last executing test programs: 3m19.753967014s ago: executing program 2 (id=643): r0 = mq_open(&(0x7f0000000240)='3\\m\xcd\xef\xf2%D\xc2\xd8\x1b\x15y]\x0e\x1f\xd9\x16\x94\xf4\f\x12z{\xb9\xb5\x96\xea\xab\x8eR\xff\xd3H\"B\xa0\x89\x94\x1a\x9e\x16\x04\x19\x8a&\xc1\x88y\x12\xba\xac\x9c\xdb\x12%\xcbbY\xd1\xe4o\xbb \x05\x00\x00\x00\x00\x00\x00\x00\xd5Gf\xc4\xb1G\xd4\xa4k\x1d\x15{\xe6\x86\x95\xa0\xd7?\x99\xa1\x88t\xaf`N\xfe<\xb9\xbd\xc1\xd1\x06\xac\xe2\xa9z\xd1\x00\xad\xa7\xe0\xc3Y#\xf1\a\xef\xc5\x05D{\xc5\xf1U=!\x8f\n*\xe1\xd2@\x15\xff \xe7\xca\xa07\xeft\xc4I\xa1\xb8\x9bUW\xceX\xd0\xf69MK\x11\xa1\x8c\xa5', 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073"], 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = eventfd(0xe30a) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x80e, r0, 0x0, 0x0, 0x1, 0x0, 0x2, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x5, r4, 0x0, 0x0, 0x9, 0x0, 0x1, r5}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = io_uring_setup(0x36b1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socketpair(0x29, 0x2, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYRES16], 0x28) socket(0x21, 0x2, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff9909080584"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3m16.221327223s ago: executing program 2 (id=676): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(0x0, 0x0) 3m16.127006094s ago: executing program 2 (id=678): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newae={0x40, 0x1e, 0x1, 0x7, 0x25dfdbfe, {{@in=@broadcast, 0x4d5, 0x2, 0x6c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xef84, 0x3504}}, 0x40}}, 0x0) 3m15.817826527s ago: executing program 2 (id=684): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000340)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '\\'}}, {@obj_role}, {@obj_type={'obj_type', 0x3d, ' ^\x99'}}, {@subj_type={'subj_type', 0x3d, '(T\x00f\xd4\x82\xa2\x8d\xc4\xa6\xb2\xb4I\xb1\xac\x9f\xc1\xd5/\x04\x88\xe3\xf3\xedAL\xc6E\xcc\xb4\x147D\x83\x03\xaf\xa8\xbe 1\x0f\xaf\x03<\xcb\xfe\xdc\x81\xd0\vB\xb57\xa1p\x0e=\x8e\xf2\x96iy\xaa\xb6\xc1g\xc6\x85\xc9\x16F]\xa8\xb6S\xc6?\xec\x11\x94\x0f\xd6'}}, {@subj_type}, {@subj_role={'subj_role', 0x3d, 'nr_inodes'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x9, 0x61c, &(0x7f0000000700)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 3m15.524748769s ago: executing program 2 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcfff7ff00000000000000008500000041", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3m14.278298969s ago: executing program 2 (id=700): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002b00010000000000000000000201"], 0x114}], 0x1, 0x0, 0x0, 0x15}, 0x0) 3m13.710944904s ago: executing program 32 (id=700): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002b00010000000000000000000201"], 0x114}], 0x1, 0x0, 0x0, 0x15}, 0x0) 2m16.929418308s ago: executing program 1 (id=1208): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) unlink(&(0x7f00000000c0)='./file1\x00') 2m16.161185334s ago: executing program 1 (id=1214): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x810004b4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) close(0x3) 2m15.126243803s ago: executing program 1 (id=1219): r0 = mq_open(&(0x7f0000000240)='3\\m\xcd\xef\xf2%D\xc2\xd8\x1b\x15y]\x0e\x1f\xd9\x16\x94\xf4\f\x12z{\xb9\xb5\x96\xea\xab\x8eR\xff\xd3H\"B\xa0\x89\x94\x1a\x9e\x16\x04\x19\x8a&\xc1\x88y\x12\xba\xac\x9c\xdb\x12%\xcbbY\xd1\xe4o\xbb \x05\x00\x00\x00\x00\x00\x00\x00\xd5Gf\xc4\xb1G\xd4\xa4k\x1d\x15{\xe6\x86\x95\xa0\xd7?\x99\xa1\x88t\xaf`N\xfe<\xb9\xbd\xc1\xd1\x06\xac\xe2\xa9z\xd1\x00\xad\xa7\xe0\xc3Y#\xf1\a\xef\xc5\x05D{\xc5\xf1U=!\x8f\n*\xe1\xd2@\x15\xff \xe7\xca\xa07\xeft\xc4I\xa1\xb8\x9bUW\xceX\xd0\xf69MK\x11\xa1\x8c\xa5', 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073"], 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = eventfd(0xe30a) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x80e, r0, 0x0, 0x0, 0x1, 0x0, 0x2, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x5, r4, 0x0, 0x0, 0x9, 0x0, 0x1, r5}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = io_uring_setup(0x36b1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[], 0x28) socket(0x21, 0x2, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m11.294304525s ago: executing program 1 (id=1241): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0) 2m10.511814572s ago: executing program 1 (id=1252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0xffffffffffffffef, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f00000000c0)={0x2a, 0x1, 0xf0}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000969e00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000003b0009000000000000000000010000000c00048008000000", @ANYRES32=0x0, @ANYBLOB="90d2aa749d9c616c7b3f90915a7621f21cbef032a2805ba8a8052a73c03c70d03dccbc12a7bb76b68326b986f25a35db6f1aa2480becf6cf302d17de76ee961810e084acfc1ccbf336d7dd0d"], 0x20}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 2m9.070190183s ago: executing program 1 (id=1259): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000002500)=[{r0, 0x8}], 0x1, &(0x7f0000002540)={0x0, 0x989680}, 0x0, 0x0) 2m8.684508237s ago: executing program 33 (id=1259): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000002500)=[{r0, 0x8}], 0x1, &(0x7f0000002540)={0x0, 0x989680}, 0x0, 0x0) 44.4083934s ago: executing program 3 (id=1939): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @random="83d40100000e", @val, {@ipv6={0x86dd, @udp={0x0, 0x6, 'MF(', 0x10, 0x11, 0x0, @dev, @rand_addr=' \x01\x00', {[], {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}}}, 0xfdef) 44.181404192s ago: executing program 3 (id=1942): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 44.037928923s ago: executing program 3 (id=1944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r1, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}}, 0x4000) 43.838833025s ago: executing program 3 (id=1947): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 42.931918932s ago: executing program 3 (id=1958): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r0, 0x35) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000040)={0x3, 0x1, 0x8}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, &(0x7f0000000080)) 40.919167179s ago: executing program 3 (id=1977): rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 40.558165792s ago: executing program 34 (id=1977): rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.070509912s ago: executing program 4 (id=2289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @random="83d40100000e", @val, {@ipv6={0x86dd, @udp={0x0, 0x6, 'MF(', 0x10, 0x11, 0x0, @dev, @rand_addr=' \x01\x00', {[], {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}}}, 0xfdef) 5.933597621s ago: executing program 4 (id=2291): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x13, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x2a, &(0x7f0000000340)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x24dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xfff1, 0x8}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 4.87313805s ago: executing program 5 (id=2297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) 4.83599724s ago: executing program 7 (id=2299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f700000000c0a01030000000000000000010000000900020073797a32000000004400038040000080080003400000000234000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e746572000900010073797a30"], 0xf4}}, 0x0) 4.82466155s ago: executing program 4 (id=2300): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x100) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4}, {0x1, 0xfff3}}, [{0x8, 0xb, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000100012800801010076746905040002801c001a8018000a8014000700000000000000cf39205a62f3bed045bf0000000000000000"], 0x4c}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r8, 0x89f0, &(0x7f0000000100)={0x1, 0x1000, 0x2000000, 0x0, 0x0, "bb40af00008000"}) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5309, 0x0) 4.673205421s ago: executing program 0 (id=2302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @random="83d40100000e", @val, {@ipv6={0x86dd, @udp={0x0, 0x6, 'MF(', 0x10, 0x11, 0x0, @dev, @rand_addr=' \x01\x00', {[], {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}}}, 0xfdef) 4.672569401s ago: executing program 7 (id=2303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) 4.652600202s ago: executing program 5 (id=2304): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000"], 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32], 0x20) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x400, 0x5, @empty}, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x0, @private0, 0x2}}}, 0x90) r7 = dup(0xffffffffffffffff) sendmsg$inet(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @loopback}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='vcan0\x00', 0x0, 0x2, 0x3}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.492264143s ago: executing program 7 (id=2306): mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) io_submit(0x0, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa89ab9b4c72ca86dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110007"], 0x0) 4.385747784s ago: executing program 7 (id=2307): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x15, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000021009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000000009927120dc0c030900000000000000fa768b7a3c762ac75ba233ad45d57e0e665a2d56e70ba6065d95cde13a29a8e4be8b334895539849914d3bfd4ebbaa48e1270c5a034d7f73906ebe02e357744bf91771ff911bb0f5f5d1e5aeae7c9734c721b49e9b3b0e9d1a655609a8ab3705c92ef4b9f9cc0f45b53697a1969f249fdd4850cf8c2b248b779eb8ad2ecb334d5048b43db3062b99"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069111e0000000000851000000200000085000000a000000695000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000180001000000000000000000020000000000ff"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x8c7) setitimer(0x2, &(0x7f00000002c0), &(0x7f0000000300)) close_range(r4, 0xffffffffffffffff, 0x400000000000000) r6 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r6, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 2.762912307s ago: executing program 6 (id=2308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) dup2(r1, r0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.716197848s ago: executing program 5 (id=2309): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000006c0)) setns(r0, 0x20000) 2.657762498s ago: executing program 0 (id=2310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000000000008000548000000000900010073797a31001000003c0002000c00028005000100000000000a0001"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.657434128s ago: executing program 6 (id=2311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) 2.619888078s ago: executing program 6 (id=2312): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6e", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb", 0x33}, {&(0x7f0000000180)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506f20760e4cd8df9c220cd0728585229123f5c61507d00561b8f1a15e64fa2779be45e19422ca3c4cd87fba624fdeff4603eeaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb800000000000000000ff2d1e9d397a82e24debd371e975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb0600"/169, 0xa9}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.533082789s ago: executing program 0 (id=2313): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x1, 0x0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) 2.522360819s ago: executing program 7 (id=2314): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.502000569s ago: executing program 4 (id=2315): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000b5894e425517afcbafba66cd5d2d809cd923ae9c17fa6cd7c2b8621abe17bb3df70a75d2ce1bf4629d218bc07196143efbdb4628ec941f9b34ed8b90571f7d8edb5ef783cc79fe6f3e159cb68265eefa9f90881fac2852e56092b0b9b0e6d0bd8d34afd478fd86046963b0e483132af5e10fa95c20d398e621f6eeef82519b006a49e31101d570a1737c097d32318c8cd785a5fb566c0b638c12243efa2c4a41f1593d638ebf9f39a78eae417e30fc", @ANYRES16=r5], 0x14}}, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'lo\x00'}) 2.501647279s ago: executing program 5 (id=2316): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) 2.4058591s ago: executing program 6 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f700000000c0a01030000000000000000010000000900020073797a32000000004400038040000080080003400000000234000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e746572000900010073797a30"], 0xf4}}, 0x0) 2.39066388s ago: executing program 0 (id=2318): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}}], 0x2, 0x0) 2.371344201s ago: executing program 4 (id=2319): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000"], 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32], 0x20) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x400, 0x5, @empty}, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x0, @private0, 0x2}}}, 0x90) r7 = dup(0xffffffffffffffff) sendmsg$inet(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.314198411s ago: executing program 5 (id=2320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @random="83d40100000e", @val, {@ipv6={0x86dd, @udp={0x0, 0x6, 'MF(', 0x10, 0x11, 0x0, @dev, @rand_addr=' \x01\x00', {[], {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}}}, 0xfdef) 2.267814311s ago: executing program 6 (id=2321): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000"], 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32], 0x20) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x400, 0x5, @empty}, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x0, @private0, 0x2}}}, 0x90) r7 = dup(0xffffffffffffffff) sendmsg$inet(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @loopback}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='vcan0\x00', 0x0, 0x2, 0x3}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.040935114s ago: executing program 0 (id=2322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) 289.459868ms ago: executing program 4 (id=2323): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 185.487159ms ago: executing program 6 (id=2324): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x15, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000021009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000000009927120dc0c030900000000000000fa768b7a3c762ac75ba233ad45d57e0e665a2d56e70ba6065d95cde13a29a8e4be8b334895539849914d3bfd4ebbaa48e1270c5a034d7f73906ebe02e357744bf91771ff911bb0f5f5d1e5aeae7c9734c721b49e9b3b0e9d1a655609a8ab3705c92ef4b9f9cc0f45b53697a1969f249fdd4850cf8c2b248b779eb8ad2ecb334d5048b43db3062b99"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069111e0000000000851000000200000085000000a000000695000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000180001000000000000000000020000000000ff"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x8c7) setitimer(0x2, &(0x7f00000002c0), &(0x7f0000000300)) close_range(r4, 0xffffffffffffffff, 0x400000000000000) r6 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r6, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 178.865369ms ago: executing program 5 (id=2325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) 173.557299ms ago: executing program 0 (id=2326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x0) 0s ago: executing program 7 (id=2327): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6e", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb", 0x33}, {&(0x7f0000000180)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506f20760e4cd8df9c220cd0728585229123f5c61507d00561b8f1a15e64fa2779be45e19422ca3c4cd87fba624fdeff4603eeaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb800000000000000000ff2d1e9d397a82e24debd371e975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb0600"/169, 0xa9}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.827951][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.878335][ T6547] loop3: detected capacity change from 0 to 4096 [ 148.919912][ T6227] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.952242][ T6227] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.956977][ T6547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.995168][ T6227] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.065023][ T6227] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.071274][ T6555] loop1: detected capacity change from 0 to 512 [ 149.101348][ T6540] EXT4-fs (loop3): shut down requested (0) [ 149.231538][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 149.314537][ T6555] EXT4-fs (loop1): too many log groups per flexible block group [ 149.354357][ T6555] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 149.367114][ T6555] EXT4-fs (loop1): mount failed [ 149.452622][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.494987][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.543298][ T5084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.576672][ T5084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.587562][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.639947][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.678555][ T6568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.686386][ T6568] IPv6: NLM_F_CREATE should be set when creating new route [ 149.913400][ T6577] netlink: 44 bytes leftover after parsing attributes in process `syz.4.824'. [ 150.747487][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 150.877897][ T6613] loop4: detected capacity change from 0 to 128 [ 150.926860][ T6613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 150.966939][ T6613] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.290072][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 151.559144][ T6641] ip6t_rpfilter: unknown options [ 152.087635][ T6660] ip6t_rpfilter: unknown options [ 152.335711][ T6662] loop4: detected capacity change from 0 to 4096 [ 152.604883][ T6662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.650605][ T6660] EXT4-fs (loop4): shut down requested (0) [ 152.894528][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 153.116518][ T6675] loop5: detected capacity change from 0 to 512 [ 153.206934][ T6675] EXT4-fs (loop5): too many log groups per flexible block group [ 153.235196][ T6675] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 153.252114][ T6675] EXT4-fs (loop5): mount failed [ 153.915603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 153.923859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 153.932120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 153.940392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 153.948600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 153.956813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 153.965002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 153.973300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 153.981592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 153.989859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 154.171769][ T6713] ip6t_rpfilter: unknown options [ 154.177455][ T6709] loop1: detected capacity change from 0 to 1024 [ 154.259390][ T6709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.504132][ T6717] loop4: detected capacity change from 0 to 4096 [ 155.044067][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.099440][ T6717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.245436][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 155.283566][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 155.457929][ T7] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 155.481049][ T7] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 155.529858][ T7] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 155.592248][ T7] usb 6-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 155.658944][ T7] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 155.702500][ T7] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 155.729210][ T7] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 155.747038][ T7] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 155.764284][ T7] usb 6-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 155.784608][ T7] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 155.802226][ T7] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 155.811973][ T7] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 155.828321][ T7] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 155.854167][ T7] usb 6-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 155.884568][ T7] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 155.929462][ T7] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 155.972304][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.032833][ T7] usb 6-1: Product: syz [ 156.052977][ T7] usb 6-1: Manufacturer: syz [ 156.065543][ T7] usb 6-1: SerialNumber: syz [ 157.024484][ T6760] loop3: detected capacity change from 0 to 1024 [ 157.114128][ T6760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.144125][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 157.144143][ T26] audit: type=1804 audit(1732141109.144:961): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.879" name="/newroot/181/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 157.312314][ T26] audit: type=1804 audit(1732141109.194:962): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.879" name="/newroot/181/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 157.431466][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 157.876008][ T7] adutux 6-1:246.0: interrupt endpoints not found [ 157.911142][ T7] usb 6-1: USB disconnect, device number 2 [ 157.916191][ T6695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.949797][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 158.111198][ T6784] capability: warning: `syz.3.884' uses 32-bit capabilities (legacy support in use) [ 158.901466][ T6812] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 5 [ 159.048369][ T6818] netlink: 100 bytes leftover after parsing attributes in process `syz.1.896'. [ 159.266810][ T6827] process 'syz.1.900' launched './file0' with NULL argv: empty string added [ 160.604995][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'. [ 160.779778][ T26] audit: type=1326 audit(1732141112.784:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x0 [ 160.848179][ T6893] loop5: detected capacity change from 0 to 256 [ 160.908400][ T26] audit: type=1804 audit(1732141112.914:964): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.922" name="/newroot/13/file1/file0" dev="loop5" ino=1048605 res=1 errno=0 [ 161.663559][ T6923] loop5: detected capacity change from 0 to 512 [ 161.665452][ T26] audit: type=1326 audit(1732141113.664:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 161.729516][ T6923] EXT4-fs (loop5): too many log groups per flexible block group [ 161.741673][ T26] audit: type=1326 audit(1732141113.664:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 161.743844][ T6923] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 161.771138][ T6923] EXT4-fs (loop5): mount failed [ 161.958379][ T26] audit: type=1326 audit(1732141113.704:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 162.713076][ T26] audit: type=1326 audit(1732141113.704:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 162.765730][ T26] audit: type=1326 audit(1732141113.704:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 162.886267][ T26] audit: type=1326 audit(1732141113.704:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 162.909189][ T26] audit: type=1326 audit(1732141113.704:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 162.931898][ T26] audit: type=1326 audit(1732141113.704:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 162.960200][ T26] audit: type=1326 audit(1732141113.704:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 162.983663][ T26] audit: type=1326 audit(1732141113.714:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 163.043961][ T26] audit: type=1326 audit(1732141113.714:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 163.133346][ T6953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.943'. [ 163.184060][ T26] audit: type=1326 audit(1732141113.724:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 163.285420][ T26] audit: type=1326 audit(1732141113.724:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 163.744388][ T6984] loop4: detected capacity change from 0 to 256 [ 163.762214][ T6979] loop1: detected capacity change from 0 to 1024 [ 163.853582][ T6979] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.097704][ T6981] ip6t_rpfilter: unknown options [ 164.820853][ T6989] loop5: detected capacity change from 0 to 4096 [ 164.827483][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 165.047592][ T7015] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 165.095763][ T6989] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 165.176076][ T6981] EXT4-fs (loop5): shut down requested (0) [ 165.576876][ T7032] loop3: detected capacity change from 0 to 256 [ 166.048132][ T7050] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 166.825251][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 167.018963][ T7090] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 167.545385][ T7110] ip6t_rpfilter: unknown options [ 168.032046][ T7094] sctp: failed to load transform for md5: -2 [ 168.316184][ T7116] loop4: detected capacity change from 0 to 4096 [ 168.395400][ T7116] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.507243][ T7122] syz.0.995 uses obsolete (PF_INET,SOCK_PACKET) [ 168.718157][ T7132] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 168.752435][ T7130] loop1: detected capacity change from 0 to 512 [ 168.870406][ T7130] EXT4-fs (loop1): too many log groups per flexible block group [ 168.895573][ T7130] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 168.902528][ T7130] EXT4-fs (loop1): mount failed [ 169.432725][ T7154] ip6t_rpfilter: unknown options [ 169.709266][ T7155] loop3: detected capacity change from 0 to 4096 [ 169.992018][ T7155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 170.032843][ T7154] EXT4-fs (loop3): shut down requested (0) [ 170.292186][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 170.367019][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 170.374610][ T7167] loop5: detected capacity change from 0 to 1024 [ 170.541088][ T7167] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.525266][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 171.581812][ T7201] loop3: detected capacity change from 0 to 1024 [ 171.609990][ T7201] ext4: Bad value for 'max_dir_size_kb' [ 171.720029][ T7203] loop5: detected capacity change from 0 to 256 [ 171.827723][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 171.827739][ T26] audit: type=1804 audit(1732141123.834:1038): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1023" name="/newroot/28/file1/file0" dev="loop5" ino=1048608 res=1 errno=0 [ 171.909438][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.020136][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1025'. [ 172.815101][ T7214] loop4: detected capacity change from 0 to 128 [ 173.027028][ T7217] netlink: 'syz.5.1028': attribute type 10 has an invalid length. [ 173.069168][ T7217] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1028'. [ 173.096240][ T7217] bridge0: port 3(macvlan1) entered blocking state [ 173.125883][ T7217] bridge0: port 3(macvlan1) entered disabled state [ 173.156881][ T7217] device macvlan1 entered promiscuous mode [ 173.196434][ T7217] bridge0: port 3(macvlan1) entered blocking state [ 173.204075][ T7217] bridge0: port 3(macvlan1) entered forwarding state [ 173.222310][ T7226] ip6t_rpfilter: unknown options [ 173.316458][ T7226] loop1: detected capacity change from 0 to 4096 [ 173.418361][ T7226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 173.431243][ T7226] EXT4-fs (loop1): shut down requested (0) [ 173.684237][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1034'. [ 173.913377][ T7248] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 173.971916][ T7256] device bond1 entered promiscuous mode [ 174.084017][ T7253] loop5: detected capacity change from 0 to 2048 [ 174.112516][ T7256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.165152][ T7253] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 174.286273][ T7253] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.420751][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 174.544779][ T7272] loop3: detected capacity change from 0 to 512 [ 174.586726][ T7272] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.675892][ T7272] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 174.738149][ T7272] EXT4-fs (loop3): 1 truncate cleaned up [ 174.743850][ T7272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.774972][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 174.800619][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 174.830626][ T7282] loop4: detected capacity change from 0 to 1024 [ 174.986928][ T7282] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.060198][ T26] audit: type=1326 audit(1732141127.064:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092677e819 code=0x7ffc0000 [ 175.224044][ T26] audit: type=1326 audit(1732141127.094:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092677e819 code=0x7ffc0000 [ 175.879028][ T26] audit: type=1326 audit(1732141127.094:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f092677e819 code=0x7ffc0000 [ 175.919886][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 176.053099][ T26] audit: type=1326 audit(1732141127.094:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092677e819 code=0x7ffc0000 [ 176.165510][ T26] audit: type=1326 audit(1732141127.094:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092677e819 code=0x7ffc0000 [ 176.227726][ T7320] loop5: detected capacity change from 0 to 128 [ 176.258523][ T26] audit: type=1326 audit(1732141127.094:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f092677e819 code=0x7ffc0000 [ 176.303019][ T26] audit: type=1326 audit(1732141127.094:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092677e819 code=0x7ffc0000 [ 176.320757][ T7320] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 176.380542][ T7320] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.413326][ T26] audit: type=1326 audit(1732141127.094:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092677e819 code=0x7ffc0000 [ 176.435985][ T26] audit: type=1326 audit(1732141127.114:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f092677e819 code=0x7ffc0000 [ 176.581181][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1063'. [ 176.650422][ T7320] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.824659][ T7320] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.893753][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 176.893768][ T26] audit: type=1326 audit(1732141128.894:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 177.021489][ T26] audit: type=1326 audit(1732141128.924:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 177.098388][ T7320] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.120823][ T26] audit: type=1326 audit(1732141128.924:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 177.189162][ T26] audit: type=1326 audit(1732141128.924:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 177.251050][ T26] audit: type=1326 audit(1732141128.924:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 177.284257][ T26] audit: type=1326 audit(1732141128.924:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 177.432004][ T26] audit: type=1326 audit(1732141128.924:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 177.520485][ T26] audit: type=1326 audit(1732141128.934:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 177.608438][ T7320] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.028786][ T7320] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.030336][ T7359] loop3: detected capacity change from 0 to 256 [ 178.084115][ T26] audit: type=1804 audit(1732141130.084:1066): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1071" name="/newroot/216/file1/file0" dev="loop3" ino=1048610 res=1 errno=0 [ 178.132065][ T7320] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.204409][ T7320] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.249547][ T26] audit: type=1326 audit(1732141130.254:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 178.284102][ T7320] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.408546][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 178.897782][ T7386] Falling back ldisc for ttyS3. [ 179.391079][ T7410] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 179.408634][ T7409] cgroup: Need name or subsystem set [ 179.581301][ T7388] team0 (unregistering): Port device team_slave_0 removed [ 179.610887][ T7388] team0 (unregistering): Port device team_slave_1 removed [ 179.753258][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1090'. [ 179.831362][ T7428] binfmt_misc: register: failed to install interpreter file ./file0 [ 180.073651][ T7436] loop1: detected capacity change from 0 to 128 [ 180.096325][ T7437] netlink: 'syz.3.1100': attribute type 4 has an invalid length. [ 180.771763][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1110'. [ 180.841577][ T7468] ip6t_rpfilter: unknown options [ 180.886523][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 180.894193][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 180.901741][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 181.128946][ T7471] loop5: detected capacity change from 0 to 4096 [ 181.140619][ T4251] Bluetooth: hci0: command 0x0406 tx timeout [ 181.467282][ T7471] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 181.521238][ T7462] EXT4-fs (loop5): shut down requested (0) [ 181.594473][ T7480] loop1: detected capacity change from 0 to 512 [ 181.620662][ T7480] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.773413][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 181.782879][ T7480] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 181.861352][ T7480] System zones: 1-12 [ 181.897085][ T7480] EXT4-fs (loop1): 1 truncate cleaned up [ 181.902773][ T7480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 182.014714][ T7480] EXT4-fs (loop1): unmounting filesystem. [ 182.186457][ T7502] ip6t_rpfilter: unknown options [ 182.643660][ T7502] loop4: detected capacity change from 0 to 4096 [ 182.693462][ T7502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.732550][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1125'. [ 182.802481][ T7502] EXT4-fs (loop4): shut down requested (0) [ 182.818512][ T26] kauditd_printk_skb: 89 callbacks suppressed [ 182.818527][ T26] audit: type=1326 audit(1732141134.824:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 182.956805][ T26] audit: type=1326 audit(1732141134.824:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 183.057438][ T26] audit: type=1326 audit(1732141134.864:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 183.084142][ T7537] loop1: detected capacity change from 0 to 256 [ 183.154593][ T26] audit: type=1326 audit(1732141134.864:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 183.188302][ T7537] FAT-fs (loop1): Directory bread(block 64) failed [ 183.202984][ T7537] FAT-fs (loop1): Directory bread(block 65) failed [ 183.220362][ T7537] FAT-fs (loop1): Directory bread(block 66) failed [ 183.227400][ T26] audit: type=1326 audit(1732141134.864:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 183.277700][ T7537] FAT-fs (loop1): Directory bread(block 67) failed [ 183.310666][ T7537] FAT-fs (loop1): Directory bread(block 68) failed [ 183.335587][ T7537] FAT-fs (loop1): Directory bread(block 69) failed [ 183.342238][ T7537] FAT-fs (loop1): Directory bread(block 70) failed [ 183.350492][ T26] audit: type=1326 audit(1732141134.864:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 183.394305][ T7537] FAT-fs (loop1): Directory bread(block 71) failed [ 183.412562][ T7546] loop3: detected capacity change from 0 to 256 [ 183.423478][ T7537] FAT-fs (loop1): Directory bread(block 72) failed [ 183.434858][ T26] audit: type=1326 audit(1732141134.864:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 183.459681][ T7537] FAT-fs (loop1): Directory bread(block 73) failed [ 183.482260][ T7546] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 183.494174][ T26] audit: type=1326 audit(1732141134.864:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 183.562948][ T7537] syz.1.1128: attempt to access beyond end of device [ 183.562948][ T7537] loop1: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 183.633339][ T26] audit: type=1326 audit(1732141134.874:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 183.673201][ T7537] syz.1.1128: attempt to access beyond end of device [ 183.673201][ T7537] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 183.712472][ T7537] syz.1.1128: attempt to access beyond end of device [ 183.712472][ T7537] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 183.749696][ T26] audit: type=1326 audit(1732141134.874:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 183.810041][ T7537] syz.1.1128: attempt to access beyond end of device [ 183.810041][ T7537] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 184.428409][ T7580] loop1: detected capacity change from 0 to 128 [ 184.435265][ T7580] EXT4-fs: Ignoring removed nobh option [ 184.561430][ T7580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.621770][ T7580] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.661660][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 184.869772][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 185.141595][ T7605] loop4: detected capacity change from 0 to 1024 [ 185.200154][ T7605] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.262226][ T7605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 185.463752][ T7623] loop5: detected capacity change from 0 to 1024 [ 185.484897][ T7623] ext4: Bad value for 'max_dir_size_kb' [ 185.736497][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 186.587111][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1159'. [ 186.956271][ T7637] ip6t_rpfilter: unknown options [ 187.513290][ T7672] ip6t_rpfilter: unknown options [ 188.140169][ T7674] loop5: detected capacity change from 0 to 1024 [ 188.172380][ T7637] loop4: detected capacity change from 0 to 4096 [ 188.220132][ T7674] ext4: Bad value for 'max_dir_size_kb' [ 188.289170][ T26] kauditd_printk_skb: 118 callbacks suppressed [ 188.289186][ T26] audit: type=1326 audit(1732141140.294:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 188.400318][ T26] audit: type=1326 audit(1732141140.334:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 188.482762][ T7637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.543631][ T26] audit: type=1326 audit(1732141140.334:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 188.851361][ T26] audit: type=1326 audit(1732141140.334:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 188.998749][ T26] audit: type=1326 audit(1732141140.334:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 189.063515][ T26] audit: type=1326 audit(1732141140.334:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 189.215986][ T26] audit: type=1326 audit(1732141140.334:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 189.332450][ T26] audit: type=1326 audit(1732141140.334:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 190.264198][ T7716] loop5: detected capacity change from 0 to 4096 [ 190.300631][ T7713] ip6t_rpfilter: unknown options [ 190.391908][ T4640] udevd[4640]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 190.493604][ T7716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.514415][ T7712] EXT4-fs (loop5): shut down requested (0) [ 190.682115][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 190.775052][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 190.845135][ T26] audit: type=1326 audit(1732141142.844:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 190.934490][ T7728] loop1: detected capacity change from 0 to 1024 [ 190.973212][ T26] audit: type=1326 audit(1732141142.844:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 191.034455][ T7728] ext4: Bad value for 'max_dir_size_kb' [ 191.100922][ T7734] loop3: detected capacity change from 0 to 1024 [ 191.269410][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1193'. [ 191.312191][ T7734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 192.855093][ T7771] tmpfs: Bad value for 'mpol' [ 192.938594][ T7774] loop1: detected capacity change from 0 to 1024 [ 193.016563][ T7774] EXT4-fs: Ignoring removed orlov option [ 193.062616][ T7774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.184412][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 193.204419][ T7774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 193.239899][ T7778] ip6t_rpfilter: unknown options [ 193.572254][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 194.158243][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.164622][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.274370][ T7778] loop5: detected capacity change from 0 to 4096 [ 194.290576][ T7793] atomic_op ffff888076aad998 conn xmit_atomic 0000000000000000 [ 194.415997][ T7778] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 194.432326][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1216'. [ 194.823282][ T7809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.085404][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 195.085418][ T26] audit: type=1326 audit(1732141147.084:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.126007][ T4293] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 195.151724][ T7817] loop3: detected capacity change from 0 to 1024 [ 195.166411][ T7819] ip6t_rpfilter: unknown options [ 195.243641][ T7817] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.295113][ T26] audit: type=1326 audit(1732141147.124:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.318508][ T4293] usb 2-1: device descriptor read/64, error -71 [ 195.395730][ T26] audit: type=1326 audit(1732141147.144:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.418617][ T26] audit: type=1326 audit(1732141147.144:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.435339][ T7817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.441657][ T26] audit: type=1326 audit(1732141147.154:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.472062][ T26] audit: type=1326 audit(1732141147.174:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.494480][ T26] audit: type=1326 audit(1732141147.174:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.522064][ T26] audit: type=1326 audit(1732141147.174:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.545036][ T26] audit: type=1326 audit(1732141147.174:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.595455][ T26] audit: type=1326 audit(1732141147.174:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 195.655478][ T4293] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 195.697641][ T7827] 9pnet_fd: p9_fd_create_tcp (7827): problem connecting socket to 127.0.0.1 [ 195.723035][ T7819] loop4: detected capacity change from 0 to 4096 [ 195.750630][ T7817] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.1223: missing EA_INODE flag [ 195.816019][ T4293] usb 2-1: device descriptor read/64, error -71 [ 195.882808][ T7817] EXT4-fs (loop3): Remounting filesystem read-only [ 195.930863][ T7817] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1223: error while reading EA inode 11 err=-117 [ 195.956603][ T4293] usb usb2-port1: attempt power cycle [ 196.021889][ T7819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.048998][ T7817] EXT4-fs (loop3): Remounting filesystem read-only [ 196.136704][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 196.146548][ T7819] EXT4-fs (loop4): shut down requested (0) [ 196.332539][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 196.385601][ T4293] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 196.473457][ T4293] usb 2-1: device descriptor read/8, error -71 [ 196.775499][ T4293] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.817331][ T4293] usb 2-1: device descriptor read/8, error -71 [ 196.936719][ T4293] usb usb2-port1: unable to enumerate USB device [ 197.406224][ T7856] loop3: detected capacity change from 0 to 256 [ 197.501603][ T7860] ip6t_rpfilter: unknown options [ 197.764512][ T7862] loop5: detected capacity change from 0 to 4096 [ 198.261054][ T7862] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 198.280396][ T7857] EXT4-fs (loop5): shut down requested (0) [ 198.319794][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 198.474704][ T7867] loop1: detected capacity change from 0 to 512 [ 198.565484][ T7867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.577769][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 198.632021][ T7867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 198.682120][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1243'. [ 198.776948][ T7867] System zones: 1-12 [ 198.787381][ T7867] EXT4-fs (loop1): 1 truncate cleaned up [ 198.800956][ T7867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 198.811624][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 198.955936][ T7867] loop1: detected capacity change from 512 to 64 [ 198.977934][ T7887] syz.1.1241: attempt to access beyond end of device [ 198.977934][ T7887] loop1: rw=524288, sector=54, nr_sectors = 18 limit=64 [ 199.010958][ T7887] syz.1.1241: attempt to access beyond end of device [ 199.010958][ T7887] loop1: rw=0, sector=62, nr_sectors = 8 limit=64 [ 199.031886][ T7886] Process accounting resumed [ 199.171591][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.196194][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.223462][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.267119][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.309764][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.512023][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.546191][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.578188][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.603277][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.676766][ T7896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.697924][ T7902] ip6t_rpfilter: unknown options [ 199.706505][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.783702][ T4250] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 199.931829][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.185383][ T4328] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 200.332301][ T4250] bridge0: port 3(syz_tun) entered disabled state [ 200.355467][ T4328] usb 4-1: device descriptor read/64, error -71 [ 200.427671][ T4250] device syz_tun left promiscuous mode [ 200.433224][ T4250] bridge0: port 3(syz_tun) entered disabled state [ 200.436498][ T7905] loop5: detected capacity change from 0 to 4096 [ 200.539310][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 200.645844][ T4328] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 200.767413][ T4900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.780266][ T7905] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.815448][ T4328] usb 4-1: device descriptor read/64, error -71 [ 200.899047][ T4900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.910409][ T7902] EXT4-fs (loop5): shut down requested (0) [ 200.949138][ T4328] usb usb4-port1: attempt power cycle [ 201.034180][ T4900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.213957][ T4900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.378221][ T4328] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 201.426154][ T4328] usb 4-1: device descriptor read/8, error -71 [ 201.732569][ T4328] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.796932][ T4328] usb 4-1: device descriptor read/8, error -71 [ 201.915688][ T4328] usb usb4-port1: unable to enumerate USB device [ 202.225214][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.235731][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.244148][ T4251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.253921][ T4266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.261569][ T4266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 202.269000][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.623878][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 202.623894][ T26] audit: type=1326 audit(1732141154.624:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 202.741655][ T26] audit: type=1326 audit(1732141154.624:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fece6f7d0b7 code=0x7ffc0000 [ 202.826869][ T26] audit: type=1326 audit(1732141154.624:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 202.906617][ T26] audit: type=1326 audit(1732141154.624:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 203.023191][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 203.087265][ T26] audit: type=1326 audit(1732141154.624:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 203.203221][ T26] audit: type=1326 audit(1732141154.654:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 203.308392][ T26] audit: type=1326 audit(1732141154.654:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 203.373955][ T26] audit: type=1326 audit(1732141154.654:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 203.441642][ T26] audit: type=1326 audit(1732141154.664:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 203.512345][ T26] audit: type=1326 audit(1732141154.974:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 203.566766][ T7935] chnl_net:caif_netlink_parms(): no params data found [ 203.856124][ T4900] device hsr_slave_0 left promiscuous mode [ 203.887930][ T4900] device hsr_slave_1 left promiscuous mode [ 203.919036][ T7975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.929723][ T4900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.955511][ T4900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.981525][ T4900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.115779][ T4900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.377106][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 204.949302][ T4900] device bridge_slave_1 left promiscuous mode [ 204.958622][ T4900] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.011953][ T4900] device bridge_slave_0 left promiscuous mode [ 205.045813][ T4328] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 205.060024][ T4900] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.163621][ T4900] device veth1_macvtap left promiscuous mode [ 205.171369][ T4900] device veth0_macvtap left promiscuous mode [ 205.211774][ T4900] device veth1_vlan left promiscuous mode [ 205.235515][ T4328] usb 6-1: device descriptor read/64, error -71 [ 205.244891][ T4900] device veth0_vlan left promiscuous mode [ 205.516784][ T4328] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 205.731062][ T4328] usb 6-1: device descriptor read/64, error -71 [ 205.868747][ T4328] usb usb6-port1: attempt power cycle [ 206.152538][ T8010] ip6t_rpfilter: unknown options [ 206.285612][ T4328] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 206.336449][ T4328] usb 6-1: device descriptor read/8, error -71 [ 206.476064][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 206.615557][ T4328] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 206.752041][ T4328] usb 6-1: device descriptor read/8, error -71 [ 206.868576][ T4900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.893318][ T4328] usb usb6-port1: unable to enumerate USB device [ 206.988909][ T4900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.474352][ T8022] loop5: detected capacity change from 0 to 1024 [ 207.498413][ T8022] ext4: Bad value for 'max_dir_size_kb' [ 209.583817][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 209.668525][ T4900] bond0 (unregistering): Released all slaves [ 209.735265][ T8030] loop5: detected capacity change from 0 to 164 [ 209.804858][ T8030] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 209.923922][ T8008] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1285'. [ 210.078278][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.153986][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.164488][ T7935] device bridge_slave_0 entered promiscuous mode [ 210.188753][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.196289][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.204451][ T7935] device bridge_slave_1 entered promiscuous mode [ 210.347050][ T8043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.454388][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.601065][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.650615][ T3582] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 210.689042][ T8059] ip6t_rpfilter: unknown options [ 211.595600][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 211.606802][ T7935] team0: Port device team_slave_0 added [ 211.635447][ T3582] usb 6-1: device descriptor read/64, error -71 [ 211.672649][ T7935] team0: Port device team_slave_1 added [ 211.690724][ T8064] loop3: detected capacity change from 0 to 1024 [ 211.716470][ T8064] ext4: Bad value for 'max_dir_size_kb' [ 211.793892][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.886398][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 211.886413][ T26] audit: type=1326 audit(1732141163.894:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 211.931051][ T3582] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 211.939042][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.965610][ T7935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.623934][ T26] audit: type=1326 audit(1732141163.924:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 212.659617][ T26] audit: type=1326 audit(1732141163.944:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 212.721694][ T26] audit: type=1326 audit(1732141163.944:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 212.792514][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.797943][ T26] audit: type=1326 audit(1732141163.944:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 212.822036][ T3582] usb 6-1: device descriptor read/64, error -71 [ 212.828660][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.873959][ T26] audit: type=1326 audit(1732141164.004:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 212.896440][ T26] audit: type=1326 audit(1732141164.004:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 212.925960][ T26] audit: type=1326 audit(1732141164.004:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 212.949226][ T3582] usb usb6-port1: attempt power cycle [ 212.976042][ T7935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.988166][ T26] audit: type=1326 audit(1732141164.004:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 213.030423][ T26] audit: type=1326 audit(1732141164.014:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 213.141656][ T7935] device hsr_slave_0 entered promiscuous mode [ 213.175657][ T7935] device hsr_slave_1 entered promiscuous mode [ 213.197624][ T7935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.230435][ T7935] Cannot create hsr debugfs directory [ 213.405448][ T3582] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 213.540040][ T8088] loop3: detected capacity change from 0 to 256 [ 213.774806][ T7935] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 213.843865][ T8094] ip6t_rpfilter: unknown options [ 214.518805][ T7935] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.677037][ T7935] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.753835][ T7935] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.082073][ T8104] ip6t_rpfilter: unknown options [ 215.289517][ T8105] loop3: detected capacity change from 0 to 4096 [ 215.909241][ T8108] loop4: detected capacity change from 0 to 1024 [ 215.909264][ T8105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 215.941993][ T8102] EXT4-fs (loop3): shut down requested (0) [ 215.976997][ T8108] ext4: Bad value for 'max_dir_size_kb' [ 216.024766][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.048792][ T7935] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.218329][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 216.224574][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.696900][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.822830][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.952194][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.996157][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.003336][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.061127][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.126595][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.166743][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.175274][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.182475][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.212788][ T3582] usb 6-1: device descriptor read/8, error -71 [ 217.232132][ T8121] loop3: detected capacity change from 0 to 1024 [ 217.252801][ T8121] ext4: Bad value for 'max_dir_size_kb' [ 217.272066][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.354705][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.373767][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.386624][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.396076][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.405059][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.420613][ T7935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.506032][ T7935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.577544][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.608444][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.709056][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.096171][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.176962][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.245450][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.839263][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.871817][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.923281][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.952952][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.005617][ T8172] loop5: detected capacity change from 0 to 512 [ 219.083371][ T8172] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 219.127524][ T8172] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.241009][ T8178] Process accounting resumed [ 219.345707][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 219.505751][ T14] usb 1-1: device descriptor read/64, error -71 [ 219.564064][ T8178] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 219.730122][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 219.775649][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 219.850879][ T8191] loop3: detected capacity change from 0 to 256 [ 219.851671][ T8190] loop4: detected capacity change from 0 to 1024 [ 219.886196][ T8190] ext4: Bad value for 'max_dir_size_kb' [ 219.965397][ T14] usb 1-1: device descriptor read/64, error -71 [ 220.085568][ T14] usb usb1-port1: attempt power cycle [ 220.107776][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 220.107787][ T26] audit: type=1804 audit(1732141172.114:1412): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1335" name="/newroot/273/file1/file0" dev="loop3" ino=1048614 res=1 errno=0 [ 221.075464][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 221.141641][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.156238][ T14] usb 1-1: device descriptor read/8, error -71 [ 221.187797][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.231385][ T7935] device veth0_vlan entered promiscuous mode [ 221.272754][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.315092][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.368687][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.376813][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.434590][ T7935] device veth1_vlan entered promiscuous mode [ 221.445493][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 221.487894][ T14] usb 1-1: device descriptor read/8, error -71 [ 221.543619][ T7935] device veth0_macvtap entered promiscuous mode [ 221.598721][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.615983][ T14] usb usb1-port1: unable to enumerate USB device [ 221.630634][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.704141][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.713288][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.724536][ T7935] device veth1_macvtap entered promiscuous mode [ 221.757117][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.769743][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.813992][ T7935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.843500][ T7935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.861023][ T7935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.873159][ T7935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.932363][ T7935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.961460][ T8232] loop5: detected capacity change from 0 to 1024 [ 221.968924][ T7935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.982272][ T7935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.029090][ T8232] ext4: Bad value for 'max_dir_size_kb' [ 222.075712][ T7935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.113132][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.126489][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.146360][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.176722][ T7935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.192621][ T7935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.202962][ T7935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.214126][ T7935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.224370][ T7935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.246696][ T7935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.263828][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.278625][ T7935] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.294436][ T7935] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.321258][ T7935] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.331611][ T8235] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 222.331611][ T8235] The task syz.3.1348 (8235) triggered the difference, watch for misbehavior. [ 222.373251][ T7935] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.955633][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.016395][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.032131][ T8241] loop4: detected capacity change from 0 to 128 [ 223.115184][ T8241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 223.145272][ T8241] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.262343][ T4900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.295552][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'. [ 223.319840][ T4900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.385224][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.429004][ T5593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.474179][ T5593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.486828][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 223.577690][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.102875][ T8273] lo speed is unknown, defaulting to 1000 [ 224.130138][ T8273] lo speed is unknown, defaulting to 1000 [ 224.145251][ T8273] lo speed is unknown, defaulting to 1000 [ 224.164678][ T8273] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 224.267957][ T8277] loop5: detected capacity change from 0 to 256 [ 224.443589][ T8277] FAT-fs (loop5): Directory bread(block 64) failed [ 224.469034][ T8273] lo speed is unknown, defaulting to 1000 [ 224.491610][ T8277] FAT-fs (loop5): Directory bread(block 65) failed [ 224.531126][ T8273] lo speed is unknown, defaulting to 1000 [ 224.671288][ T8273] lo speed is unknown, defaulting to 1000 [ 224.677946][ T8277] FAT-fs (loop5): Directory bread(block 66) failed [ 224.684601][ T8277] FAT-fs (loop5): Directory bread(block 67) failed [ 224.691594][ T8277] FAT-fs (loop5): Directory bread(block 68) failed [ 224.698550][ T8277] FAT-fs (loop5): Directory bread(block 69) failed [ 224.705233][ T8277] FAT-fs (loop5): Directory bread(block 70) failed [ 224.768951][ T8302] ip6t_rpfilter: unknown options [ 225.443041][ T8277] FAT-fs (loop5): Directory bread(block 71) failed [ 225.455570][ T8277] FAT-fs (loop5): Directory bread(block 72) failed [ 225.462156][ T8277] FAT-fs (loop5): Directory bread(block 73) failed [ 225.616491][ T8273] lo speed is unknown, defaulting to 1000 [ 225.691570][ T8297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.724687][ T8273] lo speed is unknown, defaulting to 1000 [ 225.806399][ T26] audit: type=1326 audit(1732141177.814:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 225.953343][ T8313] loop6: detected capacity change from 0 to 512 [ 225.964154][ T26] audit: type=1326 audit(1732141177.814:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 226.016335][ T8273] syz.5.1358: attempt to access beyond end of device [ 226.016335][ T8273] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 226.061341][ T8313] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 226.124760][ T8313] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 226.125545][ T125] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 226.150129][ T8313] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 226.163147][ T26] audit: type=1326 audit(1732141177.834:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 226.196102][ T8273] syz.5.1358: attempt to access beyond end of device [ 226.196102][ T8273] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 226.280897][ T8313] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.1371: Directory hole found for htree leaf block 0 [ 226.315538][ T125] usb 4-1: device descriptor read/64, error -71 [ 226.377743][ T26] audit: type=1326 audit(1732141177.834:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 226.485699][ T26] audit: type=1326 audit(1732141177.834:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 226.525428][ T26] audit: type=1326 audit(1732141177.844:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 226.585487][ T125] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 226.632337][ T26] audit: type=1326 audit(1732141177.844:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 226.709177][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 226.755580][ T125] usb 4-1: device descriptor read/64, error -71 [ 226.782500][ T26] audit: type=1326 audit(1732141177.844:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 226.858767][ T8334] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1375'. [ 226.876063][ T125] usb usb4-port1: attempt power cycle [ 226.907671][ T8331] loop5: detected capacity change from 0 to 2048 [ 226.922481][ T8333] loop6: detected capacity change from 0 to 1024 [ 226.938064][ T26] audit: type=1326 audit(1732141178.054:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 226.969340][ T26] audit: type=1326 audit(1732141178.054:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 227.045177][ T8331] siw: device registration error -23 [ 227.046391][ T8333] EXT4-fs: Ignoring removed nobh option [ 227.103311][ T8333] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.1377: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 227.247088][ T8333] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1377: couldn't read orphan inode 11 (err -117) [ 227.260358][ T8333] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 227.295391][ T125] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 227.344861][ T125] usb 4-1: device descriptor read/8, error -71 [ 227.372063][ T8333] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1377: Invalid block bitmap block 0 in block_group 0 [ 227.464963][ T8333] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.1377: Failed to acquire dquot type 0 [ 227.635572][ T125] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.685644][ T4859] EXT4-fs error (device loop6): __ext4_get_inode_loc:4506: comm kworker/u4:11: Invalid inode table block 8589934593 in block_group 0 [ 227.769549][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 227.964169][ T8358] hub 9-0:1.0: USB hub found [ 228.006365][ T8358] hub 9-0:1.0: 1 port detected [ 228.589499][ T125] usb 4-1: device descriptor read/8, error -71 [ 228.659074][ T8378] ip6t_rpfilter: unknown options [ 228.726627][ T125] usb usb4-port1: unable to enumerate USB device [ 229.130083][ T8391] loop5: detected capacity change from 0 to 4096 [ 229.289987][ T8408] capability: warning: `syz.6.1397' uses deprecated v2 capabilities in a way that may be insecure [ 229.303748][ T8391] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 229.469453][ T8378] EXT4-fs (loop5): shut down requested (0) [ 229.744631][ T8430] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 229.913756][ T8432] loop3: detected capacity change from 0 to 512 [ 229.999017][ T8432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 230.015566][ T8432] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.079447][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 230.091577][ T8446] loop4: detected capacity change from 0 to 1024 [ 230.192985][ T8446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 230.443714][ T8456] loop6: detected capacity change from 0 to 512 [ 230.556959][ T8456] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 230.575160][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 230.596981][ T8456] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 230.636159][ T8456] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 230.763063][ T8456] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.1408: Directory hole found for htree leaf block 0 [ 230.886295][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 230.981626][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 231.706515][ T8508] loop3: detected capacity change from 0 to 512 [ 231.707606][ T8495] loop4: detected capacity change from 0 to 8192 [ 231.734514][ T8508] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 231.774551][ T8508] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 231.879414][ T8508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 231.922306][ T8508] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1427: Directory hole found for htree leaf block 0 [ 232.035817][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 232.117232][ T8517] ip6t_rpfilter: unknown options [ 232.187652][ T8519] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1431'. [ 232.490164][ T8532] loop4: detected capacity change from 0 to 1024 [ 232.516479][ T8532] ext4: Bad value for 'max_dir_size_kb' [ 232.565888][ T8517] loop5: detected capacity change from 0 to 4096 [ 232.611019][ T8517] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 232.627456][ T4239] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.666884][ T8517] EXT4-fs (loop5): shut down requested (0) [ 233.591001][ T8551] ip6t_rpfilter: unknown options [ 233.948600][ T26] kauditd_printk_skb: 78 callbacks suppressed [ 233.948615][ T26] audit: type=1326 audit(1732141185.954:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 234.013865][ T8561] loop4: detected capacity change from 0 to 512 [ 234.056876][ T26] audit: type=1326 audit(1732141185.954:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 234.097774][ T8561] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1444: bg 0: block 393: padding at end of block bitmap is not set [ 234.138868][ T26] audit: type=1326 audit(1732141185.994:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 234.161731][ T8561] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 234.171194][ T26] audit: type=1326 audit(1732141185.994:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 234.176419][ T8564] loop3: detected capacity change from 0 to 1024 [ 234.193694][ T26] audit: type=1326 audit(1732141185.994:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 234.216180][ T8561] EXT4-fs (loop4): 2 truncates cleaned up [ 234.229237][ T26] audit: type=1326 audit(1732141185.994:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3568780737 code=0x7ffc0000 [ 234.254032][ T8564] EXT4-fs: Ignoring removed orlov option [ 234.260286][ T8564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.267583][ T26] audit: type=1326 audit(1732141185.994:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f35687806ac code=0x7ffc0000 [ 234.304483][ T8561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.350363][ T26] audit: type=1326 audit(1732141185.994:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f35687805e4 code=0x7ffc0000 [ 234.361395][ T8561] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.1444: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 234.409207][ T8564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.433789][ T26] audit: type=1326 audit(1732141185.994:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f35687805e4 code=0x7ffc0000 [ 234.524947][ T26] audit: type=1326 audit(1732141185.994:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.4.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f356877d4aa code=0x7ffc0000 [ 234.613132][ T8570] device bond1 entered promiscuous mode [ 234.622980][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 234.654596][ T8570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.911224][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 235.144635][ T8582] loop6: detected capacity change from 0 to 1024 [ 235.172195][ T8582] ext4: Bad value for 'max_dir_size_kb' [ 235.219261][ T8570] bond1 (unregistering): Released all slaves [ 236.251841][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 236.470026][ T8605] syz.3.1461[8605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.470127][ T8605] syz.3.1461[8605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.759106][ T8615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.837633][ T8618] device pim6reg1 entered promiscuous mode [ 237.066608][ T4328] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.234975][ T8630] loop3: detected capacity change from 0 to 1024 [ 237.242321][ T8630] ext4: Bad value for 'max_dir_size_kb' [ 237.272161][ T8633] random: crng reseeded on system resumption [ 237.299066][ T4239] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.324498][ T4328] usb 7-1: Using ep0 maxpacket: 8 [ 237.498186][ T4328] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 237.513481][ T4328] usb 7-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 237.525705][ T4328] usb 7-1: config 246 has 0 interfaces, different from the descriptor's value: 42 [ 237.526649][ T8642] loop4: detected capacity change from 0 to 512 [ 237.552454][ T4328] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 237.561728][ T4328] usb 7-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 237.575213][ T4328] usb 7-1: config 246 has 0 interfaces, different from the descriptor's value: 42 [ 237.587177][ T8642] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 237.624874][ T4328] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 237.650917][ T4328] usb 7-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 237.662762][ T8642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 237.705015][ T4328] usb 7-1: config 246 has 0 interfaces, different from the descriptor's value: 42 [ 237.720947][ T8642] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1474: corrupted in-inode xattr [ 237.752092][ T4328] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.766565][ T8642] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1474: couldn't read orphan inode 15 (err -117) [ 237.766917][ T4328] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.788509][ T4328] usb 7-1: Product: syz [ 237.792931][ T4328] usb 7-1: Manufacturer: syz [ 237.798951][ T4328] usb 7-1: SerialNumber: syz [ 237.813922][ T8642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 238.278439][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 238.357539][ T8649] loop3: detected capacity change from 0 to 256 [ 239.082352][ T26] kauditd_printk_skb: 114 callbacks suppressed [ 239.082366][ T26] audit: type=1326 audit(1732141191.084:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.4.1481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f356877e819 code=0x0 [ 239.138064][ T26] audit: type=1400 audit(1732141191.144:1624): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8663 comm="syz.4.1481" [ 239.180622][ T26] audit: type=1326 audit(1732141191.174:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 239.219175][ T26] audit: type=1326 audit(1732141191.174:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 239.246644][ T26] audit: type=1326 audit(1732141191.174:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 239.271014][ T26] audit: type=1326 audit(1732141191.174:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 239.294574][ T26] audit: type=1326 audit(1732141191.174:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 239.594991][ T4328] usb 7-1: USB disconnect, device number 2 [ 239.680886][ T8673] loop5: detected capacity change from 0 to 1024 [ 239.690659][ T8673] ext4: Bad value for 'max_dir_size_kb' [ 239.707004][ T8675] loop3: detected capacity change from 0 to 1024 [ 239.714252][ T8675] ext4: Bad value for 'max_dir_size_kb' [ 239.738649][ T4239] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.872576][ T4640] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.799580][ T8686] loop4: detected capacity change from 0 to 128 [ 240.878052][ T8686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.909046][ T8686] ext4 filesystem being mounted at /301/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.919825][ T8691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1492'. [ 241.063995][ T8695] loop3: detected capacity change from 0 to 512 [ 241.095792][ T8695] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 241.117146][ T8695] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 241.140968][ T8695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 241.153715][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 241.185565][ T26] audit: type=1326 audit(1732141193.194:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.6.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 241.220393][ T8695] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1494: Directory hole found for htree leaf block 0 [ 241.298977][ T8703] loop4: detected capacity change from 0 to 764 [ 241.305515][ T26] audit: type=1326 audit(1732141193.194:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.6.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 241.400638][ T8703] netlink: 'syz.4.1496': attribute type 10 has an invalid length. [ 241.405553][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 241.409031][ T26] audit: type=1326 audit(1732141193.194:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.6.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 241.456312][ T8703] device hsr_slave_0 left promiscuous mode [ 241.526176][ T8703] device hsr_slave_1 left promiscuous mode [ 241.606900][ T8711] loop3: detected capacity change from 0 to 1024 [ 241.646177][ T8711] ext4: Bad value for 'max_dir_size_kb' [ 241.828219][ T8718] loop6: detected capacity change from 0 to 256 [ 242.970781][ T8728] ip6t_rpfilter: unknown options [ 243.127262][ T8739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.210339][ T8749] loop5: detected capacity change from 0 to 512 [ 243.271317][ T8749] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 243.311758][ T8753] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.329551][ T8749] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 243.347879][ T8749] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 243.476157][ T8749] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.1510: Directory hole found for htree leaf block 0 [ 243.625424][ T3582] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 243.643984][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 243.845639][ T3582] usb 4-1: Using ep0 maxpacket: 8 [ 243.885618][ T3582] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 243.940139][ T3582] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 243.974135][ T3582] usb 4-1: config 246 has 0 interfaces, different from the descriptor's value: 42 [ 243.985936][ T8766] ip6t_rpfilter: unknown options [ 244.085528][ T8768] loop6: detected capacity change from 0 to 4096 [ 244.773170][ T3582] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 244.782472][ T3582] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 244.793694][ T3582] usb 4-1: config 246 has 0 interfaces, different from the descriptor's value: 42 [ 244.807181][ T8768] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 244.826607][ T8763] EXT4-fs (loop6): shut down requested (0) [ 244.859118][ T3582] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 244.921833][ T3582] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 245.003342][ T3582] usb 4-1: config 246 has 0 interfaces, different from the descriptor's value: 42 [ 245.079335][ T3582] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 245.099675][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 245.146601][ T3582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.207842][ T3582] usb 4-1: Product: syz [ 245.228175][ T3582] usb 4-1: Manufacturer: syz [ 245.246009][ T3582] usb 4-1: SerialNumber: syz [ 245.569227][ T8784] loop6: detected capacity change from 0 to 1024 [ 245.617096][ T8784] ext4: Bad value for 'max_dir_size_kb' [ 246.509794][ T8793] device batadv2 entered promiscuous mode [ 246.526750][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 246.614680][ T8796] device batadv0 entered promiscuous mode [ 246.630954][ T8796] device batadv_slave_0 entered promiscuous mode [ 246.658968][ T8796] device batadv_slave_0 left promiscuous mode [ 246.665599][ T8796] device batadv0 left promiscuous mode [ 246.707090][ T8799] Cannot find del_set index 0 as target [ 246.948137][ T3582] usb 4-1: USB disconnect, device number 10 [ 247.432061][ T8809] rdma_op ffff8880717e89f0 conn xmit_rdma 0000000000000000 [ 247.748572][ T8820] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1527'. [ 248.085470][ T8837] ucma_write: process 315 (syz.5.1533) changed security contexts after opening file descriptor, this is not allowed. [ 248.406562][ T4328] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 248.595503][ T4328] usb 6-1: Using ep0 maxpacket: 32 [ 248.603611][ T4328] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 248.629945][ T4328] usb 6-1: config 0 has no interface number 0 [ 248.650366][ T4328] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 248.672034][ T4328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.692567][ T4328] usb 6-1: Product: syz [ 248.706808][ T4328] usb 6-1: Manufacturer: syz [ 248.721852][ T4328] usb 6-1: SerialNumber: syz [ 248.739966][ T4328] usb 6-1: config 0 descriptor?? [ 249.007978][ T8887] loop4: detected capacity change from 0 to 512 [ 249.031534][ T8887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.057871][ T8885] loop3: detected capacity change from 0 to 2048 [ 249.079216][ T4328] usb 6-1: USB disconnect, device number 11 [ 249.098943][ T8887] EXT4-fs (loop4): 1 truncate cleaned up [ 249.114337][ T8885] loop3: p1 < > p4 [ 249.115496][ T8887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 249.127295][ T8885] loop3: p4 size 8388608 extends beyond EOD, truncated [ 249.134717][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 249.134733][ T26] audit: type=1326 audit(1732141201.134:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.169876][ T26] audit: type=1326 audit(1732141201.134:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.223084][ T26] audit: type=1326 