last executing test programs: 18.593754684s ago: executing program 2 (id=1022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 17.538122374s ago: executing program 2 (id=1026): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) chown(0x0, 0xee01, 0x0) 16.919294701s ago: executing program 2 (id=1036): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r3, &(0x7f0000000600)}, 0x20) 16.787876961s ago: executing program 2 (id=1039): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000cc0)='\x90\xe5') syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000003940)='./file2\x00', 0x2218050, &(0x7f0000000140)=ANY=[], 0x1, 0x1522, &(0x7f00000002c0)="$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") r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000017c0)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0000000d0085a133d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040016000803010000000000e000e218d1ddf66ed538f252720000", 0x79, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000640)='./file0\x00', 0x202980, 0x0) fcntl$getflags(r1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0x200000, 0x0, 0x200000, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8c723ba4, 0x5, 0x2, 0x9}}]}]}}}]}, 0x7c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x502, &(0x7f0000003e80)="$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") openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000c0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x7, 0x7ff, @vifc_lcl_ifindex=r4, @broadcast}, 0x10) read$FUSE(r5, &(0x7f0000001800)={0x2020}, 0x1314) 16.456202039s ago: executing program 2 (id=1043): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 15.977870717s ago: executing program 2 (id=1049): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r3, &(0x7f0000000600)}, 0x20) 15.658306924s ago: executing program 32 (id=1049): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r3, &(0x7f0000000600)}, 0x20) 2.041545774s ago: executing program 1 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a008020"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 1.936519479s ago: executing program 5 (id=1247): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.782008434s ago: executing program 5 (id=1252): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r4, &(0x7f0000000600)}, 0x20) 1.781550706s ago: executing program 3 (id=1253): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x5}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x5}]}]}]}]}, 0x30}}, 0x0) 1.745931146s ago: executing program 0 (id=1254): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = syz_open_pts(r0, 0x2a7400) dup3(r1, r0, 0x0) 1.72932092s ago: executing program 1 (id=1255): r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffed9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xa1a) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) r2 = socket$inet6(0xa, 0x0, 0xffff7ffd) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000c000000000000000000000005000600000000000a00"/47], 0x60}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x8000400) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000280), 0x6e) 1.67255013s ago: executing program 3 (id=1256): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000780), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) 1.67237128s ago: executing program 5 (id=1257): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000140)='./file0\x00', 0x14) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) 1.605594351s ago: executing program 3 (id=1258): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0xfffe, @rand_addr=0x64010101}}}, 0x108) 1.595153991s ago: executing program 0 (id=1259): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1V+1nVVawSpIwA0Igoq0Ai7IDRIXXOQGCa0QirhZJECKQJUWgUSgabQSAmYFCysqYXRm3rHHbtK4+bLT/H5t/J8585w575n2OT4TzXsmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICIL/30saGDaatHAQA8SK+NvzF02O9/AHiknPL+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA20tRxFuR4r2xVpps3+8YONGcO3d+YnTs5qsNpkhRiaJdX/4ZOHjo8JEXX3p5uJsfv/699rl4ffzUsdrx+dmFxcbSUmO6NjHXPD0/3dj0M9zt+hvtbb8Atdk3z02fObNUO3Tg8LqHz1dv7Hxsd/Xo8LP7nu/WToyOjY331PT13/HWPyLdu6fiU2RHFPHlSPGt/d9J9YioxN33wm2OHffbYPSV/dfeiYnRsfaOzDTrc8vlg6mSq/oiqj0rjXR75AH04l0ZibhQ/ncqB7y33L3xhfpifWqmUTtZX1xuLjfn51KlM9pyf6pRieEUsRARrWKrB8920x9FvBopbnzYSlMRUXT74IXXxt8YOnzrFfse4CBvsflqEXE1HoKehW1qZxTx25Hi3cmhOJ37qt021yO+WOYrEW+VeSXFxXw/lQeI4Yjv+n0CD7W+KOJvIsV8aqXpbu+3zytPfLX2lbkz8z213fPKh/79wYPk3IRtbCCKmGqf8bfSnf9lFwAAAAAAAAAAAADwYBTxzUhxeXZPWojeOaXNubO1U/Wpmc6ngruf/a/ltVZWVlaqqZO1nEM5R3KezDmZcyHnhZwXc17KeTnnlZxXc17L2coZlbz9nLWcQzlHcp7MOZlzIeeFnBdzXsp5OeeVnFdzXsvZyhnmPQEAAAAAAAAAAAAAAAAAAHCPDUYRvxEp/v33v9b+Xulofy/9Z48OHz/xmd7vjH/mNs9T1h6IiG/G5r6Td0f+rvFUKf+59/sF3N5AFPH1/P1/v7zVgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALaFShTxK5HiG99rpUgRMRIxGZ28Vmz16AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0s5UxKuR4md/d2R1WV9EpPa/HXvKH0dipMj5RJmvxMjBdlZGjpU5EHFgC8YP3Lmlt995sz4z01h0ww033Fi9sdVHJgAAAAAAAAAAAAAAAAB4hKUi/j5S/OTvtVI1Is5Xb+x8bHf16PCz+54vomhfBCD11r8+fupY7fj87MJiY2mpMV2bmGuenp9ubHZzAyeac+fOT4yO3Zedua3B+zz+wYHj8wtvLzbP/sLyTR/fNXBsaml5sX765g/HYPRFDPUu2dse8MToWHvQM836XHvVVLnFAPsiapvdGR55u1IR/xsp3tv/7Xg8L8vX/+jv3Fvr/j/8xbV7P9y3Plf/d2wfPz57dPj4ruc2czttdqB7241XNsLYeM/ivjzKH+pZVs3j2vRzwyOq7P8XIsXP/1GRuj2U+/8HOveK1dr/+fpaTx3dkKu2qP+f6Fl2NB+1+vsiBpZnF/qfjhhYevud/c3Z+tnG2cbckUMvvzR85OUXj7zUvyNi4ExzpjG0dmvTrx0AAAAAAAAAAAAAAAAA3C/9qYgvRYpf+ru/XJ03nuf/faZzb23+X+/83z0bnqf3ugG3un3TuX63mdfXq9xmSkU8FSme/bNn2uNNscucd7hDu1IR3y/7afrL6Qt5We7/PLP/5v1/YUOu2qL5v4/3LLuQjxP/ESke/4Nn4gs9x4mNs3vLur+IFFM/8vlcFzvKuu7zdeZEdyYGl7VfixTvn1xf2503/cRa7cHN7hZspbL/ZyPFP/zW38aP5mXrr/9x8/7ftSFXbVH/P9m7TxGx9PY7b9ZnZhqLS5t+KeCRU/b/r0eKv/6Tb8dzednHXf+ne52fPc+tz8Fu0Rb1/1M9y6p5XD/2CV8LAAAAAAAAAAAAeFjsSkX8U6T48z/dl/bnZZv5/O/0hly1RZ//e7pn2fS6z//evxubfpEBAGCb6E9F/ESk+OPp66k7N/aW839fWZv/M7rxxL19Tv+D7Xn+n+hc/xPM/y+3mVIR/5fn9Q7dZl7vj0eKX/upfbku7S7rRrrDbf8ceG1+bv+xmZn50/Xl+tRMoza+UD/dKNfdGyn+9d8+n9ettOf5dudHd+YGr80J/p1I8XMfdGs7c4K7cymfXKs9WNbujxTff399bXfe1VNrtYfK2t+MFGP/ffPa3Wu1h8vaf4wU//lurVu7q6ztvp97eq32wOn5mY+8ZQMAAAAAAAAAAAAAAAAAAGDr9aciUqS48jOXVufGr7/+V/c6AOuv/7XR/fr+/+q92U0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCikKOK/IsV7Y610rSjvdwycaM6dOz8xOnbz1QZTpKhE0a4v/wwcPHT4yIsvvTzczY9f/177XLw+fupY7fj87MJiY2mpMV2bmGuenp9ubPoZ7nb9jfa2X4Da7Jvnps+cWaodOnB43cPnqzd2Pra7enT42X3Pd2snRsfGxntq+vrveOsfke7dU/EpsiOK+KtI8a3930n/XERU4u574TbHjvttMPrK/mvvxMToWHtHZpr1ueXywVTJVX0R1Z6VRro98gB68a6MRFyIiEo54L3l7o0v1BfrUzON2sn64nJzuTk/lyqd0Zb7U41KDKeIhYhoFVs9eLab/ijiSqS48WEr/UsRUXT74IXXxt8YOnzrFfse4CBvsflqEXE1HoKehW1qZxTxZKR4d3Io3i86fdVum+sRXyzzlYi3yryS4mK+n8oDxHDEd/0+gYdaXxRxMlLMp1a6XuTeb59Xnvhq7StzZ+Z7arvnlQ/9+4MHybkJ29hAFPFB+4y/lT7w+xwAAAAAAAAAAAAAtrkiXo0Ul2f3pPb80NU5pc25s7VT9amZzsf6u5/9r+W1VlZWVqqpk7WcQzlHcp7MOZlzIeeFnBdzXsp5OeeVnFdzXsvZyhmVvP2ctZxDOUdynsw5mXMh54WcF3Neynk555WcV3Ney9nKGT4nDQAAAAAAAAAAAAAAAADAfVKJIn41Unzje620UnS+X3YyOnnNPFf4VPv/AAAA//84/iOE") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) pwritev2(r1, &(0x7f0000000240), 0x0, 0x6, 0x8, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x10e, 0xc, 0x0, 0x20000000) creat(&(0x7f0000000640)='./file1\x00', 0x0) 1.528243533s ago: executing program 4 (id=1260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r2, r1, 0x4, 0x0, 0x0, @void, @value}, 0x10) 1.40044278s ago: executing program 3 (id=1261): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000"], 0x18}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0)=0x2, 0x4) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1.353198565s ago: executing program 4 (id=1262): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[@ANYBLOB='lastblock=00000000000000000000,adinicb,dmode=00000000000000004000005,umask=00000000000000000000005,shortad,shortad,undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6c617374626c6f636b3d30303030303030303030303030303030313032332c756d61736b3d30303030303030303030303030303030303030303030362c646d6f64653d3030303030303030301030303030303030303030306f7374726963742c756d61736b3d30303030303030303030303032303030303030303030312c756d61736b3d30303030303030303030303030303030303030303030352c0000000000"], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.339788796s ago: executing program 3 (id=1263): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x9, 0x0) open(0x0, 0x250593e702c431f5, 0x80) r1 = open(&(0x7f0000000040)='./bus\x00', 0x127842, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc10c5541, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x2000c048) connect$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) setreuid(0x0, 0xee01) ftruncate(r5, 0x2007fff) sendfile(r1, r5, 0x0, 0x1000000201005) io_submit(0x0, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x1120) 1.28663579s ago: executing program 5 (id=1264): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 1.157493325s ago: executing program 0 (id=1265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) 1.141284638s ago: executing program 5 (id=1266): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f", 0x24}], 0x1) 980.501243ms ago: executing program 0 (id=1267): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x3, r0, 0x1, 0x80000}) 774.972037ms ago: executing program 1 (id=1268): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) 734.19623ms ago: executing program 1 (id=1269): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) socket$packet(0x11, 0x2, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d0020070000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 700.252773ms ago: executing program 1 (id=1270): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000e40)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x101080, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a000000240001801400018008000100ffffffff080002007f0000010c00028005000100000000003c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa080007400000000030000e802c00018014000300fc00000000000000000000000000000114000400fc010000000000000000000000000000724fdbd12676a52ae1f8ad2256e61e7d094ad476f4c721f6a9d58ce6910f1b3a72cae65c"], 0xac}}, 0x4044004) sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) 632.437551ms ago: executing program 4 (id=1271): sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="0b030e", 0x3, 0x41, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 573.405659ms ago: executing program 4 (id=1272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r2, r1, 0x4, 0x0, 0x0, @void, @value}, 0x10) 534.874874ms ago: executing program 4 (id=1273): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpgid(0x0) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x64e, &(0x7f0000000dc0)="$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") recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) 356.543249ms ago: executing program 4 (id=1274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="37eb98"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000080)="ec"}) 339.073144ms ago: executing program 3 (id=1275): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}}) 135.984497ms ago: executing program 1 (id=1276): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x100000000000af, 0x20340) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20.433413ms ago: executing program 0 (id=1278): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='utf8=0,nonumtail=0,iocharset=iso8859-14,check=strict,uni_xlate=1,shortname=lower,shoru~ame=winnt,flush,\x00'], 0x1, 0x216, &(0x7f0000000e00)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000001900)='./bus\x00', 0x0, 0x21002, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140)) ftruncate(r1, 0x5c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x8000, 0x0) 0s ago: executing program 0 (id=1279): r0 = socket$inet(0x2, 0xa, 0x1ff) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) kernel console output (not intermixed with test programs): p: entered promiscuous mode [ 65.556501][ T5831] veth1_macvtap: entered promiscuous mode [ 65.646483][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.661183][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.674961][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.679170][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.695812][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.706502][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.716965][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.729019][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.739340][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.750323][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.762668][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.778247][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.790637][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.813928][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.843479][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.853645][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.864253][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.874789][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.886842][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.896992][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.908363][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.920126][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.959771][ T5829] Bluetooth: hci0: command tx timeout [ 65.963289][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.975092][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.984042][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.995560][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.016783][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.024799][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.036813][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.038983][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.122960][ T5829] Bluetooth: hci1: command tx timeout [ 66.245654][ T5829] Bluetooth: hci4: command tx timeout [ 66.251189][ T5829] Bluetooth: hci2: command tx timeout [ 66.290888][ T5143] Bluetooth: hci3: command tx timeout [ 66.424596][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.457260][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.517723][ T29] audit: type=1326 audit(1731473541.184:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 66.553037][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.561206][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.618104][ T29] audit: type=1326 audit(1731473541.224:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 66.669878][ T5944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.674007][ T29] audit: type=1326 audit(1731473541.224:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 66.683906][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 66.758436][ T29] audit: type=1326 audit(1731473541.264:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 66.783448][ T5942] bridge_slave_1: left allmulticast mode [ 66.790450][ T5942] bridge_slave_1: left promiscuous mode [ 66.797759][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.816798][ T29] audit: type=1326 audit(1731473541.274:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 66.849089][ T5942] bridge_slave_0: left allmulticast mode [ 66.864598][ T5942] bridge_slave_0: left promiscuous mode [ 66.870690][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.878559][ T29] audit: type=1326 audit(1731473541.274:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 66.902743][ T29] audit: type=1326 audit(1731473541.274:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 66.927444][ T29] audit: type=1326 audit(1731473541.274:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 66.959075][ T29] audit: type=1326 audit(1731473541.274:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 66.987912][ T29] audit: type=1326 audit(1731473541.414:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5946 comm="syz.0.17" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x0 [ 67.733064][ T5971] loop4: detected capacity change from 0 to 4096 [ 67.777131][ T5971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.051519][ T5143] Bluetooth: hci0: command tx timeout [ 68.173501][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.200034][ T5143] Bluetooth: hci1: command tx timeout [ 68.281115][ T5143] Bluetooth: hci2: command tx timeout [ 68.281669][ T5829] Bluetooth: hci4: command tx timeout [ 68.359823][ T5829] Bluetooth: hci3: command tx timeout [ 68.422198][ T6000] loop3: detected capacity change from 0 to 164 [ 68.833982][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.903907][ T6020] loop0: detected capacity change from 0 to 4096 [ 69.051166][ T6020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.120822][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.319224][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 69.354346][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 69.679913][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.552043][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 70.561161][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 70.725058][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 70.738307][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 70.903870][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 70.927738][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 71.438955][ T6075] loop3: detected capacity change from 0 to 512 [ 71.482822][ T6075] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 71.540177][ T6075] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.596890][ T6082] loop1: detected capacity change from 0 to 512 [ 71.615988][ T6075] EXT4-fs warning (device loop3): ext4_enable_quotas:7143: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 71.676220][ T6075] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 71.716734][ T6075] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.66: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 71.771627][ T6075] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.66: couldn't read orphan inode 13 (err -117) [ 71.810437][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.826311][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.848391][ T6082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.889890][ T6082] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.901876][ T6075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.966908][ T6075] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.66: deleted inode referenced: 12 [ 72.119450][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.351048][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.586799][ T6103] loop2: detected capacity change from 0 to 512 [ 72.878418][ T6103] __quota_error: 38 callbacks suppressed [ 72.878442][ T6103] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 72.906712][ T6103] EXT4-fs warning (device loop2): ext4_enable_quotas:7143: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.930918][ T6103] EXT4-fs (loop2): mount failed [ 73.109647][ T29] audit: type=1326 audit(1731473547.744:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 73.191994][ T29] audit: type=1326 audit(1731473547.744:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 73.286741][ T29] audit: type=1326 audit(1731473547.744:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 73.362480][ T29] audit: type=1326 audit(1731473548.034:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 73.442562][ T29] audit: type=1326 audit(1731473548.064:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 73.520973][ T29] audit: type=1326 audit(1731473548.064:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 73.594670][ T29] audit: type=1326 audit(1731473548.064:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 73.668293][ T29] audit: type=1326 audit(1731473548.064:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 73.746139][ T29] audit: type=1326 audit(1731473548.064:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 74.145455][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 74.454238][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'. [ 75.021459][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.098314][ T6155] loop3: detected capacity change from 0 to 256 [ 75.109318][ T6152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.94'. [ 75.210800][ T6155] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.449134][ T6165] Zero length message leads to an empty skb [ 75.683602][ T6176] IPv6: Can't replace route, no match found [ 75.748485][ T6179] loop1: detected capacity change from 0 to 1024 [ 75.840604][ T6179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.917030][ T6179] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 75.983780][ T6190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.111'. [ 75.999322][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.009724][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 76.042416][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 77.636989][ T6196] veth1_macvtap: left promiscuous mode [ 78.059764][ T6224] loop2: detected capacity change from 0 to 1024 [ 78.118467][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 78.118484][ T29] audit: type=1326 audit(1731473552.784:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.191726][ T29] audit: type=1326 audit(1731473552.794:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.221947][ T29] audit: type=1326 audit(1731473552.804:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.268236][ T6224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.285916][ T29] audit: type=1326 audit(1731473552.804:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.309011][ T29] audit: type=1326 audit(1731473552.804:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.332909][ T29] audit: type=1326 audit(1731473552.804:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.357150][ T29] audit: type=1326 audit(1731473552.804:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.359118][ T6224] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 78.380764][ T29] audit: type=1326 audit(1731473552.804:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.412640][ T29] audit: type=1326 audit(1731473552.804:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.504807][ T29] audit: type=1326 audit(1731473552.804:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.4.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 78.552774][ T6234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.127'. [ 78.563091][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.597940][ T6244] netlink: 'syz.0.131': attribute type 4 has an invalid length. [ 78.661538][ T6243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.897841][ T6257] process 'syz.2.136' launched './file1' with NULL argv: empty string added [ 78.919227][ T6258] loop4: detected capacity change from 0 to 512 [ 79.016850][ T6258] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.135: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 79.069951][ T6261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 79.076792][ T6261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.140785][ T6258] EXT4-fs error (device loop4): ext4_quota_enable:7102: comm syz.4.135: Bad quota inode: 3, type: 0 [ 79.751412][ T6261] vhci_hcd vhci_hcd.0: Device attached [ 79.759262][ T6258] EXT4-fs warning (device loop4): ext4_enable_quotas:7143: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 79.799838][ T6264] vhci_hcd: connection closed [ 79.814522][ T6258] EXT4-fs (loop4): mount failed [ 79.831260][ T11] vhci_hcd: stop threads [ 79.872378][ T11] vhci_hcd: release socket [ 79.877338][ T11] vhci_hcd: disconnect device [ 80.045864][ T6278] syz.0.145[6278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.045964][ T6278] syz.0.145[6278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.057953][ T6278] syz.0.145[6278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.068551][ T6276] loop2: detected capacity change from 0 to 1024 [ 80.268960][ T6276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.309972][ T6276] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 80.475054][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.582521][ T6305] netlink: 'syz.0.154': attribute type 32 has an invalid length. [ 81.661173][ T6323] loop4: detected capacity change from 0 to 512 [ 81.697536][ T6323] ======================================================= [ 81.697536][ T6323] WARNING: The mand mount option has been deprecated and [ 81.697536][ T6323] and is ignored by this kernel. Remove the mand [ 81.697536][ T6323] option from the mount to silence this warning. [ 81.697536][ T6323] ======================================================= [ 81.879666][ T6323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.920201][ T6323] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.987749][ T6323] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 82.006113][ T6340] loop1: detected capacity change from 0 to 512 [ 82.033956][ T6340] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 82.049226][ T942] cfg80211: failed to load regulatory.db [ 82.092274][ T6340] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.168: iget: bad i_size value: -67835469387268086 [ 82.110714][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.220909][ T6340] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.168: couldn't read orphan inode 15 (err -117) [ 82.260604][ T6349] loop2: detected capacity change from 0 to 1024 [ 82.294156][ T6349] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.308220][ T6349] JBD2: no valid journal superblock found [ 82.315393][ T6349] EXT4-fs (loop2): Could not load journal inode [ 82.333313][ T6340] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.353561][ T6340] ext2 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.143725][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 83.143745][ T29] audit: type=1326 audit(1731473557.814:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 83.279828][ T29] audit: type=1326 audit(1731473557.814:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 83.354637][ T29] audit: type=1326 audit(1731473557.874:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 83.445725][ T29] audit: type=1326 audit(1731473557.884:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 83.556847][ T29] audit: type=1326 audit(1731473557.884:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 83.669702][ T29] audit: type=1326 audit(1731473557.884:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 83.685585][ T6362] loop4: detected capacity change from 0 to 8192 [ 83.723699][ T29] audit: type=1326 audit(1731473557.884:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 83.770451][ T29] audit: type=1326 audit(1731473557.884:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 83.793600][ T29] audit: type=1326 audit(1731473558.194:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 83.816219][ T29] audit: type=1326 audit(1731473558.194:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 84.155415][ T6374] loop3: detected capacity change from 0 to 1024 [ 84.312829][ T6374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.332059][ T5826] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 84.365885][ T6374] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 84.389715][ T6374] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 84.602467][ T6389] netlink: 108 bytes leftover after parsing attributes in process `syz.1.184'. [ 84.988208][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.875898][ T6414] loop0: detected capacity change from 0 to 1024 [ 85.948584][ T6414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.001088][ T6422] random: crng reseeded on system resumption [ 86.091122][ T6414] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 86.138969][ T6431] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 86.159624][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 86.281693][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.857963][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 88.323789][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 88.323808][ T29] audit: type=1326 audit(1731473562.984:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 88.367624][ T29] audit: type=1326 audit(1731473562.984:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 88.397521][ T29] audit: type=1326 audit(1731473563.004:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 88.428562][ T29] audit: type=1326 audit(1731473563.004:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 88.474369][ T29] audit: type=1326 audit(1731473563.004:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 88.630573][ T29] audit: type=1326 audit(1731473563.004:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 88.649402][ T6481] loop0: detected capacity change from 0 to 1024 [ 88.694031][ T6481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.709601][ T29] audit: type=1326 audit(1731473563.024:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 88.794507][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 88.841305][ T29] audit: type=1326 audit(1731473563.024:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 88.910338][ T29] audit: type=1326 audit(1731473563.024:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 88.933968][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.943549][ T29] audit: type=1326 audit(1731473563.024:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 89.369833][ T6496] bond1: entered promiscuous mode [ 89.385507][ T6496] bond1: entered allmulticast mode [ 89.397097][ T6496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.763172][ T6496] bond1 (unregistering): Released all slaves [ 90.040292][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 90.265516][ T6527] loop2: detected capacity change from 0 to 1024 [ 90.272915][ T6527] EXT4-fs: Ignoring removed orlov option [ 90.300133][ T6527] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 90.553445][ T6539] syz.0.250[6539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.553540][ T6539] syz.0.250[6539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.571918][ T6539] syz.0.250[6539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.617185][ T6527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.765810][ T6527] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.2.247: corrupted in-inode xattr: bad magic number in in-inode xattr [ 90.785789][ T6527] EXT4-fs (loop2): Remounting filesystem read-only [ 90.793359][ T6527] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 90.849303][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.279754][ T6554] program syz.3.