000000000000 R09: 0000000000000000 [ 930.068903][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.078608][ T28] R13: 0000000000000000 R14: 00007fd2e5576080 R15: 00007ffc8a6b8c88 [ 930.093063][ T28] [ 930.098126][ T28] [ 930.098126][ T28] Showing all locks held in the system: [ 930.137531][ T28] 1 lock held by rcu_tasks_kthre/12: [ 930.156573][ T28] #0: ffffffff8d32b290 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 930.193110][ T28] 1 lock held by rcu_tasks_trace/13: [ 930.212716][ T28] #0: ffffffff8d32ba90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 930.237179][ T28] 1 lock held by khungtaskd/28: [ 930.242175][ T28] #0: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 930.259520][ T28] 2 locks held by getty/4012: [ 930.269140][ T28] #0: ffff8880311be098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 930.285087][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 930.301584][ T28] 3 locks held by kworker/0:5/4300: [ 930.308573][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 930.326196][ T28] #1: ffffc90004497d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 930.349038][ T28] #2: ffff888142f68240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 930.361811][ T28] 3 locks held by kworker/0:7/4343: [ 930.371826][ T28] #0: ffff8880304b3138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 930.385521][ T28] #1: ffffc9000465fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 930.404255][ T28] #2: ffffffff8e50b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 930.421490][ T28] 3 locks held by kworker/1:0/8899: [ 930.429224][ T28] #0: ffff8880304b3138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 930.446766][ T28] #1: ffffc9000601fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 930.464089][ T28] #2: ffffffff8e50b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 930.473647][ T28] 2 locks held by kworker/0:3/11022: [ 930.479543][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 930.490363][ T28] #1: ffffc9001ba67d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 930.502178][ T28] 3 locks held by syz.0.1724/11565: [ 930.509654][ T28] 2 locks held by syz.0.1724/11580: [ 930.521295][ T28] #0: ffff888053088460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 930.532310][ T28] #1: ffff8880716ca220 (&sb->s_type->i_mutex_key#28){++++}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 930.548942][ T28] 3 locks held by syz-executor/14788: [ 930.556021][ T28] #0: ffffffff8e50b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 930.568151][ T28] #1: ffff888054dcd3e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x224/0x410 [ 930.578430][ T28] #2: ffffffff8d3306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 930.590300][ T28] 1 lock held by syz.3.2992/15188: [ 930.595790][ T28] #0: ffffffff8d330580 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 930.606159][ T28] [ 930.608597][ T28] ============================================= [ 930.608597][ T28] [ 930.624274][ T28] NMI backtrace for cpu 1 [ 930.628650][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.125-syzkaller #0 [ 930.636567][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 930.646657][ T28] Call Trace: [ 930.649971][ T28] [ 930.652927][ T28] dump_stack_lvl+0x1e3/0x2cb [ 930.655741][T14788] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 930.657632][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 930.670819][ T28] ? panic+0x764/0x764 [ 930.674908][ T28] ? vprintk_emit+0x622/0x740 [ 930.679623][ T28] ? printk_sprint+0x490/0x490 [ 930.684433][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 930.689569][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 930.694540][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 930.700726][ T28] ? _printk+0xd1/0x111 [ 930.704917][ T28] ? panic+0x764/0x764 [ 930.709023][ T28] ? __wake_up_klogd+0xcc/0x100 [ 930.713900][ T28] ? panic+0x764/0x764 [ 930.718002][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 930.724107][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 930.730204][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 930.736214][ T28] watchdog+0xf88/0xfd0 [ 930.740412][ T28] ? watchdog+0x1f8/0xfd0 [ 930.744772][ T28] kthread+0x28d/0x320 [ 930.748864][ T28] ? hungtask_pm_notify+0x50/0x50 [ 930.753911][ T28] ? kthread_blkcg+0xd0/0xd0 [ 930.758519][ T28] ret_from_fork+0x1f/0x30 [ 930.762978][ T28] [ 930.767937][ T28] Sending NMI from CPU 1 to CPUs 0: [ 930.773180][ C0] NMI backtrace for cpu 0 [ 930.773201][ C0] CPU: 0 PID: 33 