audit(1732141201.194:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.265492][ T26] audit: type=1326 audit(1732141201.194:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.326496][ T26] audit: type=1326 audit(1732141201.194:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.355102][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 249.375465][ T26] audit: type=1326 audit(1732141201.214:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.436176][ T26] audit: type=1326 audit(1732141201.214:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.508763][ T26] audit: type=1326 audit(1732141201.214:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.593627][ T26] audit: type=1326 audit(1732141201.214:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.653975][ T8906] netlink: 'syz.6.1557': attribute type 4 has an invalid length. [ 249.681034][ T26] audit: type=1326 audit(1732141201.214:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 249.772838][ T8913] syz.0.1559[8913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.772949][ T8913] syz.0.1559[8913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.892963][ T8916] loop3: detected capacity change from 0 to 128 [ 249.923235][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1560'. [ 250.340453][ T8939] loop3: detected capacity change from 0 to 1024 [ 250.406564][ T8942] ip6t_rpfilter: unknown options [ 250.650450][ T8943] loop4: detected capacity change from 0 to 4096 [ 250.803752][ T8943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 250.853663][ T8942] EXT4-fs (loop4): shut down requested (0) [ 251.018700][ T8939] ext4: Bad value for 'max_dir_size_kb' [ 251.109261][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 251.631879][ T8963] ip6t_rpfilter: unknown options [ 251.730473][ T8966] loop4: detected capacity change from 0 to 4096 [ 251.836086][ T8966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 251.857196][ T8963] EXT4-fs (loop4): shut down requested (0) [ 252.105901][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 252.545225][ T8993] ip6t_rpfilter: unknown options [ 253.436195][ T8990] loop6: detected capacity change from 0 to 4096 [ 253.576991][ T8990] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 253.594605][ T8990] EXT4-fs (loop6): shut down requested (0) [ 253.866528][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 254.054800][ T9020] loop3: detected capacity change from 0 to 256 [ 254.136743][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 254.136758][ T26] audit: type=1326 audit(1732141206.144:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 254.225388][ T26] audit: type=1326 audit(1732141206.174:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 254.305412][ T26] audit: type=1326 audit(1732141206.184:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 254.320670][ T9035] loop4: detected capacity change from 0 to 128 [ 254.384465][ T26] audit: type=1326 audit(1732141206.184:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 254.405716][ T9039] loop5: detected capacity change from 0 to 128 [ 254.454998][ T9041] syz.4.1597: attempt to access beyond end of device [ 254.454998][ T9041] loop4: rw=2049, sector=145, nr_sectors = 312 limit=128 [ 254.488293][ T26] audit: type=1326 audit(1732141206.184:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 254.497175][ T9039] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 254.538144][ T9039] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.701274][ T4830] kworker/u4:10: attempt to access beyond end of device [ 254.701274][ T4830] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 254.741129][ T26] audit: type=1326 audit(1732141206.494:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 254.763969][ T26] audit: type=1326 audit(1732141206.494:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 254.816238][ T9045] Cannot find add_set index 0 as target [ 254.861029][ T9057] ip6t_rpfilter: unknown options [ 254.942571][ T26] audit: type=1326 audit(1732141206.494:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 255.062603][ T26] audit: type=1326 audit(1732141206.494:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 255.183741][ T26] audit: type=1326 audit(1732141206.494:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 255.212075][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 255.427803][ T9057] loop6: detected capacity change from 0 to 4096 [ 255.520527][ T9081] ip6t_rpfilter: unknown options [ 255.648991][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.656501][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.743916][ T9057] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 255.873200][ T9057] EXT4-fs (loop6): shut down requested (0) [ 256.446536][ T9115] loop3: detected capacity change from 0 to 1024 [ 256.469855][ T9115] ext4: Bad value for 'max_dir_size_kb' [ 256.841357][ T9123] loop5: detected capacity change from 0 to 512 [ 257.004912][ T9123] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.032108][ T9123] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.112932][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 257.139984][ T9130] loop3: detected capacity change from 0 to 256 [ 257.178001][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 257.199628][ T9130] Process accounting resumed [ 257.225780][ T9130] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 257.234972][ T9130] FAT-fs (loop3): Filesystem has been set read-only [ 257.380609][ T9130] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 257.632022][ T9158] ip6t_rpfilter: unknown options [ 258.089449][ T9160] loop4: detected capacity change from 0 to 4096 [ 258.216488][ T9181] loop6: detected capacity change from 0 to 1024 [ 258.251262][ T9181] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.270991][ T9160] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 258.380630][ T9181] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 258.400540][ T9158] EXT4-fs (loop4): shut down requested (0) [ 258.489977][ T9181] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #11: comm syz.6.1639: missing EA_INODE flag [ 258.510220][ T9181] EXT4-fs (loop6): Remounting filesystem read-only [ 258.518894][ T9181] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1639: error while reading EA inode 11 err=-117 [ 258.541967][ T9200] loop3: detected capacity change from 0 to 256 [ 258.555703][ T9181] EXT4-fs (loop6): Remounting filesystem read-only [ 258.578612][ T9200] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿ0x0000000000000000" or missing value [ 258.698799][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 258.797680][ T9205] loop5: detected capacity change from 0 to 736 [ 258.948488][ T9205] ISOFS: unable to read i-node block [ 259.170327][ T9216] loop6: detected capacity change from 0 to 128 [ 259.559486][ T9226] loop5: detected capacity change from 0 to 512 [ 259.577419][ T9226] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 259.594176][ T9226] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 259.604903][ T9229] loop6: detected capacity change from 0 to 128 [ 259.618425][ T9226] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 259.639368][ T9226] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.1658: Directory hole found for htree leaf block 0 [ 259.645560][ T3023] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 259.665912][ T9229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 259.689927][ T9229] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.703535][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 259.746499][ T26] kauditd_printk_skb: 91 callbacks suppressed [ 259.746513][ T26] audit: type=1804 audit(1732141211.754:1844): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1657" name="/newroot/60/file0/file0" dev="loop6" ino=12 res=1 errno=0 [ 259.900010][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 259.908858][ T3023] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 259.951467][ T3023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.966287][ T3023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.985819][ T3023] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 260.004969][ T3023] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 260.042897][ T3023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.076260][ T3023] usb 1-1: config 0 descriptor?? [ 260.172261][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 260.247684][ T9242] loop4: detected capacity change from 0 to 1024 [ 260.278156][ T9242] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.335234][ T9242] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 260.401685][ T9254] loop6: detected capacity change from 0 to 512 [ 260.417323][ T3023] usbhid 1-1:0.0: can't add hid device: -71 [ 260.418126][ T9242] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.1660: missing EA_INODE flag [ 260.423354][ T3023] usbhid: probe of 1-1:0.0 failed with error -71 [ 260.443154][ T9254] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 260.448030][ T3023] usb 1-1: USB disconnect, device number 7 [ 260.473633][ T9242] EXT4-fs (loop4): Remounting filesystem read-only [ 260.491828][ T9254] EXT4-fs (loop6): 1 truncate cleaned up [ 260.505470][ T9242] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1660: error while reading EA inode 11 err=-117 [ 260.545511][ T9254] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 260.583969][ T9242] EXT4-fs (loop4): Remounting filesystem read-only [ 260.621963][ T9256] ip6t_rpfilter: unknown options [ 260.664276][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 260.686964][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 260.720130][ T9256] loop5: detected capacity change from 0 to 4096 [ 260.760325][ T9256] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 260.774352][ T9256] EXT4-fs (loop5): shut down requested (0) [ 260.913830][ T9266] loop4: detected capacity change from 0 to 1024 [ 260.920570][ T26] audit: type=1326 audit(1732141212.914:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 260.944790][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 260.951181][ T9266] ext4: Bad value for 'max_dir_size_kb' [ 261.015429][ T26] audit: type=1326 audit(1732141212.914:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 261.066347][ T9270] loop6: detected capacity change from 0 to 128 [ 261.133046][ T26] audit: type=1326 audit(1732141212.924:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 261.221607][ T9274] loop3: detected capacity change from 0 to 256 [ 261.249219][ T9270] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 261.343900][ T26] audit: type=1326 audit(1732141212.924:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 261.374482][ T9270] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.549772][ T26] audit: type=1326 audit(1732141212.924:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 261.634199][ T26] audit: type=1326 audit(1732141212.924:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 261.660703][ T26] audit: type=1326 audit(1732141212.924:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 261.856084][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 261.875761][ T26] audit: type=1326 audit(1732141212.924:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 261.898901][ T26] audit: type=1326 audit(1732141212.924:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 262.088372][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1681'. [ 262.104890][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.202244][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.311071][ T9296] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1684'. [ 262.356894][ T9296] 9pnet_fd: Insufficient options for proto=fd [ 262.542748][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.772896][ T9310] loop3: detected capacity change from 0 to 256 [ 262.795518][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 262.856203][ T4297] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 262.932127][ T9313] loop4: detected capacity change from 0 to 256 [ 262.965250][ T9313] Process accounting resumed [ 262.998321][ T9313] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 263.065283][ T9313] FAT-fs (loop4): Filesystem has been set read-only [ 263.085425][ T4297] usb 7-1: Using ep0 maxpacket: 8 [ 263.092489][ T4297] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 263.105471][ T4297] usb 7-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 263.116096][ T4297] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 263.125932][ T4297] usb 7-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 263.141567][ T4297] usb 7-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.144790][ T9313] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 263.201080][ T4297] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 263.215358][ T4297] usb 7-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 263.230101][ T4297] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 263.255563][ T4297] usb 7-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 263.280459][ T9317] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.288435][ T4297] usb 7-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.319886][ T4297] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 263.345613][ T4297] usb 7-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 263.356290][ T4297] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 263.371484][ T4297] usb 7-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 263.399367][ T4297] usb 7-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.431974][ T4297] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 263.453334][ T4297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.461412][ T9320] loop5: detected capacity change from 0 to 128 [ 263.490722][ T9320] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 263.499356][ T4297] usb 7-1: Product: syz [ 263.499376][ T4297] usb 7-1: Manufacturer: syz [ 263.499390][ T4297] usb 7-1: SerialNumber: syz [ 263.598521][ T9320] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.010678][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 264.059147][ T9340] loop3: detected capacity change from 0 to 1024 [ 264.095981][ T9340] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 264.198509][ T9345] loop4: detected capacity change from 0 to 512 [ 264.364963][ T9340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 264.375072][ T9345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 264.394232][ T9350] ip6t_rpfilter: unknown options [ 264.395950][ T9345] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.419293][ T9340] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.1704: missing EA_INODE flag [ 264.447731][ T9340] EXT4-fs (loop3): Remounting filesystem read-only [ 264.455417][ T9340] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1704: error while reading EA inode 11 err=-117 [ 264.497549][ T9355] loop5: detected capacity change from 0 to 4096 [ 264.517190][ T9355] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 264.529805][ T9350] EXT4-fs (loop5): shut down requested (0) [ 264.545036][ T9340] EXT4-fs (loop3): Remounting filesystem read-only [ 264.654666][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 265.103016][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 265.178518][ T4297] usb 7-1: can't set config #246, error -71 [ 265.195940][ T4297] usb 7-1: USB disconnect, device number 3 [ 265.448992][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 265.547112][ T9378] loop4: detected capacity change from 0 to 1024 [ 265.554408][ T9378] ext4: Bad value for 'max_dir_size_kb' [ 265.754319][ T9381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1719'. [ 266.132015][ T9391] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1722'. [ 266.165466][ T9391] 0ªX¹¦À: renamed from caif0 [ 266.174106][ T9392] ip6t_rpfilter: unknown options [ 266.201821][ T9391] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 266.280093][ T9394] loop6: detected capacity change from 0 to 4096 [ 266.310394][ T9394] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 266.327171][ T9392] EXT4-fs (loop6): shut down requested (0) [ 266.357871][ T9398] IPv4: Oversized IP packet from 127.202.26.0 [ 266.857230][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 266.922223][ T9413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1732'. [ 267.476526][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 267.476540][ T26] audit: type=1326 audit(1732141219.484:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 267.541471][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 267.574165][ T9444] netlink: 'syz.0.1747': attribute type 2 has an invalid length. [ 267.586531][ T26] audit: type=1326 audit(1732141219.524:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 267.605386][ T9444] netlink: 'syz.0.1747': attribute type 8 has an invalid length. [ 267.645383][ T26] audit: type=1326 audit(1732141219.524:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 267.670813][ T26] audit: type=1326 audit(1732141219.524:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 267.706561][ T9444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1747'. [ 267.725868][ T26] audit: type=1326 audit(1732141219.534:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 267.730783][ T9445] netlink: 'syz.0.1747': attribute type 39 has an invalid length. [ 267.805431][ T26] audit: type=1326 audit(1732141219.534:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 267.851847][ T9449] loop4: detected capacity change from 0 to 1024 [ 267.855434][ T26] audit: type=1326 audit(1732141219.534:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 267.878842][ T9449] ext4: Unknown parameter 'rootcontext' [ 267.941954][ T26] audit: type=1326 audit(1732141219.534:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 267.976659][ T26] audit: type=1326 audit(1732141219.534:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 268.049484][ T26] audit: type=1326 audit(1732141219.534:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf9d7e819 code=0x7ffc0000 [ 268.280109][ T9457] loop4: detected capacity change from 0 to 1024 [ 268.306164][ T9457] ext4: Bad value for 'max_dir_size_kb' [ 268.723089][ T9472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1758'. [ 269.144017][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1764'. [ 269.553746][ T9496] loop3: detected capacity change from 0 to 512 [ 269.684508][ T9496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 269.703600][ T9496] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.785981][ T9496] Process accounting resumed [ 269.843374][ T9496] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 269.936461][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 270.172238][ T9521] loop4: detected capacity change from 0 to 512 [ 270.234490][ T9521] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 270.318662][ T9521] EXT4-fs (loop4): mount failed [ 270.702191][ T9549] loop6: detected capacity change from 0 to 1024 [ 270.719699][ T9549] ext4: Bad value for 'max_dir_size_kb' [ 270.774493][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1795'. [ 270.852279][ T9556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1797'. [ 271.128098][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'. [ 271.561784][ T9564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.895481][ T125] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 271.938287][ T9582] ip6t_rpfilter: unknown options [ 272.095415][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 272.103637][ T125] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 272.115525][ T125] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 272.126099][ T125] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 272.135949][ T125] usb 5-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 272.146969][ T125] usb 5-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.173629][ T125] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 272.199708][ T125] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 272.210224][ T125] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 272.219512][ T125] usb 5-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 272.241839][ T125] usb 5-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.267764][ T125] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 272.276898][ T125] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 272.287464][ T125] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 272.296738][ T125] usb 5-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 272.307649][ T125] usb 5-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.325391][ T125] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 272.350763][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.359078][ T125] usb 5-1: Product: syz [ 272.363397][ T125] usb 5-1: Manufacturer: syz [ 272.368156][ T125] usb 5-1: SerialNumber: syz [ 272.524793][ T9584] loop3: detected capacity change from 0 to 1024 [ 272.561451][ T9584] EXT4-fs: Ignoring removed orlov option [ 272.611812][ T9584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.692783][ T9584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 272.717990][ T9584] EXT4-fs (loop3): unmounting filesystem. [ 272.819337][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 272.819352][ T26] audit: type=1326 audit(1732141224.824:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.3.1807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa71317e819 code=0x0 [ 273.063154][ T26] audit: type=1326 audit(1732141225.064:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 273.068652][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 273.164157][ T26] audit: type=1326 audit(1732141225.094:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 273.195669][ T9594] x_tables: duplicate underflow at hook 2 [ 273.270707][ T26] audit: type=1326 audit(1732141225.094:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 273.464450][ T26] audit: type=1326 audit(1732141225.094:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 273.488196][ T9602] hub 9-0:1.0: USB hub found [ 273.494355][ T9602] hub 9-0:1.0: 1 port detected [ 273.574406][ T26] audit: type=1326 audit(1732141225.094:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 273.730273][ T26] audit: type=1326 audit(1732141225.094:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 273.847963][ T26] audit: type=1326 audit(1732141225.094:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 273.888715][ T125] adutux 5-1:246.0: interrupt endpoints not found [ 273.927397][ T125] usb 5-1: USB disconnect, device number 4 [ 274.106098][ T26] audit: type=1326 audit(1732141225.094:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 274.147422][ T26] audit: type=1326 audit(1732141225.094:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 274.218712][ T9624] loop6: detected capacity change from 0 to 1024 [ 274.252527][ T9624] ext4: Bad value for 'max_dir_size_kb' [ 274.653727][ T9633] loop5: detected capacity change from 0 to 8192 [ 274.772044][ T9633] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 274.788586][ T9633] FAT-fs (loop5): Filesystem has been set read-only [ 274.886664][ T9641] loop4: detected capacity change from 0 to 512 [ 274.956029][ T9641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 274.983706][ T9641] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.058681][ T9641] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 275.185493][ T9641] Process accounting resumed [ 275.269112][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 275.594241][ T9659] loop6: detected capacity change from 0 to 512 [ 275.648207][ T9659] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 275.681039][ T9659] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.709005][ T9669] syz.3.1841[9669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.709112][ T9669] syz.3.1841[9669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.923684][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 275.986866][ T9679] loop5: detected capacity change from 0 to 1024 [ 275.993906][ T9679] ext4: Bad value for 'max_dir_size_kb' [ 276.252120][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1850'. [ 276.719791][ T9707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1856'. [ 276.729219][ T9707] unsupported nlmsg_type 40 [ 277.250596][ T9709] loop3: detected capacity change from 0 to 4096 [ 277.496621][ T9709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 277.519809][ T9706] EXT4-fs (loop3): shut down requested (0) [ 277.561152][ T9715] siw: device registration error -23 [ 277.754465][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 277.819444][ T9721] tipc: Started in network mode [ 277.824375][ T9721] tipc: Node identity 862f584a1ddf, cluster identity 4711 [ 277.866036][ T9721] tipc: Enabled bearer , priority 7 [ 277.892876][ T9725] ªªªªªª: renamed from syzkaller0 [ 277.902529][ T9725] tipc: Disabling bearer [ 277.985592][ T4328] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 278.079329][ T9732] syz.4.1866[9732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.079484][ T9732] syz.4.1866[9732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.145586][ T4328] usb 7-1: device descriptor read/64, error -71 [ 278.170808][ T9732] loop4: detected capacity change from 0 to 1024 [ 278.180155][ T9732] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 278.191916][ T9732] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 278.209251][ T9732] EXT4-fs error (device loop4): ext4_get_journal_inode:5734: inode #5: comm syz.4.1866: unexpected bad inode w/o EXT4_IGET_BAD [ 278.237476][ T9732] EXT4-fs (loop4): no journal found [ 278.242724][ T9732] EXT4-fs (loop4): can't get journal size [ 278.264860][ T9736] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1868'. [ 278.280049][ T9732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.326258][ T9736] 9pnet_fd: Insufficient options for proto=fd [ 278.445686][ T4328] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 278.462237][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 278.570802][ T9749] loop4: detected capacity change from 0 to 1024 [ 278.586258][ T9749] ext4: Bad value for 'max_dir_size_kb' [ 278.625425][ T4328] usb 7-1: device descriptor read/64, error -71 [ 278.642862][ T9752] nfs4: Unknown parameter 'context' [ 278.831848][ T4328] usb usb7-port1: attempt power cycle [ 278.942729][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 278.942744][ T26] audit: type=1326 audit(1732141230.944:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 278.984006][ T26] audit: type=1326 audit(1732141230.974:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 279.023818][ T26] audit: type=1326 audit(1732141230.974:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 279.036323][ T9768] loop5: detected capacity change from 0 to 128 [ 279.060599][ T26] audit: type=1326 audit(1732141230.974:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 279.090301][ T26] audit: type=1326 audit(1732141230.974:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 279.125144][ T26] audit: type=1326 audit(1732141230.984:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 279.154091][ T26] audit: type=1326 audit(1732141230.984:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 279.184193][ T26] audit: type=1326 audit(1732141230.984:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 279.185211][ T9768] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 279.214183][ T26] audit: type=1326 audit(1732141230.994:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 279.238979][ T26] audit: type=1326 audit(1732141230.994:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71317e819 code=0x7ffc0000 [ 279.245549][ T4328] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 279.358116][ T9773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1883'. [ 279.368159][ T4328] usb 7-1: device descriptor read/8, error -71 [ 279.374798][ T9768] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.445601][ T9773] 9pnet_fd: Insufficient options for proto=fd [ 279.463780][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 279.642977][ T9777] device vlan2 entered promiscuous mode [ 279.653132][ T4328] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 279.698980][ T4328] usb 7-1: device descriptor read/8, error -71 [ 279.825750][ T4328] usb usb7-port1: unable to enumerate USB device [ 280.202169][ T9787] syz.5.1889[9787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.202270][ T9787] syz.5.1889[9787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.611771][ T9801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.890722][ T9811] siw: device registration error -23 [ 281.065418][ T125] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 281.212798][ T9818] loop3: detected capacity change from 0 to 1024 [ 281.224001][ T9819] loop6: detected capacity change from 0 to 1024 [ 281.251024][ T9819] ext4: Bad value for 'max_dir_size_kb' [ 281.265426][ T125] usb 6-1: Using ep0 maxpacket: 8 [ 281.282353][ T125] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 281.290345][ T9818] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 281.291358][ T125] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 281.321450][ T125] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 281.331067][ T125] usb 6-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 281.342147][ T125] usb 6-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.474155][ T125] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 281.497433][ T9824] EXT4-fs (loop3): shut down requested (0) [ 281.514086][ T125] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 281.562368][ T125] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 281.608890][ T125] usb 6-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 281.660801][ T125] usb 6-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.711337][ T7000] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 281.730516][ T125] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 281.739963][ T125] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 281.750539][ T125] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 281.770937][ T125] usb 6-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 281.795513][ T125] usb 6-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.804708][ T7000] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 448 with error 28 [ 281.842338][ T125] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 281.862033][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.890578][ T125] usb 6-1: Product: syz [ 281.894876][ T125] usb 6-1: Manufacturer: syz [ 281.911384][ T7000] EXT4-fs (loop3): This should not happen!! Data will be lost [ 281.911384][ T7000] [ 281.913170][ T125] usb 6-1: SerialNumber: syz [ 281.965163][ T7000] EXT4-fs (loop3): Total free blocks count 0 [ 282.009990][ T7000] EXT4-fs (loop3): Free/Dirty block details [ 282.048268][ T7000] EXT4-fs (loop3): free_blocks=68451041280 [ 282.063177][ T7000] EXT4-fs (loop3): dirty_blocks=448 [ 282.069660][ T7000] EXT4-fs (loop3): Block reservation details [ 282.075855][ T7000] EXT4-fs (loop3): i_reserved_data_blocks=28 [ 282.627822][ T9841] device pim6reg1 entered promiscuous mode [ 282.675658][ T125] adutux 6-1:246.0: interrupt endpoints not found [ 282.763654][ T125] usb 6-1: USB disconnect, device number 12 [ 282.770687][ T9847] siw: device registration error -23 [ 282.823367][ T9848] loop4: detected capacity change from 0 to 1024 [ 282.860847][ T9848] ext4: Bad value for 'max_dir_size_kb' [ 282.893554][ T9852] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1916'. [ 282.911677][ T9852] 9pnet_fd: Insufficient options for proto=fd [ 283.111247][ T9860] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 283.653426][ T9881] siw: device registration error -23 [ 283.852504][ T9886] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1928'. [ 283.880406][ T9886] 9pnet_fd: Insufficient options for proto=fd [ 284.079386][ T9892] loop4: detected capacity change from 0 to 1024 [ 284.124024][ T9892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 284.203156][ T26] kauditd_printk_skb: 95 callbacks suppressed [ 284.203173][ T26] audit: type=1804 audit(1732141236.204:2095): pid=9892 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1931" name="/newroot/378/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 284.340645][ T26] audit: type=1804 audit(1732141236.244:2096): pid=9892 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1931" name="/newroot/378/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 284.363183][ T26] audit: type=1804 audit(1732141236.254:2097): pid=9892 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1931" name="/newroot/378/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 284.889451][ T9906] loop6: detected capacity change from 0 to 4096 [ 285.102130][ T9906] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 285.124351][ T9902] EXT4-fs (loop6): shut down requested (0) [ 285.190927][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 285.377815][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 285.519062][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1940'. [ 285.535463][ T9919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.559364][ T9919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.671492][ T9924] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.891831][ T9934] loop3: detected capacity change from 0 to 128 [ 285.943527][ T9934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 285.970077][ T9934] ext4 filesystem being mounted at /432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.056141][ T26] audit: type=1800 audit(1732141238.064:2098): pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1947" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 286.276111][ T9950] loop5: detected capacity change from 0 to 1024 [ 286.283208][ T9951] loop6: detected capacity change from 0 to 256 [ 286.295475][ T9950] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 286.295875][ T9934] loop3: detected capacity change from 128 to 64 [ 286.309455][ T9953] loop4: detected capacity change from 0 to 512 [ 286.350634][ T26] audit: type=1804 audit(1732141238.354:2099): pid=9951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1952" name="/newroot/100/file1/file0" dev="loop6" ino=1048633 res=1 errno=0 [ 286.375956][ T9954] ip6t_rpfilter: unknown options [ 286.425223][ T9933] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.1947: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 286.527006][ T9953] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.551786][ T9953] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 286.583051][ T9933] EXT4-fs error (device loop3) in ext4_free_inode:362: Filesystem failed CRC [ 286.676974][ T9957] loop6: detected capacity change from 0 to 512 [ 286.697872][ T9957] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 286.699208][ T9950] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 286.709910][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 286.723765][ T9957] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 286.733282][ T4258] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 286.759325][ T9957] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 286.769350][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 286.786000][ T4258] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 286.793291][ T9950] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.1955: missing EA_INODE flag [ 286.813568][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 286.834706][ T9957] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.1957: Directory hole found for htree leaf block 0 [ 286.846887][ T9950] EXT4-fs (loop5): Remounting filesystem read-only [ 286.853538][ T4258] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048 [ 286.854257][ T9950] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1955: error while reading EA inode 11 err=-117 [ 286.888587][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 286.949558][ T9950] EXT4-fs (loop5): Remounting filesystem read-only [ 287.008112][ T4258] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072 [ 287.022582][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 287.040502][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 287.043310][ T4258] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 4096 [ 287.075260][ T9964] loop4: detected capacity change from 0 to 1024 [ 287.093636][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 287.111718][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 287.116663][ T4258] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 5120 [ 287.146026][ T9964] ext4: Bad value for 'max_dir_size_kb' [ 287.165765][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 287.213325][ T4258] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 6144 [ 287.236262][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 287.275152][ T4258] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 7168 [ 287.317954][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 287.359744][ T4258] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 287.542195][ T9978] loop5: detected capacity change from 0 to 256 [ 287.601639][ T26] audit: type=1804 audit(1732141239.604:2100): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1967" name="/newroot/204/file1/file0" dev="loop5" ino=1048634 res=1 errno=0 [ 287.659335][ T9980] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1966'. [ 287.729519][ T9980] 9pnet_fd: Insufficient options for proto=fd [ 287.918213][ T9983] loop5: detected capacity change from 0 to 256 [ 287.976650][ T9983] Process accounting resumed [ 287.981906][ T9983] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 288.023108][ T9983] FAT-fs (loop5): Filesystem has been set read-only [ 288.057459][ T9983] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 288.418297][ T4258] bridge0: port 3(syz_tun) entered disabled state [ 288.468256][ T4258] device syz_tun left promiscuous mode [ 288.482332][ T9995] loop6: detected capacity change from 0 to 1024 [ 288.489129][ T4258] bridge0: port 3(syz_tun) entered disabled state [ 288.501342][ T9995] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.552509][ T9998] loop5: detected capacity change from 0 to 512 [ 288.576018][ T9995] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 288.596424][ T9998] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 288.606915][ T9995] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #11: comm syz.6.1974: missing EA_INODE flag [ 288.640867][ T9998] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 288.661480][ T9998] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 288.674281][ T9995] EXT4-fs (loop6): Remounting filesystem read-only [ 288.688236][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 288.699504][ T9995] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1974: error while reading EA inode 11 err=-117 [ 288.770592][ T9998] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.1975: Directory hole found for htree leaf block 0 [ 288.786384][ T9995] EXT4-fs (loop6): Remounting filesystem read-only [ 288.879957][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 288.890161][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 289.416729][T10011] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1980'. [ 289.479939][T10011] 9pnet_fd: Insufficient options for proto=fd [ 289.896257][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.907217][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.920887][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.502954][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.590165][T10028] €Â0: renamed from pim6reg1 [ 290.657102][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 290.669832][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.802938][T10035] device batadv0 entered promiscuous mode [ 290.842386][T10035] device batadv_slave_0 entered promiscuous mode [ 290.859935][T10037] loop4: detected capacity change from 0 to 1024 [ 290.872906][T10035] device batadv_slave_0 left promiscuous mode [ 290.883579][T10039] loop5: detected capacity change from 0 to 1024 [ 290.890696][T10037] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.891598][T10039] ext4: Bad value for 'max_dir_size_kb' [ 290.908979][T10035] device batadv0 left promiscuous mode [ 290.933343][T10037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 290.953145][T10025] lo speed is unknown, defaulting to 1000 [ 291.026548][T10037] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.1991: missing EA_INODE flag [ 291.105768][T10037] EXT4-fs (loop4): Remounting filesystem read-only [ 291.112396][T10037] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1991: error while reading EA inode 11 err=-117 [ 291.152501][T10037] EXT4-fs (loop4): Remounting filesystem read-only [ 291.193151][T10048] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1995'. [ 291.222287][T10048] 9pnet_fd: Insufficient options for proto=fd [ 291.295602][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 291.413690][T10025] chnl_net:caif_netlink_parms(): no params data found [ 291.500397][T10061] syz.4.1999[10061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.500503][T10061] syz.4.1999[10061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.599280][T10066] rdma_op ffff88807d53e9f0 conn xmit_rdma 0000000000000000 [ 291.636943][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.644149][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.695515][T10025] device bridge_slave_0 entered promiscuous mode [ 291.717052][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.743233][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.761332][T10025] device bridge_slave_1 entered promiscuous mode [ 292.063831][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.101468][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.192287][T10025] team0: Port device team_slave_0 added [ 292.203658][T10025] team0: Port device team_slave_1 added [ 