last executing test programs: 6m19.102152259s ago: executing program 0 (id=232): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 6m18.545318579s ago: executing program 0 (id=235): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x118, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0xc, 0x145, 0x0, 0x0, @u64=0x5}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6m17.85241708s ago: executing program 0 (id=240): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m17.028267862s ago: executing program 0 (id=243): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) close(r0) 6m16.598040939s ago: executing program 0 (id=245): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7012fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 6m16.058143126s ago: executing program 0 (id=250): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0xe8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) syz_open_dev$usbfs(&(0x7f00000008c0), 0x8000000000000001, 0x911201) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 6m0.540155163s ago: executing program 32 (id=250): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0xe8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) syz_open_dev$usbfs(&(0x7f00000008c0), 0x8000000000000001, 0x911201) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 2m30.346088737s ago: executing program 2 (id=1350): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4) 2m29.966575547s ago: executing program 2 (id=1352): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2m29.569081728s ago: executing program 2 (id=1356): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd3, 0xd3, 0x4, [@struct={0x8, 0x7, 0x0, 0x4, 0x0, 0xf, [{0x3, 0x2, 0x1}, {0x9, 0x0, 0xc2}, {0xe, 0x1, 0x80}, {0xc, 0x3, 0x6}, {0xe, 0x5, 0x7ff}, {0xf, 0x5, 0xc}, {0x0, 0x5, 0x3}]}, @datasec={0xf, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x5, 0x9}, {0x3, 0x3, 0x7ff}, {0x1, 0x168c9ef8, 0x81}, {0x1, 0xb, 0x4}, {0x4, 0x65d0395, 0x4}], "e6b60c"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x43, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x58000}}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000040)=""/139, 0xf0, 0x8b, 0x0, 0xb7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x800, 0x4, 0x1a}, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 2m27.924672669s ago: executing program 3 (id=1366): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2m27.484733759s ago: executing program 3 (id=1368): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r1, r2, 0x0) 2m26.216058084s ago: executing program 3 (id=1375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m25.83536095s ago: executing program 3 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2m25.187055642s ago: executing program 3 (id=1384): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m24.780120921s ago: executing program 3 (id=1387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@quota}]}, 0x1, 0x43d, &(0x7f0000000700)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x3e0000000000}], 0x0) sendfile(r1, r1, 0x0, 0x800000009) 2m14.626798444s ago: executing program 2 (id=1443): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) 2m13.741079243s ago: executing program 2 (id=1451): io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x1, &(0x7f0000000900)=@raw=[@call={0x85, 0x0, 0x0, 0x48}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) 2m13.338983138s ago: executing program 2 (id=1453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd3, 0xd3, 0x4, [@struct={0x8, 0x7, 0x0, 0x4, 0x0, 0xf, [{0x3, 0x2, 0x1}, {0x9, 0x0, 0xc2}, {0xe, 0x1, 0x80}, {0xc, 0x3, 0x6}, {0xe, 0x5, 0x7ff}, {0xf, 0x5, 0xc}, {0x0, 0x5, 0x3}]}, @datasec={0xf, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x5, 0x9}, {0x3, 0x3, 0x7ff}, {0x1, 0x168c9ef8, 0x81}, {0x1, 0xb, 0x4}, {0x4, 0x65d0395, 0x4}], "e6b60c"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x43, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x58000}}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000040)=""/139, 0xf0, 0x8b, 0x0, 0xb7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x800, 0x4, 0x1a}, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 2m9.518247439s ago: executing program 33 (id=1387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@quota}]}, 0x1, 0x43d, &(0x7f0000000700)="$eJzs28tvG0UYAPBv7SQlfZBQlUfTAoGCiHgkTVpKD1xAIHEACQkO5RiStAp1G9QEiVYRBITKEVXijjgi8RdwggsCTkhc4Y4qVSiXFk5Ga+8mtmOneThxW/9+0iYzu+PMfN4de2YnG0DXGk5/JBH7I+LPiBioZusLDFd/3VpenPp3eXEqiXL5nX+SSrmby4tTedH8dfvyTE9E4YskjjSpd/7ylfOTpdLMpSw/tnDhw7H5y1demL0weW7m3MzFidOnT54Yf+nUxIttiTON6+bQJ3NHD7/x3rW3ps5ce//X75M8/oY42mR4vYNPl8ttrq6zDtSkk54ONoRNKVa7afRW+v9AFGP15A3E65/n6b5ONRDYMeVyufxQ68NLZeAelkSnWwB0Rv5Fn85/822Xhh53hBuvVCdAady3sq16pCcKWZnehvltOw1HxJml/75Jt9iZ+xAAAHV+TMc/zzcb/xWi9r7Q/dkaymBEPBARByPiVEQciogHIyplH46IRzZZf+MiydrxT+H6lgLboHT893K2tlU//stHfzFYzHIHKvH3JmdnSzPHs/dkJHr3pPnxder46bU/vmp1rHb8l25p/flYMGvH9Z499a+ZnlyY3E7MtW58FjHU0yz+ZGUlIImIwxExtMU6Zp/97mirY7ePfx1tWGcqfxvxTPX8L0VD/LlktaZm65Nj90Vp5vhYflWs9dvvV99uVf+24m+D9PzvbXr9r8Q/mNSu185vvo6rf33Zck6z1eu/L3m3bt/HkwsLl8Yj+pI3q42u3T/RUG5itXwa/8ix5v3/YKy+E0ciIr2IH42IxyLi8aztT0TEkxFxbJ34f3n1qQ+2Hv/OSuOf3tT5X030ReOe5oni+Z9/qKt0cDPxp+f/ZCU1ku3ZyOffRtq1tasZAAAA7j6FiNgfSWF0JV0ojI5W/4f/UOwtlObmF547O/fRxenqMwKD0VvI73QN1NwPHc+m9Xl+oiF/Irtv/HWxv5IfnZorTXc6eOhy+1r0/9TfxU63DthxnteC7qX/Q/fS/6F76f/QvZr0//5OtAPYfc2+/z/tQDuA3dfQ/y37QRcx/4fupf9D99L/oSvN98ftH5KXkFiTiMId0Yx7J5EkEdv/O0m0qT2d/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj/8DAAD//7Pm4aw=") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x3e0000000000}], 0x0) sendfile(r1, r1, 0x0, 0x800000009) 1m58.135477912s ago: executing program 34 (id=1453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd3, 0xd3, 0x4, [@struct={0x8, 0x7, 0x0, 0x4, 0x0, 0xf, [{0x3, 0x2, 0x1}, {0x9, 0x0, 0xc2}, {0xe, 0x1, 0x80}, {0xc, 0x3, 0x6}, {0xe, 0x5, 0x7ff}, {0xf, 0x5, 0xc}, {0x0, 0x5, 0x3}]}, @datasec={0xf, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x5, 0x9}, {0x3, 0x3, 0x7ff}, {0x1, 0x168c9ef8, 0x81}, {0x1, 0xb, 0x4}, {0x4, 0x65d0395, 0x4}], "e6b60c"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x43, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x58000}}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000040)=""/139, 0xf0, 0x8b, 0x0, 0xb7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x800, 0x4, 0x1a}, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 4.523030009s ago: executing program 4 (id=2218): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) 3.961909786s ago: executing program 4 (id=2222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="29a626bd7000fddbdf250100000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) 3.87014593s ago: executing program 5 (id=2224): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r2}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000140)={0x800, 0x4, 0x7}) 3.697130584s ago: executing program 7 (id=2226): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x7}, 0x18) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0xffffff60, 0x1) 3.462519609s ago: executing program 4 (id=2227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 3.334959934s ago: executing program 5 (id=2229): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fchownat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x400) 3.124338031s ago: executing program 7 (id=2231): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 3.075250216s ago: executing program 4 (id=2232): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) 2.976790107s ago: executing program 5 (id=2233): socket$inet6(0xa, 0x80002, 0x0) r0 = syz_io_uring_setup(0x315b, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x4004804) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r2, 0x6) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f00000001c0), &(0x7f0000000140)=""/23, &(0x7f0000000240)="d2149425c35491cbd83177346f3dd747d0e6b8515d4f43a5a2a7510d65991048d88b93a2904babbca20f1b285c372c3864b39addb6a65032d974e251b75afcb40f6971899fd48db86a7b55415104257c4191ff84a8e755973f3a7fe90b886ad76257447197ade87b79882ddf12a23a564800ed6537ba664a783e8721ece2c628d81c8d54ced5f3c899cf0b716498586997", &(0x7f0000000300)="fb4a2968d53d83af09f1ee35f92656f75d2018d5d0c88ac0ed1d84e499db5245c999577b8025dbf5665fc475ac83c0efb23034facb66751197016e13de1a99af81ac9598475702625996a8368954a76eca916abda541a27b40605ef539d00b491c184350af8b139599aa606c86cbd7756cd0c952fa7567f084c834068b4c88c3928c5703f1cbb6d1965a94f14d335a88aa48e39629142d0c5a02c8efd313dd8b5ca58c9adf5561313e7e3289d5610496dd", 0x5}, 0x38) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x2aa, 0x0, 0x50) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x90, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000894}, 0x88000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.811567367s ago: executing program 6 (id=2235): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001fc0)=""/4107, 0x100b}, {0x0}], 0x2, 0x5b3d2934, 0xfffffff8) 2.740247573s ago: executing program 7 (id=2236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.685666433s ago: executing program 1 (id=2237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1108, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000001140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x28, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.58706869s ago: executing program 4 (id=2238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.436157105s ago: executing program 7 (id=2239): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 2.286084521s ago: executing program 6 (id=2240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @random="442266eb5396", 'erspan0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) 2.285792439s ago: executing program 4 (id=2241): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x20}, 0x18) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @local, @local, {[@dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x10}]}], {{0x0, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "0249c9e007342bd348b2f57a13834b13"}]}}}}}}}}, 0x0) 2.285567393s ago: executing program 1 (id=2242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x8010) 2.054301127s ago: executing program 1 (id=2243): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x400c040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000070900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400028008000440000000000800064000000001080002400000000208000540000000000800034000000000080008"], 0x9c}}, 0x0) 1.926115945s ago: executing program 6 (id=2244): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0xc, 0x40, @dev={0xfe, 0x80, '\x00', 0x2c}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x1040}}) 1.719994064s ago: executing program 1 (id=2245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x14a) flock(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r3, 0x2) dup3(r3, r0, 0x0) 1.662128754s ago: executing program 5 (id=2246): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.528759162s ago: executing program 6 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf25010000000c00018008000100"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) 1.24084804s ago: executing program 1 (id=2248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1c1e0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00052fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1.240438582s ago: executing program 5 (id=2249): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x37c, &(0x7f0000000ec0)="$eJzs3TGIW2UcAPB/7uUud9J6NwiiIEQ3QY+2CqKLV8oVilmqhKqDGGyr5XIWehhsh6bnIo6Co05uDjo4dHMRFOnm4GoFqYqDditY+uTlvSQvl+Q8Kmkt/n5D+Pf7/v/vfS/5aL7Lke9eX4uNk/Nx+vr1a7G4WInq2pG1uFGJlUii71KMW5jQBgDcG26kafyZ5iK+2ktJZfazAgBmqff+/+b+Ust73+yWn+bv/vOznhcAMDvFz/9L5bZkR87itOKzM5sWADBDo5//R8RjYymlX/VXx/YGAMC956VXXn3hcCPixXp9MWLz/U6z04znhv2HT8eZaMepOBDLcTMi3yhkD5Xe49FjjfUD9Xq9G7+sRDOr6DQjNrudZr5TOJz06mtxMJZjpagvdhtpmiZHv2ysH6z3RMSlbu/6sVnpNOdjKatfijM/3hen4lDU44Gx+ohjjfXBnqS52a+fj9gefm6RzX81luP7N+JstONkZLX9bU1j/eLBev1I2thXGdZ3O81aLy839RMQAAAAAAAAAAAAAAAAAAAAAAC4Lav1gZXB+Tnp8Pye1dUJ/b3zcfL64nyg7fx8oLSWRpr+8e6TzQ+SGDkfqHfAz0h9Nebu7q0DAAAAAAAAAAAAAAAAAADAf8bW+YVotdunzm2dv7BRDrrnts7PRUTW8vZ3n3+9FKM5S8UAo1UjQbVIKXXVh1Vp0k9Ok5GcIkiyi1eqectnlwczLufUBncxcRq16V3t9v5Hf/74wkZ/1EeS/si3hjlJTLyvC8mOaZSDzfvzAac/LbsEh/4h52qaptPKL742XhWViOrUqd5mkGbBt9feeuiprf4iSHOPP7F84upHn/620WpnV8602wvntm6mG63i35MX2/QgKa2fSrHYKuWVUG09fev4vikjb4+2tJIffn/54Q+vFC1zu79M6Ykrw5Z3JuQk+UW/2Nm1kAfZNAddz2dB9hyNjzM/YfFPCp6Jf/XCPfjJWuvyxZ9+3WtV6T8JB3UAAAAAAAAAAAAAAAAAAMAdUfqueKH4su/8blXPHp/9zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzhn+/f9BEHPbO1r2FvzVjX7Lieh31bIBY6F0xZW7eLcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxf/R0AAP//KWlfjg==") syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe(&(0x7f0000000240)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.240181015s ago: executing program 7 (id=2250): socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 1.198005113s ago: executing program 6 (id=2251): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) 627.405751ms ago: executing program 6 (id=2252): ioprio_set$uid(0x3, 0x0, 0x2004) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42, 0x0, 0x0, 0xfffffff8}, 0x28) getpid() r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) 410.336789ms ago: executing program 7 (id=2253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 216.117µs ago: executing program 1 (id=2254): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32, @ANYBLOB="eba55a9ce7"], 0x3c}}, 0x8000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 0s ago: executing program 5 (id=2255): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r0, 0x0, 0x3}, 0x18) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x1, 0x2, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) kernel console output (not intermixed with test programs): -000000000000 r/w without journal. Quota mode: writeback. [ 425.707396][ T8692] syz.1.943 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 425.721439][ T8692] CPU: 1 UID: 0 PID: 8692 Comm: syz.1.943 Not tainted syzkaller #0 PREEMPT(none) [ 425.721584][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.721671][ T8692] Call Trace: [ 425.721719][ T8692] [ 425.721765][ T8692] __dump_stack+0x26/0x30 [ 425.721924][ T8692] dump_stack_lvl+0x1df/0x270 [ 425.722082][ T8692] dump_stack+0x1e/0x25 [ 425.722222][ T8692] dump_header+0x159/0x560 [ 425.722359][ T8692] oom_kill_process+0x5bb/0x950 [ 425.722528][ T8692] out_of_memory+0x1af2/0x1fd0 [ 425.722744][ T8692] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 425.722946][ T8692] try_charge_memcg+0xff0/0x1c50 [ 425.723157][ T8692] obj_cgroup_charge_pages+0x2ed/0x600 [ 425.723310][ T8692] obj_cgroup_charge_account+0xcb/0x320 [ 425.723462][ T8692] __memcg_slab_post_alloc_hook+0xb41/0x1130 [ 425.723650][ T8692] kmem_cache_alloc_noprof+0xb0c/0x1750 [ 425.723834][ T8692] ? jbd2_journal_stop+0xf32/0x12e0 [ 425.723977][ T8692] ? alloc_buffer_head+0x61/0x4e0 [ 425.724189][ T8692] alloc_buffer_head+0x61/0x4e0 [ 425.724364][ T8692] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 425.724559][ T8692] folio_alloc_buffers+0x2e0/0x8f0 [ 425.724770][ T8692] create_empty_buffers+0x4a/0x610 [ 425.724893][ T8692] ? kmsan_get_metadata+0xfb/0x160 [ 425.725067][ T8692] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 425.725259][ T8692] __block_write_begin_int+0x4a4/0x3030 [ 425.725421][ T8692] ? kmsan_get_metadata+0xfb/0x160 [ 425.725609][ T8692] ? kmsan_get_metadata+0xfb/0x160 [ 425.725798][ T8692] ? filter_irq_stacks+0x49/0x190 [ 425.725966][ T8692] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 425.726123][ T8692] ? stack_depot_save_flags+0x35/0x790 [ 425.726273][ T8692] ? kmsan_get_metadata+0xfb/0x160 [ 425.726443][ T8692] ? kmsan_get_metadata+0xfb/0x160 [ 425.726620][ T8692] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 425.726809][ T8692] block_page_mkwrite+0x4c4/0xde0 [ 425.726947][ T8692] ? kmsan_get_metadata+0xfb/0x160 [ 425.727124][ T8692] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 425.727306][ T8692] ext4_page_mkwrite+0x1e13/0x27e0 [ 425.727530][ T8692] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 425.727711][ T8692] do_pte_missing+0x2950/0x72e0 [ 425.727878][ T8692] ? stack_depot_init+0x171/0x1a0 [ 425.728022][ T8692] ? kmsan_get_metadata+0xfb/0x160 [ 425.728224][ T8692] handle_mm_fault+0x2d94/0x6ee0 [ 425.728377][ T8692] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 425.728605][ T8692] ? kmsan_get_metadata+0xfb/0x160 [ 425.728824][ T8692] do_user_addr_fault+0xfe1/0x2550 [ 425.729023][ T8692] exc_page_fault+0x74/0xc0 [ 425.729184][ T8692] asm_exc_page_fault+0x2b/0x30 [ 425.729325][ T8692] RIP: 0033:0x7f2748e6f11a [ 425.729425][ T8692] Code: 01 4c 89 44 24 10 4c 89 54 24 08 e8 a0 9d fe ff 48 8b 43 38 4c 8b 44 24 10 83 43 28 08 4c 8b 54 24 08 48 8d 48 f8 48 89 4b 38 <48> 89 68 f8 45 3b 78 04 0f 82 5e fe ff ff e9 ed fe ff ff 0f 1f 00 [ 425.729546][ T8692] RSP: 002b:00007ffd1d48dd50 EFLAGS: 00010202 [ 425.729664][ T8692] RAX: 0000001b2f720000 RBX: 00007f2749d15720 RCX: 0000001b2f71fff8 [ 425.729756][ T8692] RDX: 0000001b2f12421c RSI: 0000000000000008 RDI: 00007f2749d15720 [ 425.729841][ T8692] RBP: ffffffff8259e08d R08: 00007f27491e6038 R09: 00007f27491d2000 [ 425.729939][ T8692] R10: 00007f27489ff008 R11: 0000000000000001 R12: 0000000000000001 [ 425.730023][ T8692] R13: 00000000000007f1 R14: ffffffff8259ed34 R15: 000000000003969a [ 425.730117][ T8692] ? truncate_inode_pages_range+0x34/0x1420 [ 425.730264][ T8692] ? truncate_inode_partial_folio+0x118d/0x15d0 [ 425.730483][ T8692] [ 426.071218][ T8692] memory: usage 307200kB, limit 307200kB, failcnt 535 [ 426.078180][ T8692] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 426.088050][ T8692] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 426.095780][ T8692] Memory cgroup stats for /syz1: [ 426.096671][ T8692] cache 4096 [ 426.105149][ T8692] rss 0 [ 426.108033][ T8692] rss_huge 0 [ 426.111490][ T8692] shmem 0 [ 426.114559][ T8692] mapped_file 0 [ 426.118246][ T8692] dirty 0 [ 426.121477][ T8692] writeback 0 [ 426.124911][ T8692] workingset_refault_anon 2 [ 426.129797][ T8692] workingset_refault_file 59 [ 426.134606][ T8692] swap 200704 [ 426.138008][ T8692] swapcached 8192 [ 426.142093][ T8692] pgpgin 26561 [ 426.145609][ T8692] pgpgout 26557 [ 426.149198][ T8692] pgfault 44163 [ 426.155034][ T8692] pgmajfault 4 [ 426.161319][ T8692] inactive_anon 8192 [ 426.165633][ T8692] active_anon 0 [ 426.169242][ T8692] inactive_file 8192 [ 426.174376][ T8692] active_file 0 [ 426.177984][ T8692] unevictable 0 [ 426.181875][ T8692] hierarchical_memory_limit 314572800 [ 426.187417][ T8692] hierarchical_memsw_limit 9223372036854771712 [ 426.193911][ T8692] total_cache 4096 [ 426.197772][ T8692] total_rss 0 [ 426.201386][ T8692] total_rss_huge 0 [ 426.205234][ T8692] total_shmem 0 [ 426.208826][ T8692] total_mapped_file 0 [ 426.213177][ T8692] total_dirty 0 [ 426.216779][ T8692] total_writeback 0 [ 426.220843][ T8692] total_workingset_refault_anon 2 [ 426.226088][ T8692] total_workingset_refault_file 59 [ 426.231500][ T8692] total_swap 200704 [ 426.235442][ T8692] total_swapcached 8192 [ 426.239859][ T8692] total_pgpgin 26561 [ 426.243876][ T8692] total_pgpgout 26557 [ 426.247984][ T8692] total_pgfault 44163 [ 426.252370][ T8692] total_pgmajfault 4 [ 426.256490][ T8692] total_inactive_anon 8192 [ 426.264134][ T8692] total_active_anon 0 [ 426.269170][ T8692] total_inactive_file 8192 [ 426.273983][ T8692] total_active_file 0 [ 426.278105][ T8692] total_unevictable 0 [ 426.282353][ T8692] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.943,pid=8692,uid=0 [ 426.298113][ T8692] Memory cgroup out of memory: Killed process 8692 (syz.1.943) total-vm:104080kB, anon-rss:1272kB, file-rss:21796kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 426.867362][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.146117][ T8750] loop3: detected capacity change from 0 to 512 [ 427.172485][ T8750] EXT4-fs: inline encryption not supported [ 427.256506][ T8750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.375058][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 427.420789][ T8750] EXT4-fs error (device loop3): ext4_readdir:224: inode #12: comm syz.3.964: path /205/file0/file0: directory fails checksum at offset 0 [ 427.776544][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.810681][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 428.576534][ T8773] netlink: 400 bytes leftover after parsing attributes in process `syz.1.973'. [ 428.647200][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 428.647281][ T30] audit: type=1326 audit(1765816809.584:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 428.676848][ T30] audit: type=1326 audit(1765816809.594:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 428.832287][ T30] audit: type=1326 audit(1765816809.674:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 428.855397][ T30] audit: type=1326 audit(1765816809.674:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 428.878978][ T30] audit: type=1326 audit(1765816809.674:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 428.901658][ T30] audit: type=1326 audit(1765816809.674:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 428.926973][ T30] audit: type=1326 audit(1765816809.684:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 428.951138][ T30] audit: type=1326 audit(1765816809.684:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 428.974175][ T30] audit: type=1326 audit(1765816809.694:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 428.996876][ T30] audit: type=1326 audit(1765816809.694:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 431.350879][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.988'. [ 431.457544][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.988'. [ 432.856569][ T8834] 9pnet: p9_errstr2errno: server reported unknown error [ 433.775002][ T8850] --map-set only usable from mangle table [ 434.532874][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 434.532954][ T30] audit: type=1326 audit(1765816815.484:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 434.720236][ T30] audit: type=1326 audit(1765816815.524:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 434.743462][ T30] audit: type=1326 audit(1765816815.524:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 434.768260][ T30] audit: type=1326 audit(1765816815.524:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 434.791654][ T30] audit: type=1326 audit(1765816815.524:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 434.814018][ T30] audit: type=1326 audit(1765816815.534:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 434.836369][ T30] audit: type=1326 audit(1765816815.534:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 434.858914][ T30] audit: type=1326 audit(1765816815.544:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 435.645965][ T8865] syzkaller0: entered promiscuous mode [ 435.656730][ T8865] syzkaller0: entered allmulticast mode [ 435.769376][ T8860] loop2: detected capacity change from 0 to 2048 [ 436.292423][ T8860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.473388][ T8875] 9pnet: p9_errstr2errno: server reported unknown error [ 436.552587][ T30] audit: type=1800 audit(1765816817.484:1024): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1008" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 437.080896][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1018'. [ 437.164316][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.254656][ T8904] syzkaller0: entered promiscuous mode [ 438.260926][ T8904] syzkaller0: entered allmulticast mode [ 438.764456][ T8913] loop5: detected capacity change from 0 to 128 [ 440.710551][ T30] audit: type=1326 audit(1765816821.644:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.1.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 440.734896][ T30] audit: type=1326 audit(1765816821.644:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 440.758604][ T30] audit: type=1326 audit(1765816821.654:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.1.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 440.781530][ T30] audit: type=1326 audit(1765816821.654:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.1.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 440.995395][ T30] audit: type=1326 audit(1765816821.764:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 441.020918][ T30] audit: type=1326 audit(1765816821.764:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f127ef8f783 code=0x7ffc0000 [ 441.058228][ T8935] loop3: detected capacity change from 0 to 512 [ 441.081731][ T8935] EXT4-fs: journaled quota format not specified [ 441.173545][ T30] audit: type=1326 audit(1765816822.044:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f127ef8e1ff code=0x7ffc0000 [ 441.333945][ T8936] process '/newroot/208/file0' started with executable stack [ 441.670092][ T30] audit: type=1326 audit(1765816822.594:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f127ef8f7d7 code=0x7ffc0000 [ 441.672811][ T8933] loop5: detected capacity change from 0 to 8192 [ 441.693180][ T30] audit: type=1326 audit(1765816822.624:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f127ef8df90 code=0x7ffc0000 [ 441.693435][ T30] audit: type=1326 audit(1765816822.624:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f127ef8f34b code=0x7ffc0000 [ 441.838125][ T8945] syzkaller0: entered promiscuous mode [ 441.843974][ T8945] syzkaller0: entered allmulticast mode [ 443.262479][ T8955] loop3: detected capacity change from 0 to 2048 [ 443.412559][ T8955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.932866][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1052'. [ 444.259051][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.529310][ T8979] syzkaller0: entered promiscuous mode [ 444.535191][ T8979] syzkaller0: entered allmulticast mode [ 445.245787][ T8990] netlink: 'syz.3.1063': attribute type 4 has an invalid length. [ 446.250210][ T9002] loop4: detected capacity change from 0 to 256 [ 446.651326][ T9002] FAT-fs (loop4): Directory bread(block 64) failed [ 446.658211][ T9002] FAT-fs (loop4): Directory bread(block 65) failed [ 446.665403][ T9002] FAT-fs (loop4): Directory bread(block 66) failed [ 446.672274][ T9002] FAT-fs (loop4): Directory bread(block 67) failed [ 446.679140][ T9002] FAT-fs (loop4): Directory bread(block 68) failed [ 446.686161][ T9002] FAT-fs (loop4): Directory bread(block 69) failed [ 446.693257][ T9002] FAT-fs (loop4): Directory bread(block 70) failed [ 446.700237][ T9002] FAT-fs (loop4): Directory bread(block 71) failed [ 446.707115][ T9002] FAT-fs (loop4): Directory bread(block 72) failed [ 446.714091][ T9002] FAT-fs (loop4): Directory bread(block 73) failed [ 447.957754][ T9019] syzkaller0: entered promiscuous mode [ 447.963650][ T9019] syzkaller0: entered allmulticast mode [ 451.098492][ T9055] syzkaller0: entered promiscuous mode [ 451.104433][ T9055] syzkaller0: entered allmulticast mode [ 451.379896][ T9062] loop3: detected capacity change from 0 to 1024 [ 451.473172][ T9062] __quota_error: 33 callbacks suppressed [ 451.473261][ T9062] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 451.488698][ T9062] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 451.498612][ T9062] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1092: Failed to acquire dquot type 0 [ 451.561762][ T9063] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 451.619081][ T9063] bond1 (unregistering): Released all slaves [ 451.734834][ T9062] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 451.750261][ T9062] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.1092: corrupted inode contents [ 451.890313][ T9062] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.1092: mark_inode_dirty error [ 451.932176][ T9062] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.1092: corrupted inode contents [ 452.021272][ T9062] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1092: mark_inode_dirty error [ 452.075230][ T9062] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.1092: corrupted inode contents [ 452.142302][ T9062] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 452.169458][ T9062] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.1092: corrupted inode contents [ 452.194205][ T9074] 9p: Bad value for 'wfdno' [ 452.241652][ T9062] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.1092: mark_inode_dirty error [ 452.263703][ T9062] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 452.330045][ T9062] EXT4-fs (loop3): 1 truncate cleaned up [ 452.337934][ T9062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.765092][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.003474][ T30] audit: type=1326 audit(1765816833.954:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9088 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 453.121789][ T30] audit: type=1326 audit(1765816833.984:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9088 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 453.145068][ T30] audit: type=1326 audit(1765816833.994:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9088 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 453.168298][ T30] audit: type=1326 audit(1765816833.994:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9088 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 453.195231][ T30] audit: type=1326 audit(1765816833.994:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9088 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 453.220886][ T30] audit: type=1326 audit(1765816833.994:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9088 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 453.244034][ T30] audit: type=1326 audit(1765816833.994:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9088 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 453.267643][ T30] audit: type=1326 audit(1765816834.004:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9088 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 453.607476][ T9095] syzkaller0: entered promiscuous mode [ 453.613479][ T9095] syzkaller0: entered allmulticast mode [ 453.933740][ T9106] 9p: Bad value for 'wfdno' [ 454.362480][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 455.886406][ T9145] random: crng reseeded on system resumption [ 456.216576][ T9148] loop2: detected capacity change from 0 to 1024 [ 456.246681][ T9148] EXT4-fs: Ignoring removed bh option [ 456.251456][ T9150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1128'. [ 456.298791][ T9148] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 456.338061][ T9150] gretap1: entered promiscuous mode [ 456.445830][ T9148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.351693][ T9170] loop3: detected capacity change from 0 to 128 [ 457.459138][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 457.459220][ T30] audit: type=1800 audit(1765816838.404:1091): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1132" name="file1" dev="loop3" ino=1048631 res=0 errno=0 [ 458.791661][ T9164] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.504254][ T9189] syzkaller0: entered promiscuous mode [ 459.510217][ T9189] syzkaller0: entered allmulticast mode [ 459.553156][ T9203] netlink: 'syz.3.1142': attribute type 4 has an invalid length. [ 460.180106][ T9211] loop5: detected capacity change from 0 to 1024 [ 460.274371][ T9211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.411949][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 460.421304][ T9220] netlink: 'syz.2.1150': attribute type 30 has an invalid length. [ 460.479941][ T4261] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.530082][ T4261] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.538585][ T4261] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.641471][ T3637] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.001986][ T30] audit: type=1800 audit(1765816841.944:1092): pid=9211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1149" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 461.434465][ T6863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.413187][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 462.804984][ T9249] syzkaller0: entered promiscuous mode [ 462.810856][ T9249] syzkaller0: entered allmulticast mode [ 463.694233][ T9258] netlink: 'syz.5.1165': attribute type 13 has an invalid length. [ 463.964737][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.974287][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.243330][ T9258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.275451][ T9258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.929091][ T75] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.972272][ T75] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.002648][ T75] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.051859][ T75] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.190429][ T9280] syzkaller0: entered promiscuous mode [ 465.196120][ T9280] syzkaller0: entered allmulticast mode [ 465.546662][ T9273] loop2: detected capacity change from 0 to 8192 [ 465.896147][ T9291] netlink: 'syz.5.1178': attribute type 5 has an invalid length. [ 467.216426][ T9313] loop4: detected capacity change from 0 to 128 [ 467.367421][ T9315] syzkaller0: entered promiscuous mode [ 467.374313][ T9315] syzkaller0: entered allmulticast mode [ 467.863801][ T9326] loop5: detected capacity change from 0 to 512 [ 467.971084][ T9326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.984199][ T9326] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.156110][ T30] audit: type=1326 audit(1765816849.104:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.186401][ T30] audit: type=1326 audit(1765816849.134:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.209974][ T30] audit: type=1326 audit(1765816849.134:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.232990][ T30] audit: type=1326 audit(1765816849.134:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.259116][ T30] audit: type=1326 audit(1765816849.134:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.282878][ T30] audit: type=1326 audit(1765816849.134:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.305918][ T30] audit: type=1326 audit(1765816849.134:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.328795][ T30] audit: type=1326 audit(1765816849.144:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.351675][ T30] audit: type=1326 audit(1765816849.144:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.379112][ T30] audit: type=1326 audit(1765816849.154:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.5.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 468.506632][ T9339] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1199'. [ 469.411230][ T6863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.730989][ T9370] veth2: entered promiscuous mode [ 469.736227][ T9370] veth2: entered allmulticast mode [ 470.361625][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1214'. [ 470.579047][ T9385] loop5: detected capacity change from 0 to 512 [ 470.629794][ T9385] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 470.780413][ T9385] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1214: invalid indirect mapped block 4294967295 (level 0) [ 470.871204][ T9385] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1214: invalid indirect mapped block 4294967295 (level 1) [ 470.964901][ T9385] EXT4-fs (loop5): 1 orphan inode deleted [ 470.971294][ T9385] EXT4-fs (loop5): 1 truncate cleaned up [ 470.979157][ T9385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.180431][ T9401] ieee802154 phy0 wpan0: encryption failed: -22 [ 471.304637][ T6863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.714487][ T9410] syzkaller0: entered promiscuous mode [ 471.720378][ T9410] syzkaller0: entered allmulticast mode [ 474.738692][ T9432] loop3: detected capacity change from 0 to 8192 [ 475.608771][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.617191][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 477.754798][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 477.754881][ T30] audit: type=1326 audit(1765816858.704:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 477.844989][ T9486] loop3: detected capacity change from 0 to 512 [ 477.890521][ T30] audit: type=1326 audit(1765816858.744:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 477.914445][ T30] audit: type=1326 audit(1765816858.744:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 477.938525][ T30] audit: type=1326 audit(1765816858.744:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 477.967504][ T30] audit: type=1326 audit(1765816858.744:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 477.991890][ T30] audit: type=1326 audit(1765816858.754:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 478.015496][ T30] audit: type=1326 audit(1765816858.754:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 478.051906][ T30] audit: type=1326 audit(1765816858.754:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 478.076246][ T30] audit: type=1326 audit(1765816858.754:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 478.100249][ T30] audit: type=1326 audit(1765816858.754:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1ba638f749 code=0x7ffc0000 [ 478.151439][ T9486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.165904][ T9486] ext4 filesystem being mounted at /268/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.882994][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.112859][ T9514] netlink: 'syz.5.1272': attribute type 6 has an invalid length. [ 479.130190][ T9513] loop2: detected capacity change from 0 to 512 [ 479.234205][ T9513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.248158][ T9513] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.296060][ T9522] 9p: Bad value for 'wfdno' [ 479.313721][ T9520] loop4: detected capacity change from 0 to 1024 [ 479.372165][ T9520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.463138][ T9513] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 479.798772][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.878587][ T9538] loop5: detected capacity change from 0 to 128 [ 480.048438][ T4261] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 480.061838][ T4261] EXT4-fs (loop2): This should not happen!! Data will be lost [ 480.061838][ T4261] [ 480.071975][ T4261] EXT4-fs (loop2): Total free blocks count 0 [ 480.078222][ T4261] EXT4-fs (loop2): Free/Dirty block details [ 480.087253][ T4261] EXT4-fs (loop2): free_blocks=65280 [ 480.093049][ T4261] EXT4-fs (loop2): dirty_blocks=33 [ 480.098339][ T4261] EXT4-fs (loop2): Block reservation details [ 480.111175][ T4261] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 480.220083][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.370049][ T9572] loop2: detected capacity change from 0 to 128 [ 481.927105][ T9583] loop2: detected capacity change from 0 to 1024 [ 482.014324][ T9583] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1298: Failed to acquire dquot type 0 [ 482.096882][ T9583] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 482.113858][ T9583] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.1298: corrupted inode contents [ 482.184763][ T9583] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.1298: mark_inode_dirty error [ 482.232982][ T9583] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.1298: corrupted inode contents [ 482.420339][ T9583] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1298: mark_inode_dirty error [ 482.470039][ T9583] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.1298: corrupted inode contents [ 482.543842][ T9583] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 482.550847][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 482.570385][ T9583] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.1298: corrupted inode contents [ 482.606208][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'. [ 482.648268][ T9583] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.1298: mark_inode_dirty error [ 482.692783][ T9583] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 482.812829][ T9595] 9p: Bad value for 'wfdno' [ 482.955598][ T9583] EXT4-fs (loop2): 1 truncate cleaned up [ 482.964335][ T9583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.333718][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.390985][ T9600] vlan2: entered allmulticast mode [ 483.396595][ T9600] bridge_slave_0: entered allmulticast mode [ 483.568657][ T9603] loop4: detected capacity change from 0 to 128 [ 484.070466][ T9611] loop2: detected capacity change from 0 to 256 [ 484.214746][ T9611] FAT-fs (loop2): Directory bread(block 64) failed [ 484.223351][ T9611] FAT-fs (loop2): Directory bread(block 65) failed [ 484.231302][ T9611] FAT-fs (loop2): Directory bread(block 66) failed [ 484.238049][ T9611] FAT-fs (loop2): Directory bread(block 67) failed [ 484.245145][ T9611] FAT-fs (loop2): Directory bread(block 68) failed [ 484.252010][ T9611] FAT-fs (loop2): Directory bread(block 69) failed [ 484.259143][ T9611] FAT-fs (loop2): Directory bread(block 70) failed [ 484.266443][ T9611] FAT-fs (loop2): Directory bread(block 71) failed [ 484.273623][ T9611] FAT-fs (loop2): Directory bread(block 72) failed [ 484.280590][ T9611] FAT-fs (loop2): Directory bread(block 73) failed [ 485.885596][ T9645] loop3: detected capacity change from 0 to 128 [ 486.638050][ T9658] loop5: detected capacity change from 0 to 256 [ 486.765888][ T9658] FAT-fs (loop5): Directory bread(block 64) failed [ 486.774215][ T9658] FAT-fs (loop5): Directory bread(block 65) failed [ 486.785813][ T9658] FAT-fs (loop5): Directory bread(block 66) failed [ 486.793796][ T9658] FAT-fs (loop5): Directory bread(block 67) failed [ 486.801104][ T9658] FAT-fs (loop5): Directory bread(block 68) failed [ 486.807844][ T9658] FAT-fs (loop5): Directory bread(block 69) failed [ 486.815012][ T9658] FAT-fs (loop5): Directory bread(block 70) failed [ 486.821876][ T9658] FAT-fs (loop5): Directory bread(block 71) failed [ 486.828763][ T9658] FAT-fs (loop5): Directory bread(block 72) failed [ 486.835617][ T9658] FAT-fs (loop5): Directory bread(block 73) failed [ 487.016684][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 487.028140][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 488.085836][ T9676] 9p: Bad value for 'rfdno' [ 488.344071][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1340'. [ 488.988528][ T9694] loop5: detected capacity change from 0 to 256 [ 489.284239][ T9694] FAT-fs (loop5): Directory bread(block 64) failed [ 489.292709][ T9694] FAT-fs (loop5): Directory bread(block 65) failed [ 489.299842][ T9694] FAT-fs (loop5): Directory bread(block 66) failed [ 489.306596][ T9694] FAT-fs (loop5): Directory bread(block 67) failed [ 489.313660][ T9694] FAT-fs (loop5): Directory bread(block 68) failed [ 489.320597][ T9694] FAT-fs (loop5): Directory bread(block 69) failed [ 489.327562][ T9694] FAT-fs (loop5): Directory bread(block 70) failed [ 489.334434][ T9694] FAT-fs (loop5): Directory bread(block 71) failed [ 489.343889][ T9694] FAT-fs (loop5): Directory bread(block 72) failed [ 489.358218][ T9694] FAT-fs (loop5): Directory bread(block 73) failed [ 489.735597][ T9703] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 490.037872][ T9706] 9p: Bad value for 'rfdno' [ 490.392292][ T9712] syzkaller0: entered promiscuous mode [ 490.392401][ T9712] syzkaller0: entered allmulticast mode [ 491.351261][ T9723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1361'. [ 491.894041][ T9733] netlink: 'syz.4.1364': attribute type 4 has an invalid length. [ 492.061723][ T9735] 9p: Bad value for 'wfdno' [ 493.905582][ T9758] netlink: 'syz.4.1377': attribute type 4 has an invalid length. [ 494.050312][ T9760] 9p: Bad value for 'rfdno' [ 494.256007][ T9764] loop5: detected capacity change from 0 to 256 [ 494.370714][ T9764] FAT-fs (loop5): Directory bread(block 64) failed [ 494.377808][ T9764] FAT-fs (loop5): Directory bread(block 65) failed [ 494.385345][ T9764] FAT-fs (loop5): Directory bread(block 66) failed [ 494.392201][ T9764] FAT-fs (loop5): Directory bread(block 67) failed [ 494.399065][ T9764] FAT-fs (loop5): Directory bread(block 68) failed [ 494.406192][ T9764] FAT-fs (loop5): Directory bread(block 69) failed [ 494.413350][ T9764] FAT-fs (loop5): Directory bread(block 70) failed [ 494.420310][ T9764] FAT-fs (loop5): Directory bread(block 71) failed [ 494.427184][ T9764] FAT-fs (loop5): Directory bread(block 72) failed [ 494.434376][ T9764] FAT-fs (loop5): Directory bread(block 73) failed [ 495.831474][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 495.831552][ T30] audit: type=1326 audit(1765816876.784:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 495.861267][ T30] audit: type=1326 audit(1765816876.784:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 495.884149][ T30] audit: type=1326 audit(1765816876.784:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 495.908269][ T30] audit: type=1326 audit(1765816876.784:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 495.931930][ T30] audit: type=1326 audit(1765816876.784:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 495.955101][ T30] audit: type=1326 audit(1765816876.784:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 495.978233][ T30] audit: type=1326 audit(1765816876.784:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 496.002575][ T30] audit: type=1326 audit(1765816876.784:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 496.026261][ T30] audit: type=1326 audit(1765816876.784:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 496.049197][ T30] audit: type=1326 audit(1765816876.784:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.5.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 496.171305][ T9789] 9p: Bad value for 'rfdno' [ 502.439897][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 502.439977][ T30] audit: type=1326 audit(1765816883.374:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 502.472556][ T30] audit: type=1326 audit(1765816883.374:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 502.502222][ T30] audit: type=1326 audit(1765816883.394:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 502.525559][ T30] audit: type=1326 audit(1765816883.394:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 502.550274][ T30] audit: type=1326 audit(1765816883.394:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 502.575145][ T30] audit: type=1326 audit(1765816883.504:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 502.852203][ T30] audit: type=1326 audit(1765816883.624:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9880 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2748fc2005 code=0x7ffc0000 [ 502.877167][ T30] audit: type=1326 audit(1765816883.634:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 502.904856][ T30] audit: type=1326 audit(1765816883.634:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 502.927854][ T30] audit: type=1326 audit(1765816883.654:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 507.064561][ T9946] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 507.279250][ T9946] loop4: detected capacity change from 0 to 2048 [ 507.509124][ T9946] loop4: p2 < > p4 [ 507.530714][ T9946] loop4: p4 size 262144 extends beyond EOD, truncated [ 508.659818][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 508.660002][ T30] audit: type=1326 audit(1765816889.604:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 508.780340][ T30] audit: type=1326 audit(1765816889.654:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 508.806402][ T30] audit: type=1326 audit(1765816889.654:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 508.830450][ T30] audit: type=1326 audit(1765816889.664:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 508.853387][ T30] audit: type=1326 audit(1765816889.674:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 508.876309][ T30] audit: type=1326 audit(1765816889.764:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f45d75c2005 code=0x7ffc0000 [ 508.902233][ T30] audit: type=1326 audit(1765816889.784:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 508.926190][ T30] audit: type=1326 audit(1765816889.784:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 508.949117][ T30] audit: type=1326 audit(1765816889.834:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 508.971965][ T30] audit: type=1326 audit(1765816889.914:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 510.049238][ T9976] loop5: detected capacity change from 0 to 128 [ 510.523861][ T9981] syz.5.1459: attempt to access beyond end of device [ 510.523861][ T9981] loop5: rw=2049, sector=145, nr_sectors = 216 limit=128 [ 510.925385][ T9983] syz.5.1459: attempt to access beyond end of device [ 510.925385][ T9983] loop5: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 510.940028][ T9983] syz.5.1459: attempt to access beyond end of device [ 510.940028][ T9983] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 511.052839][ T9983] syz.5.1459: attempt to access beyond end of device [ 511.052839][ T9983] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 511.078719][ T9989] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 511.130222][ T9983] syz.5.1459: attempt to access beyond end of device [ 511.130222][ T9983] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 511.178894][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.188415][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.197834][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.222085][ T9983] syz.5.1459: attempt to access beyond end of device [ 511.222085][ T9983] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 511.222923][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.268931][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 511.364231][ T9989] loop4: detected capacity change from 0 to 2048 [ 511.507329][ T9989] loop4: p2 < > p4 [ 511.530618][ T9989] loop4: p4 size 262144 extends beyond EOD, truncated [ 512.187804][ T9990] chnl_net:caif_netlink_parms(): no params data found [ 512.392384][T10000] loop4: detected capacity change from 0 to 512 [ 512.402153][T10000] EXT4-fs: inline encryption not supported [ 512.472652][T10000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.847561][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.982497][ T9990] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.990591][ T9990] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.001095][ T9990] bridge_slave_0: entered allmulticast mode [ 513.010921][ T9990] bridge_slave_0: entered promiscuous mode [ 513.071190][ T9990] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.079753][ T9990] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.087524][ T9990] bridge_slave_1: entered allmulticast mode [ 513.100246][ T9990] bridge_slave_1: entered promiscuous mode [ 513.339946][ T5805] Bluetooth: hci3: command tx timeout [ 513.362494][ T9990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.414540][ T9990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.573866][ T9990] team0: Port device team_slave_0 added [ 513.609141][ T9990] team0: Port device team_slave_1 added [ 513.682748][T10021] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 513.725427][T10020] IPVS: stopping master sync thread 10021 ... [ 513.775731][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.783736][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.812269][ T9990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.851735][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.858856][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.885699][ T9990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.550788][ T9990] hsr_slave_0: entered promiscuous mode [ 514.560956][ T9990] hsr_slave_1: entered promiscuous mode [ 514.569761][ T9990] debugfs: 'hsr0' already exists in 'hsr' [ 514.575677][ T9990] Cannot create hsr debugfs directory [ 515.441348][ T5805] Bluetooth: hci3: command tx timeout [ 516.583868][ T9990] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 516.608765][ T9990] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 516.637774][ T9990] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 516.663610][ T9990] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 516.926411][T10045] IPVS: Error connecting to the multicast addr [ 517.428065][ T9990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.499879][ T5805] Bluetooth: hci3: command tx timeout [ 517.549276][ T9990] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.589081][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.596820][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.676204][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.684204][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.877979][ T9990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.912348][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 517.975419][T10057] team1: entered promiscuous mode [ 517.981077][T10057] team1: entered allmulticast mode [ 517.987993][T10057] 8021q: adding VLAN 0 to HW filter on device team1 [ 518.548482][T10062] loop5: detected capacity change from 0 to 1024 [ 518.580391][T10062] EXT4-fs: inline encryption not supported [ 518.654410][T10062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.854237][T10062] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1495: Allocating blocks 385-513 which overlap fs metadata [ 519.181740][T10062] EXT4-fs (loop5): pa ffff8881241dd310: logic 16, phys. 129, len 24 [ 519.190670][T10062] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 519.205226][ T9990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.243528][T10062] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 519.256832][T10062] EXT4-fs (loop5): This should not happen!! Data will be lost [ 519.256832][T10062] [ 519.266872][T10062] EXT4-fs (loop5): Total free blocks count 0 [ 519.273317][T10062] EXT4-fs (loop5): Free/Dirty block details [ 519.279396][T10062] EXT4-fs (loop5): free_blocks=128 [ 519.284892][T10062] EXT4-fs (loop5): dirty_blocks=0 [ 519.287583][T10082] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 519.292373][T10062] EXT4-fs (loop5): Block reservation details [ 519.303257][T10080] IPVS: stopping master sync thread 10082 ... [ 519.307557][T10062] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 519.580339][ T5805] Bluetooth: hci3: command tx timeout [ 520.754067][ T9990] veth0_vlan: entered promiscuous mode [ 520.831180][ T9990] veth1_vlan: entered promiscuous mode [ 521.037206][ T9990] veth0_macvtap: entered promiscuous mode [ 521.086549][ T9990] veth1_macvtap: entered promiscuous mode [ 521.225751][ T9990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.305088][ T9990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.363264][ T4261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.400844][ T4261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.439818][ T4261] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.470419][ T4261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.881795][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 521.881876][ T30] audit: type=1326 audit(1765816902.814:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 521.914759][ T30] audit: type=1326 audit(1765816902.834:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 521.939231][ T30] audit: type=1326 audit(1765816902.834:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 521.962862][ T30] audit: type=1326 audit(1765816902.834:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 521.985924][ T30] audit: type=1326 audit(1765816902.834:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 522.047911][T10114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1512'. [ 522.192856][ T30] audit: type=1326 audit(1765816902.964:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 522.217765][ T30] audit: type=1326 audit(1765816902.964:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 522.242073][ T30] audit: type=1326 audit(1765816902.974:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 522.265311][ T30] audit: type=1326 audit(1765816902.974:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 522.291487][ T30] audit: type=1326 audit(1765816902.974:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 522.917238][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.936137][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.953272][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.972769][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.990019][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.002940][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1518'. [ 524.405580][T10128] chnl_net:caif_netlink_parms(): no params data found [ 525.021626][ T5805] Bluetooth: hci4: command tx timeout [ 525.167863][T10154] syzkaller0: entered promiscuous mode [ 525.173827][T10154] syzkaller0: entered allmulticast mode [ 526.339309][T10128] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.347098][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.355021][T10128] bridge_slave_0: entered allmulticast mode [ 526.365011][T10128] bridge_slave_0: entered promiscuous mode [ 526.463806][T10128] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.471716][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.479762][T10128] bridge_slave_1: entered allmulticast mode [ 526.489620][T10128] bridge_slave_1: entered promiscuous mode [ 526.709091][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 526.721202][T10186] netlink: 'syz.1.1529': attribute type 5 has an invalid length. [ 526.902848][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.995158][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.105881][ T4261] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.116143][ T4261] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.141428][ T5805] Bluetooth: hci4: command tx timeout [ 527.292305][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 527.292383][ T30] audit: type=1326 audit(1765816908.244:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.322257][ T30] audit: type=1326 audit(1765816908.244:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.346469][ T30] audit: type=1326 audit(1765816908.244:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.370151][ T30] audit: type=1326 audit(1765816908.254:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.394028][ T30] audit: type=1326 audit(1765816908.254:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.417967][ T30] audit: type=1326 audit(1765816908.254:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.426201][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 527.442705][ T30] audit: type=1326 audit(1765816908.254:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.442948][ T30] audit: type=1326 audit(1765816908.254:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.443190][ T30] audit: type=1326 audit(1765816908.304:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.443419][ T30] audit: type=1326 audit(1765816908.324:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 527.576701][T10128] team0: Port device team_slave_0 added [ 527.598871][ T4261] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.609709][ T4261] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.666409][T10128] team0: Port device team_slave_1 added [ 527.801961][ T4261] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.812092][ T4261] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.969204][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.977413][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.004235][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.023710][ T4261] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.034026][ T4261] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.093967][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.101340][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.127951][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.316777][T10202] syzkaller0: entered promiscuous mode [ 528.323288][T10202] syzkaller0: entered allmulticast mode [ 528.340030][ T3787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.348127][ T3787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.055477][T10128] hsr_slave_0: entered promiscuous mode [ 529.065922][T10128] hsr_slave_1: entered promiscuous mode [ 529.077499][T10128] debugfs: 'hsr0' already exists in 'hsr' [ 529.083710][T10128] Cannot create hsr debugfs directory [ 529.141808][ T3787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.148921][ T4261] bridge_slave_1: left allmulticast mode [ 529.150208][ T3787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.155714][ T4261] bridge_slave_1: left promiscuous mode [ 529.169628][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.185805][ T5805] Bluetooth: hci4: command tx timeout [ 529.197260][ T4261] bridge_slave_0: left allmulticast mode [ 529.203363][ T4261] bridge_slave_0: left promiscuous mode [ 529.210327][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.681093][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.733491][ T11] IPVS: starting estimator thread 0... [ 529.736205][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.768867][T10220] IPVS: dh: FWM 3 0x00000003 - no destination available [ 529.787887][ T4261] bond0 (unregistering): Released all slaves [ 529.840210][T10221] IPVS: using max 240 ests per chain, 12000 per kthread [ 530.415331][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1545'. [ 530.576218][ T4261] hsr_slave_0: left promiscuous mode [ 530.599155][ T4261] hsr_slave_1: left promiscuous mode [ 530.614155][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.626035][ T4261] batadv0: mtu less than device minimum [ 530.636409][ T4261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 530.649512][ T4261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 530.662474][ T4261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 530.675551][ T4261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 530.688580][ T4261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 530.701779][ T4261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 530.714756][ T4261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 530.727924][ T4261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 530.769088][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.812952][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.867335][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.974281][ T4261] batman_adv: batadv0: Interface deactivated: dummy0 [ 530.981555][ T4261] batman_adv: batadv0: Removing interface: dummy0 [ 531.041083][ T4261] veth1_macvtap: left promiscuous mode [ 531.046998][ T4261] veth0_macvtap: left promiscuous mode [ 531.053068][ T4261] veth1_vlan: left promiscuous mode [ 531.058614][ T4261] veth0_vlan: left promiscuous mode [ 531.267952][ T5807] Bluetooth: hci4: command tx timeout [ 531.782955][ T4261] team0 (unregistering): Port device team_slave_1 removed [ 531.908199][ T4261] team0 (unregistering): Port device team_slave_0 removed [ 532.930053][T10128] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 532.968375][T10128] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 532.992249][T10128] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 533.067993][T10128] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 533.861752][T10128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.011031][T10275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1562'. [ 534.011359][T10128] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.021367][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 534.134850][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.142436][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.217656][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.225266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.667813][T10283] syzkaller0: entered promiscuous mode [ 534.673937][T10283] syzkaller0: entered allmulticast mode [ 536.038231][T10310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1575'. [ 536.047963][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 536.230428][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.039321][T10328] syzkaller0: entered promiscuous mode [ 537.045142][T10328] syzkaller0: entered allmulticast mode [ 537.094208][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.101389][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.992403][T10345] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1587'. [ 538.002503][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'. [ 538.256950][T10128] veth0_vlan: entered promiscuous mode [ 538.350882][T10128] veth1_vlan: entered promiscuous mode [ 538.510220][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 538.510405][ T30] audit: type=1326 audit(1765816919.454:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.623606][T10128] veth0_macvtap: entered promiscuous mode [ 538.638431][ T30] audit: type=1326 audit(1765816919.514:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.662120][ T30] audit: type=1326 audit(1765816919.524:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.686689][ T30] audit: type=1326 audit(1765816919.524:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.711763][ T30] audit: type=1326 audit(1765816919.524:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.735303][ T30] audit: type=1326 audit(1765816919.524:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.758963][ T30] audit: type=1326 audit(1765816919.524:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.783575][ T30] audit: type=1326 audit(1765816919.524:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.809784][ T30] audit: type=1326 audit(1765816919.524:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.833572][ T30] audit: type=1326 audit(1765816919.524:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127ef8f749 code=0x7ffc0000 [ 538.881181][T10128] veth1_macvtap: entered promiscuous mode [ 538.953249][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.984875][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.081860][ T4576] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.141857][ T4576] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.186779][ T4576] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.230082][ T4576] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.282604][T10364] smc: net device bond0 applied user defined pnetid SYZ0 [ 540.381006][ T11] hid_parser_main: 8 callbacks suppressed [ 540.381102][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.400577][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.408843][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.416883][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.425064][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.433180][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.446293][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.455814][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.463761][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.471577][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 540.588723][ T11] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 540.676753][T10393] loop6: detected capacity change from 0 to 2048 [ 540.738363][T10393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.106139][ T9990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.296088][ T4012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.305181][ T4012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.454805][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 543.534158][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.544609][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.090590][T10461] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 544.128524][T10460] IPVS: stopping master sync thread 10461 ... [ 544.317672][ T11] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 544.788604][T10477] loop6: detected capacity change from 0 to 512 [ 544.846111][T10477] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 544.873205][T10477] EXT4-fs (loop6): invalid journal inode [ 545.096388][T10486] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 545.369777][T10489] 9p: Bad value for 'wfdno' [ 546.256559][T10499] syzkaller0: entered promiscuous mode [ 546.262503][T10499] syzkaller0: entered allmulticast mode [ 546.362354][T10499] xt_SECMARK: invalid mode: 2 [ 547.912081][T10540] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 547.927124][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 547.927201][ T30] audit: type=1326 audit(1765816928.874:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 547.956960][ T30] audit: type=1326 audit(1765816928.874:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 548.095369][ T30] audit: type=1326 audit(1765816928.954:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 548.121573][ T30] audit: type=1326 audit(1765816928.954:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 548.145445][ T30] audit: type=1326 audit(1765816928.954:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 548.169048][ T30] audit: type=1326 audit(1765816928.964:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 548.192690][ T30] audit: type=1326 audit(1765816928.994:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 548.215782][ T30] audit: type=1326 audit(1765816928.994:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 548.240765][ T30] audit: type=1326 audit(1765816928.994:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 548.251558][T10544] syzkaller0: entered promiscuous mode [ 548.264740][ T30] audit: type=1326 audit(1765816928.994:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 548.270086][T10544] syzkaller0: entered allmulticast mode [ 548.306984][T10546] xt_SECMARK: invalid mode: 2 [ 548.735780][T10551] loop5: detected capacity change from 0 to 512 [ 548.793889][T10551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 548.894429][T10551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.947924][T10551] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 548.994749][T10551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.596308][T10564] loop6: detected capacity change from 0 to 128 [ 550.616874][T10586] xt_SECMARK: invalid mode: 2 [ 550.659396][T10581] syzkaller0: entered promiscuous mode [ 550.665248][T10581] syzkaller0: entered allmulticast mode [ 551.329686][T10595] loop6: detected capacity change from 0 to 128 [ 551.477049][T10600] loop7: detected capacity change from 0 to 164 [ 552.134986][T10610] loop6: detected capacity change from 0 to 1024 [ 552.166790][T10610] EXT4-fs: Ignoring removed mblk_io_submit option [ 552.175397][T10610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 552.256418][T10610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.310003][T10615] syzkaller0: entered promiscuous mode [ 552.318403][T10615] syzkaller0: entered allmulticast mode [ 552.346908][T10615] xt_SECMARK: invalid mode: 2 [ 552.846168][ T9990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.414574][T10639] loop4: detected capacity change from 0 to 128 [ 553.724398][T10641] loop5: detected capacity change from 0 to 164 [ 554.091452][T10651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1703'. [ 554.891116][T10658] syzkaller0: entered promiscuous mode [ 554.896851][T10658] syzkaller0: entered allmulticast mode [ 555.047430][T10659] xt_SECMARK: invalid mode: 2 [ 555.231419][T10663] 9p: Bad value for 'rfdno' [ 556.066909][T10637] tipc: Enabling of bearer rejected, media not registered [ 556.547423][T10674] loop7: detected capacity change from 0 to 128 [ 557.756819][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 557.949314][T10687] 9p: Bad value for 'rfdno' [ 558.189925][T10689] xt_SECMARK: invalid mode: 2 [ 559.368089][T10710] IPv6: NLM_F_CREATE should be specified when creating new route [ 559.422896][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1729'. [ 559.603483][T10715] 9p: Bad value for 'rfdno' [ 560.115896][ T24] hid_parser_main: 54 callbacks suppressed [ 560.116000][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.130967][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.145603][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.156463][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.164328][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.172096][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.179939][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.187578][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.195411][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.204738][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 560.244375][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 560.603293][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'. [ 560.755450][T10729] syzkaller0: entered promiscuous mode [ 560.761289][T10729] syzkaller0: entered allmulticast mode [ 560.866969][T10729] xt_SECMARK: invalid mode: 2 [ 561.331538][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1743'. [ 561.864648][T10748] loop6: detected capacity change from 0 to 128 [ 562.090025][T10750] loop7: detected capacity change from 0 to 1024 [ 562.127572][T10750] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 562.137956][T10750] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 562.190034][T10750] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 562.231226][T10750] EXT4-fs (loop7): orphan cleanup on readonly fs [ 562.269350][T10750] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.1747: Inode bitmap for bg 0 marked uninitialized [ 562.372299][T10750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 562.417441][ T24] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 562.477808][T10750] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 563.283912][T10128] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.407327][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1756'. [ 563.585033][T10768] syzkaller0: entered promiscuous mode [ 563.591184][T10768] syzkaller0: entered allmulticast mode [ 566.661894][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1770'. [ 567.033998][T10814] syzkaller0: entered promiscuous mode [ 567.040381][T10814] syzkaller0: entered allmulticast mode [ 568.057321][T10833] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1780'. [ 568.170195][T10833] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 568.662452][T10842] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1784'. [ 569.158688][T10854] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1789'. [ 569.356366][T10861] loop6: detected capacity change from 0 to 512 [ 569.401877][T10861] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 569.446493][T10857] loop5: detected capacity change from 0 to 512 [ 569.475597][T10861] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1789: invalid indirect mapped block 4294967295 (level 0) [ 569.503941][T10861] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1789: invalid indirect mapped block 4294967295 (level 1) [ 569.556180][T10861] EXT4-fs (loop6): 1 orphan inode deleted [ 569.562443][T10861] EXT4-fs (loop6): 1 truncate cleaned up [ 569.570537][T10861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.600026][T10857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.613992][T10857] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.933566][ T6863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.945390][ T9990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.486538][T10881] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1799'. [ 570.936560][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 570.936638][ T30] audit: type=1326 audit(1765816951.884:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.026927][T10890] loop6: detected capacity change from 0 to 512 [ 571.091430][T10890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 571.109855][ T30] audit: type=1326 audit(1765816951.924:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.133553][ T30] audit: type=1326 audit(1765816951.944:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.158543][ T30] audit: type=1326 audit(1765816951.944:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.182080][ T30] audit: type=1326 audit(1765816951.974:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.205074][ T30] audit: type=1326 audit(1765816951.974:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.229141][ T30] audit: type=1326 audit(1765816951.974:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.252594][ T30] audit: type=1326 audit(1765816951.974:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.277248][ T30] audit: type=1326 audit(1765816951.974:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.301027][ T30] audit: type=1326 audit(1765816951.974:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 571.632571][T10890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.704886][T10890] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 572.164949][ T9990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.186674][T10906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1808'. [ 572.796906][T10917] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1813'. [ 574.035321][T10940] loop4: detected capacity change from 0 to 128 [ 574.104529][T10940] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 574.210413][T10940] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.687913][T10952] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1828'. [ 574.923979][ T5801] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 575.621700][T10972] vlan2: entered allmulticast mode [ 576.104450][T10978] loop4: detected capacity change from 0 to 1024 [ 576.159232][T10978] EXT4-fs: inline encryption not supported [ 576.165792][T10978] EXT4-fs: Ignoring removed orlov option [ 576.211929][T10978] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 576.293544][T10978] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 576.344149][T10978] System zones: 0-1, 3-12 [ 576.367043][T10978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.559339][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.260223][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 578.260301][ T30] audit: type=1326 audit(1765816959.204:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 578.354255][ T30] audit: type=1326 audit(1765816959.264:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 578.378224][ T30] audit: type=1326 audit(1765816959.294:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 578.401601][ T30] audit: type=1326 audit(1765816959.294:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 578.426331][ T30] audit: type=1326 audit(1765816959.304:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 578.449862][ T30] audit: type=1326 audit(1765816959.304:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 578.472982][ T30] audit: type=1326 audit(1765816959.304:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 578.788611][T11021] loop4: detected capacity change from 0 to 164 [ 578.960385][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 578.969858][T11026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1857'. [ 580.170938][T11053] loop7: detected capacity change from 0 to 164 [ 581.573017][T11077] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 581.615142][T11077] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 582.393895][T11080] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1879'. [ 584.821179][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1892'. [ 586.445337][T11141] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 586.445337][T11141] program syz.7.1903 not setting count and/or reply_len properly [ 586.857611][T11149] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 586.872730][T11147] IPVS: stopping master sync thread 11149 ... [ 587.964030][ T30] audit: type=1326 audit(1765816968.914:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.7.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 588.039813][ T30] audit: type=1326 audit(1765816968.944:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.7.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 588.064655][ T30] audit: type=1326 audit(1765816968.944:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.7.