Comm: kworker/u4:2 Not tainted 6.1.125-syzkaller #0 [ 930.773219][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 930.773230][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 930.773264][ C0] RIP: 0010:lock_release+0x622/0xa20 [ 930.773292][ C0] Code: c7 84 24 90 00 00 00 00 00 00 00 9c 8f 84 24 90 00 00 00 42 80 3c 3b 00 74 08 4c 89 f7 e8 26 61 77 00 f6 84 24 91 00 00 00 02 <75> 6f 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 4b [ 930.773311][ C0] RSP: 0018:ffffc90000aa7920 EFLAGS: 00000046 [ 930.773324][ C0] RAX: 0000000000000001 RBX: 1ffff92000154f36 RCX: ffffc90000aa7903 [ 930.773337][ C0] RDX: 0000000000000003 RSI: ffffffff8b0c14c0 RDI: ffffffff8b5e67c0 [ 930.773349][ C0] RBP: ffffc90000aa7a50 R08: dffffc0000000000 R09: fffffbfff1d36196 [ 930.773362][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000154f30 [ 930.773374][ C0] R13: 0000000000000246 R14: ffffc90000aa79b0 R15: dffffc0000000000 [ 930.773386][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 930.773400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 930.773412][ C0] CR2: 0000563bb2d28448 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 930.773427][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 930.773437][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 930.773448][ C0] Call Trace: [ 930.773453][ C0] [ 930.773459][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 930.773476][ C0] ? read_lock_is_recursive+0x10/0x10 [ 930.773503][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 930.773520][ C0] ? nmi_handle+0x25/0x440 [ 930.773554][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 930.773570][ C0] ? nmi_handle+0x12e/0x440 [ 930.773595][ C0] ? nmi_handle+0x25/0x440 [ 930.773621][ C0] ? lock_release+0x622/0xa20 [ 930.773644][ C0] ? default_do_nmi+0x62/0x150 [ 930.773662][ C0] ? exc_nmi+0xa8/0x100 [ 930.773678][ C0] ? end_repeat_nmi+0x16/0x31 [ 930.773701][ C0] ? lock_release+0x622/0xa20 [ 930.773726][ C0] ? lock_release+0x622/0xa20 [ 930.773751][ C0] ? lock_release+0x622/0xa20 [ 930.773775][ C0] [ 930.773780][ C0] [ 930.773788][ C0] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 930.773817][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 930.773837][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 930.773867][ C0] ? batadv_tvlv_container_ogm_append+0x456/0x4c0 [ 930.773896][ C0] batadv_iv_ogm_schedule+0x6f4/0x1090 [ 930.773926][ C0] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 930.773972][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 930.774005][ C0] ? batadv_send_skb_packet+0x417/0x660 [ 930.774030][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 930.774071][ C0] ? process_one_work+0x7a9/0x11d0 [ 930.774095][ C0] process_one_work+0x8a9/0x11d0 [ 930.774127][ C0] ? worker_detach_from_pool+0x260/0x260 [ 930.774152][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 930.774176][ C0] ? kthread_data+0x4e/0xc0 [ 930.774207][ C0] ? wq_worker_running+0x97/0x190 [ 930.774227][ C0] worker_thread+0xa47/0x1200 [ 930.774251][ C0] ? release_firmware_map_entry+0x186/0x186 [ 930.774282][ C0] kthread+0x28d/0x320 [ 930.774298][ C0] ? worker_clr_flags+0x190/0x190 [ 930.774319][ C0] ? kthread_blkcg+0xd0/0xd0 [ 930.774337][ C0] ret_from_fork+0x1f/0x30 [ 930.774371][ C0] [ 930.786045][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 930.786060][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.125-syzkaller #0 [ 930.786085][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 930.786098][ T28] Call Trace: [ 930.786105][ T28] [ 930.786115][ T28] dump_stack_lvl+0x1e3/0x2cb [ 930.786158][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 930.786203][ T28] ? panic+0x764/0x764 [ 930.786245][ T28] ? llist_add_batch+0x160/0x1d0 [ 930.786280][ T28] ? vscnprintf+0x59/0x80 [ 930.786311][ T28] panic+0x318/0x764 [ 930.786338][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 930.786364][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 930.786395][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 930.786417][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 930.786451][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 930.786478][ T28] watchdog+0xfc7/0xfd0 [ 930.786515][ T28] ? watchdog+0x1f8/0xfd0 [ 930.786550][ T28] kthread+0x28d/0x320 [ 930.786569][ T28] ? hungtask_pm_notify+0x50/0x50 [ 930.786598][ T28] ? kthread_blkcg+0xd0/0xd0 [ 930.786620][ T28] ret_from_fork+0x1f/0x30 [ 930.786664][ T28] [ 930.787137][ T28] Kernel Offset: disabled [ 931.231958][ T28] Rebooting in 86400 seconds..