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.679327][ T6572] mmap: syz.0.263 (6572) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.098882][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.479805][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 93.479828][ T29] audit: type=1326 audit(1731473568.074:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 93.550023][ T29] audit: type=1326 audit(1731473568.074:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 93.606786][ T6604] loop2: detected capacity change from 0 to 512 [ 93.689724][ T6604] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.719813][ T6604] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.839578][ T29] audit: type=1326 audit(1731473568.504:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.1.283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x0 [ 93.863029][ T6604] EXT4-fs (loop2): 1 truncate cleaned up [ 93.893797][ T6604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.991608][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.304293][ T6651] loop4: detected capacity change from 0 to 2048 [ 95.375644][ T6651] EXT4-fs (loop4): failed to initialize system zone (-117) [ 95.394472][ T6651] EXT4-fs (loop4): mount failed [ 95.604856][ T6647] loop1: detected capacity change from 0 to 8192 [ 95.775746][ T29] audit: type=1326 audit(1731473570.374:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 95.810535][ T6647] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 95.839937][ T6647] FAT-fs (loop1): Filesystem has been set read-only [ 95.899101][ T29] audit: type=1326 audit(1731473570.374:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 96.199964][ T29] audit: type=1326 audit(1731473570.374:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 96.487450][ T29] audit: type=1326 audit(1731473570.374:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 96.833422][ T29] audit: type=1326 audit(1731473570.374:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 97.266327][ T29] audit: type=1326 audit(1731473571.934:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 97.303846][ T6689] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.361283][ T6689] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.379844][ T29] audit: type=1326 audit(1731473571.934:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 97.658963][ T5204] udevd[5204]: worker [5827] terminated by signal 33 (Unknown signal 33) [ 97.685622][ T5204] udevd[5204]: worker [5827] failed while handling '/devices/virtual/block/loop4' [ 97.854306][ T6716] loop0: detected capacity change from 0 to 1024 [ 97.870634][ T6716] EXT4-fs: Ignoring removed i_version option [ 97.899669][ T6716] EXT4-fs: Ignoring removed bh option [ 97.919683][ T6716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.233430][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.470174][ T5877] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.584026][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 98.584046][ T29] audit: type=1326 audit(1731473573.244:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 98.616873][ T29] audit: type=1326 audit(1731473573.244:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 98.639917][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 98.640279][ T29] audit: type=1326 audit(1731473573.244:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 98.762478][ T29] audit: type=1326 audit(1731473573.244:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 98.767550][ T5877] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.811251][ T5877] usb 5-1: config 1 interface 0 has no altsetting 0 [ 98.817451][ T6749] loop1: detected capacity change from 0 to 2048 [ 98.839421][ T5877] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 98.849731][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.858835][ T29] audit: type=1326 audit(1731473573.244:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 98.876259][ T5877] usb 5-1: Product: syz [ 98.891513][ T5877] usb 5-1: Manufacturer: syz [ 98.909305][ T6749] EXT4-fs (loop1): failed to initialize system zone (-117) [ 98.918696][ T6749] EXT4-fs (loop1): mount failed [ 98.932017][ T5877] usb 5-1: SerialNumber: syz [ 99.025803][ T6759] loop0: detected capacity change from 0 to 512 [ 99.085559][ T6759] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.130688][ T6759] EXT4-fs (loop0): 1 truncate cleaned up [ 99.141018][ T6759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.265379][ T5204] udevd[5204]: worker [5830] terminated by signal 33 (Unknown signal 33) [ 99.282098][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.340720][ T5877] usbhid 5-1:1.0: can't add hid device: -71 [ 99.379717][ T5877] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 99.436083][ T6400] udevd[6400]: failed to send result of seq 11516 to main daemon: Connection refused [ 99.436784][ T5877] usb 5-1: USB disconnect, device number 2 [ 99.690812][ T29] audit: type=1107 audit(1731473574.344:281): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 99.716677][ T6794] loop0: detected capacity change from 0 to 512 [ 99.726493][ T6794] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.750642][ T6794] EXT4-fs (loop0): 1 truncate cleaned up [ 99.768031][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.902034][ T6789] loop1: detected capacity change from 0 to 8192 [ 99.919997][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 99.980579][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.060680][ T6797] hub 8-0:1.0: USB hub found [ 100.072487][ T6797] hub 8-0:1.0: 1 port detected [ 100.313920][ T6815] loop1: detected capacity change from 0 to 128 [ 100.320992][ T6815] ext4: Unknown parameter 'dont_measure' [ 100.978003][ T6839] loop1: detected capacity change from 0 to 512 [ 101.005710][ T6839] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.054162][ T6839] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.377: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48834(4), depth 0(0) [ 101.107051][ T6839] EXT4-fs error (device loop1): ext4_quota_enable:7102: comm syz.1.377: Bad quota inode: 3, type: 0 [ 101.139186][ T6839] EXT4-fs warning (device loop1): ext4_enable_quotas:7143: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 101.220090][ T6839] EXT4-fs (loop1): mount failed [ 101.474802][ T29] audit: type=1326 audit(1731473576.134:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 101.489691][ T6854] loop3: detected capacity change from 0 to 512 [ 101.524917][ T29] audit: type=1326 audit(1731473576.134:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 101.584528][ T29] audit: type=1326 audit(1731473576.134:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 101.614137][ T29] audit: type=1326 audit(1731473576.134:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 101.646372][ T6854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.679466][ T6854] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.758820][ T6854] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 101.840263][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.473568][ T6890] loop2: detected capacity change from 0 to 1024 [ 102.490439][ T6890] EXT4-fs: Ignoring removed oldalloc option [ 102.550041][ T6890] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 102.630114][ T6890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.916114][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.925722][ T6915] loop3: detected capacity change from 0 to 128 [ 102.960553][ T6915] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 102.993969][ T6915] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 103.024504][ T6915] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.408: checksumming directory block 0 [ 103.043636][ T6915] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.408: checksumming directory block 0 [ 103.179976][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.967340][ T6950] dccp_close: ABORT with 32 bytes unread [ 104.705234][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 104.972128][ T6969] serio: Serial port pts0 [ 105.178405][ T6982] loop0: detected capacity change from 0 to 512 [ 105.230579][ T6988] netlink: 'syz.2.442': attribute type 3 has an invalid length. [ 105.269377][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 105.334478][ T6982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.395860][ T6982] EXT4-fs (loop0): shut down requested (0) [ 105.583644][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.710005][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 105.809939][ T7023] loop4: detected capacity change from 0 to 512 [ 105.845491][ T7023] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.858605][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 105.858622][ T29] audit: type=1326 audit(1731473580.524:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 105.920643][ T7023] EXT4-fs (loop4): 1 truncate cleaned up [ 105.931851][ T29] audit: type=1326 audit(1731473580.564:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 105.940464][ T7023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.963969][ T7029] loop3: detected capacity change from 0 to 4096 [ 106.029710][ T29] audit: type=1326 audit(1731473580.574:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 106.059780][ T29] audit: type=1326 audit(1731473580.574:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 106.082705][ T29] audit: type=1326 audit(1731473580.574:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 106.103988][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.105488][ T29] audit: type=1326 audit(1731473580.574:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 106.136230][ T29] audit: type=1326 audit(1731473580.574:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 106.158523][ T29] audit: type=1326 audit(1731473580.574:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 106.181202][ T29] audit: type=1326 audit(1731473580.574:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 106.203826][ T29] audit: type=1326 audit(1731473580.574:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x7ffc0000 [ 106.333806][ T7029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.468310][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.547266][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 106.884113][ T7083] loop4: detected capacity change from 0 to 512 [ 106.916631][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 106.936475][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.959915][ T7083] EXT4-fs warning (device loop4): ext4_enable_quotas:7143: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.974817][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.982883][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.992114][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.000317][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.002564][ T7083] EXT4-fs (loop4): mount failed [ 107.008840][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.053809][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.075284][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.099782][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.118317][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.132567][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.146930][ T7098] loop2: detected capacity change from 0 to 512 [ 107.155292][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.170104][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.180895][ T7098] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.199707][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.213401][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.231326][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.254216][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.266308][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.274183][ T7098] EXT4-fs (loop2): 1 truncate cleaned up [ 107.280037][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.287470][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.296460][ T7098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.310258][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.317690][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.327932][ T7104] loop0: detected capacity change from 0 to 512 [ 107.337131][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.359623][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.366804][ T7108] random: crng reseeded on system resumption [ 107.368079][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.381067][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.388586][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.396532][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.401443][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.405237][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.420502][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.428375][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.442497][ T7104] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.460189][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.467807][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.468673][ T7111] smc: net device bond0 applied user defined pnetid SYZ0 [ 107.475389][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.490853][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.491963][ T7111] smc: net device bond0 erased user defined pnetid SYZ0 [ 107.498261][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.498293][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.523213][ T7104] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.549706][ T5878] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 107.580782][ T7104] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.492: bg 0: block 248: padding at end of block bitmap is not set [ 107.617349][ T7115] loop2: detected capacity change from 0 to 512 [ 107.630815][ T7115] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.640158][ T7104] EXT4-fs error (device loop0): ext4_acquire_dquot:6925: comm syz.0.492: Failed to acquire dquot type 1 [ 107.661775][ T7115] EXT4-fs (loop2): 1 truncate cleaned up [ 107.672598][ T7115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.740929][ T7104] EXT4-fs (loop0): 1 truncate cleaned up [ 107.760142][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.783251][ T7104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.831241][ T7104] syz.0.492[7104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.831340][ T7104] syz.0.492[7104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.867099][ T7124] loop1: detected capacity change from 0 to 512 [ 107.897586][ T7104] syz.0.492[7104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.944939][ T7124] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.501: bg 0: block 393: padding at end of block bitmap is not set [ 108.004599][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.082604][ T7124] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 108.096241][ T7124] EXT4-fs (loop1): 2 truncates cleaned up [ 108.103013][ T7124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.182111][ T7134] netlink: 'syz.0.503': attribute type 32 has an invalid length. [ 108.186623][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.318847][ T7141] loop0: detected capacity change from 0 to 512 [ 108.329462][ T7141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.359438][ T7141] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.380177][ T7141] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 108.467856][ T7144] loop4: detected capacity change from 0 to 1024 [ 108.486323][ T7144] ext4: Unknown parameter 'smackfsdef' [ 108.575677][ T7148] loop0: detected capacity change from 0 to 512 [ 108.605866][ T7148] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.659365][ T7148] EXT4-fs (loop0): 1 truncate cleaned up [ 108.671233][ T7148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.833501][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.354873][ T7186] loop2: detected capacity change from 0 to 164 [ 109.387385][ T7186] ISOFS: unable to read i-node block [ 109.414964][ T7186] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 109.605765][ T7194] loop0: detected capacity change from 0 to 512 [ 109.658146][ T7194] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.530: Invalid inode bitmap blk 4 in block_group 0 [ 109.680822][ T7194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.725369][ T7194] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 109.815374][ T7201] loop2: detected capacity change from 0 to 256 [ 109.851243][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.001377][ T7207] Driver unsupported XDP return value 0 on prog (id 264) dev N/A, expect packet loss! [ 110.113743][ T7201] FAT-fs (loop2): Directory bread(block 64) failed [ 110.129627][ T7201] FAT-fs (loop2): Directory bread(block 65) failed [ 110.153984][ T7201] FAT-fs (loop2): Directory bread(block 66) failed [ 110.178402][ T7201] FAT-fs (loop2): Directory bread(block 67) failed [ 110.197337][ T7217] loop4: detected capacity change from 0 to 512 [ 110.200943][ T7201] FAT-fs (loop2): Directory bread(block 68) failed [ 110.215346][ T7201] FAT-fs (loop2): Directory bread(block 69) failed [ 110.223981][ T7217] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.542: attempt to clear invalid blocks 1 len 1 [ 110.224648][ T7201] FAT-fs (loop2): Directory bread(block 70) failed [ 110.244470][ T7201] FAT-fs (loop2): Directory bread(block 71) failed [ 110.251500][ T7201] FAT-fs (loop2): Directory bread(block 72) failed [ 110.258296][ T7201] FAT-fs (loop2): Directory bread(block 73) failed [ 110.278241][ T7217] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.542: bg 0: block 343: padding at end of block bitmap is not set [ 110.341727][ T7217] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 110.354729][ T7217] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.542: invalid indirect mapped block 1819239214 (level 0) [ 110.380432][ T7217] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.542: invalid indirect mapped block 1819239214 (level 1) [ 110.397777][ T7217] EXT4-fs (loop4): 1 truncate cleaned up [ 110.404539][ T7217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.459999][ T7225] bond1: entered promiscuous mode [ 110.465091][ T7225] bond1: entered allmulticast mode [ 110.482802][ T7217] kernel profiling enabled (shift: 17) [ 110.579162][ T7225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.597923][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.836178][ T7225] bond1 (unregistering): Released all slaves [ 110.855876][ T7234] tipc: Started in network mode [ 110.861127][ T7234] tipc: Node identity , cluster identity 4711 [ 110.867751][ T7234] tipc: Failed to set node id, please configure manually [ 110.875155][ T7234] tipc: Enabling of bearer rejected, failed to enable media [ 110.910854][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 110.910872][ T29] audit: type=1326 audit(1731473585.584:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 110.950732][ T7243] netlink: 'syz.1.552': attribute type 4 has an invalid length. [ 110.996483][ T29] audit: type=1326 audit(1731473585.584:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 111.037717][ T7246] netlink: 'syz.1.552': attribute type 4 has an invalid length. [ 111.038830][ T29] audit: type=1326 audit(1731473585.584:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 111.058731][ T7252] loop2: detected capacity change from 0 to 256 [ 111.092180][ T29] audit: type=1326 audit(1731473585.644:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a0f7e719 code=0x7ffc0000 [ 111.121225][ T29] audit: type=1326 audit(1731476145.716:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 111.186224][ T29] audit: type=1326 audit(1731476145.716:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 111.191406][ T7252] FAT-fs (loop2): Directory bread(block 64) failed [ 111.213623][ T29] audit: type=1326 audit(1731476145.746:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 111.245809][ T7252] FAT-fs (loop2): Directory bread(block 65) failed [ 111.252636][ T7252] FAT-fs (loop2): Directory bread(block 66) failed [ 111.265799][ T7252] FAT-fs (loop2): Directory bread(block 67) failed [ 111.279674][ T29] audit: type=1326 audit(1731476145.746:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 111.299655][ T7252] FAT-fs (loop2): Directory bread(block 68) failed [ 111.325289][ T29] audit: type=1326 audit(1731476145.746:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 111.333434][ T7252] FAT-fs (loop2): Directory bread(block 69) failed [ 111.379646][ T7252] FAT-fs (loop2): Directory bread(block 70) failed [ 111.396488][ T7252] FAT-fs (loop2): Directory bread(block 71) failed [ 111.418637][ T7252] FAT-fs (loop2): Directory bread(block 72) failed [ 111.447206][ T29] audit: type=1326 audit(1731476145.746:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd957e719 code=0x7ffc0000 [ 111.447363][ T7252] FAT-fs (loop2): Directory bread(block 73) failed [ 111.712892][ T7283] loop3: detected capacity change from 0 to 2048 [ 111.821992][ T7283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.938343][ T7283] xt_hashlimit: max too large, truncated to 1048576 [ 111.951905][ T7283] Cannot find set identified by id 0 to match [ 112.006263][ T7297] syz.2.573[7297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.006503][ T7297] syz.2.573[7297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.025460][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.042106][ T7297] syz.2.573[7297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.144952][ T7306] loop3: detected capacity change from 0 to 128 [ 112.189940][ T7309] netlink: 68 bytes leftover after parsing attributes in process `syz.2.576'. [ 112.201577][ T7306] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.222179][ T7306] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.531534][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.617392][ T7328] program syz.2.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.769987][ T7334] netlink: 'syz.3.584': attribute type 10 has an invalid length. [ 113.138801][ T7350] loop1: detected capacity change from 0 to 512 [ 113.185833][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 113.206116][ T7352] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (10) [ 113.208020][ T7350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.231673][ T7350] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.034905][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.069705][ T7366] program syz.3.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.259837][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 114.280328][ T7376] loop3: detected capacity change from 0 to 512 [ 114.299118][ T7376] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.310798][ T7378] netlink: 'syz.1.603': attribute type 21 has an invalid length. [ 114.325762][ T7378] netlink: 152 bytes leftover after parsing attributes in process `syz.1.603'. [ 114.348752][ T7378] netlink: 5 bytes leftover after parsing attributes in process `syz.1.603'. [ 114.359891][ T7376] EXT4-fs (loop3): 1 truncate cleaned up [ 114.366450][ T7376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.458009][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.477996][ T7383] loop2: detected capacity change from 0 to 512 [ 114.518289][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.622765][ T7383] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.606: attempt to clear invalid blocks 1 len 1 [ 114.679573][ T7383] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.606: bg 0: block 343: padding at end of block bitmap is not set [ 114.700425][ T7388] batadv0: entered promiscuous mode [ 114.705552][ T7383] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 114.853592][ T7383] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.606: invalid indirect mapped block 1819239214 (level 0) [ 115.135295][ T7383] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.606: invalid indirect mapped block 1819239214 (level 1) [ 115.357355][ T7383] EXT4-fs (loop2): 1 truncate cleaned up [ 115.370635][ T7383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.473644][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 115.515095][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.553069][ T7400] loop4: detected capacity change from 0 to 1024 [ 115.568945][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 115.837681][ T7400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.882479][ T7400] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 115.890949][ T7412] ebtables: ebtables: counters copy to user failed while replacing table [ 115.907414][ T7400] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 115.924866][ T7400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 115.924866][ T7400] [ 115.936538][ T7400] EXT4-fs (loop4): Total free blocks count 0 [ 115.944409][ T7400] EXT4-fs (loop4): Free/Dirty block details [ 115.950495][ T7400] EXT4-fs (loop4): free_blocks=68451041280 [ 115.957061][ T7400] EXT4-fs (loop4): dirty_blocks=32 [ 115.962763][ T7400] EXT4-fs (loop4): Block reservation details [ 115.968907][ T7400] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 116.036078][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 116.187980][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.624'. [ 116.403852][ T7446] loop4: detected capacity change from 0 to 256 [ 116.424459][ T7446] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.447795][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 116.447813][ T29] audit: type=1326 audit(1731476150.863:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 116.511928][ T29] audit: type=1326 audit(1731476150.863:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 116.573251][ T29] audit: type=1326 audit(1731476150.892:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 116.636048][ T29] audit: type=1326 audit(1731476150.892:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 116.659569][ T29] audit: type=1326 audit(1731476150.892:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 116.785792][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.638'. [ 116.857078][ T7465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.639'. [ 116.961406][ T7470] hub 6-0:1.0: USB hub found [ 116.967800][ T7470] hub 6-0:1.0: 1 port detected [ 117.651649][ T29] audit: type=1326 audit(1731476151.996:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 117.701256][ T29] audit: type=1326 audit(1731476151.996:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 117.761781][ T29] audit: type=1326 audit(1731476152.015:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 117.784658][ T29] audit: type=1326 audit(1731476152.015:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 117.807447][ T29] audit: type=1326 audit(1731476152.015:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1464d7e719 code=0x7ffc0000 [ 118.074678][ T7499] loop2: detected capacity change from 0 to 1024 [ 118.123850][ T7503] loop3: detected capacity change from 0 to 512 [ 118.154808][ T7499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.183268][ T7503] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.246668][ T7503] EXT4-fs (loop3): 1 truncate cleaned up [ 118.257794][ T7503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.285678][ T7514] loop4: detected capacity change from 0 to 512 [ 118.341931][ T7514] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.658: bg 0: block 393: padding at end of block bitmap is not set [ 118.366226][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.423714][ T7514] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 118.456946][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.483112][ T7514] EXT4-fs (loop4): 2 truncates cleaned up [ 118.525054][ T7514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.667640][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.185810][ T7557] loop3: detected capacity change from 0 to 512 [ 119.202407][ T7557] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.679: bg 0: block 393: padding at end of block bitmap is not set [ 119.223266][ T7557] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 119.238912][ T7557] EXT4-fs (loop3): 2 truncates cleaned up [ 119.246561][ T7557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.298684][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.954425][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 119.995132][ T7591] syz.0.691 uses obsolete (PF_INET,SOCK_PACKET) [ 120.018653][ T7591] syzkaller1: entered promiscuous mode [ 120.034705][ T7591] syzkaller1: entered allmulticast mode [ 121.298813][ T7624] loop4: detected capacity change from 0 to 512 [ 121.351802][ T7624] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.703: bg 0: block 393: padding at end of block bitmap is not set [ 121.523926][ T7624] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 121.550618][ T7624] EXT4-fs (loop4): 2 truncates cleaned up [ 121.568276][ T7624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.663892][ T7642] loop3: detected capacity change from 0 to 164 [ 121.718931][ T7642] ISOFS: unable to read i-node block [ 121.724314][ T7642] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 121.744454][ T7644] program syz.2.711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.763457][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.928285][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.714'. [ 122.054802][ T7657] loop2: detected capacity change from 0 to 128 [ 122.439145][ T7672] program syz.3.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.804087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.813783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 122.823335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.350733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.908514][ T7690] loop3: detected capacity change from 0 to 8192 [ 124.054466][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 124.054484][ T29] audit: type=1326 audit(1731476157.980:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.206715][ T29] audit: type=1326 audit(1731476157.980:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.230908][ T29] audit: type=1326 audit(1731476157.999:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.253513][ T29] audit: type=1326 audit(1731476157.999:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.276152][ T29] audit: type=1326 audit(1731476157.999:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.298750][ T29] audit: type=1326 audit(1731476157.999:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.321416][ T29] audit: type=1326 audit(1731476158.017:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.344387][ T29] audit: type=1326 audit(1731476158.017:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.367062][ T29] audit: type=1326 audit(1731476158.017:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.389713][ T29] audit: type=1326 audit(1731476158.017:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa98ff7e719 code=0x7ffc0000 [ 124.477610][ T7711] program syz.2.738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.505711][ T7690] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 124.516340][ T7690] FAT-fs (loop3): Filesystem has been set read-only [ 125.281629][ T7727] netlink: 'syz.2.743': attribute type 3 has an invalid length. [ 125.628819][ T7739] program syz.0.750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.213293][ T7752] loop3: detected capacity change from 0 to 256 [ 126.273166][ T7752] FAT-fs (loop3): Directory bread(block 64) failed [ 126.293663][ T7752] FAT-fs (loop3): Directory bread(block 65) failed [ 126.346001][ T7752] FAT-fs (loop3): Directory bread(block 66) failed [ 127.069543][ T7752] FAT-fs (loop3): Directory bread(block 67) failed [ 127.076239][ T7752] FAT-fs (loop3): Directory bread(block 68) failed [ 127.121985][ T7752] FAT-fs (loop3): Directory bread(block 69) failed [ 127.128674][ T7752] FAT-fs (loop3): Directory bread(block 70) failed [ 127.135964][ T7752] FAT-fs (loop3): Directory bread(block 71) failed [ 127.142608][ T7752] FAT-fs (loop3): Directory bread(block 72) failed [ 127.184728][ T7752] FAT-fs (loop3): Directory bread(block 73) failed [ 127.305782][ T7752] syz.3.757: attempt to access beyond end of device [ 127.305782][ T7752] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 127.380497][ T7752] syz.3.757: attempt to access beyond end of device [ 127.380497][ T7752] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 128.890452][ T7794] loop3: detected capacity change from 0 to 2048 [ 128.967471][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 128.982204][ T7794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.005945][ T7794] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.029417][ T7798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.040743][ T7798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.073428][ T7810] program syz.4.778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.088578][ T7798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.129350][ T7798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.687517][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.838741][ T7842] program syz.2.792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.078975][ T7852] loop2: detected capacity change from 0 to 2048 [ 130.109957][ T7852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.143187][ T7852] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.192031][ T7852] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 130.229710][ T7852] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.229710][ T7852] [ 130.239407][ T7852] EXT4-fs (loop2): Total free blocks count 0 [ 130.261817][ T7852] EXT4-fs (loop2): Free/Dirty block details [ 130.267856][ T7852] EXT4-fs (loop2): free_blocks=2415919104 [ 130.278564][ T7852] EXT4-fs (loop2): dirty_blocks=32 [ 130.301354][ T7852] EXT4-fs (loop2): Block reservation details [ 130.326479][ T7852] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 130.463645][ T7864] veth3: entered allmulticast mode [ 130.474530][ T7868] program syz.1.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.686084][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.779028][ T7886] warning: `syz.2.811' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.931426][ T7898] program syz.4.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.083140][ T7905] loop4: detected capacity change from 0 to 512 [ 131.264715][ T7905] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.820: bg 0: block 393: padding at end of block bitmap is not set [ 131.315898][ T7905] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 131.344011][ T7905] EXT4-fs (loop4): 2 truncates cleaned up [ 131.350677][ T7905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.443863][ T7927] program syz.3.830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.499773][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.976455][ T7945] loop2: detected capacity change from 0 to 512 [ 131.995213][ T7945] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.027640][ T7945] EXT4-fs (loop2): 1 truncate cleaned up [ 132.034220][ T7945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.084302][ T7958] program syz.1.844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.233054][ T7963] loop4: detected capacity change from 0 to 2048 [ 132.249571][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.298516][ T7963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.321710][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 132.321726][ T29] audit: type=1800 audit(1731476165.723:1118): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.845" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 132.353061][ T7963] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.663352][ T7985] tap0: tun_chr_ioctl cmd 1074025673 [ 132.733321][ T7988] program syz.1.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.014394][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.246674][ T8058] loop1: detected capacity change from 0 to 512 [ 134.256519][ T8059] loop3: detected capacity change from 0 to 256 [ 134.291353][ T8058] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.303898][ T8058] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 134.314698][ T8058] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.891: Corrupt directory, running e2fsck is recommended [ 134.337059][ T8058] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 134.346079][ T8058] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.891: corrupted in-inode xattr: invalid ea_ino [ 134.364894][ T8058] EXT4-fs (loop1): Remounting filesystem read-only [ 134.373772][ T8058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.401441][ T8058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.891'. [ 134.434453][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.626750][ T8074] loop1: detected capacity change from 0 to 164 [ 134.652981][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.659374][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.965443][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.132826][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 135.143576][ T8100] pim6reg1: entered promiscuous mode [ 135.149093][ T8100] pim6reg1: entered allmulticast mode [ 135.151378][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 135.185583][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 135.198895][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.211929][ T5880] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.224650][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.235015][ T5880] usb 2-1: config 0 descriptor?? [ 135.285540][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.455381][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 135.465577][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.495096][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.526942][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.559163][ T5878] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.579154][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.603450][ T5878] usb 3-1: config 0 descriptor?? [ 135.710937][ T5880] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input5 [ 135.728398][ T8120] loop4: detected capacity change from 0 to 512 [ 135.771766][ T8120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.802229][ T8120] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.851706][ T5880] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 135.914488][ T29] audit: type=1800 audit(1731476169.094:1119): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.920" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 135.985415][ T29] audit: type=1800 audit(1731476169.094:1120): pid=8120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.920" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 136.031680][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.112158][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 136.120022][ T5878] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description [ 136.129374][ T9] usb 2-1: USB disconnect, device number 2 [ 136.139302][ T5878] microsoft 0003:045E:07DA.0003: parse failed [ 136.157103][ T5878] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 136.246713][ T8138] loop3: detected capacity change from 0 to 1024 [ 136.263548][ T8141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.928'. [ 136.337091][ T5878] usb 3-1: USB disconnect, device number 2 [ 136.388370][ T8138] EXT4-fs (loop3): Test dummy encryption mode enabled [ 136.397346][ T8138] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 136.422324][ T8138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.532563][ T8138] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 136.622585][ T8138] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 136.670313][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.681553][ T8167] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 136.689740][ T8169] loop4: detected capacity change from 0 to 512 [ 136.739738][ T8169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 136.761945][ T8169] System zones: 1-12 [ 136.778998][ T8169] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.937: corrupted in-inode xattr: invalid ea_ino [ 136.830148][ T8169] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.937: couldn't read orphan inode 15 (err -117) [ 136.852771][ T8169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.889739][ T8178] loop1: detected capacity change from 0 to 16 [ 136.907134][ T8178] erofs: (device loop1): mounted with root inode @ nid 36. [ 136.960108][ T8169] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.937: invalid indirect mapped block 234881024 (level 0) [ 137.056026][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.085473][ T8180] syzkaller0: entered promiscuous mode [ 137.107926][ T8180] syzkaller0: entered allmulticast mode [ 138.241444][ T5877] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.437908][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.458655][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.468638][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 138.484365][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.511915][ T5877] usb 2-1: config 0 descriptor?? [ 139.004690][ T5877] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 139.012103][ T5877] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 139.019120][ T5877] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 139.026204][ T5877] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 139.033381][ T5877] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 139.040397][ T5877] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 139.047496][ T5877] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 139.054689][ T5877] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 139.062183][ T5877] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 139.069220][ T5877] lg-g15 0003:046D:C222.0004: item fetching failed at offset 10/11 [ 139.077712][ T5877] lg-g15 0003:046D:C222.0004: probe with driver lg-g15 failed with error -22 [ 139.157210][ T8212] netlink: 'syz.0.952': attribute type 3 has an invalid length. [ 139.219641][ T9] usb 2-1: USB disconnect, device number 3 [ 139.373455][ T8234] loop3: detected capacity change from 0 to 256 [ 139.418549][ T8234] cgroup: Unknown subsys name 'cpuset' [ 139.624131][ T8253] capability: warning: `syz.4.971' uses deprecated v2 capabilities in a way that may be insecure [ 139.859395][ T8263] loop1: detected capacity change from 0 to 512 [ 139.966093][ T8263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.024130][ T8263] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.126094][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.320040][ T29] audit: type=1326 audit(1731476174.150:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.1.983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ba9f7e719 code=0x0 [ 141.511859][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 141.737558][ T8297] loop3: detected capacity change from 0 to 1024 [ 141.764063][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 141.801645][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.864105][ T8297] EXT4-fs: Ignoring removed nobh option [ 141.891012][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.913319][ T8297] ext2: Unknown parameter 'nouser_xattr' [ 142.027506][ T8297] kvm: emulating exchange as write [ 142.032129][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.061843][ T5908] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 142.071751][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.079961][ T5908] usb 3-1: Product: syz [ 142.084507][ T5908] usb 3-1: Manufacturer: syz [ 142.089139][ T5908] usb 3-1: SerialNumber: syz [ 142.341223][ T5908] usbhid 3-1:1.0: can't add hid device: -22 [ 142.347262][ T5908] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 142.385906][ T5908] usb 3-1: USB disconnect, device number 3 [ 142.411658][ T5877] kernel write not supported for file /543/net/softnet_stat (pid: 5877 comm: kworker/1:3) [ 142.506056][ T8320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.995'. [ 142.644792][ T8328] loop3: detected capacity change from 0 to 1024 [ 142.652700][ T8328] hfsplus: Bad value for 'session' [ 142.922379][ T8343] loop3: detected capacity change from 0 to 512 [ 142.973410][ T8343] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1006: bg 0: block 393: padding at end of block bitmap is not set [ 143.016425][ T8343] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 143.089733][ T8343] EXT4-fs (loop3): 2 truncates cleaned up [ 143.096399][ T8343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.167082][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.289042][ T8366] loop2: detected capacity change from 0 to 256 [ 143.344832][ T8366] FAT-fs (loop2): Directory bread(block 64) failed [ 143.349234][ T8370] loop4: detected capacity change from 0 to 512 [ 143.354384][ T8366] FAT-fs (loop2): Directory bread(block 65) failed [ 143.373208][ T8366] FAT-fs (loop2): Directory bread(block 66) failed [ 143.382367][ T8366] FAT-fs (loop2): Directory bread(block 67) failed [ 143.393888][ T8370] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.402794][ T8366] FAT-fs (loop2): Directory bread(block 68) failed [ 143.421342][ T8366] FAT-fs (loop2): Directory bread(block 69) failed [ 143.432546][ T8370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 143.445100][ T8366] FAT-fs (loop2): Directory bread(block 70) failed [ 143.445754][ T8370] System zones: 1-12 [ 143.456813][ T8366] FAT-fs (loop2): Directory bread(block 71) failed [ 143.463692][ T8370] EXT4-fs (loop4): 1 truncate cleaned up [ 143.469599][ T8366] FAT-fs (loop2): Directory bread(block 72) failed [ 143.478152][ T8370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.491169][ T8366] FAT-fs (loop2): Directory bread(block 73) failed [ 143.522729][ T8370] syz.4.1016 (pid 8370) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 143.801320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.910641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.238754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.527148][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.597341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.739241][ T8395] pimreg: entered allmulticast mode [ 144.773250][ T8395] pimreg: left allmulticast mode [ 144.851721][ T5922] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.944843][ T8404] loop3: detected capacity change from 0 to 256 [ 145.014212][ T8404] FAT-fs (loop3): Directory bread(block 64) failed [ 145.032406][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 145.032480][ T8404] FAT-fs (loop3): Directory bread(block 65) failed [ 145.045434][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.056181][ T5922] usb 2-1: config 0 has no interfaces? [ 145.061687][ T8404] FAT-fs (loop3): Directory bread(block 66) failed [ 145.061694][ T5922] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.061719][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.079590][ T8404] FAT-fs (loop3): Directory bread(block 67) failed [ 145.107816][ T8407] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.119461][ T5922] usb 2-1: config 0 descriptor?? [ 145.137749][ T8404] FAT-fs (loop3): Directory bread(block 68) failed [ 145.144680][ T8404] FAT-fs (loop3): Directory bread(block 69) failed [ 145.151510][ T8404] FAT-fs (loop3): Directory bread(block 70) failed [ 145.158055][ T8404] FAT-fs (loop3): Directory bread(block 71) failed [ 145.165145][ T8404] FAT-fs (loop3): Directory bread(block 72) failed [ 145.171787][ T8404] FAT-fs (loop3): Directory bread(block 73) failed [ 145.271951][ T942] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 145.355114][ T5922] usb 2-1: USB disconnect, device number 4 [ 145.396834][ T8420] loop2: detected capacity change from 0 to 256 [ 145.438129][ T8420] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 145.442096][ T942] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 145.479306][ T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.482275][ T8420] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 145.509975][ T942] usb 5-1: Product: syz [ 145.514963][ T942] usb 5-1: Manufacturer: syz [ 145.519598][ T942] usb 5-1: SerialNumber: syz [ 145.559054][ T942] usb 5-1: config 0 descriptor?? [ 145.568119][ T942] ch341 5-1:0.0: ch341-uart converter detected [ 145.740233][ T5831] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 145.799104][ T942] usb 5-1: failed to receive control message: -121 [ 145.811840][ T942] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 146.050055][ T942] usb 5-1: USB disconnect, device number 3 [ 146.057272][ T942] ch341 5-1:0.0: device disconnected [ 146.149303][ T8439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1048'. [ 146.313233][ T3023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.540839][ T3023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.666421][ T8445] loop3: detected capacity change from 0 to 2048 [ 146.709852][ T3023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.727770][ T8445] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 146.776663][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.805814][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.813877][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.838677][ T3023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.849314][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.864941][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.917439][ T8459] loop4: detected capacity change from 0 to 256 [ 146.925227][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.032871][ T8459] FAT-fs (loop4): Directory bread(block 64) failed [ 147.054149][ T8459] FAT-fs (loop4): Directory bread(block 65) failed [ 147.060830][ T8459] FAT-fs (loop4): Directory bread(block 66) failed [ 147.074131][ T8464] loop3: detected capacity change from 0 to 512 [ 147.084307][ T8459] FAT-fs (loop4): Directory bread(block 67) failed [ 147.091002][ T8459] FAT-fs (loop4): Directory bread(block 68) failed [ 147.101420][ T8459] FAT-fs (loop4): Directory bread(block 69) failed [ 147.111216][ T8459] FAT-fs (loop4): Directory bread(block 70) failed [ 147.124298][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1060'. [ 147.128239][ T8459] FAT-fs (loop4): Directory bread(block 71) failed [ 147.155737][ T8464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.162505][ T8459] FAT-fs (loop4): Directory bread(block 72) failed [ 147.175178][ T8459] FAT-fs (loop4): Directory bread(block 73) failed [ 147.193579][ T8464] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.305694][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.387862][ T3023] bridge_slave_1: left allmulticast mode [ 147.407307][ T3023] bridge_slave_1: left promiscuous mode [ 147.417637][ T3023] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.450229][ T3023] bridge_slave_0: left allmulticast mode [ 147.455987][ T3023] bridge_slave_0: left promiscuous mode [ 147.463528][ T3023] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.544950][ T8488] loop1: detected capacity change from 0 to 512 [ 147.564676][ T8488] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1071: bg 0: block 393: padding at end of block bitmap is not set [ 147.585890][ T8488] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 147.606891][ T8488] EXT4-fs (loop1): 2 truncates cleaned up [ 147.613631][ T8488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.692544][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.723128][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.855618][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 147.879195][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 147.888461][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.904709][ T9] usb 4-1: Product: syz [ 147.909051][ T9] usb 4-1: Manufacturer: syz [ 147.913743][ T9] usb 4-1: SerialNumber: syz [ 147.928955][ T9] usb 4-1: config 0 descriptor?? [ 148.018637][ T8497] loop1: detected capacity change from 0 to 256 [ 148.136211][ T8499] loop1: detected capacity change from 0 to 1024 [ 148.187710][ T8499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.322022][ T3023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.337563][ T3023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.351513][ T3023] bond0 (unregistering): Released all slaves [ 148.386335][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1072'. [ 148.492215][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 148.600411][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 92:fb:b2:55:c1:e0 [ 148.675538][ T9] rtl8150 4-1:0.0: eth5: rtl8150 is detected [ 148.683836][ T9] usb 4-1: USB disconnect, device number 2 [ 148.781591][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.788980][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.803488][ T8450] bridge_slave_0: entered allmulticast mode [ 148.812014][ T8450] bridge_slave_0: entered promiscuous mode [ 148.845805][ T5922] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.882606][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.890156][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.897330][ T8450] bridge_slave_1: entered allmulticast mode [ 148.904445][ T8450] bridge_slave_1: entered promiscuous mode [ 148.945868][ T3023] hsr_slave_0: left promiscuous mode [ 148.952853][ T3023] hsr_slave_1: left promiscuous mode [ 148.971971][ T3023] veth1_macvtap: left promiscuous mode [ 148.978797][ T3023] veth0_macvtap: left promiscuous mode [ 148.984638][ T3023] veth1_vlan: left promiscuous mode [ 148.990146][ T3023] veth0_vlan: left promiscuous mode [ 149.016539][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.047550][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.069472][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.082991][ T5922] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.092692][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.105613][ T5922] usb 1-1: config 0 descriptor?? [ 149.179049][ T5143] Bluetooth: hci2: command tx timeout [ 149.206221][ T8530] loop1: detected capacity change from 0 to 512 [ 149.230036][ T8530] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1086: bg 0: block 393: padding at end of block bitmap is not set [ 149.257605][ T8530] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 149.267936][ T8530] EXT4-fs (loop1): 2 truncates cleaned up [ 149.275647][ T8530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.340939][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.562455][ T5922] plantronics 0003:047F:FFFF.0005: unbalanced collection at end of report description [ 149.573155][ T5922] plantronics 0003:047F:FFFF.0005: parse failed [ 149.579648][ T5922] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 149.695810][ T3023] team0 (unregistering): Port device team_slave_1 removed [ 149.738858][ T3023] team0 (unregistering): Port device team_slave_0 removed [ 149.770007][ T5922] usb 1-1: USB disconnect, device number 2 [ 150.131982][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.145888][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1087'. [ 150.157572][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.221213][ T8540] loop3: detected capacity change from 0 to 128 [ 150.227619][ T8450] team0: Port device team_slave_0 added [ 150.259621][ T8540] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 150.260992][ T8450] team0: Port device team_slave_1 added [ 150.288790][ T8540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.331892][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.338877][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.371155][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.390347][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.399403][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.473591][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.582192][ T8450] hsr_slave_0: entered promiscuous mode [ 150.601009][ T8450] hsr_slave_1: entered promiscuous mode [ 150.617012][ T8450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.633708][ T8450] Cannot create hsr debugfs directory [ 150.835039][ T8556] loop3: detected capacity change from 0 to 128 [ 150.889022][ T8556] FAT-fs (loop3): Directory bread(block 32) failed [ 150.908757][ T8556] FAT-fs (loop3): Directory bread(block 33) failed [ 150.943357][ T8556] FAT-fs (loop3): Directory bread(block 34) failed [ 150.957019][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1099'. [ 150.957181][ T8556] FAT-fs (loop3): Directory bread(block 35) failed [ 150.976617][ T8450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.981621][ T8556] FAT-fs (loop3): Directory bread(block 36) failed [ 150.994401][ T8450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.011159][ T8450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.013024][ T8556] FAT-fs (loop3): Directory bread(block 37) failed [ 151.026862][ T8556] FAT-fs (loop3): Directory bread(block 38) failed [ 151.045203][ T8556] FAT-fs (loop3): Directory bread(block 39) failed [ 151.045639][ T8450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.051829][ T8556] FAT-fs (loop3): Directory bread(block 40) failed [ 151.078699][ T8556] FAT-fs (loop3): Directory bread(block 41) failed [ 151.205214][ T8564] lo: entered promiscuous mode [ 151.213217][ T8563] lo: left promiscuous mode [ 151.214900][ T8556] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 151.237241][ T8556] FAT-fs (loop3): Filesystem has been set read-only [ 151.273666][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.316407][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.353184][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.360316][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.397896][ T5143] Bluetooth: hci2: command tx timeout [ 151.419912][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.427175][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.829469][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.066153][ T8601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1115'. [ 152.142790][ T8608] loop4: detected capacity change from 0 to 128 [ 152.218861][ T8450] veth0_vlan: entered promiscuous mode [ 152.246933][ T8608] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.254687][ T8450] veth1_vlan: entered promiscuous mode [ 152.261577][ T8608] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.280345][ T8450] veth0_macvtap: entered promiscuous mode [ 152.290505][ T8450] veth1_macvtap: entered promiscuous mode [ 152.316507][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.327362][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.327382][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.327397][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.327409][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.327421][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.327433][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.327444][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.328669][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.413038][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.423784][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.433650][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.444651][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.455109][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.465726][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.475558][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.486066][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.497109][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.507332][ T8450] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.516213][ T8450] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.524970][ T8450] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.533788][ T8450] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.634419][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.658167][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.712093][ T8622] veth3: entered allmulticast mode [ 152.747298][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.759779][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.846273][ T5838] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.097910][ T5877] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.105431][ T8638] loop5: detected capacity change from 0 to 1024 [ 153.122868][ T8639] loop1: detected capacity change from 0 to 2048 [ 153.144667][ T8639] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 153.161253][ T8639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.266668][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 153.292415][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.303675][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.314026][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.328267][ T5877] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 153.338531][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.352807][ T5877] usb 4-1: config 0 descriptor?? [ 153.362148][ T8648] loop1: detected capacity change from 0 to 512 [ 153.375679][ T8648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.430960][ T8648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.445248][ T8652] veth3: entered allmulticast mode [ 153.446390][ T8648] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.619460][ T5143] Bluetooth: hci2: command tx timeout [ 153.654289][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.790704][ T5877] ryos 0003:1E7D:31CE.0006: ignoring exceeding usage max [ 153.799158][ T5877] ryos 0003:1E7D:31CE.0006: ignoring exceeding usage max [ 153.811936][ T5877] ryos 0003:1E7D:31CE.0006: usage index exceeded [ 153.816649][ T8666] loop5: detected capacity change from 0 to 2048 [ 153.818293][ T5877] ryos 0003:1E7D:31CE.0006: item 0 0 2 2 parsing failed [ 153.839097][ T5877] ryos 0003:1E7D:31CE.0006: parse failed [ 153.845132][ T5877] ryos 0003:1E7D:31CE.0006: probe with driver ryos failed with error -22 [ 153.894171][ T8666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.950244][ T54] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 153.968421][ T54] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 153.982792][ T54] EXT4-fs (loop5): This should not happen!! Data will be lost [ 153.982792][ T54] [ 153.993530][ T54] EXT4-fs (loop5): Total free blocks count 0 [ 153.995797][ T8676] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 153.999611][ T54] EXT4-fs (loop5): Free/Dirty block details [ 154.018720][ T54] EXT4-fs (loop5): free_blocks=2415919104 [ 154.025693][ T54] EXT4-fs (loop5): dirty_blocks=32 [ 154.031681][ T8676] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.031681][ T8676] [ 154.033341][ T54] EXT4-fs (loop5): Block reservation details [ 154.064959][ T5877] usb 4-1: USB disconnect, device number 3 [ 154.277385][ T8688] loop5: detected capacity change from 0 to 2048 [ 154.327454][ T8688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.342119][ T8688] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.378908][ T8688] EXT4-fs (loop5): shut down requested (2) [ 154.386343][ T8688] fs-verity: sha256 using implementation "sha256-avx2" [ 154.441793][ T8450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.542190][ T8701] loop5: detected capacity change from 0 to 2048 [ 154.574213][ T8701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.601423][ T29] audit: type=1800 audit(1731476186.585:1122): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1155" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 154.632891][ T8701] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 154.672108][ T8701] EXT4-fs (loop5): Remounting filesystem read-only [ 154.736286][ T8450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.944305][ T8727] loop5: detected capacity change from 0 to 164 [ 155.139811][ T8735] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1170'. [ 155.216631][ T8739] loop5: detected capacity change from 0 to 16 [ 155.555451][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1181'. [ 155.686908][ T8764] dccp_close: ABORT with 32 bytes unread [ 155.841845][ T5143] Bluetooth: hci2: command tx timeout [ 155.892025][ T8778] lo: entered promiscuous mode [ 155.982338][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1192'. [ 156.020329][ T8786] loop5: detected capacity change from 0 to 128 [ 156.235692][ T5877] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.520279][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.532002][ T5877] usb 1-1: config 0 has no interfaces? [ 156.540010][ T5877] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 156.549858][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.560265][ T5877] usb 1-1: Product: syz [ 156.564606][ T5877] usb 1-1: Manufacturer: syz [ 156.569434][ T5877] usb 1-1: SerialNumber: syz [ 156.620261][ T5877] usb 1-1: config 0 descriptor?? [ 156.841700][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1204'. [ 156.858932][ T5908] usb 1-1: USB disconnect, device number 3 [ 156.909543][ T8817] loop4: detected capacity change from 0 to 128 [ 156.935951][ T8817] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.949010][ T8817] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.991020][ T5838] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.045676][ T8820] loop4: detected capacity change from 0 to 128 [ 157.356625][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 157.607339][ T8838] loop3: detected capacity change from 0 to 2048 [ 157.654957][ T8838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.682846][ T8853] loop5: detected capacity change from 0 to 512 [ 157.695270][ T8838] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.724391][ T8853] EXT4-fs (loop5): orphan cleanup on readonly fs [ 157.752340][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.762282][ T8853] EXT4-fs warning (device loop5): ext4_enable_quotas:7143: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 157.798755][ T8853] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 157.817715][ T8853] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.1219: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 157.837171][ T8853] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1219: couldn't read orphan inode 13 (err -117) [ 157.850917][ T8853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.879273][ T8853] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 157.890106][ T8853] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2 [ 157.967753][ T8450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.967776][ T8864] loop3: detected capacity change from 0 to 1024 [ 158.090202][ T8868] loop3: detected capacity change from 0 to 2048 [ 158.109895][ T8868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.136732][ T29] audit: type=1800 audit(1731476189.890:1123): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1225" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 158.139234][ T8868] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 158.176681][ T29] audit: type=1800 audit(1731476189.909:1124): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1225" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 158.219764][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.581339][ T8890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1234'. [ 158.712557][ T8898] loop1: detected capacity change from 0 to 512 [ 158.727136][ T8894] loop5: detected capacity change from 0 to 1024 [ 158.747504][ T8898] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1237: bg 0: block 393: padding at end of block bitmap is not set [ 158.764032][ T8894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.773870][ T8898] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 158.794892][ T8894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.809712][ T5877] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 158.824700][ T29] audit: type=1804 audit(1731476190.545:1125): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1235" name="/newroot/39/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 158.827364][ T8898] EXT4-fs (loop1): 2 truncates cleaned up [ 158.853690][ T8898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.902104][ T29] audit: type=1804 audit(1731476190.564:1126): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1235" name="/newroot/39/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 158.936433][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.026974][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 159.039765][ T5877] usb 4-1: not running at top speed; connect to a high speed hub [ 159.062329][ T5877] usb 4-1: config 87 has an invalid interface number: 33 but max is 0 [ 159.072089][ T5877] usb 4-1: config 87 has no interface number 0 [ 159.079649][ T5877] usb 4-1: config 87 interface 33 has no altsetting 0 [ 159.112985][ T5877] usb 4-1: New USB device found, idVendor=d7fe, idProduct=bff4, bcdDevice=e0.ff [ 159.125806][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.135387][ T5877] usb 4-1: Product: syz [ 159.141649][ T5877] usb 4-1: Manufacturer: syz [ 159.147889][ T5877] usb 4-1: SerialNumber: syz [ 159.394870][ T5877] usb-storage 4-1:87.33: USB Mass Storage device detected [ 159.653883][ T8921] loop1: detected capacity change from 0 to 2048 [ 159.722350][ T8921] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.130423][ T5877] usb 4-1: USB disconnect, device number 4 [ 160.146733][ T5826] UDF-fs: warning (device loop1): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant. [ 160.194885][ T8450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.375187][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1245'. [ 160.586442][ T8951] loop5: detected capacity change from 0 to 128 [ 160.630760][ T8951] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.662857][ T8951] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.842618][ T8450] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.860353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.892970][ T8960] loop4: detected capacity change from 0 to 2048 [ 160.903687][ T8960] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.928535][ T29] audit: type=1804 audit(1731476192.512:1127): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1262" name="/newroot/213/file1/bus" dev="loop4" ino=1367 res=1 errno=0 [ 160.997636][ T29] audit: type=1800 audit(1731476192.512:1128): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1262" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 161.063542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 161.119277][ T8965] loop3: detected capacity change from 0 to 2048 [ 161.162243][ T8965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.196263][ T29] audit: type=1800 audit(1731476192.764:1129): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1263" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 161.504916][ T8980] loop1: detected capacity change from 0 to 128 [ 161.544221][ T8980] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.571758][ T8980] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.651577][ T8987] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1273'. [ 161.672865][ T8987] loop4: detected capacity change from 0 to 764 [ 161.816922][ T8990] binder: 8989:8990 ioctl c0306201 0 returned -14 [ 161.831431][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.875165][ T8980] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 161.973005][ T8997] 9pnet_fd: Insufficient options for proto=fd [ 162.025785][ T5826] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.121210][ T8999] [ 162.123586][ T8999] ====================================================== [ 162.130619][ T8999] WARNING: possible circular locking dependency detected [ 162.137670][ T8999] 6.12.0-rc6-next-20241108-syzkaller #0 Not tainted [ 162.144275][ T8999] ------------------------------------------------------ [ 162.151305][ T8999] syz.1.1276/8999 is trying to acquire lock: [ 162.157300][ T8999] ffff8880254c2df0 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x287/0x9f0 [ 162.167264][ T8999] [ 162.167264][ T8999] but task is already holding lock: [ 162.174642][ T8999] ffff8880254c27a8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 162.184432][ T8999] [ 162.184432][ T8999] which lock already depends on the new lock. [ 162.184432][ T8999] [ 162.194844][ T8999] [ 162.194844][ T8999] the existing dependency chain (in reverse order) is: [ 162.203870][ T8999] [ 162.203870][ T8999] -> #6 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 162.212510][ T8999] lock_acquire+0x1ed/0x550 [ 162.217541][ T8999] blk_mq_submit_bio+0x1510/0x2490 [ 162.223189][ T8999] __submit_bio+0x2c2/0x560 [ 162.228211][ T8999] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 162.234360][ T8999] ext4_mpage_readpages+0x1c35/0x1ea0 [ 162.240245][ T8999] read_pages+0x17e/0x840 [ 162.245093][ T8999] page_cache_ra_unbounded+0x797/0x8c0 [ 162.251068][ T8999] filemap_get_pages+0x621/0x2540 [ 162.256607][ T8999] filemap_read+0x46b/0xf50 [ 162.261623][ T8999] __kernel_read+0x513/0x9d0 [ 162.266737][ T8999] integrity_kernel_read+0xb0/0x100 [ 162.272445][ T8999] ima_calc_file_hash+0xae6/0x1b30 [ 162.278067][ T8999] ima_collect_measurement+0x520/0xb10 [ 162.284310][ T8999] process_measurement+0x1351/0x1fb0 [ 162.290138][ T8999] ima_file_check+0xd9/0x120 [ 162.295507][ T8999] security_file_post_open+0xb9/0x280 [ 162.301390][ T8999] path_openat+0x2ccd/0x3590 [ 162.306497][ T8999] do_filp_open+0x27f/0x4e0 [ 162.311516][ T8999] do_sys_openat2+0x13e/0x1d0 [ 162.316722][ T8999] __x64_sys_openat+0x247/0x2a0 [ 162.322089][ T8999] do_syscall_64+0xf3/0x230 [ 162.327107][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.333546][ T8999] [ 162.333546][ T8999] -> #5 (mapping.invalidate_lock){++++}-{4:4}: [ 162.341877][ T8999] lock_acquire+0x1ed/0x550 [ 162.346894][ T8999] down_read+0xb1/0xa40 [ 162.351558][ T8999] filemap_fault+0x6e8/0x1950 [ 162.356764][ T8999] __do_fault+0x135/0x460 [ 162.361611][ T8999] handle_pte_fault+0x3c01/0x66b0 [ 162.367152][ T8999] handle_mm_fault+0x1106/0x1bb0 [ 162.372624][ T8999] exc_page_fault+0x459/0x8c0 [ 162.377815][ T8999] asm_exc_page_fault+0x26/0x30 [ 162.383187][ T8999] [ 162.383187][ T8999] -> #4 (&vma->vm_lock->lock){++++}-{4:4}: [ 162.391180][ T8999] lock_acquire+0x1ed/0x550 [ 162.396206][ T8999] down_write+0x99/0x220 [ 162.400978][ T8999] vma_link+0x28c/0x500 [ 162.405656][ T8999] insert_vm_struct+0x2f7/0x410 [ 162.411020][ T8999] alloc_bprm+0xa57/0xe70 [ 162.415880][ T8999] kernel_execve+0x99/0xa50 [ 162.420896][ T8999] kernel_init+0xed/0x2b0 [ 162.425738][ T8999] ret_from_fork+0x4b/0x80 [ 162.430674][ T8999] ret_from_fork_asm+0x1a/0x30 [ 162.435976][ T8999] [ 162.435976][ T8999] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 162.443549][ T8999] lock_acquire+0x1ed/0x550 [ 162.448573][ T8999] __might_fault+0xc6/0x120 [ 162.453588][ T8999] _copy_from_user+0x2a/0xc0 [ 162.458692][ T8999] blk_trace_ioctl+0x1ad/0x9a0 [ 162.463964][ T8999] blkdev_ioctl+0x40c/0x6a0 [ 162.468976][ T8999] __se_sys_ioctl+0xf5/0x170 [ 162.474074][ T8999] do_syscall_64+0xf3/0x230 [ 162.479110][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.485518][ T8999] [ 162.485518][ T8999] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 162.493325][ T8999] lock_acquire+0x1ed/0x550 [ 162.498340][ T8999] __mutex_lock+0x1ac/0xee0 [ 162.503454][ T8999] blk_mq_init_sched+0x3fa/0x830 [ 162.508929][ T8999] elevator_init_mq+0x20e/0x320 [ 162.514293][ T8999] add_disk_fwnode+0x10d/0xf80 [ 162.519578][ T8999] sd_probe+0xba6/0x1100 [ 162.524337][ T8999] really_probe+0x2b8/0xad0 [ 162.529352][ T8999] __driver_probe_device+0x1a2/0x390 [ 162.535161][ T8999] driver_probe_device+0x50/0x430 [ 162.540710][ T8999] __device_attach_driver+0x2d6/0x530 [ 162.546598][ T8999] bus_for_each_drv+0x24e/0x2e0 [ 162.551981][ T8999] __device_attach_async_helper+0x22d/0x300 [ 162.558417][ T8999] async_run_entry_fn+0xa8/0x420 [ 162.563909][ T8999] process_scheduled_works+0xa63/0x1850 [ 162.569967][ T8999] worker_thread+0x870/0xd30 [ 162.575070][ T8999] kthread+0x2f0/0x390 [ 162.579657][ T8999] ret_from_fork+0x4b/0x80 [ 162.584597][ T8999] ret_from_fork_asm+0x1a/0x30 [ 162.589889][ T8999] [ 162.589889][ T8999] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 162.598771][ T8999] lock_acquire+0x1ed/0x550 [ 162.603786][ T8999] blk_queue_enter+0xe1/0x600 [ 162.608973][ T8999] blk_mq_alloc_request+0x26b/0xab0 [ 162.614699][ T8999] scsi_execute_cmd+0x177/0x1090 [ 162.620171][ T8999] read_capacity_16+0x2b4/0x1450 [ 162.625637][ T8999] sd_revalidate_disk+0x1019/0xbcf0 [ 162.631346][ T8999] sd_probe+0x9fa/0x1100 [ 162.636109][ T8999] really_probe+0x2b8/0xad0 [ 162.641157][ T8999] __driver_probe_device+0x1a2/0x390 [ 162.646954][ T8999] driver_probe_device+0x50/0x430 [ 162.652487][ T8999] __device_attach_driver+0x2d6/0x530 [ 162.658369][ T8999] bus_for_each_drv+0x24e/0x2e0 [ 162.663732][ T8999] __device_attach_async_helper+0x22d/0x300 [ 162.670136][ T8999] async_run_entry_fn+0xa8/0x420 [ 162.675601][ T8999] process_scheduled_works+0xa63/0x1850 [ 162.681660][ T8999] worker_thread+0x870/0xd30 [ 162.686769][ T8999] kthread+0x2f0/0x390 [ 162.691370][ T8999] ret_from_fork+0x4b/0x80 [ 162.696318][ T8999] ret_from_fork_asm+0x1a/0x30 [ 162.701621][ T8999] [ 162.701621][ T8999] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 162.709251][ T8999] validate_chain+0x18ef/0x5920 [ 162.714618][ T8999] __lock_acquire+0x1397/0x2100 [ 162.719977][ T8999] lock_acquire+0x1ed/0x550 [ 162.724990][ T8999] __mutex_lock+0x1ac/0xee0 [ 162.730016][ T8999] loop_reconfigure_limits+0x287/0x9f0 [ 162.736003][ T8999] lo_ioctl+0x1351/0x1f50 [ 162.740839][ T8999] blkdev_ioctl+0x57d/0x6a0 [ 162.745848][ T8999] __se_sys_ioctl+0xf5/0x170 [ 162.750945][ T8999] do_syscall_64+0xf3/0x230 [ 162.755954][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.762352][ T8999] [ 162.762352][ T8999] other info that might help us debug this: [ 162.762352][ T8999] [ 162.772567][ T8999] Chain exists of: [ 162.772567][ T8999] &q->limits_lock --> mapping.invalidate_lock --> &q->q_usage_counter(io)#18 [ 162.772567][ T8999] [ 162.787254][ T8999] Possible unsafe locking scenario: [ 162.787254][ T8999] [ 162.794703][ T8999] CPU0 CPU1 [ 162.800050][ T8999] ---- ---- [ 162.805403][ T8999] lock(&q->q_usage_counter(io)#18); [ 162.810786][ T8999] lock(mapping.invalidate_lock); [ 162.818415][ T8999] lock(&q->q_usage_counter(io)#18); [ 162.826304][ T8999] lock(&q->limits_lock); [ 162.830718][ T8999] [ 162.830718][ T8999] *** DEADLOCK *** [ 162.830718][ T8999] [ 162.838866][ T8999] 3 locks held by syz.1.1276/8999: [ 162.843964][ T8999] #0: ffff8880254e0b60 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x606/0x1f50 [ 162.852952][ T8999] #1: ffff8880254c27a8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 162.863218][ T8999] #2: ffff8880254c27e0 (&q->q_usage_counter(queue)#2){+.+.}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 162.873571][ T8999] [ 162.873571][ T8999] stack backtrace: [ 162.879479][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.1.1276 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 162.889626][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 162.899693][ T8999] Call Trace: [ 162.902969][ T8999] [ 162.905896][ T8999] dump_stack_lvl+0x241/0x360 [ 162.910570][ T8999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.915765][ T8999] ? __pfx__printk+0x10/0x10 [ 162.920345][ T8999] print_circular_bug+0x13a/0x1b0 [ 162.925368][ T8999] check_noncircular+0x36a/0x4a0 [ 162.930295][ T8999] ? __pfx_check_noncircular+0x10/0x10 [ 162.935749][ T8999] validate_chain+0x18ef/0x5920 [ 162.940616][ T8999] ? __pfx_validate_chain+0x10/0x10 [ 162.945827][ T8999] ? __pfx_validate_chain+0x10/0x10 [ 162.951030][ T8999] ? mark_lock+0x9a/0x360 [ 162.955366][ T8999] __lock_acquire+0x1397/0x2100 [ 162.960207][ T8999] lock_acquire+0x1ed/0x550 [ 162.964699][ T8999] ? loop_reconfigure_limits+0x287/0x9f0 [ 162.970408][ T8999] ? __pfx_lock_acquire+0x10/0x10 [ 162.975435][ T8999] ? __pfx___might_resched+0x10/0x10 [ 162.980731][ T8999] ? mark_lock+0x9a/0x360 [ 162.985052][ T8999] __mutex_lock+0x1ac/0xee0 [ 162.989552][ T8999] ? loop_reconfigure_limits+0x287/0x9f0 [ 162.995192][ T8999] ? loop_reconfigure_limits+0x287/0x9f0 [ 163.000824][ T8999] ? __pfx___mutex_lock+0x10/0x10 [ 163.005855][ T8999] loop_reconfigure_limits+0x287/0x9f0 [ 163.011312][ T8999] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 163.017283][ T8999] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 163.023169][ T8999] ? lockdep_hardirqs_on+0x99/0x150 [ 163.028369][ T8999] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 163.034268][ T8999] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.040592][ T8999] ? finish_wait+0xd4/0x1e0 [ 163.045084][ T8999] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 163.050795][ T8999] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 163.056861][ T8999] ? __pfx_autoremove_wake_function+0x10/0x10 [ 163.062917][ T8999] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 163.068809][ T8999] ? lo_ioctl+0x1344/0x1f50 [ 163.073321][ T8999] lo_ioctl+0x1351/0x1f50 [ 163.077647][ T8999] ? mark_lock+0x9a/0x360 [ 163.081981][ T8999] ? validate_chain+0x11e/0x5920 [ 163.086930][ T8999] ? __pfx_lo_ioctl+0x10/0x10 [ 163.091597][ T8999] ? mark_lock+0x9a/0x360 [ 163.095918][ T8999] ? __lock_acquire+0x1397/0x2100 [ 163.100936][ T8999] ? __pfx_lock_acquire+0x10/0x10 [ 163.105959][ T8999] ? is_bpf_text_address+0x26/0x2a0 [ 163.111162][ T8999] ? __pfx_lock_release+0x10/0x10 [ 163.116178][ T8999] ? unwind_next_frame+0x18e6/0x22d0 [ 163.121451][ T8999] ? preempt_count_add+0x93/0x190 [ 163.126476][ T8999] ? 0xffffffffa0003b40 [ 163.130632][ T8999] ? 0xffffffffa0003b40 [ 163.134785][ T8999] ? is_bpf_text_address+0x285/0x2a0 [ 163.140171][ T8999] ? is_bpf_text_address+0x26/0x2a0 [ 163.145364][ T8999] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 163.151511][ T8999] ? kernel_text_address+0xa7/0xe0 [ 163.156636][ T8999] ? __kernel_text_address+0xd/0x40 [ 163.161836][ T8999] ? unwind_get_return_address+0x4d/0x90 [ 163.167477][ T8999] ? arch_stack_walk+0xfd/0x150 [ 163.172342][ T8999] ? stack_trace_save+0x118/0x1d0 [ 163.177361][ T8999] ? __pfx_stack_trace_save+0x10/0x10 [ 163.182731][ T8999] ? stack_depot_save_flags+0x29/0x830 [ 163.188186][ T8999] ? kasan_save_track+0x51/0x80 [ 163.193025][ T8999] ? kasan_save_track+0x3f/0x80 [ 163.197889][ T8999] ? kasan_save_free_info+0x40/0x50 [ 163.203112][ T8999] ? __kasan_slab_free+0x59/0x70 [ 163.208069][ T8999] ? kfree+0x196/0x420 [ 163.212147][ T8999] ? tomoyo_path_number_perm+0x679/0x860 [ 163.217780][ T8999] ? security_file_ioctl+0xc6/0x2a0 [ 163.222986][ T8999] ? __se_sys_ioctl+0x46/0x170 [ 163.227762][ T8999] ? do_syscall_64+0xf3/0x230 [ 163.232430][ T8999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.238491][ T8999] ? do_vfs_ioctl+0xf07/0x2e40 [ 163.243250][ T8999] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 163.248264][ T8999] ? mark_lock+0x9a/0x360 [ 163.252598][ T8999] ? tomoyo_path_number_perm+0x206/0x860 [ 163.258243][ T8999] ? __pfx_lock_release+0x10/0x10 [ 163.263267][ T8999] ? tomoyo_path_number_perm+0x679/0x860 [ 163.268919][ T8999] ? tomoyo_path_number_perm+0x679/0x860 [ 163.274571][ T8999] ? blkdev_common_ioctl+0xfca/0x2480 [ 163.279948][ T8999] ? __lock_acquire+0x1397/0x2100 [ 163.284966][ T8999] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 163.290597][ T8999] ? tomoyo_path_number_perm+0x206/0x860 [ 163.296222][ T8999] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.302195][ T8999] ? file_to_blk_mode+0xcc/0x140 [ 163.307125][ T8999] ? __pfx_lo_ioctl+0x10/0x10 [ 163.311790][ T8999] blkdev_ioctl+0x57d/0x6a0 [ 163.316300][ T8999] ? __pfx_blkdev_ioctl+0x10/0x10 [ 163.321315][ T8999] ? __pfx_blkdev_ioctl+0x10/0x10 [ 163.326340][ T8999] __se_sys_ioctl+0xf5/0x170 [ 163.330928][ T8999] do_syscall_64+0xf3/0x230 [ 163.335614][ T8999] ? clear_bhb_loop+0x35/0x90 [ 163.340280][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.346164][ T8999] RIP: 0033:0x7f5ba9f7e719 [ 163.350566][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.370177][ T8999] RSP: 002b:00007f5baad57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.378606][ T8999] RAX: ffffffffffffffda RBX: 00007f5baa135f80 RCX: 00007f5ba9f7e719 [ 163.386570][ T8999] RDX: 0000000000000800 RSI: 0000000000004c09 RDI: 0000000000000003 [ 163.394542][ T8999] RBP: 00007f5ba9ff1616 R08: 0000000000000000 R09: 0000000000000000 [ 163.402522][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.410502][ T8999] R13: 0000000000000000 R14: 00007f5baa135f80 R15: 00007ffe08c839f8 [ 163.418473][ T8999]