292.268663][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.285369][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.343184][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.365798][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.372905][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.410602][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2005'. [ 292.435383][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.544141][T10025] device hsr_slave_0 entered promiscuous mode [ 292.573273][T10025] device hsr_slave_1 entered promiscuous mode [ 292.594793][T10025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.611692][T10025] Cannot create hsr debugfs directory [ 292.629652][T10087] loop6: detected capacity change from 0 to 1024 [ 292.648189][T10087] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.665664][T10091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2011'. [ 292.680528][T10091] 9pnet_fd: Insufficient options for proto=fd [ 292.717154][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 292.744188][T10087] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 292.771161][T10093] device batadv1 entered promiscuous mode [ 292.791375][T10093] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 292.816966][T10087] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #11: comm syz.6.2010: missing EA_INODE flag [ 292.840968][T10087] EXT4-fs (loop6): Remounting filesystem read-only [ 292.859170][T10087] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.2010: error while reading EA inode 11 err=-117 [ 292.892154][T10087] EXT4-fs (loop6): Remounting filesystem read-only [ 292.991245][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 293.079478][T10101] loop4: detected capacity change from 0 to 512 [ 293.193104][T10105] rdma_op ffff88807d3769f0 conn xmit_rdma 0000000000000000 [ 293.231663][T10101] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 293.280622][T10101] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 293.330571][T10101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 293.435721][T10109] loop5: detected capacity change from 0 to 256 [ 293.466888][T10025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 293.488434][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 293.520803][T10025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 293.529461][T10111] loop6: detected capacity change from 0 to 1024 [ 293.541948][T10025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 293.556734][T10111] ext4: Bad value for 'max_dir_size_kb' [ 293.569817][T10025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 293.726054][T10115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2021'. [ 293.785577][T10025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.814789][T10025] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.852941][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.878409][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.903512][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.938046][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.947755][T10118] ip6t_rpfilter: unknown options [ 293.958174][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.965390][ T5084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.993170][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.012566][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.038772][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.046007][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.104962][T10025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.131638][T10025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.176084][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.215791][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.262167][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.282021][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.312620][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.330540][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.342719][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.353030][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.371608][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.390828][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.401776][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.419869][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.434847][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.612179][T10139] loop5: detected capacity change from 0 to 512 [ 294.662515][T10139] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 294.692496][T10139] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 294.726134][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.733704][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.747001][T10139] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 294.790212][T10025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.805472][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 294.934395][T10146] loop4: detected capacity change from 0 to 256 [ 294.957051][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 295.113486][T10152] loop5: detected capacity change from 0 to 512 [ 295.359263][T10152] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 295.546816][T10152] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.799036][T10166] loop4: detected capacity change from 0 to 4096 [ 296.018748][T10166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.057325][T10166] EXT4-fs (loop4): shut down requested (0) [ 296.100002][T10152] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 296.128625][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.140742][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.187359][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.199418][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.209290][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 296.209535][T10025] device veth0_vlan entered promiscuous mode [ 296.323171][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 296.335732][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.345479][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.379597][T10025] device veth1_vlan entered promiscuous mode [ 296.393749][T10176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2040'. [ 296.421779][T10176] 9pnet_fd: Insufficient options for proto=fd [ 296.507394][T10025] device veth0_macvtap entered promiscuous mode [ 296.542431][T10025] device veth1_macvtap entered promiscuous mode [ 296.611906][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.631665][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.644139][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.660264][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.681281][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.692731][T10181] ip6t_rpfilter: unknown options [ 296.693888][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.718103][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.731206][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.744023][T10025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.759817][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.773414][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.788411][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.803719][T10181] loop4: detected capacity change from 0 to 4096 [ 296.812446][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.828499][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.830369][T10181] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.836887][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.858456][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.867439][T10181] EXT4-fs (loop4): shut down requested (0) [ 296.869921][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.884703][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 296.893387][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.904442][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.916477][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.926472][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.937278][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.949079][T10025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.957851][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.967068][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.976346][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.989695][T10025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.003799][T10025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.012840][T10025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.024293][T10025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.158871][ T5037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.175975][ T5037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.206744][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 297.217949][T10195] loop5: detected capacity change from 0 to 256 [ 297.225951][ T5084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.235456][ T5084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.255419][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 297.292358][T10195] Process accounting resumed [ 297.299821][T10195] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 297.310681][T10195] FAT-fs (loop5): Filesystem has been set read-only [ 297.341754][T10195] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 297.364461][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 297.411539][ T6227] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 297.431799][ T6227] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 297.514909][T10200] loop7: detected capacity change from 0 to 256 [ 297.677477][ T26] audit: type=1804 audit(1732141249.594:2101): pid=10200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1978" name="/newroot/0/file1/file0" dev="loop7" ino=1048640 res=1 errno=0 [ 297.733989][T10206] loop4: detected capacity change from 0 to 512 [ 297.744473][T10209] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2051'. [ 297.756554][T10209] 9pnet_fd: Insufficient options for proto=fd [ 297.810399][T10212] ip6t_rpfilter: unknown options [ 297.925660][T10214] loop5: detected capacity change from 0 to 4096 [ 297.969791][T10214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 297.983230][T10212] EXT4-fs (loop5): shut down requested (0) [ 297.991658][T10206] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 298.022686][T10206] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.130095][T10205] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 298.211486][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 298.455936][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 298.699039][T10240] ip6t_rpfilter: unknown options [ 298.734813][T10241] loop4: detected capacity change from 0 to 1024 [ 298.751022][T10241] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.798888][T10245] loop7: detected capacity change from 0 to 4096 [ 298.824112][T10245] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 298.826312][T10241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 298.856390][T10240] EXT4-fs (loop7): shut down requested (0) [ 298.864905][T10246] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2065'. [ 298.893944][T10246] 9pnet_fd: Insufficient options for proto=fd [ 298.931402][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 298.956443][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 299.090102][T10259] loop5: detected capacity change from 0 to 512 [ 299.150085][T10259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 299.165648][T10259] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.228979][T10259] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 299.317200][T10025] EXT4-fs (loop7): unmounting filesystem. [ 299.494423][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 299.511551][T10275] ip6t_rpfilter: unknown options [ 299.605494][T10275] loop4: detected capacity change from 0 to 4096 [ 299.631358][T10275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.648219][T10275] EXT4-fs (loop4): shut down requested (0) [ 299.861685][T10283] loop5: detected capacity change from 0 to 256 [ 299.908859][ T26] audit: type=1804 audit(1732141251.914:2102): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2077" name="/newroot/229/file1/file0" dev="loop5" ino=1048641 res=1 errno=0 [ 299.968220][T10288] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2080'. [ 299.989706][T10288] 9pnet_fd: Insufficient options for proto=fd [ 300.107004][ T26] audit: type=1326 audit(1732141252.114:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.7.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6df7e819 code=0x7ffc0000 [ 300.135959][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 300.222796][ T26] audit: type=1326 audit(1732141252.134:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.7.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6df7e819 code=0x7ffc0000 [ 300.279821][T10299] loop5: detected capacity change from 0 to 512 [ 300.394379][ T26] audit: type=1326 audit(1732141252.134:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.7.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fbe6df7e819 code=0x7ffc0000 [ 300.452868][ T26] audit: type=1326 audit(1732141252.134:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.7.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6df7e819 code=0x7ffc0000 [ 300.472081][T10299] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 300.494428][T10299] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.504202][ T26] audit: type=1326 audit(1732141252.134:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.7.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6df7e819 code=0x7ffc0000 [ 301.193337][ T26] audit: type=1800 audit(1732141253.174:2108): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2087" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 301.366380][ T4298] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 301.625157][T10332] loop7: detected capacity change from 0 to 256 [ 301.654081][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 301.686519][ T4298] usb 5-1: Using ep0 maxpacket: 32 [ 301.701990][ T4298] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 301.715364][ T4298] usb 5-1: config 0 has no interface number 0 [ 301.738108][ T4298] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 301.750478][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.776941][ T4298] usb 5-1: Product: syz [ 301.781219][ T4298] usb 5-1: Manufacturer: syz [ 301.794174][ T4298] usb 5-1: SerialNumber: syz [ 301.911302][T10332] Process accounting resumed [ 301.943314][T10332] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.995517][ T4298] usb 5-1: config 0 descriptor?? [ 302.098912][T10332] FAT-fs (loop7): Filesystem has been set read-only [ 302.255972][T10332] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 302.324897][T10025] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 302.355371][T10025] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 302.468093][ T4298] usb 5-1: USB disconnect, device number 5 [ 302.757280][T10353] ip6t_rpfilter: unknown options [ 302.851448][T10342] loop7: detected capacity change from 0 to 4096 [ 302.901677][T10357] loop5: detected capacity change from 0 to 256 [ 303.343694][T10303] syz.4.2086 (10303) used greatest stack depth: 18872 bytes left [ 303.394944][T10342] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 303.425758][T10342] EXT4-fs (loop7): shut down requested (0) [ 303.555393][ T26] audit: type=1804 audit(1732141255.554:2109): pid=10357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2105" name="/newroot/233/file1/file0" dev="loop5" ino=1048643 res=1 errno=0 [ 303.691468][T10361] loop6: detected capacity change from 0 to 128 [ 303.696485][T10025] EXT4-fs (loop7): unmounting filesystem. [ 303.739524][ T26] audit: type=1326 audit(1732141255.744:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 303.778362][T10363] netlink: 'syz.4.2107': attribute type 4 has an invalid length. [ 303.822631][ T26] audit: type=1326 audit(1732141255.744:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 303.897667][ T26] audit: type=1326 audit(1732141255.774:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 303.942847][T10371] loop6: detected capacity change from 0 to 256 [ 303.980532][ T26] audit: type=1326 audit(1732141255.774:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 304.029507][ T26] audit: type=1326 audit(1732141255.774:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 304.061212][ T26] audit: type=1326 audit(1732141255.784:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3568780737 code=0x7ffc0000 [ 304.105810][T10371] Process accounting resumed [ 304.111729][T10371] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 304.117712][ T26] audit: type=1326 audit(1732141255.784:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 304.134885][T10371] FAT-fs (loop6): Filesystem has been set read-only [ 304.154545][ T26] audit: type=1326 audit(1732141255.784:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 304.187861][ T26] audit: type=1326 audit(1732141255.784:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 304.230998][T10371] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 304.282688][T10381] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2115'. [ 304.322101][ T7935] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 304.341156][ T7935] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 304.532363][T10381] 9pnet_fd: Insufficient options for proto=fd [ 304.544657][T10388] ip6t_rpfilter: unknown options [ 304.651480][T10390] loop5: detected capacity change from 0 to 4096 [ 305.085557][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2117'. [ 305.222517][T10390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 305.240625][T10388] EXT4-fs (loop5): shut down requested (0) [ 305.530410][T10400] ip6t_rpfilter: unknown options [ 305.537940][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 305.612922][T10400] loop7: detected capacity change from 0 to 4096 [ 305.643912][T10400] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 305.658432][T10400] EXT4-fs (loop7): shut down requested (0) [ 305.766100][T10025] EXT4-fs (loop7): unmounting filesystem. [ 305.852251][T10412] loop5: detected capacity change from 0 to 128 [ 305.891034][T10414] netlink: 'syz.4.2123': attribute type 4 has an invalid length. [ 306.205644][T10426] loop6: detected capacity change from 0 to 4096 [ 306.410660][T10426] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 306.432170][T10426] EXT4-fs (loop6): shut down requested (0) [ 306.959061][T10435] 9pnet_fd: Insufficient options for proto=fd [ 306.997892][T10425] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2131'. [ 307.115975][T10429] netlink: 'syz.4.2129': attribute type 29 has an invalid length. [ 307.125850][T10429] netlink: 'syz.4.2129': attribute type 29 has an invalid length. [ 307.140538][T10443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.159662][T10429] netlink: 'syz.4.2129': attribute type 29 has an invalid length. [ 307.395096][T10447] ip6t_rpfilter: unknown options [ 307.482872][T10447] loop5: detected capacity change from 0 to 4096 [ 307.515182][T10447] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 307.539360][T10447] EXT4-fs (loop5): shut down requested (0) [ 308.119169][T10459] loop7: detected capacity change from 0 to 4096 [ 308.488733][T10459] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 308.507597][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 308.516636][T10456] EXT4-fs (loop7): shut down requested (0) [ 308.567792][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 308.567808][ T26] audit: type=1326 audit(1732141260.574:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 308.618067][T10463] netlink: 'syz.4.2140': attribute type 4 has an invalid length. [ 308.774244][ T26] audit: type=1326 audit(1732141260.614:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 308.774935][T10025] EXT4-fs (loop7): unmounting filesystem. [ 308.806610][ T26] audit: type=1326 audit(1732141260.624:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3568780737 code=0x7ffc0000 [ 308.892544][ T26] audit: type=1326 audit(1732141260.624:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 308.967553][ T26] audit: type=1326 audit(1732141260.624:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 308.993675][T10474] loop5: detected capacity change from 0 to 164 [ 309.019548][T10471] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2145'. [ 309.029054][T10474] Unable to read rock-ridge attributes [ 309.055416][ T26] audit: type=1326 audit(1732141260.624:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 309.064578][T10474] Unable to read rock-ridge attributes [ 309.097623][T10471] 9pnet_fd: Insufficient options for proto=fd [ 309.124279][ T26] audit: type=1326 audit(1732141260.624:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 309.166337][ T7935] EXT4-fs (loop6): unmounting filesystem. [ 309.198570][ T26] audit: type=1326 audit(1732141260.624:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 309.264203][ T26] audit: type=1326 audit(1732141260.624:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 309.364525][ T26] audit: type=1326 audit(1732141260.624:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.4.