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 589.021750][T11188] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 589.050555][T11187] IPVS: stopping master sync thread 11188 ... [ 589.447567][T11194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1924'. [ 589.457041][T11194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1924'. [ 589.957602][T11208] xt_TPROXY: Can be used only with -p tcp or -p udp [ 590.052555][T11211] netlink: 'syz.4.1932': attribute type 4 has an invalid length. [ 590.448557][T11216] loop6: detected capacity change from 0 to 128 [ 590.465137][T11223] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 590.484667][T11221] IPVS: stopping master sync thread 11223 ... [ 590.556776][T11216] syz.6.1934: attempt to access beyond end of device [ 590.556776][T11216] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 590.631465][T11216] syz.6.1934: attempt to access beyond end of device [ 590.631465][T11216] loop6: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 590.706051][T11216] syz.6.1934: attempt to access beyond end of device [ 590.706051][T11216] loop6: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 590.722811][T11216] Buffer I/O error on dev loop6, logical block 75, lost async page write [ 590.733540][T11216] syz.6.1934: attempt to access beyond end of device [ 590.733540][T11216] loop6: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 590.747684][T11216] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 590.823115][T11216] syz.6.1934: attempt to access beyond end of device [ 590.823115][T11216] loop6: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 590.901554][T11216] syz.6.1934: attempt to access beyond end of device [ 590.901554][T11216] loop6: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 590.921195][T11216] Buffer I/O error on dev loop6, logical block 87, lost async page write [ 590.930651][T11216] syz.6.1934: attempt to access beyond end of device [ 590.930651][T11216] loop6: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 590.945413][T11216] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 591.013264][ T30] audit: type=1326 audit(1765816971.944:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 591.028414][T11216] syz.6.1934: attempt to access beyond end of device [ 591.028414][T11216] loop6: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 591.117178][T11216] syz.6.1934: attempt to access beyond end of device [ 591.117178][T11216] loop6: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 591.132159][ T30] audit: type=1326 audit(1765816972.004:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 591.162334][T11216] Buffer I/O error on dev loop6, logical block 91, lost async page write [ 591.171580][T11216] syz.6.1934: attempt to access beyond end of device [ 591.171580][T11216] loop6: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 591.185867][T11216] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 592.031870][T11247] netlink: 'syz.1.1947': attribute type 4 has an invalid length. [ 592.157477][T11253] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1948'. [ 593.124867][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1960'. [ 593.591451][T11283] netlink: 'syz.6.1964': attribute type 4 has an invalid length. [ 593.912820][T11286] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1965'. [ 595.308267][T11317] netlink: 'syz.6.1979': attribute type 4 has an invalid length. [ 595.440442][ T30] audit: type=1326 audit(1765816976.384:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 595.465013][ T30] audit: type=1326 audit(1765816976.394:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 595.577194][ T30] audit: type=1326 audit(1765816976.484:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 595.613818][ T30] audit: type=1326 audit(1765816976.564:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 595.754642][ T30] audit: type=1326 audit(1765816976.604:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 595.778831][ T30] audit: type=1326 audit(1765816976.614:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 595.802681][ T30] audit: type=1326 audit(1765816976.614:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 595.827169][ T30] audit: type=1326 audit(1765816976.614:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 595.851914][ T30] audit: type=1326 audit(1765816976.624:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 595.875657][ T30] audit: type=1326 audit(1765816976.624:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 596.024930][T11323] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1981'. [ 596.446521][T11338] lo speed is unknown, defaulting to 1000 [ 596.465740][T11338] lo speed is unknown, defaulting to 1000 [ 596.472995][T11338] lo speed is unknown, defaulting to 1000 [ 597.028575][T11338] infiniband syz1: set active [ 597.033695][T11338] infiniband syz1: added lo [ 597.050027][ T11] lo speed is unknown, defaulting to 1000 [ 597.288334][T11335] loop4: detected capacity change from 0 to 2048 [ 597.374439][T11338] RDS/IB: syz1: added [ 597.378674][T11338] smc: adding ib device syz1 with port count 1 [ 597.385817][T11338] smc: ib device syz1 port 1 has no pnetid [ 597.394083][T11338] lo speed is unknown, defaulting to 1000 [ 597.406914][T11335] loop4: p3 p4 < > [ 597.411572][T11335] loop4: p3 size 861184 extends beyond EOD, truncated [ 597.522578][ T5862] lo speed is unknown, defaulting to 1000 [ 597.927778][T11338] lo speed is unknown, defaulting to 1000 [ 598.386386][T11338] lo speed is unknown, defaulting to 1000 [ 598.548171][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.554955][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.843798][T11338] lo speed is unknown, defaulting to 1000 [ 599.309230][T11338] lo speed is unknown, defaulting to 1000 [ 599.790240][T11338] lo speed is unknown, defaulting to 1000 [ 601.013523][T11396] loop6: detected capacity change from 0 to 512 [ 601.154487][T11396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.171660][T11396] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 601.206021][T11396] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2009: corrupted inode contents [ 601.220528][T11396] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.2009: mark_inode_dirty error [ 601.235175][T11396] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2009: corrupted inode contents [ 601.251080][T11396] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2009: mark_inode_dirty error [ 601.282863][T11396] EXT4-fs error (device loop6): ext4_get_first_dir_block:3538: inode #18: comm syz.6.2009: directory missing '.' [ 601.402325][ T9990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.171016][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2015'. [ 602.476440][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2015'. [ 603.560772][T11429] lo speed is unknown, defaulting to 1000 [ 607.399954][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 607.400043][ T30] audit: type=1326 audit(1765816988.334:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 607.659850][ T30] audit: type=1326 audit(1765816988.414:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 607.683576][ T30] audit: type=1326 audit(1765816988.414:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 610.028360][ T5860] hid_parser_main: 54 callbacks suppressed [ 610.028456][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.042898][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.050777][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.058495][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.072747][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.082494][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.090466][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.098170][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.106142][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.113955][ T5860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 610.258938][T11471] loop5: detected capacity change from 0 to 164 [ 610.600921][ T5860] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 612.587089][ T30] audit: type=1326 audit(1765816993.534:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 612.611059][ T30] audit: type=1326 audit(1765816993.534:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 612.744323][ T30] audit: type=1326 audit(1765816993.594:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 612.767783][ T30] audit: type=1326 audit(1765816993.594:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 612.791009][ T30] audit: type=1326 audit(1765816993.594:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 612.814222][ T30] audit: type=1326 audit(1765816993.604:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 612.842061][ T30] audit: type=1326 audit(1765816993.614:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 612.867219][ T30] audit: type=1326 audit(1765816993.614:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 612.890883][ T30] audit: type=1326 audit(1765816993.644:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 612.914451][ T30] audit: type=1326 audit(1765816993.644:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 613.325948][ T5862] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 613.804702][T11518] tipc: Started in network mode [ 613.810529][T11518] tipc: Node identity fffffff8, cluster identity 4711 [ 613.817463][T11518] tipc: Node number set to 4294967288 [ 614.475366][T11526] loop5: detected capacity change from 0 to 256 [ 614.741317][T11526] FAT-fs (loop5): Directory bread(block 64) failed [ 614.748286][T11526] FAT-fs (loop5): Directory bread(block 65) failed [ 614.755394][T11526] FAT-fs (loop5): Directory bread(block 66) failed [ 614.762341][T11526] FAT-fs (loop5): Directory bread(block 67) failed [ 614.769313][T11526] FAT-fs (loop5): Directory bread(block 68) failed [ 614.776235][T11526] FAT-fs (loop5): Directory bread(block 69) failed [ 614.786097][T11526] FAT-fs (loop5): Directory bread(block 70) failed [ 614.793213][T11526] FAT-fs (loop5): Directory bread(block 71) failed [ 614.800680][T11526] FAT-fs (loop5): Directory bread(block 72) failed [ 614.807518][T11526] FAT-fs (loop5): Directory bread(block 73) failed [ 615.933936][T11556] loop5: detected capacity change from 0 to 1024 [ 615.955763][T11556] EXT4-fs: Ignoring removed bh option [ 616.053611][T11554] syzkaller0: entered promiscuous mode [ 616.059740][T11554] syzkaller0: entered allmulticast mode [ 616.228758][T11556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.475210][ T6863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.577599][T11567] loop6: detected capacity change from 0 to 256 [ 616.854790][T11567] FAT-fs (loop6): Directory bread(block 64) failed [ 616.861900][T11567] FAT-fs (loop6): Directory bread(block 65) failed [ 616.869003][T11567] FAT-fs (loop6): Directory bread(block 66) failed [ 616.876452][T11567] FAT-fs (loop6): Directory bread(block 67) failed [ 616.883620][T11567] FAT-fs (loop6): Directory bread(block 68) failed [ 616.890496][T11567] FAT-fs (loop6): Directory bread(block 69) failed [ 616.897642][T11567] FAT-fs (loop6): Directory bread(block 70) failed [ 616.904712][T11567] FAT-fs (loop6): Directory bread(block 71) failed [ 616.912113][T11567] FAT-fs (loop6): Directory bread(block 72) failed [ 616.919141][T11567] FAT-fs (loop6): Directory bread(block 73) failed [ 617.712721][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 617.712796][ T30] audit: type=1326 audit(1765816998.644:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 617.742915][ T30] audit: type=1326 audit(1765816998.654:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 617.774079][ T30] audit: type=1326 audit(1765816998.654:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 617.799014][ T30] audit: type=1326 audit(1765816998.664:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 617.822599][ T30] audit: type=1326 audit(1765816998.664:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 617.846934][ T30] audit: type=1326 audit(1765816998.664:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 617.874794][ T30] audit: type=1326 audit(1765816998.664:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 617.900306][ T30] audit: type=1326 audit(1765816998.664:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 617.924807][ T30] audit: type=1326 audit(1765816998.664:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 617.948175][ T30] audit: type=1326 audit(1765816998.664:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f45d758f749 code=0x7ffc0000 [ 618.660620][T11612] IPVS: Error connecting to the multicast addr [ 618.802971][T11618] loop6: detected capacity change from 0 to 512 [ 618.891318][T11618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.905644][T11618] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.637620][T11636] loop4: detected capacity change from 0 to 512 [ 619.658806][T11636] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 619.668278][T11636] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 619.743580][T11636] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2103: Allocating blocks 41-42 which overlap fs metadata [ 619.802154][T11636] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2103: Failed to acquire dquot type 1 [ 619.866686][T11636] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 619.886743][T11636] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2103: corrupted inode contents [ 619.950454][T11636] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.2103: mark_inode_dirty error [ 620.030469][T11636] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2103: corrupted inode contents [ 620.115143][T11636] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2103: mark_inode_dirty error [ 620.184904][T11636] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2103: corrupted inode contents [ 620.223096][T11636] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 620.252960][T11636] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2103: corrupted inode contents [ 620.300456][T11636] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.2103: mark_inode_dirty error [ 620.338692][T11636] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 620.359132][T11636] EXT4-fs (loop4): 1 truncate cleaned up [ 620.367617][T11636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.371430][T11649] IPVS: Error connecting to the multicast addr [ 620.463849][T11636] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 620.510673][T11652] loop7: detected capacity change from 0 to 128 [ 620.735216][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.786684][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 621.625210][T11671] loop5: detected capacity change from 0 to 512 [ 621.667093][T11671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01d, mo2=0002] [ 621.681359][T11671] System zones: 1-12 [ 621.686403][T11671] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm +}[@: Directory hole found for htree index block 0 [ 621.701554][T11671] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 621.711360][T11671] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm +}[@: Directory hole found for htree index block 0 [ 621.731054][T11671] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 621.743997][T11671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.921741][T11671] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm +}[@: Directory hole found for htree index block 0 [ 622.066646][ T9990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.126389][T11680] loop7: detected capacity change from 0 to 164 [ 622.240676][ T6863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.334804][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2122'. [ 622.724273][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 622.724351][ T30] audit: type=1326 audit(1765817003.674:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 622.755356][ T30] audit: type=1326 audit(1765817003.674:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 622.783571][ T30] audit: type=1326 audit(1765817003.674:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 622.946957][ T30] audit: type=1326 audit(1765817003.774:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 622.975437][ T30] audit: type=1326 audit(1765817003.774:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 623.000470][ T30] audit: type=1326 audit(1765817003.774:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 623.023834][ T30] audit: type=1326 audit(1765817003.774:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 623.047097][ T30] audit: type=1326 audit(1765817003.774:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 623.070105][ T30] audit: type=1326 audit(1765817003.774:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 623.098261][ T30] audit: type=1326 audit(1765817003.794:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11692 comm="syz.7.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8f9b18f749 code=0x7ffc0000 [ 623.286761][T11701] loop5: detected capacity change from 0 to 256 [ 623.472704][T11701] FAT-fs (loop5): Directory bread(block 64) failed [ 623.480046][T11701] FAT-fs (loop5): Directory bread(block 65) failed [ 623.488637][T11701] FAT-fs (loop5): Directory bread(block 66) failed [ 623.496689][T11701] FAT-fs (loop5): Directory bread(block 67) failed [ 623.504069][T11701] FAT-fs (loop5): Directory bread(block 68) failed [ 623.511900][T11701] FAT-fs (loop5): Directory bread(block 69) failed [ 623.518995][T11701] FAT-fs (loop5): Directory bread(block 70) failed [ 623.526087][T11701] FAT-fs (loop5): Directory bread(block 71) failed [ 623.533250][T11701] FAT-fs (loop5): Directory bread(block 72) failed [ 623.540189][T11701] FAT-fs (loop5): Directory bread(block 73) failed [ 623.930519][T11711] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.2135' sets config #0 [ 624.136978][T11717] loop5: detected capacity change from 0 to 164 [ 625.084449][T11738] 9p: Bad value for 'wfdno' [ 625.723615][T11753] loop4: detected capacity change from 0 to 164 [ 627.979091][T11787] loop4: detected capacity change from 0 to 164 [ 628.496648][T11797] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2170'. [ 628.508757][T11797] 0ªX¹¦À: renamed from caif0 [ 628.555076][T11797] 0ªX¹¦À: entered allmulticast mode [ 628.560806][T11797] net_ratelimit: 31 callbacks suppressed [ 628.560880][T11797] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 629.182504][T11811] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 629.373499][T11811] loop6: detected capacity change from 0 to 2048 [ 629.398546][T11816] 9p: Bad value for 'rfdno' [ 629.448139][T11811] loop6: p2 < > p4 [ 629.466463][T11811] loop6: p4 size 262144 extends beyond EOD, truncated [ 629.826738][T11821] loop7: detected capacity change from 0 to 164 [ 630.298206][T11825] loop7: detected capacity change from 0 to 128 [ 630.415228][T11825] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 630.507095][T11827] @0Ù: renamed from bond_slave_1 (while UP) [ 630.820790][ T4576] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 631.631681][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 631.631757][ T30] audit: type=1326 audit(1765817012.584:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 631.690985][ T30] audit: type=1326 audit(1765817012.634:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 631.762570][ T30] audit: type=1326 audit(1765817012.674:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 631.790661][ T30] audit: type=1326 audit(1765817012.674:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 631.913060][T11841] loop6: detected capacity change from 0 to 512 [ 631.946835][T11843] 9p: Bad value for 'wfdno' [ 631.961947][T11841] EXT4-fs: Ignoring removed i_version option [ 631.968451][T11841] EXT4-fs: Ignoring removed bh option [ 632.067214][T11841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.161784][T11841] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.505242][T11854] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 632.577653][ T9990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.725240][T11854] loop7: detected capacity change from 0 to 2048 [ 632.834494][T11854] loop7: p2 < > p4 [ 632.861630][T11854] loop7: p4 size 262144 extends beyond EOD, truncated [ 632.948090][ T30] audit: type=1326 audit(1765817013.894:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 632.971459][ T30] audit: type=1326 audit(1765817013.894:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 633.115712][ T30] audit: type=1326 audit(1765817013.974:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 633.139343][ T30] audit: type=1326 audit(1765817013.984:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 633.163115][ T30] audit: type=1326 audit(1765817013.994:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 633.187308][ T30] audit: type=1326 audit(1765817013.994:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2748f8f749 code=0x7ffc0000 [ 633.888287][T11873] 9p: Bad value for 'rfdno' [ 634.898254][T11895] loop6: detected capacity change from 0 to 1024 [ 634.917440][T11897] loop4: detected capacity change from 0 to 1024 [ 634.937990][T11895] EXT4-fs: Ignoring removed orlov option [ 635.004194][T11897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.032225][T11895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.228871][T11905] loop7: detected capacity change from 0 to 512 [ 635.285256][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.340846][T11905] EXT4-fs (loop7): too many log groups per flexible block group [ 635.350155][T11905] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 635.390993][T11905] EXT4-fs (loop7): mount failed [ 635.618396][T11915] 9p: Bad value for 'rfdno' [ 635.943178][ T9990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.380581][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 636.550726][T11933] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2228'. [ 636.995803][T11943] 9p: Bad value for 'rfdno' [ 638.724850][T11988] loop5: detected capacity change from 0 to 256 [ 639.120837][T11988] FAT-fs (loop5): Directory bread(block 64) failed [ 639.128064][T11988] FAT-fs (loop5): Directory bread(block 65) failed [ 639.135300][T11988] FAT-fs (loop5): Directory bread(block 66) failed [ 639.142425][T11988] FAT-fs (loop5): Directory bread(block 67) failed [ 639.151387][T11988] FAT-fs (loop5): Directory bread(block 68) failed [ 639.158302][T11988] FAT-fs (loop5): Directory bread(block 69) failed [ 639.172686][T11988] FAT-fs (loop5): Directory bread(block 70) failed [ 639.182155][T11988] FAT-fs (loop5): Directory bread(block 71) failed [ 639.189187][T11988] FAT-fs (loop5): Directory bread(block 72) failed [ 639.199362][T11988] FAT-fs (loop5): Directory bread(block 73) failed [ 639.668063][T12004] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2253'. [ 639.719358][T12004] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2253'. [ 639.972163][T12007] ===================================================== [ 639.979832][T12007] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a2d/0x1fc0 [ 639.988463][T12007] bpf_prog_run_generic_xdp+0x1a2d/0x1fc0 [ 639.994622][T12007] do_xdp_generic+0xd52/0x1690 [ 639.999831][T12007] tun_get_user+0x506b/0x6c60 [ 640.005064][T12007] tun_chr_write_iter+0x3e9/0x5c0 [ 640.010516][T12007] vfs_write+0xbe2/0x15d0 [ 640.015235][T12007] __x64_sys_write+0x1fb/0x4d0 [ 640.020414][T12007] x64_sys_call+0x30ab/0x3e70 [ 640.025579][T12007] do_syscall_64+0xd9/0xf80 [ 640.030407][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.036544][T12007] [ 640.038967][T12007] Uninit was stored to memory at: [ 640.044445][T12007] pskb_expand_head+0x310/0x15d0 [ 640.049708][T12007] do_xdp_generic+0xa79/0x1690 [ 640.054681][T12007] tun_get_user+0x506b/0x6c60 [ 640.059791][T12007] tun_chr_write_iter+0x3e9/0x5c0 [ 640.065033][T12007] vfs_write+0xbe2/0x15d0 [ 640.069759][T12007] __x64_sys_write+0x1fb/0x4d0 [ 640.074880][T12007] x64_sys_call+0x30ab/0x3e70 [ 640.079964][T12007] do_syscall_64+0xd9/0xf80 [ 640.084682][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.090980][T12007] [ 640.093383][T12007] Uninit was created at: [ 640.097858][T12007] __kmalloc_node_track_caller_noprof+0xb77/0x1c90 [ 640.104742][T12007] kmalloc_reserve+0x22f/0x4b0 [ 640.109992][T12007] __alloc_skb+0x866/0x10a0 [ 640.114702][T12007] alloc_skb_with_frags+0xc5/0xa60 [ 640.120106][T12007] sock_alloc_send_pskb+0xacc/0xc60 [ 640.125514][T12007] tun_get_user+0x1142/0x6c60 [ 640.130780][T12007] tun_chr_write_iter+0x3e9/0x5c0 [ 640.136061][T12007] vfs_write+0xbe2/0x15d0 [ 640.141253][T12007] __x64_sys_write+0x1fb/0x4d0 [ 640.146411][T12007] x64_sys_call+0x30ab/0x3e70 [ 640.151620][T12007] do_syscall_64+0xd9/0xf80 [ 640.156416][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.162789][T12007] [ 640.165233][T12007] CPU: 1 UID: 0 PID: 12007 Comm: syz.1.2254 Not tainted syzkaller #0 PREEMPT(none) [ 640.175076][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.185495][T12007] ===================================================== [ 640.192653][T12007] Disabling lock debugging due to kernel taint [ 640.199573][T12007] Kernel panic - not syncing: kmsan.panic set ... [ 640.206308][T12007] CPU: 1 UID: 0 PID: 12007 Comm: syz.1.2254 Tainted: G B syzkaller #0 PREEMPT(none) [ 640.217465][T12007] Tainted: [B]=BAD_PAGE [ 640.221740][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.232278][T12007] Call Trace: [ 640.235658][T12007] [ 640.238688][T12007] __dump_stack+0x26/0x30 [ 640.243201][T12007] dump_stack_lvl+0x53/0x270 [ 640.248000][T12007] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 640.254306][T12007] dump_stack+0x1e/0x25 [ 640.258851][T12007] vpanic+0x435/0xd30 [ 640.263056][T12007] panic+0x15d/0x160 [ 640.267182][T12007] kmsan_report+0x31c/0x320 [ 640.271878][T12007] ? __msan_warning+0x1b/0x30 [ 640.276906][T12007] ? bpf_prog_run_generic_xdp+0x1a2d/0x1fc0 [ 640.283008][T12007] ? do_xdp_generic+0xd52/0x1690 [ 640.288131][T12007] ? tun_get_user+0x506b/0x6c60 [ 640.293245][T12007] ? tun_chr_write_iter+0x3e9/0x5c0 [ 640.298877][T12007] ? vfs_write+0xbe2/0x15d0 [ 640.303540][T12007] ? __x64_sys_write+0x1fb/0x4d0 [ 640.308646][T12007] ? x64_sys_call+0x30ab/0x3e70 [ 640.313768][T12007] ? do_syscall_64+0xd9/0xf80 [ 640.318626][T12007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.325113][T12007] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 640.331137][T12007] ? ___bpf_prog_run+0xea65/0xeba0 [ 640.336428][T12007] ? __bpf_prog_run32+0xc2/0xf0 [ 640.341456][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 640.346784][T12007] __msan_warning+0x1b/0x30 [ 640.351469][T12007] bpf_prog_run_generic_xdp+0x1a2d/0x1fc0 [ 640.357388][T12007] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 640.363538][T12007] do_xdp_generic+0xd52/0x1690 [ 640.368485][T12007] ? tun_get_user+0x4bf1/0x6c60 [ 640.373520][T12007] ? filter_irq_stacks+0x49/0x190 [ 640.378836][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 640.384177][T12007] ? tun_get_user+0x4fea/0x6c60 [ 640.389217][T12007] tun_get_user+0x506b/0x6c60 [ 640.394166][T12007] ? stack_depot_save_flags+0x35/0x790 [ 640.399800][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 640.405105][T12007] ? kmsan_get_metadata+0xfb/0x160 [ 640.410636][T12007] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 640.417508][T12007] tun_chr_write_iter+0x3e9/0x5c0 [ 640.423005][T12007] vfs_write+0xbe2/0x15d0 [ 640.427789][T12007] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 640.433890][T12007] __x64_sys_write+0x1fb/0x4d0 [ 640.439068][T12007] x64_sys_call+0x30ab/0x3e70 [ 640.443963][T12007] do_syscall_64+0xd9/0xf80 [ 640.448685][T12007] ? clear_bhb_loop+0x40/0x90 [ 640.453544][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.459704][T12007] RIP: 0033:0x7f2748f8e1ff [ 640.464225][T12007] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 640.483984][T12007] RSP: 002b:00007f2749e7d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 640.492583][T12007] RAX: ffffffffffffffda RBX: 00007f27491e5fa0 RCX: 00007f2748f8e1ff [ 640.500863][T12007] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 640.509129][T12007] RBP: 00007f2749013f91 R08: 0000000000000000 R09: 0000000000000000 [ 640.517315][T12007] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 640.525414][T12007] R13: 00007f27491e6038 R14: 00007f27491e5fa0 R15: 00007ffd1d48dcc8 [ 640.533550][T12007] [ 640.536833][T12007] Kernel Offset: disabled [ 640.541213][T12007] Rebooting in 86400 seconds..