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 309.501997][T10490] loop5: detected capacity change from 0 to 512 [ 309.553845][T10493] loop7: detected capacity change from 0 to 128 [ 309.629863][T10490] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 309.655954][T10490] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.349767][T10499] netlink: 'syz.6.2156': attribute type 4 has an invalid length. [ 310.740649][T10507] loop7: detected capacity change from 0 to 4096 [ 311.139402][T10507] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 311.161275][T10503] EXT4-fs (loop7): shut down requested (0) [ 311.176545][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 311.316168][T10514] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2163'. [ 311.375803][T10025] EXT4-fs (loop7): unmounting filesystem. [ 311.383009][T10514] 9pnet_fd: Insufficient options for proto=fd [ 311.616492][T10528] loop5: detected capacity change from 0 to 512 [ 311.636258][T10528] EXT4-fs: Ignoring removed bh option [ 311.654407][T10530] loop6: detected capacity change from 0 to 1024 [ 311.662400][T10528] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 311.671940][T10530] ext4: Bad value for 'max_dir_size_kb' [ 311.700575][T10528] EXT4-fs (loop5): 1 truncate cleaned up [ 311.706476][T10528] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 311.909355][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 311.927405][T10541] netlink: 'syz.7.2173': attribute type 4 has an invalid length. [ 312.764662][T10553] loop7: detected capacity change from 0 to 4096 [ 312.957020][T10553] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 312.978557][T10551] EXT4-fs (loop7): shut down requested (0) [ 313.208341][T10025] EXT4-fs (loop7): unmounting filesystem. [ 313.323267][T10562] loop5: detected capacity change from 0 to 512 [ 313.330952][T10564] loop4: detected capacity change from 0 to 128 [ 313.582533][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 313.582549][ T26] audit: type=1326 audit(1732141265.584:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 313.624993][T10573] netlink: 'syz.5.2186': attribute type 4 has an invalid length. [ 313.643245][ T4298] lo speed is unknown, defaulting to 1000 [ 313.653913][ T26] audit: type=1326 audit(1732141265.614:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 313.693545][ T26] audit: type=1326 audit(1732141265.614:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 313.733382][ T26] audit: type=1326 audit(1732141265.614:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 313.779422][ T26] audit: type=1326 audit(1732141265.614:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 313.841604][ T26] audit: type=1326 audit(1732141265.624:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 313.898869][ T26] audit: type=1326 audit(1732141265.624:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 313.927277][ T26] audit: type=1326 audit(1732141265.624:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 313.965580][ T26] audit: type=1326 audit(1732141265.624:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 314.030968][ T26] audit: type=1326 audit(1732141265.624:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.5.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 314.509891][T10594] loop5: detected capacity change from 0 to 4096 [ 314.748601][T10594] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 314.791531][T10593] EXT4-fs (loop5): shut down requested (0) [ 315.015534][T10602] loop4: detected capacity change from 0 to 128 [ 315.043732][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 315.231856][T10612] netlink: 'syz.5.2201': attribute type 4 has an invalid length. [ 315.261576][T10613] loop4: detected capacity change from 0 to 1024 [ 315.289070][T10613] ext4: Bad value for 'max_dir_size_kb' [ 315.420214][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2209'. [ 315.521162][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2208'. [ 315.571495][T10624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.604799][T10624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.628492][T10624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.647545][T10624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.096535][T10654] 9pnet_fd: Insufficient options for proto=fd [ 316.247362][T10658] x_tables: duplicate underflow at hook 2 [ 316.598847][T10679] loop5: detected capacity change from 0 to 512 [ 316.683815][T10679] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 316.751083][T10679] EXT4-fs (loop5): orphan cleanup on readonly fs [ 316.806185][T10679] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.2231: Failed to acquire dquot type 1 [ 316.866505][T10688] 9pnet_fd: Insufficient options for proto=fd [ 316.888313][T10679] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2231: bg 0: block 40: padding at end of block bitmap is not set [ 316.921367][T10679] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 316.939520][T10679] EXT4-fs (loop5): 1 truncate cleaned up [ 316.946976][T10679] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 317.048667][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.055343][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.204714][T10697] IPv4: Oversized IP packet from 127.202.26.0 [ 317.281365][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 318.508107][T10722] ip6t_rpfilter: unknown options [ 318.535142][T10725] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2249'. [ 318.539058][T10726] loop6: detected capacity change from 0 to 1024 [ 318.617517][T10726] ext4: Bad value for 'max_dir_size_kb' [ 318.884673][ T26] kauditd_printk_skb: 183 callbacks suppressed [ 318.884688][ T26] audit: type=1326 audit(1732141270.884:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 319.025541][ T26] audit: type=1326 audit(1732141270.934:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 319.124017][T10742] ip6t_rpfilter: unknown options [ 319.217099][T10745] loop7: detected capacity change from 0 to 4096 [ 319.280759][ T26] audit: type=1326 audit(1732141270.934:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 319.411011][ T26] audit: type=1326 audit(1732141270.944:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 319.438070][ T26] audit: type=1326 audit(1732141270.944:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 319.480191][ T26] audit: type=1326 audit(1732141270.944:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 319.532219][T10745] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 319.555882][T10738] EXT4-fs (loop7): shut down requested (0) [ 319.556612][ T26] audit: type=1326 audit(1732141270.944:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 319.718121][ T26] audit: type=1326 audit(1732141270.944:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356877e819 code=0x7ffc0000 [ 319.817584][T10025] EXT4-fs (loop7): unmounting filesystem. [ 320.442664][ T26] audit: type=1326 audit(1732141272.444:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10763 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 320.508526][T10767] netlink: 'syz.7.2262': attribute type 4 has an invalid length. [ 320.523989][T10759] netlink: 'syz.5.2263': attribute type 4 has an invalid length. [ 320.542500][ T26] audit: type=1326 audit(1732141272.444:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10763 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 320.733613][T10775] loop4: detected capacity change from 0 to 1024 [ 320.772196][T10775] EXT4-fs: Ignoring removed orlov option [ 320.788287][T10775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.836358][T10775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 320.855222][T10784] loop6: detected capacity change from 0 to 128 [ 320.943499][T10775] EXT4-fs (loop4): unmounting filesystem. [ 321.083996][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2275'. [ 321.153422][T10793] ip6t_rpfilter: unknown options [ 321.338904][T10793] loop7: detected capacity change from 0 to 4096 [ 321.584382][T10793] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 321.627672][T10793] EXT4-fs (loop7): shut down requested (0) [ 321.981403][T10799] netlink: 'syz.4.2278': attribute type 4 has an invalid length. [ 321.994516][T10025] EXT4-fs (loop7): unmounting filesystem. [ 322.251235][T10804] netlink: 'syz.4.2281': attribute type 4 has an invalid length. [ 322.473668][T10814] loop7: detected capacity change from 0 to 1024 [ 322.543949][T10814] ext4: Bad value for 'max_dir_size_kb' [ 322.554279][T10820] loop6: detected capacity change from 0 to 128 [ 323.254606][T10831] loop5: detected capacity change from 0 to 4096 [ 323.443845][T10831] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 323.482948][T10831] EXT4-fs (loop5): shut down requested (0) [ 323.817935][ T6227] EXT4-fs (loop5): unmounting filesystem. [ 323.909271][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'. [ 323.969531][T10837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.041598][ T26] kauditd_printk_skb: 129 callbacks suppressed [ 324.041613][ T26] audit: type=1326 audit(1732141276.044:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 324.083634][ T26] audit: type=1326 audit(1732141276.084:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 324.216664][T10837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.224157][ T26] audit: type=1326 audit(1732141276.084:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 324.360745][ T26] audit: type=1326 audit(1732141276.084:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b8b780737 code=0x7ffc0000 [ 324.467859][ T26] audit: type=1326 audit(1732141276.084:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 324.515689][T10845] netlink: 'syz.5.2292': attribute type 4 has an invalid length. [ 324.598970][ T26] audit: type=1326 audit(1732141276.084:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 324.711695][ T26] audit: type=1326 audit(1732141276.084:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 324.800936][ T26] audit: type=1326 audit(1732141276.084:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 324.885829][T10854] netlink: 'syz.6.2296': attribute type 4 has an invalid length. [ 324.897192][ T26] audit: type=1326 audit(1732141276.524:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 324.941185][ T26] audit: type=1326 audit(1732141276.524:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8b77e819 code=0x7ffc0000 [ 324.997328][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2300'. [ 325.045404][T10861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.052869][T10861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.293226][T10862] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 325.310137][T10876] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2307'. [ 326.902313][T10888] 9pnet_fd: Insufficient options for proto=fd [ 327.058676][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'. [ 327.067890][T10896] netlink: 'syz.0.2310': attribute type 2 has an invalid length. [ 327.076691][T10896] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 327.086643][T10896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2310'. [ 327.224534][T10904] loop7: detected capacity change from 0 to 128 [ 327.242741][T10903] netlink: 'syz.4.2315': attribute type 4 has an invalid length. [ 327.290737][T10904] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 327.361267][T10904] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 329.359326][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 329.490180][T10904] loop7: detected capacity change from 128 to 64 [ 329.515666][T10834] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 329.528581][T10918] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.2314: No space for directory leaf checksum. Please run e2fsck -D. [ 329.538410][T10929] loop4: detected capacity change from 0 to 512 [ 329.551792][T10918] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.2314: checksumming directory block 0 [ 329.579747][T10931] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2324'. [ 329.590307][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 329.590321][ T26] audit: type=1326 audit(1732141281.594:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 329.631931][T10931] 9pnet_fd: Insufficient options for proto=fd [ 329.661642][T10025] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 329.677311][T10025] EXT4-fs error (device loop7): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory block failed checksum [ 329.700829][T10025] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5885: Out of memory [ 329.713185][T10929] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 329.795542][T10929] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.825630][ T26] audit: type=1326 audit(1732141281.634:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece6f7e819 code=0x7ffc0000 [ 329.874628][T10025] EXT4-fs error (device loop7): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 329.896045][ T26] audit: type=1326 audit(1732141281.634:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fece6f757e7 code=0x7ffc0000 [ 329.983226][ T26] audit: type=1326 audit(1732141281.634:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece6f1a1a9 code=0x7ffc0000 [ 330.025454][ T26] audit: type=1326 audit(1732141281.634:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fece6f757e7 code=0x7ffc0000 [ 330.091270][ T26] audit: type=1326 audit(1732141281.634:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece6f1a1a9 code=0x7ffc0000 [ 330.188515][ T26] audit: type=1326 audit(1732141281.634:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fece6f757e7 code=0x7ffc0000 [ 330.261239][T10078] EXT4-fs (loop4): unmounting filesystem. [ 330.267135][ T26] audit: type=1326 audit(1732141281.634:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece6f1a1a9 code=0x7ffc0000 [ 330.386824][ T26] audit: type=1326 audit(1732141281.634:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fece6f757e7 code=0x7ffc0000 [ 330.473666][ T26] audit: type=1326 audit(1732141281.634:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece6f1a1a9 code=0x7ffc0000 [ 330.769833][T10078] bond0: (slave syz_tun): Releasing backup interface [ 330.786856][T10940] bridge0: port 3(syz_tun) entered disabled state [ 330.822739][T10025] EXT4-fs (loop7): unmounting filesystem. [ 330.823255][T10940] device syz_tun left promiscuous mode [ 330.839498][T10940] bridge0: port 3(syz_tun) entered disabled state [ 330.872843][ T4830] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.000521][ T4830] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.099376][ T4830] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.151513][ T4830] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.111721][ T4830] device hsr_slave_0 left promiscuous mode [ 332.118332][ T4830] device hsr_slave_1 left promiscuous mode [ 332.124640][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.132121][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.140889][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.148463][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.157260][ T4830] device bridge_slave_1 left promiscuous mode [ 332.163496][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.172380][ T4830] device bridge_slave_0 left promiscuous mode [ 332.179404][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.202120][ T4830] device veth1_macvtap left promiscuous mode [ 332.208468][ T4830] device veth0_macvtap left promiscuous mode [ 332.214584][ T4830] device veth1_vlan left promiscuous mode [ 332.220496][ T4830] device veth0_vlan left promiscuous mode [ 332.656189][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 332.699517][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 332.741384][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.789886][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.246857][ T4830] bond0 (unregistering): Released all slaves [ 333.723146][ T4830] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.793161][ T4830] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.860135][ T4830] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.899436][ T4830] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.965122][ T4830] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.030825][ T4830] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.091040][ T4830] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.150528][ T4830] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.244842][ T4830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.310937][ T4830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.359171][ T4830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.443427][ T4830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.542978][ T4830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.620220][ T4830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.661517][ T4830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.729865][ T4830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.870234][ T4830] tipc: Left network mode [ 336.531085][ T4830] device hsr_slave_0 left promiscuous mode [ 336.537717][ T4830] device hsr_slave_1 left promiscuous mode [ 336.544032][ T4830] device bridge_slave_1 left promiscuous mode [ 336.550466][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.559621][ T4830] device bridge_slave_0 left promiscuous mode [ 336.569399][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.581029][ T4830] device hsr_slave_0 left promiscuous mode [ 336.589112][ T4830] device macvlan1 left promiscuous mode [ 336.594784][ T4830] bridge0: port 3(macvlan1) entered disabled state [ 336.602408][ T4830] device bridge_slave_1 left promiscuous mode [ 336.608747][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.617507][ T4830] device bridge_slave_0 left promiscuous mode [ 336.623657][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.634693][ T4830] device hsr_slave_0 left promiscuous mode [ 336.644035][ T4830] device hsr_slave_1 left promiscuous mode [ 336.650363][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.657915][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.665475][ T4830] device bridge_slave_1 left promiscuous mode [ 336.671777][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.679773][ T4830] device bridge_slave_0 left promiscuous mode [ 336.686001][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.696779][ T4830] device bridge_slave_1 left promiscuous mode [ 336.702929][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.710928][ T4830] device bridge_slave_0 left promiscuous mode [ 336.717622][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.774287][ T4830] device veth1_macvtap left promiscuous mode [ 336.780383][ T4830] device veth0_macvtap left promiscuous mode [ 336.786624][ T4830] device veth1_vlan left promiscuous mode [ 336.792400][ T4830] device veth0_vlan left promiscuous mode [ 336.799986][ T4830] device hsr_slave_1 left promiscuous mode [ 336.806435][ T4830] device veth1_macvtap left promiscuous mode [ 336.812446][ T4830] device veth0_macvtap left promiscuous mode [ 336.818617][ T4830] device veth1_vlan left promiscuous mode [ 336.824363][ T4830] device veth0_vlan left promiscuous mode [ 336.833001][ T4830] device veth1_macvtap left promiscuous mode [ 336.839091][ T4830] device veth0_macvtap left promiscuous mode [ 336.845137][ T4830] device veth1_vlan left promiscuous mode [ 336.850996][ T4830] device veth0_vlan left promiscuous mode [ 336.858091][ T4830] device veth1_macvtap left promiscuous mode [ 336.864114][ T4830] device veth0_macvtap left promiscuous mode [ 336.871414][ T4830] device veth1_vlan left promiscuous mode [ 336.877576][ T4830] device veth0_vlan left promiscuous mode [ 337.425136][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 337.467585][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 337.511500][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.561304][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.952108][ T4830] bond0 (unregistering): Released all slaves [ 338.315041][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 338.353283][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 338.391184][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.434085][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.841849][ T4830] bond0 (unregistering): Released all slaves [ 339.037008][ T4830] bond1 (unregistering): Released all slaves [ 339.327933][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 339.368351][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 339.409305][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.450811][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface