last executing test programs: 1m23.070533696s ago: executing program 0 (id=140): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407fc, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e410", 0x1e}, {&(0x7f00000008c0)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d650241163d5fc6b6e90b1d440a017dc84cfec4161d7c33c21eae64d70", 0x6f}, {&(0x7f0000001a40)="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", 0x70c}], 0x3}}], 0x1, 0x4000040) 1m22.731643098s ago: executing program 0 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r4, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 1m21.8389117s ago: executing program 0 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000780)={[{@sysvgroups}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@init_itable}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'P0]\'\xfa7\x87\xc3W\xe7\xf6\xcc0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x93a, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbfs(0x0, 0x5, 0x40a880) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_getnexthop={0x20, 0x6a, 0x337, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a0000000000000300"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1m20.964336617s ago: executing program 0 (id=157): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000005b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x5529, &(0x7f0000000600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1m20.273201934s ago: executing program 0 (id=163): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x0, 0x24, 0x5, {0x5, 0x5, "513196"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, 0x0, 0x0) 1m19.046894095s ago: executing program 0 (id=173): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 1m18.961375671s ago: executing program 32 (id=173): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 50.734660952s ago: executing program 3 (id=500): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 50.716728861s ago: executing program 3 (id=504): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xfffffffffffffd57, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x10000, 0x0) 49.738730375s ago: executing program 3 (id=520): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) 48.49834583s ago: executing program 3 (id=528): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000005b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x5529, &(0x7f0000000600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 47.231134315s ago: executing program 3 (id=542): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, &(0x7f0000004940), 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r3, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x9dd69000) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000010000014000000000000ff0700"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 45.796330882s ago: executing program 3 (id=561): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\t', 0x1, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) keyctl$link(0x8, r0, r3) 45.683055823s ago: executing program 33 (id=561): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\t', 0x1, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) keyctl$link(0x8, r0, r3) 2.33425771s ago: executing program 5 (id=1424): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2.278528477s ago: executing program 5 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.260287293s ago: executing program 5 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2.192054769s ago: executing program 5 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050890) 2.191161529s ago: executing program 2 (id=1435): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000480)={[{@errors_remount}, {@noload}, {@nogrpid}, {@usrquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}, {@sysvgroups}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@acl}, {@usrjquota}], [{@obj_type={'obj_type', 0x3d, '/'}}], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HDvd7KZNChygEqXQouwK1k4a2kY9lCIhOFUCyn0JiRNFceIodtpNVEFWHDgiIQRInMqFCxInTkioEheOCKkSnEGAQAi2cEACdirb4+xuMk6yG8fOJt8nTea955n3v+doxn7jp5kALqxnIuLViLiTpum1iJjIygvZErudpbXde7ffWmgtSaTp6/9IIsnKunWlbY/FlWy3SxHxlS9GfD05GLexvbM6X6tVN7N8pbm2UWls71xfWZtfri5X12dnZ16ce2nuhbnpvvRzPCJe+fxfvv+dn3zhlV9++s0/3vjb1W8kWXns68cDKh72YqfrpfZ7ce8Omw8Z7CwqtnuYGcvbYuRAya1TbhMAAL19ICI+ERHXYiJGDv86CwAAADyC0s+Ox/+S7m93B4z2KAcAAAAeIYX2HNikUM7m+45HoVAuR3sO74ficqFWbzQ/tVTfWl/szJWdjFJhaaVWnc7mCk9GKWnlZ9rpu/nn9+VnI+LJiPjexFg7X16o1xaHffEDAAAALogr+8b//57ojP8BAACAc2Zy2A0AAAAATp3xPwAAAJx/xv8AAABwrn3ptddaS9p9/vXiG9tbq/U3ri9WG6vlta2F8kJ9c6O8XK8vt+/Zt3ZUfbV6feMzsb51s9KsNpqVxvbOjbX61nrzxsp9j8AGAAAABujJj73z+yQidl8eay8to8fb9ZibAWdVcS+VZOucw/oPT3TWfx5Qo4CBGBl2A4ChKQ67AcDQlIbdAGDokiNe7zl55zfZ+uP9bQ8AANB/Ux/J//3/6OuCu4UBNA84RQ5iALh42t/zjzuT15cFOFdKZgDChXfi3/+PlKYP1CAAAKDvxttLUihnl/fGo1AolyMebz8WoJQsrdSq0xHxRET8bqL0WCs/094zOXLMAAAAAAAAAAAAAAAAAAAAAAAAAAB0pGkSKQAAAHCuRRT+mvyqcy//qYnnxvdfHxhN/jMR2SNC3/zR6z+4Od9sbs60yv+5V978YVb+/DCuYAAAAMCFUHyQjbvj9O44HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66b3bby10l0HG/fvnImIyL34xLrXXl6IUEZf/lUTxnv2SiBjpQ/yx1p8P58VPWs3aC5kXf+ztk8ffvXVo/JjM3oW8+FdOHh4utHda559X846/QjzTXucff8WI+/IPq/f5L/bOfyM9jv/HjxnjqXd/VukZ/1bEU8X88083ftIj/rN5Ff782weKvvbVnZ1e8dO3I6ZyP3+S+2JVmmsblcb2zvWVtfnl6nJ1fXZ25sW5l+ZemJuuLK3Uqtnf3Bjf/egv7hzW/8s94k8e0f/ncuobzSn7/7s3b3+wkyzlxb/6bE78X/842+Jg/EL22ffJLN16faqb3u2k7/X0T3/79GH9X+zR/6P+/1d7VbrPtS9/60/H3BQAGIDG9s7qfK1W3TwbiZej7zW3RvhD79ejl/hveiaacbqJb/a1wjRN09YxdYJ6khjcm5Ac3tRhn5kAAIB+u/ulf9gtAQAAAAAAAAAAAAAAAAAAgItrEHca2x9zdy+V9OMW2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAffF+AAAA///0iOAC") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054001) unshare(0x60000480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 2.186928219s ago: executing program 5 (id=1436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 2.058615447s ago: executing program 6 (id=1439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r1, 0x0, 0x2) 2.058512292s ago: executing program 6 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000000806010100000000000000000a000006050001000700000005"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) 2.058309539s ago: executing program 6 (id=1441): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getpid() setrlimit(0xd, &(0x7f0000000980)={0x0, 0xb}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) getdents64(r3, 0x0, 0x0) 1.298256968s ago: executing program 5 (id=1445): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000001380)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.171748471s ago: executing program 2 (id=1448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 1.086484943s ago: executing program 2 (id=1450): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 1.073594348s ago: executing program 2 (id=1454): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) 1.014050746s ago: executing program 1 (id=1457): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="0000000001000000"], 0x48}}, 0x0) 1.012308764s ago: executing program 2 (id=1459): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.010308066s ago: executing program 1 (id=1460): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xff0a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r1, &(0x7f00000000c0)=""/44, 0x2c) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 926.624977ms ago: executing program 1 (id=1462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, &(0x7f0000000100)=""/113, 0x71) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) 926.410402ms ago: executing program 2 (id=1463): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) 901.950529ms ago: executing program 6 (id=1465): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x8, 0x7fff, 0x0, 0x7, 0x10001, 0x6, 0x4, 0x9, r2}, &(0x7f0000000380)=0x20) 824.28485ms ago: executing program 4 (id=1467): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000003c0)={0x401, {{0xa, 0x4e22, 0x1, @mcast2}}, {{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x6}}}, 0x108) 809.368102ms ago: executing program 4 (id=1468): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181601, 0x0) flock(r0, 0x2) 750.480918ms ago: executing program 4 (id=1469): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 750.296728ms ago: executing program 1 (id=1470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) timerfd_create(0x7, 0x0) 750.192094ms ago: executing program 1 (id=1471): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0xc, 0xff6, &(0x7f0000001e00)=""/4086, 0x41100, 0x6}, 0x94) 729.871844ms ago: executing program 4 (id=1472): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) 716.347871ms ago: executing program 1 (id=1473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf775728", 0x7}], 0x2) 657.319624ms ago: executing program 4 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 602.346889ms ago: executing program 4 (id=1475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 25.902807ms ago: executing program 6 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) close(r2) 0s ago: executing program 6 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): emoved bh option [ 55.125404][ T7101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.160290][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.062526][ T7119] loop2: detected capacity change from 0 to 512 [ 56.063028][ T7119] ext4: Unknown parameter 'nouser_xattr' [ 56.134926][ T7119] loop2: detected capacity change from 0 to 512 [ 56.148996][ T7119] EXT4-fs (loop2): #blocks per group too big: 466944 [ 56.250054][ T7124] loop3: detected capacity change from 0 to 4096 [ 56.260071][ T7124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.568085][ T31] audit: type=1326 audit(56.540:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.568141][ T31] audit: type=1326 audit(56.540:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.698587][ T31] audit: type=1326 audit(56.670:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.698991][ T31] audit: type=1326 audit(56.670:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.699038][ T31] audit: type=1326 audit(56.670:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.699312][ T31] audit: type=1326 audit(56.670:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.699394][ T31] audit: type=1326 audit(56.670:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.699460][ T31] audit: type=1326 audit(56.670:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.699792][ T31] audit: type=1326 audit(56.670:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.699813][ T31] audit: type=1326 audit(56.670:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7133 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 56.969080][ T7140] loop0: detected capacity change from 0 to 1024 [ 57.167771][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 57.370961][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.437806][ T7155] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 57.540056][ T7153] loop1: detected capacity change from 0 to 40427 [ 57.543313][ T7153] F2FS-fs (loop1): build fault injection rate: 690 [ 57.548981][ T7153] F2FS-fs (loop1): invalid crc value [ 57.808835][ T7153] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 57.816241][ T7153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 57.837158][ T6550] syz-executor: attempt to access beyond end of device [ 57.837158][ T6550] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 57.839205][ T6550] CPU: 0 UID: 0 PID: 6550 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 57.839232][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 57.839237][ T6550] Call trace: [ 57.839240][ T6550] show_stack+0x2c/0x3c (C) [ 57.839254][ T6550] __dump_stack+0x30/0x40 [ 57.839260][ T6550] dump_stack_lvl+0xd8/0x12c [ 57.839266][ T6550] dump_stack+0x1c/0x28 [ 57.839270][ T6550] f2fs_handle_critical_error+0x34c/0x4b8 [ 57.839279][ T6550] f2fs_stop_checkpoint+0x5c/0x70 [ 57.839286][ T6550] f2fs_write_end_io+0x768/0xa70 [ 57.839292][ T6550] bio_endio+0x804/0x840 [ 57.839299][ T6550] submit_bio_noacct+0x158/0x176c [ 57.839304][ T6550] submit_bio+0x3b4/0x550 [ 57.839309][ T6550] f2fs_submit_write_bio+0x13c/0x324 [ 57.839315][ T6550] __submit_merged_bio+0x254/0x704 [ 57.839320][ T6550] __submit_merged_write_cond+0x23c/0x4ac [ 57.839326][ T6550] f2fs_write_data_pages+0x1d28/0x2634 [ 57.839332][ T6550] do_writepages+0x270/0x468 [ 57.839339][ T6550] filemap_fdatawrite+0x14c/0x1f4 [ 57.839346][ T6550] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 57.839351][ T6550] f2fs_write_checkpoint+0x690/0x16a0 [ 57.839356][ T6550] kill_f2fs_super+0x21c/0x584 [ 57.839362][ T6550] deactivate_locked_super+0xc4/0x12c [ 57.839369][ T6550] deactivate_super+0xe0/0x100 [ 57.839376][ T6550] cleanup_mnt+0x31c/0x3ac [ 57.839381][ T6550] __cleanup_mnt+0x20/0x30 [ 57.839386][ T6550] task_work_run+0x1dc/0x260 [ 57.839392][ T6550] do_notify_resume+0x174/0x1f4 [ 57.839398][ T6550] el0_svc+0xb8/0x180 [ 57.839405][ T6550] el0t_64_sync_handler+0x84/0x12c [ 57.839411][ T6550] el0t_64_sync+0x198/0x19c [ 57.839419][ T6550] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 58.082864][ T7167] loop0: detected capacity change from 0 to 40427 [ 58.106999][ T7167] F2FS-fs (loop0): invalid crc value [ 58.263005][ T7167] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 58.267196][ T7167] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.334199][ T354] kworker/u8:4: attempt to access beyond end of device [ 58.334199][ T354] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 58.337055][ T354] CPU: 0 UID: 0 PID: 354 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 58.337070][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 58.337076][ T354] Workqueue: writeback wb_workfn (flush-7:0) [ 58.337098][ T354] Call trace: [ 58.337102][ T354] show_stack+0x2c/0x3c (C) [ 58.337114][ T354] __dump_stack+0x30/0x40 [ 58.337121][ T354] dump_stack_lvl+0xd8/0x12c [ 58.337127][ T354] dump_stack+0x1c/0x28 [ 58.337132][ T354] f2fs_handle_critical_error+0x34c/0x4b8 [ 58.337139][ T354] f2fs_stop_checkpoint+0x5c/0x70 [ 58.337146][ T354] f2fs_write_end_io+0x768/0xa70 [ 58.337152][ T354] bio_endio+0x804/0x840 [ 58.337159][ T354] submit_bio_noacct+0x158/0x176c [ 58.337164][ T354] submit_bio+0x3b4/0x550 [ 58.337168][ T354] f2fs_submit_write_bio+0x13c/0x324 [ 58.337174][ T354] __submit_merged_bio+0x254/0x704 [ 58.337179][ T354] __submit_merged_write_cond+0x23c/0x4ac [ 58.337185][ T354] f2fs_write_data_pages+0x1d28/0x2634 [ 58.337191][ T354] do_writepages+0x270/0x468 [ 58.337198][ T354] __writeback_single_inode+0x15c/0x13e8 [ 58.337204][ T354] writeback_sb_inodes+0x55c/0xe40 [ 58.337210][ T354] wb_writeback+0x3cc/0xd70 [ 58.337216][ T354] wb_workfn+0x338/0xdc0 [ 58.337222][ T354] process_one_work+0x7e8/0x155c [ 58.337227][ T354] worker_thread+0x958/0xed8 [ 58.337232][ T354] kthread+0x5fc/0x75c [ 58.337238][ T354] ret_from_fork+0x10/0x20 [ 58.364239][ T354] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 58.365494][ T354] CPU: 0 UID: 0 PID: 354 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 58.365507][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 58.365513][ T354] Workqueue: writeback wb_workfn (flush-7:0) [ 58.365536][ T354] Call trace: [ 58.365539][ T354] show_stack+0x2c/0x3c (C) [ 58.365553][ T354] __dump_stack+0x30/0x40 [ 58.365560][ T354] dump_stack_lvl+0xd8/0x12c [ 58.365565][ T354] dump_stack+0x1c/0x28 [ 58.365570][ T354] f2fs_handle_critical_error+0x34c/0x4b8 [ 58.365578][ T354] f2fs_stop_checkpoint+0x5c/0x70 [ 58.365585][ T354] f2fs_write_end_io+0x768/0xa70 [ 58.365591][ T354] bio_endio+0x804/0x840 [ 58.365598][ T354] submit_bio_noacct+0x158/0x176c [ 58.365603][ T354] submit_bio+0x3b4/0x550 [ 58.365608][ T354] f2fs_submit_write_bio+0x13c/0x324 [ 58.365613][ T354] __submit_merged_bio+0x254/0x704 [ 58.365619][ T354] __submit_merged_write_cond+0x23c/0x4ac [ 58.365624][ T354] f2fs_write_data_pages+0x1d28/0x2634 [ 58.365631][ T354] do_writepages+0x270/0x468 [ 58.365638][ T354] __writeback_single_inode+0x15c/0x13e8 [ 58.365645][ T354] writeback_sb_inodes+0x55c/0xe40 [ 58.365651][ T354] wb_writeback+0x3cc/0xd70 [ 58.365657][ T354] wb_workfn+0x338/0xdc0 [ 58.365662][ T354] process_one_work+0x7e8/0x155c [ 58.365668][ T354] worker_thread+0x958/0xed8 [ 58.365673][ T354] kthread+0x5fc/0x75c [ 58.365679][ T354] ret_from_fork+0x10/0x20 [ 58.389434][ T354] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 58.467782][ T7180] overlayfs: cleanup of 'bus/work' failed (-5) [ 58.469127][ T7180] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 58.474090][ T7180] overlayfs: failed to get uuid (/file0, err=-2); falling back to uuid=null. [ 58.497124][ T6548] syz-executor: attempt to access beyond end of device [ 58.497124][ T6548] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 58.497315][ T6548] syz-executor: attempt to access beyond end of device [ 58.497315][ T6548] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 59.228657][ T7193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.233904][ T7193] kernel profiling enabled (shift: 17) [ 59.357940][ T7203] loop1: detected capacity change from 0 to 1024 [ 59.372042][ T7203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.688456][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.764245][ T742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.768755][ T7195] tipc: Started in network mode [ 59.768810][ T7195] tipc: Node identity c220b4fd78fe, cluster identity 4711 [ 59.768894][ T7195] tipc: Enabled bearer , priority 0 [ 59.805136][ T12] tipc: Resetting bearer [ 59.807862][ T7194] tipc: Resetting bearer [ 59.870526][ T6117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.872254][ T6117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.872708][ T6117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.874058][ T6117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.874388][ T6117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.183474][ T7194] tipc: Disabling bearer [ 60.195296][ T742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.198968][ T7216] netlink: 'syz.2.171': attribute type 11 has an invalid length. [ 60.390135][ T7234] loop3: detected capacity change from 0 to 40427 [ 60.392452][ T7234] f2fs: Unknown parameter 'whint_mode' [ 60.414870][ T742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.423344][ T7221] chnl_net:caif_netlink_parms(): no params data found [ 61.203130][ T742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.207143][ T7246] loop3: detected capacity change from 0 to 512 [ 61.539415][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.586179][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.588182][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.589997][ T7221] bridge_slave_0: entered allmulticast mode [ 61.597138][ T7221] bridge_slave_0: entered promiscuous mode [ 61.601232][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.602401][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.605783][ T7221] bridge_slave_1: entered allmulticast mode [ 61.612692][ T7221] bridge_slave_1: entered promiscuous mode [ 61.625914][ T7221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.628744][ T7221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.643722][ T7221] team0: Port device team_slave_0 added [ 61.645533][ T7221] team0: Port device team_slave_1 added [ 61.656731][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.656755][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.967928][ T7221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.968205][ T7259] bridge: RTM_NEWNEIGH with invalid ether address [ 61.973875][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.976177][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.976206][ T7221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.987908][ T52] Bluetooth: hci1: command tx timeout [ 62.009256][ T7221] hsr_slave_0: entered promiscuous mode [ 62.009895][ T7221] hsr_slave_1: entered promiscuous mode [ 62.010068][ T7221] debugfs: 'hsr0' already exists in 'hsr' [ 62.010078][ T7221] Cannot create hsr debugfs directory [ 62.360501][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.406322][ T742] bridge_slave_1: left allmulticast mode [ 62.406372][ T742] bridge_slave_1: left promiscuous mode [ 62.406891][ T742] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.414968][ T742] bridge_slave_0: left allmulticast mode [ 62.414990][ T742] bridge_slave_0: left promiscuous mode [ 62.415050][ T742] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.617777][ T742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.488040][ T7282] loop2: detected capacity change from 0 to 40427 [ 63.523274][ T742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.531809][ T7282] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 63.531841][ T7282] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 63.559323][ T742] bond0 (unregistering): Released all slaves [ 63.582823][ T7282] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 63.585659][ T7282] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 63.585977][ T7282] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.686087][ T7221] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.690412][ T7221] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.697711][ T7221] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.042491][ T52] Bluetooth: hci1: command tx timeout [ 64.064251][ T7312] evm: overlay not supported [ 64.065733][ T7221] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.341807][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 64.341849][ T31] audit: type=1326 audit(64.320:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7307 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55c0a8 code=0x7ffc0000 [ 64.343807][ T31] audit: type=1326 audit(64.320:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7307 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55c0a8 code=0x7ffc0000 [ 64.343898][ T31] audit: type=1326 audit(64.320:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7307 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=136 compat=0 ip=0xffff9a55c0a8 code=0x7ffc0000 [ 64.344267][ T31] audit: type=1326 audit(64.320:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7307 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55c0a8 code=0x7ffc0000 [ 64.344381][ T31] audit: type=1326 audit(64.320:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7307 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55c0a8 code=0x7ffc0000 [ 64.374088][ T6556] syz-executor: attempt to access beyond end of device [ 64.374088][ T6556] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.374137][ T6556] CPU: 0 UID: 0 PID: 6556 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 64.374148][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 64.374154][ T6556] Call trace: [ 64.374157][ T6556] show_stack+0x2c/0x3c (C) [ 64.374175][ T6556] __dump_stack+0x30/0x40 [ 64.374183][ T6556] dump_stack_lvl+0xd8/0x12c [ 64.374188][ T6556] dump_stack+0x1c/0x28 [ 64.374193][ T6556] f2fs_handle_critical_error+0x34c/0x4b8 [ 64.374202][ T6556] f2fs_stop_checkpoint+0x5c/0x70 [ 64.374209][ T6556] f2fs_write_end_io+0x768/0xa70 [ 64.374215][ T6556] bio_endio+0x804/0x840 [ 64.374222][ T6556] submit_bio_noacct+0x158/0x176c [ 64.374227][ T6556] submit_bio+0x3b4/0x550 [ 64.374232][ T6556] f2fs_submit_write_bio+0x13c/0x324 [ 64.374237][ T6556] __submit_merged_bio+0x254/0x704 [ 64.374243][ T6556] __submit_merged_write_cond+0x23c/0x4ac [ 64.374248][ T6556] f2fs_write_data_pages+0x1d28/0x2634 [ 64.374256][ T6556] do_writepages+0x270/0x468 [ 64.374263][ T6556] filemap_fdatawrite+0x14c/0x1f4 [ 64.374270][ T6556] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 64.374275][ T6556] f2fs_write_checkpoint+0x690/0x16a0 [ 64.374280][ T6556] kill_f2fs_super+0x21c/0x584 [ 64.374286][ T6556] deactivate_locked_super+0xc4/0x12c [ 64.374293][ T6556] deactivate_super+0xe0/0x100 [ 64.374299][ T6556] cleanup_mnt+0x31c/0x3ac [ 64.374305][ T6556] __cleanup_mnt+0x20/0x30 [ 64.374309][ T6556] task_work_run+0x1dc/0x260 [ 64.374315][ T6556] do_notify_resume+0x174/0x1f4 [ 64.374322][ T6556] el0_svc+0xb8/0x180 [ 64.374328][ T6556] el0t_64_sync_handler+0x84/0x12c [ 64.374334][ T6556] el0t_64_sync+0x198/0x19c [ 64.375982][ T6556] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 64.493034][ T2413] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493677][ T10] cfg80211: failed to load regulatory.db [ 64.495814][ T2413] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.817798][ T7221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.825039][ T7341] loop2: detected capacity change from 0 to 16 [ 64.832441][ T7341] erofs (device loop2): mounted with root inode @ nid 36. [ 64.837919][ T52] erofs (device loop2): failed to decompress -26 in[46, 0] out[9000] [ 64.842295][ T7341] erofs (device loop2): failed to decompress -26 in[46, 4050] out[8192] [ 64.843898][ T7341] erofs (device loop2): read error -117 @ 1 of nid 89 [ 64.855756][ T742] hsr_slave_0: left promiscuous mode [ 64.857999][ T742] hsr_slave_1: left promiscuous mode [ 64.858331][ T742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.858351][ T742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.864133][ T742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.864161][ T742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.877992][ T7343] loop1: detected capacity change from 0 to 4096 [ 64.883271][ T742] veth1_macvtap: left promiscuous mode [ 64.883347][ T742] veth0_macvtap: left promiscuous mode [ 64.883408][ T742] veth1_vlan: left promiscuous mode [ 64.883463][ T742] veth0_vlan: left promiscuous mode [ 64.892231][ T7343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.939460][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.072193][ T742] team0 (unregistering): Port device team_slave_1 removed [ 65.083591][ T742] team0 (unregistering): Port device team_slave_0 removed [ 65.309925][ T7221] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.320860][ T7345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.197'. [ 65.320995][ T7345] tipc: Enabling of bearer rejected, failed to enable media [ 65.347470][ T6746] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.347518][ T6746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.348066][ T6746] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.348355][ T6746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.393540][ T7221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.619570][ T7221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.154880][ T52] Bluetooth: hci1: command tx timeout [ 66.277276][ T7390] loop3: detected capacity change from 0 to 512 [ 66.319871][ T7390] loop3: detected capacity change from 0 to 512 [ 66.327321][ T7390] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 66.338025][ T7390] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.123021][ T7405] loop1: detected capacity change from 0 to 4096 [ 67.780318][ T7405] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.793923][ T7405] EXT4-fs (loop1): Test dummy encryption mode enabled [ 67.967536][ T7405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.080021][ T7221] veth0_vlan: entered promiscuous mode [ 68.111214][ T7221] veth1_vlan: entered promiscuous mode [ 68.117483][ T7221] veth0_macvtap: entered promiscuous mode [ 68.120465][ T7221] veth1_macvtap: entered promiscuous mode [ 68.132424][ T7221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.133382][ T7221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.135082][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.135205][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.135347][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.135409][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.145145][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.170837][ T52] Bluetooth: hci1: command tx timeout [ 68.172304][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.172469][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.334040][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.335585][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.675743][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.677309][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.765906][ T7441] loop5: detected capacity change from 0 to 4096 [ 68.778852][ T7441] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.786457][ T7441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.818426][ T7221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.106051][ T7465] loop2: detected capacity change from 0 to 512 [ 69.111198][ T7465] EXT4-fs: Ignoring removed oldalloc option [ 69.132791][ T7465] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.218: dx entry: limit 1024 != root limit 124 [ 69.132875][ T7465] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.218: Corrupt directory, running e2fsck is recommended [ 69.134025][ T7465] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 69.141074][ T7465] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.218: corrupted in-inode xattr: invalid ea_ino [ 69.143539][ T7465] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.218: couldn't read orphan inode 15 (err -117) [ 69.144623][ T7465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.154102][ T7465] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.218: dx entry: limit 1024 != root limit 124 [ 69.154144][ T7465] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.218: Corrupt directory, running e2fsck is recommended [ 69.317469][ T7472] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.218: dx entry: limit 1024 != root limit 124 [ 69.317657][ T7472] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.218: Corrupt directory, running e2fsck is recommended [ 69.647659][ T7485] loop1: detected capacity change from 0 to 256 [ 69.651133][ T7485] exfat: Deprecated parameter 'utf8' [ 69.652911][ T7485] exfat: Deprecated parameter 'namecase' [ 69.654283][ T7485] exfat: Deprecated parameter 'utf8' [ 69.713430][ T7485] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 70.088756][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 70.188132][ T7503] syz.1.225: attempt to access beyond end of device [ 70.188132][ T7503] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 70.188466][ T7503] FAT-fs (loop3): unable to read boot sector [ 70.364305][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.476670][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 70.599304][ T7512] loop3: detected capacity change from 0 to 1024 [ 70.603194][ T7512] EXT4-fs: Ignoring removed orlov option [ 70.716304][ T7512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.127431][ T31] audit: type=1326 audit(71.100:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7514 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 71.127508][ T31] audit: type=1326 audit(71.100:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7514 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 71.127548][ T31] audit: type=1326 audit(71.100:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7514 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 71.127574][ T31] audit: type=1326 audit(71.100:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7514 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 71.127596][ T31] audit: type=1326 audit(71.100:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7514 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 71.165502][ T7520] loop1: detected capacity change from 0 to 4096 [ 71.416257][ T7520] EXT4-fs (loop1): Test dummy encryption mode enabled [ 71.417670][ T7520] EXT4-fs (loop1): unsupported descriptor size 255 [ 71.447367][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.975913][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.976088][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.996791][ T7532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.935366][ T7627] netlink: 96 bytes leftover after parsing attributes in process `syz.1.254'. [ 74.715978][ T7655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.716808][ T7655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.581795][ T7667] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 75.581829][ T7667] netlink: 'syz.1.264': attribute type 2 has an invalid length. [ 75.581849][ T7667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 75.582399][ T7667] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 75.582412][ T7667] netlink: 'syz.1.264': attribute type 2 has an invalid length. [ 75.582423][ T7667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 75.693101][ T7677] binder: 7676:7677 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 75.708173][ T7674] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 76.272227][ T7699] loop2: detected capacity change from 0 to 512 [ 76.342933][ T7699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.474930][ T7699] EXT4-fs (loop2): 1 truncate cleaned up [ 76.477448][ T7699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.581909][ T7699] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.273: bg 0: block 256: padding at end of block bitmap is not set [ 76.591284][ T7699] EXT4-fs (loop2): Remounting filesystem read-only [ 76.591721][ T7699] overlayfs: failed to verify upper root origin [ 76.621698][ T7699] overlayfs: missing 'lowerdir' [ 77.467289][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.693820][ T7734] loop1: detected capacity change from 0 to 512 [ 79.131418][ T7734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.173942][ T7734] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.176925][ T7734] EXT4-fs (loop1): 1 truncate cleaned up [ 79.177367][ T7734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.320787][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.584176][ T7749] loop3: detected capacity change from 0 to 1024 [ 80.587514][ T7749] EXT4-fs: Ignoring removed orlov option [ 80.639590][ T7749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.867594][ T7759] process 'syz.2.288' launched '/dev/fd/3' with NULL argv: empty string added [ 80.875774][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.976278][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 80.978830][ T7766] rdma_op 00000000e91eca65 conn xmit_rdma 0000000000000000 [ 81.035829][ T7769] loop2: detected capacity change from 0 to 512 [ 81.085098][ T7769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.108468][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 81.849145][ T7787] netlink: 'syz.1.297': attribute type 13 has an invalid length. [ 81.849181][ T7787] netlink: 'syz.1.297': attribute type 17 has an invalid length. [ 81.901945][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.902117][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.908267][ T7787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.910297][ T31] audit: type=1326 audit(81.880:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.914956][ T31] audit: type=1326 audit(81.890:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.914987][ T31] audit: type=1326 audit(81.890:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.915015][ T31] audit: type=1326 audit(81.890:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.915033][ T31] audit: type=1326 audit(81.890:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.915050][ T31] audit: type=1326 audit(81.890:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.915066][ T31] audit: type=1326 audit(81.890:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.915081][ T31] audit: type=1326 audit(81.890:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.915096][ T31] audit: type=1326 audit(81.890:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.915111][ T31] audit: type=1326 audit(81.890:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 81.950909][ T7787] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.002302][ T7787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.059282][ T7807] netlink: 104 bytes leftover after parsing attributes in process `syz.3.302'. [ 82.064122][ T7807] netlink: 104 bytes leftover after parsing attributes in process `syz.3.302'. [ 82.116363][ T7812] netlink: 96 bytes leftover after parsing attributes in process `syz.3.304'. [ 82.359281][ T7826] loop2: detected capacity change from 0 to 1024 [ 82.370429][ T7826] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 82.370630][ T7826] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.376352][ T7826] EXT4-fs (loop2): invalid journal inode [ 82.427186][ T7837] netlink: 80 bytes leftover after parsing attributes in process `syz.3.311'. [ 82.505922][ T7850] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.542068][ T7852] loop2: detected capacity change from 0 to 512 [ 82.542493][ T7852] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.848737][ T7892] loop3: detected capacity change from 0 to 764 [ 83.120636][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.122651][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.284362][ T7928] netlink: 'syz.5.346': attribute type 1 has an invalid length. [ 83.327759][ T7928] ip6erspan0: entered promiscuous mode [ 83.476500][ T7947] pimreg: entered allmulticast mode [ 83.478161][ T7947] pimreg: left allmulticast mode [ 83.655746][ T7956] loop2: detected capacity change from 0 to 164 [ 83.684719][ T7958] loop3: detected capacity change from 0 to 1024 [ 83.687606][ T7958] EXT4-fs: Ignoring removed orlov option [ 83.695230][ T7958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.724744][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.964351][ T7976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.012843][ T7976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.052484][ T7976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.054615][ T7984] loop3: detected capacity change from 0 to 128 [ 84.056681][ T7984] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.060425][ T7984] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.112721][ T7976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.204649][ T42] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.210191][ T42] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.215015][ T42] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.222653][ T42] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.391739][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 84.643749][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 84.664345][ T8031] netlink: 156 bytes leftover after parsing attributes in process `syz.2.381'. [ 84.667372][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 84.817940][ T8055] loop2: detected capacity change from 0 to 512 [ 84.818312][ T8055] EXT4-fs: Ignoring removed i_version option [ 84.818320][ T8055] EXT4-fs: Ignoring removed nobh option [ 84.818578][ T8055] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.831723][ T8055] EXT4-fs (loop2): 1 truncate cleaned up [ 84.832170][ T8055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.849554][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.016999][ T8075] netlink: 224 bytes leftover after parsing attributes in process `syz.1.403'. [ 85.017036][ T8075] ksmbd: Unknown IPC event: 3, ignore. [ 85.153949][ T8099] can0: slcan on ttyS3. [ 85.212143][ T8098] can0 (unregistered): slcan off ttyS3. [ 85.719442][ T8161] netem: change failed [ 85.794605][ T8170] netlink: 'syz.3.433': attribute type 1 has an invalid length. [ 85.811870][ T8170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.819622][ T8170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.820289][ T8170] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 85.823501][ T8170] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 85.867072][ T8170] gretap1: entered promiscuous mode [ 85.868299][ T8170] bond1: (slave gretap1): making interface the new active one [ 85.868555][ T8170] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 85.873975][ T8170] macvlan0: entered promiscuous mode [ 85.873998][ T8170] macvlan0: entered allmulticast mode [ 85.874261][ T8170] bond1: entered promiscuous mode [ 85.874477][ T8170] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 85.901280][ T8170] bond1: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 85.931758][ T8170] bond1: left promiscuous mode [ 85.964399][ T8090] syz.2.411 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 85.967169][ T8090] CPU: 0 UID: 0 PID: 8090 Comm: syz.2.411 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 85.967190][ T8090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 85.967196][ T8090] Call trace: [ 85.967199][ T8090] show_stack+0x2c/0x3c (C) [ 85.967216][ T8090] __dump_stack+0x30/0x40 [ 85.967226][ T8090] dump_stack_lvl+0xd8/0x12c [ 85.967233][ T8090] dump_stack+0x1c/0x28 [ 85.967239][ T8090] dump_header+0xb8/0x3c8 [ 85.967246][ T8090] oom_kill_process+0x384/0xa00 [ 85.967253][ T8090] out_of_memory+0xd60/0x105c [ 85.967259][ T8090] mem_cgroup_out_of_memory+0x124/0x208 [ 85.967266][ T8090] try_charge_memcg+0xa2c/0xea0 [ 85.967271][ T8090] charge_memcg+0xa0/0x184 [ 85.967277][ T8090] mem_cgroup_swapin_charge_folio+0x290/0x3f0 [ 85.967283][ T8090] __read_swap_cache_async+0x24c/0x4e4 [ 85.967289][ T8090] swapin_readahead+0x6cc/0xb78 [ 85.967295][ T8090] do_swap_page+0x498/0x4794 [ 85.967302][ T8090] handle_mm_fault+0xd40/0x4d34 [ 85.967308][ T8090] do_page_fault+0x410/0x13cc [ 85.967315][ T8090] do_translation_fault+0xc4/0x114 [ 85.967322][ T8090] do_mem_abort+0x70/0x194 [ 85.967328][ T8090] el0_da+0x64/0x164 [ 85.967335][ T8090] el0t_64_sync_handler+0x90/0x12c [ 85.967340][ T8090] el0t_64_sync+0x198/0x19c [ 85.971015][ T8090] memory: usage 307200kB, limit 307200kB, failcnt 760 [ 85.971030][ T8090] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 85.971040][ T8090] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 85.971047][ T8090] Memory cgroup stats for /syz2: [ 85.971156][ T8090] cache 0 [ 85.971161][ T8090] rss 0 [ 85.971164][ T8090] rss_huge 0 [ 85.971167][ T8090] shmem 0 [ 85.971170][ T8090] mapped_file 0 [ 85.971173][ T8090] dirty 0 [ 85.971175][ T8090] writeback 0 [ 85.971178][ T8090] workingset_refault_anon 288 [ 85.971181][ T8090] workingset_refault_file 92 [ 85.971184][ T8090] swap 131072 [ 85.971186][ T8090] swapcached 69632 [ 85.971189][ T8090] pgpgin 118402 [ 85.971192][ T8090] pgpgout 118895 [ 85.971194][ T8090] pgfault 119790 [ 85.971197][ T8090] pgmajfault 277 [ 85.971199][ T8090] inactive_anon 69632 [ 85.971202][ T8090] active_anon 0 [ 85.971205][ T8090] inactive_file 4096 [ 85.971207][ T8090] active_file 0 [ 85.971210][ T8090] unevictable 0 [ 85.971213][ T8090] hierarchical_memory_limit 314572800 [ 85.971216][ T8090] hierarchical_memsw_limit 9223372036854771712 [ 85.971219][ T8090] total_cache 0 [ 85.977364][ T8090] total_rss 0 [ 85.977378][ T8090] total_rss_huge 0 [ 85.977389][ T8090] total_shmem 0 [ 85.977398][ T8090] total_mapped_file 0 [ 85.977403][ T8090] total_dirty 0 [ 85.977406][ T8090] total_writeback 0 [ 85.977409][ T8090] total_workingset_refault_anon 288 [ 85.977413][ T8090] total_workingset_refault_file 92 [ 85.977417][ T8090] total_swap 131072 [ 85.977420][ T8090] total_swapcached 69632 [ 85.977424][ T8090] total_pgpgin 118402 [ 85.977505][ T8090] total_pgpgout 118895 [ 85.977510][ T8090] total_pgfault 119790 [ 85.977516][ T8090] total_pgmajfault 277 [ 85.977521][ T8090] total_inactive_anon 69632 [ 85.977526][ T8090] total_active_anon 0 [ 85.977531][ T8090] total_inactive_file 4096 [ 85.977535][ T8090] total_active_file 0 [ 85.977538][ T8090] total_unevictable 0 [ 85.977541][ T8090] anon_cost 3 [ 85.977544][ T8090] file_cost 0 [ 85.977548][ T8090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.411,pid=8090,uid=0 [ 85.977679][ T8090] Memory cgroup out of memory: Killed process 8090 (syz.2.411) total-vm:101680kB, anon-rss:928kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 86.457667][ T8207] loop3: detected capacity change from 0 to 512 [ 86.474687][ T8207] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.482174][ T8207] EXT4-fs (loop3): mount failed [ 86.692696][ T8219] __nla_validate_parse: 3 callbacks suppressed [ 86.693826][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 86.695374][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 86.790585][ T8227] netlink: 7 bytes leftover after parsing attributes in process `syz.1.454'. [ 86.825844][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.456'. [ 87.032832][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.468'. [ 87.152591][ T8283] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 87.170462][ T8283] mmap: syz.3.475 (8283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.320199][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 87.376895][ T8305] loop7: detected capacity change from 0 to 7 [ 87.380545][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.380611][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.381909][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.381922][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.382068][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.382083][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.382230][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.382243][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.382311][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.382319][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.382377][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.382384][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.382433][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.382441][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.382461][ T8305] ldm_validate_partition_table(): Disk read failed. [ 87.382503][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.382510][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.382573][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.382580][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.382635][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.382642][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.382712][ T8305] Dev loop7: unable to read RDB block 0 [ 87.383026][ T8305] loop7: unable to read partition table [ 87.383087][ T8305] loop7: partition table beyond EOD, truncated [ 87.383101][ T8305] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 87.434223][ T8307] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 87.434253][ T8307] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.500167][ T8315] syz.1.484 uses obsolete (PF_INET,SOCK_PACKET) [ 87.647711][ T31] kauditd_printk_skb: 431 callbacks suppressed [ 87.647752][ T31] audit: type=1326 audit(87.620:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.654701][ T31] audit: type=1326 audit(87.630:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.660912][ T31] audit: type=1326 audit(87.630:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.665297][ T31] audit: type=1326 audit(87.640:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.665341][ T31] audit: type=1326 audit(87.640:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.673694][ T31] audit: type=1326 audit(87.650:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.678035][ T31] audit: type=1326 audit(87.650:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.678068][ T31] audit: type=1326 audit(87.650:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.685147][ T31] audit: type=1326 audit(87.650:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.685184][ T31] audit: type=1326 audit(87.650:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af5c0a8 code=0x7ffc0000 [ 87.809939][ T8336] loop3: detected capacity change from 0 to 2048 [ 87.862739][ T8336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.903904][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.985523][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 87.985561][ T8358] netlink: 348 bytes leftover after parsing attributes in process `syz.1.497'. [ 87.985573][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 87.985580][ T8358] netlink: 348 bytes leftover after parsing attributes in process `syz.1.497'. [ 87.989923][ T8349] 9pnet: Could not find request transport: E [ 90.227543][ T8457] loop2: detected capacity change from 0 to 256 [ 90.902360][ T8460] loop3: detected capacity change from 0 to 40427 [ 90.957218][ T8460] F2FS-fs (loop3): invalid crc value [ 90.995733][ T8460] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 91.005564][ T8460] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.426710][ T42] kworker/u8:3: attempt to access beyond end of device [ 91.426710][ T42] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 91.426763][ T42] CPU: 0 UID: 0 PID: 42 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 91.426772][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 91.426776][ T42] Workqueue: writeback wb_workfn (flush-7:3) [ 91.426798][ T42] Call trace: [ 91.426801][ T42] show_stack+0x2c/0x3c (C) [ 91.426812][ T42] __dump_stack+0x30/0x40 [ 91.426819][ T42] dump_stack_lvl+0xd8/0x12c [ 91.426826][ T42] dump_stack+0x1c/0x28 [ 91.426832][ T42] f2fs_handle_critical_error+0x34c/0x4b8 [ 91.426842][ T42] f2fs_stop_checkpoint+0x5c/0x70 [ 91.426851][ T42] f2fs_write_end_io+0x768/0xa70 [ 91.426858][ T42] bio_endio+0x804/0x840 [ 91.426865][ T42] submit_bio_noacct+0x158/0x176c [ 91.426870][ T42] submit_bio+0x3b4/0x550 [ 91.426874][ T42] f2fs_submit_write_bio+0x13c/0x324 [ 91.426880][ T42] __submit_merged_bio+0x254/0x704 [ 91.426886][ T42] __submit_merged_write_cond+0x23c/0x4ac [ 91.426891][ T42] f2fs_write_data_pages+0x1d28/0x2634 [ 91.426897][ T42] do_writepages+0x270/0x468 [ 91.426904][ T42] __writeback_single_inode+0x15c/0x13e8 [ 91.426911][ T42] writeback_sb_inodes+0x55c/0xe40 [ 91.426917][ T42] wb_writeback+0x3cc/0xd70 [ 91.426923][ T42] wb_workfn+0x338/0xdc0 [ 91.426929][ T42] process_one_work+0x7e8/0x155c [ 91.426934][ T42] worker_thread+0x958/0xed8 [ 91.426939][ T42] kthread+0x5fc/0x75c [ 91.426945][ T42] ret_from_fork+0x10/0x20 [ 91.426952][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 91.426967][ T42] CPU: 0 UID: 0 PID: 42 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 91.426972][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 91.426975][ T42] Workqueue: writeback wb_workfn (flush-7:3) [ 91.426983][ T42] Call trace: [ 91.426985][ T42] show_stack+0x2c/0x3c (C) [ 91.426990][ T42] __dump_stack+0x30/0x40 [ 91.426995][ T42] dump_stack_lvl+0xd8/0x12c [ 91.427000][ T42] dump_stack+0x1c/0x28 [ 91.427005][ T42] f2fs_handle_critical_error+0x34c/0x4b8 [ 91.427010][ T42] f2fs_stop_checkpoint+0x5c/0x70 [ 91.427017][ T42] f2fs_write_end_io+0x768/0xa70 [ 91.427023][ T42] bio_endio+0x804/0x840 [ 91.427029][ T42] submit_bio_noacct+0x158/0x176c [ 91.427033][ T42] submit_bio+0x3b4/0x550 [ 91.427038][ T42] f2fs_submit_write_bio+0x13c/0x324 [ 91.427044][ T42] __submit_merged_bio+0x254/0x704 [ 91.427049][ T42] __submit_merged_write_cond+0x23c/0x4ac [ 91.427055][ T42] f2fs_write_data_pages+0x1d28/0x2634 [ 91.427061][ T42] do_writepages+0x270/0x468 [ 91.427067][ T42] __writeback_single_inode+0x15c/0x13e8 [ 91.427073][ T42] writeback_sb_inodes+0x55c/0xe40 [ 91.427079][ T42] wb_writeback+0x3cc/0xd70 [ 91.427085][ T42] wb_workfn+0x338/0xdc0 [ 91.427091][ T42] process_one_work+0x7e8/0x155c [ 91.427096][ T42] worker_thread+0x958/0xed8 [ 91.427100][ T42] kthread+0x5fc/0x75c [ 91.427107][ T42] ret_from_fork+0x10/0x20 [ 91.427113][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 91.484248][ T8511] overlayfs: cleanup of 'bus/work' failed (-5) [ 91.484266][ T8511] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 91.484328][ T8511] overlayfs: failed to get uuid (/file0, err=-2); falling back to uuid=null. [ 92.062262][ T6549] syz-executor: attempt to access beyond end of device [ 92.062262][ T6549] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 92.062341][ T6549] syz-executor: attempt to access beyond end of device [ 92.062341][ T6549] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 92.748551][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 92.748610][ T31] audit: type=1326 audit(92.720:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 92.751029][ T31] audit: type=1326 audit(92.720:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 92.751613][ T31] audit: type=1326 audit(92.730:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 92.752145][ T31] audit: type=1326 audit(92.730:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 92.752956][ T31] audit: type=1326 audit(92.730:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 92.753182][ T31] audit: type=1326 audit(92.730:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 92.754177][ T31] audit: type=1326 audit(92.730:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 92.754241][ T31] audit: type=1326 audit(92.730:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 92.754385][ T31] audit: type=1326 audit(92.730:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 92.754455][ T31] audit: type=1326 audit(92.730:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8563 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 93.082934][ T354] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.189619][ T354] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.225713][ T6117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.230936][ T6117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.233329][ T6117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.235614][ T6117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.237660][ T6117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.256067][ T354] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.599499][ T354] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.713834][ T8587] chnl_net:caif_netlink_parms(): no params data found [ 93.780364][ T354] bridge_slave_1: left allmulticast mode [ 93.780401][ T354] bridge_slave_1: left promiscuous mode [ 93.780460][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.787569][ T354] bridge_slave_0: left allmulticast mode [ 93.787599][ T354] bridge_slave_0: left promiscuous mode [ 93.787662][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.850296][ T8617] loop2: detected capacity change from 0 to 512 [ 93.850646][ T8617] EXT4-fs: inline encryption not supported [ 93.854527][ T8617] EXT4-fs: Ignoring removed nobh option [ 93.863382][ T8617] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.863410][ T8617] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 93.863430][ T8617] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.573: Corrupt directory, running e2fsck is recommended [ 93.866330][ T8617] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 93.866378][ T8617] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.573: corrupted in-inode xattr: invalid ea_ino [ 93.868244][ T8617] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.573: couldn't read orphan inode 15 (err -117) [ 93.871148][ T8617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.901461][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.964044][ T354] bond1 (unregistering): (slave gretap1): Releasing active interface [ 94.467341][ T354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.492033][ T354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.511730][ T354] bond0 (unregistering): Released all slaves [ 94.566580][ T354] bond1 (unregistering): Released all slaves [ 94.625114][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.625578][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.625787][ T8587] bridge_slave_0: entered allmulticast mode [ 94.626249][ T8587] bridge_slave_0: entered promiscuous mode [ 94.627625][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.627759][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.627831][ T8587] bridge_slave_1: entered allmulticast mode [ 94.628316][ T8587] bridge_slave_1: entered promiscuous mode [ 94.648505][ T354] tipc: Left network mode [ 94.956227][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.961795][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.055719][ T8587] team0: Port device team_slave_0 added [ 95.057027][ T8587] team0: Port device team_slave_1 added [ 95.071826][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.071860][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.071875][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.072482][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.072488][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.072498][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.100115][ T8587] hsr_slave_0: entered promiscuous mode [ 95.100432][ T8587] hsr_slave_1: entered promiscuous mode [ 95.106702][ T8587] debugfs: 'hsr0' already exists in 'hsr' [ 95.106732][ T8587] Cannot create hsr debugfs directory [ 95.290916][ T52] Bluetooth: hci0: command tx timeout [ 95.305999][ T8694] __nla_validate_parse: 1 callbacks suppressed [ 95.306030][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.592'. [ 95.332490][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 95.334235][ T8702] atomic_op 000000001a8e761a conn xmit_atomic 0000000000000000 [ 95.397884][ T354] hsr_slave_0: left promiscuous mode [ 95.399388][ T354] hsr_slave_1: left promiscuous mode [ 95.400818][ T354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.402343][ T354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.403955][ T354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.405367][ T354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.414724][ T354] veth1_macvtap: left promiscuous mode [ 95.415989][ T354] veth0_macvtap: left promiscuous mode [ 95.769215][ T354] team0 (unregistering): Port device team_slave_1 removed [ 95.781002][ T354] team0 (unregistering): Port device team_slave_0 removed [ 96.015935][ T8587] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 96.025567][ T8587] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 96.050479][ T8587] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 96.067096][ T8587] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 96.096811][ T8732] atomic_op 00000000effa1f12 conn xmit_atomic 0000000000000000 [ 96.128735][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.133908][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.141601][ T6746] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.141643][ T6746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.149521][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.149559][ T696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.201766][ T8587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.215845][ T8747] loop2: detected capacity change from 0 to 512 [ 96.280036][ T8747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.302142][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.307760][ T8754] netlink: 'syz.5.610': attribute type 21 has an invalid length. [ 96.740520][ T8587] veth0_vlan: entered promiscuous mode [ 96.745536][ T8587] veth1_vlan: entered promiscuous mode [ 96.784479][ T8587] veth0_macvtap: entered promiscuous mode [ 96.794473][ T8587] veth1_macvtap: entered promiscuous mode [ 96.820248][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.829984][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.844302][ T742] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.844346][ T742] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.844380][ T742] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.844393][ T742] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.877197][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.618'. [ 96.910795][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.910829][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.004681][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.015266][ T8814] bridge_slave_0: left allmulticast mode [ 97.015301][ T8814] bridge_slave_0: left promiscuous mode [ 97.015787][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.253831][ T8814] bridge_slave_1: left allmulticast mode [ 97.255013][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.257459][ T8822] netlink: 'syz.1.620': attribute type 10 has an invalid length. [ 97.258786][ T8822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.620'. [ 97.273430][ T8814] bond0: (slave bond_slave_0): Releasing backup interface [ 97.278226][ T8824] loop2: detected capacity change from 0 to 512 [ 97.297403][ T8814] bond0: (slave bond_slave_1): Releasing backup interface [ 97.297887][ T8824] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.622: corrupted in-inode xattr: invalid ea_ino [ 97.298206][ T8824] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.622: couldn't read orphan inode 15 (err -117) [ 97.298752][ T8824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.333428][ T8814] team0: Port device team_slave_0 removed [ 97.335052][ T8814] team0: Port device team_slave_1 removed [ 97.335223][ T8814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.338094][ T8814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.355515][ T8822] batman_adv: batadv0: Adding interface: virt_wifi0 [ 97.357799][ T8822] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.363944][ T8822] batman_adv: batadv0: Interface activated: virt_wifi0 [ 97.370864][ T52] Bluetooth: hci0: command tx timeout [ 97.378330][ T354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.378362][ T354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.413472][ T8839] loop1: detected capacity change from 0 to 512 [ 97.415160][ T8839] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.417236][ T8839] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.431904][ T8839] EXT4-fs (loop1): 1 truncate cleaned up [ 97.432448][ T8839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.445342][ T8839] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm syz.1.625: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 97.456088][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.508584][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.573722][ T8857] loop1: detected capacity change from 0 to 1024 [ 97.574093][ T8857] EXT4-fs: Ignoring removed orlov option [ 97.597625][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.632'. [ 97.617603][ T8857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.640406][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.820323][ T8900] gtp0: entered promiscuous mode [ 97.940627][ T8921] loop2: detected capacity change from 0 to 1024 [ 97.943485][ T8921] EXT4-fs: Ignoring removed orlov option [ 97.960051][ T8921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.984742][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.436007][ T8957] geneve2: entered promiscuous mode [ 98.437143][ T8957] geneve2: entered allmulticast mode [ 98.440524][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.442992][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.444531][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.446381][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.461819][ T8957] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.463377][ T8957] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.555646][ T8976] loop1: detected capacity change from 0 to 512 [ 98.567982][ T8976] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.571081][ T8976] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.574626][ T8976] EXT4-fs (loop1): 1 truncate cleaned up [ 98.577036][ T8976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.603097][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.665289][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 98.698097][ T8989] loop6: detected capacity change from 0 to 1024 [ 98.699877][ T8989] EXT4-fs: Ignoring removed orlov option [ 98.730569][ T8989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.755854][ T8587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.356937][ T9040] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 99.356960][ T9040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.358723][ T9040] vhci_hcd vhci_hcd.0: Device attached [ 99.452248][ T52] Bluetooth: hci0: command tx timeout [ 99.710752][ T6557] vhci_hcd: vhci_device speed not set [ 100.005633][ T6557] usb 14-1: new full-speed USB device number 2 using vhci_hcd [ 100.104909][ T31] kauditd_printk_skb: 102 callbacks suppressed [ 100.104953][ T31] audit: type=1326 audit(100.080:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 100.109517][ T31] audit: type=1326 audit(100.080:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 100.109549][ T31] audit: type=1326 audit(100.080:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 100.109567][ T31] audit: type=1326 audit(100.080:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 100.109581][ T31] audit: type=1326 audit(100.080:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 100.428806][ T9041] vhci_hcd: connection reset by peer [ 100.440941][ T6743] vhci_hcd: stop threads [ 100.442236][ T6743] vhci_hcd: release socket [ 100.445503][ T6743] vhci_hcd: disconnect device [ 100.463246][ T31] audit: type=1326 audit(100.440:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9068 comm="syz.6.680" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 100.467186][ T31] audit: type=1326 audit(100.440:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9068 comm="syz.6.680" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 100.472180][ T31] audit: type=1326 audit(100.450:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9068 comm="syz.6.680" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 100.476527][ T31] audit: type=1326 audit(100.450:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9068 comm="syz.6.680" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 100.480150][ T31] audit: type=1326 audit(100.450:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9068 comm="syz.6.680" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 100.564597][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.682'. [ 100.584853][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 100.864586][ T9089] loop6: detected capacity change from 0 to 1024 [ 100.903366][ T9089] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.906514][ T9089] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 100.947210][ T9086] vlan2: entered promiscuous mode [ 100.947388][ T9086] gretap0: entered promiscuous mode [ 101.551000][ T52] Bluetooth: hci0: command tx timeout [ 101.719139][ T9129] netlink: 'syz.1.703': attribute type 10 has an invalid length. [ 101.723210][ T9129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.727848][ T9129] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 101.739560][ T9129] 9pnet_fd: Insufficient options for proto=fd [ 101.744506][ T9129] bond0: entered promiscuous mode [ 101.745530][ T9129] batadv0: entered promiscuous mode [ 101.826327][ T9147] loop6: detected capacity change from 0 to 512 [ 101.835861][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 101.880596][ T9152] loop1: detected capacity change from 0 to 512 [ 101.886070][ T9152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.969676][ T9152] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.975509][ T9152] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.707: bg 0: block 248: padding at end of block bitmap is not set [ 101.976234][ T9152] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.707: Failed to acquire dquot type 1 [ 101.978978][ T9152] EXT4-fs (loop1): 1 truncate cleaned up [ 101.987347][ T9157] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 102.031148][ T9147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.037446][ T9147] 8021q: VLANs not supported on ip6gre0 [ 102.275547][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 102.565265][ T8587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.567704][ T9152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.710965][ T9181] netlink: 48 bytes leftover after parsing attributes in process `syz.6.722'. [ 102.779829][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 102.819068][ T9191] syzkaller0: entered promiscuous mode [ 102.819106][ T9191] syzkaller0: entered allmulticast mode [ 103.802259][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'. [ 103.802718][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.430751][ T6557] vhci_hcd: vhci_device speed not set [ 105.610131][ T31] kauditd_printk_skb: 86 callbacks suppressed [ 105.610168][ T31] audit: type=1326 audit(105.580:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 105.610189][ T31] audit: type=1326 audit(105.580:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 105.618829][ T31] audit: type=1326 audit(105.590:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=113 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 105.618874][ T31] audit: type=1326 audit(105.590:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 105.618907][ T31] audit: type=1326 audit(105.590:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.5.755" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 105.656979][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 105.666178][ T9279] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 105.666212][ T9279] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 106.176731][ T9312] loop2: detected capacity change from 0 to 512 [ 106.180562][ T9312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.210611][ T9312] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.213625][ T9312] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.762: bg 0: block 248: padding at end of block bitmap is not set [ 106.213958][ T9312] Quota error (device loop2): write_blk: dquota write failed [ 106.213984][ T9312] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 106.213996][ T9312] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.762: Failed to acquire dquot type 1 [ 106.218364][ T9312] EXT4-fs (loop2): 1 truncate cleaned up [ 106.226615][ T9312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.351962][ T31] audit: type=1326 audit(106.330:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9321 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a35c0a8 code=0x7ffc0000 [ 106.356020][ T31] audit: type=1326 audit(106.330:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9321 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a35c0a8 code=0x7ffc0000 [ 106.360157][ T31] audit: type=1326 audit(106.330:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9321 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a35c0a8 code=0x7ffc0000 [ 106.546087][ T9330] netlink: 64 bytes leftover after parsing attributes in process `syz.4.770'. [ 107.017726][ T9341] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 107.017758][ T9341] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 107.069724][ T9348] lo: entered allmulticast mode [ 107.071162][ T9348] tunl0: entered allmulticast mode [ 107.072335][ T9348] gre0: entered allmulticast mode [ 107.084745][ T9348] gretap0: entered allmulticast mode [ 107.089339][ T9348] erspan0: entered allmulticast mode [ 107.097396][ T9348] ip_vti0: entered allmulticast mode [ 107.103100][ T9348] ip6_vti0: entered allmulticast mode [ 107.105838][ T9348] sit0: entered allmulticast mode [ 107.119220][ T9348] ip6tnl0: entered allmulticast mode [ 107.127887][ T9348] ip6gre0: entered allmulticast mode [ 107.135457][ T9348] syz_tun: entered allmulticast mode [ 107.143406][ T9348] ip6gretap0: entered allmulticast mode [ 107.146354][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.146637][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.152215][ T9348] bridge0: entered allmulticast mode [ 107.158359][ T9348] vcan0: entered allmulticast mode [ 107.165816][ T9348] bond0: entered allmulticast mode [ 107.165843][ T9348] bond_slave_0: entered allmulticast mode [ 107.165997][ T9348] bond_slave_1: entered allmulticast mode [ 107.177036][ T9348] team0: entered allmulticast mode [ 107.177068][ T9348] team_slave_0: entered allmulticast mode [ 107.177078][ T9348] team_slave_1: entered allmulticast mode [ 107.183078][ T9348] dummy0: entered allmulticast mode [ 107.193162][ T9348] nlmon0: entered allmulticast mode [ 107.196230][ T9348] caif0: entered allmulticast mode [ 107.196442][ T9348] batadv0: entered allmulticast mode [ 107.200388][ T9348] veth0: entered allmulticast mode [ 107.205053][ T9348] veth1: entered allmulticast mode [ 107.281883][ T9348] wg0: entered allmulticast mode [ 107.361687][ T9348] wg1: entered allmulticast mode [ 107.442166][ T9348] wg2: entered allmulticast mode [ 107.445498][ T9348] veth0_to_bridge: entered allmulticast mode [ 107.458481][ T9348] veth1_to_bridge: entered allmulticast mode [ 107.473163][ T9348] veth0_to_bond: entered allmulticast mode [ 107.477905][ T9348] veth1_to_bond: entered allmulticast mode [ 107.486682][ T9348] veth0_to_team: entered allmulticast mode [ 107.498898][ T9348] veth1_to_team: entered allmulticast mode [ 107.510838][ T9348] veth0_to_batadv: entered allmulticast mode [ 107.516189][ T9348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.517337][ T9348] batadv_slave_0: entered allmulticast mode [ 107.522030][ T9348] veth1_to_batadv: entered allmulticast mode [ 107.525418][ T9348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.526667][ T9348] batadv_slave_1: entered allmulticast mode [ 107.535271][ T9348] xfrm0: entered allmulticast mode [ 107.538207][ T9348] veth0_to_hsr: entered allmulticast mode [ 107.543963][ T9348] hsr_slave_0: entered allmulticast mode [ 107.547049][ T9348] veth1_to_hsr: entered allmulticast mode [ 107.553101][ T9348] hsr_slave_1: entered allmulticast mode [ 107.556721][ T9348] hsr0: entered allmulticast mode [ 107.565998][ T9348] veth1_virt_wifi: entered allmulticast mode [ 107.569349][ T9348] veth0_virt_wifi: entered allmulticast mode [ 107.574150][ T9348] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 107.574439][ T9348] veth1_macvtap: entered allmulticast mode [ 107.582508][ T9348] veth0_macvtap: entered allmulticast mode [ 107.610753][ T9348] macvtap0: entered allmulticast mode [ 107.612406][ T9348] macsec0: entered allmulticast mode [ 107.650892][ T9348] geneve0: entered allmulticast mode [ 107.691026][ T9348] geneve1: entered allmulticast mode [ 107.697053][ T9348] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 107.704532][ T9348] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 107.706764][ T9348] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 107.712116][ T9348] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 107.790465][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.801583][ T9348] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 107.869565][ T9348] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 107.910509][ T9375] Bluetooth: MGMT ver 1.23 [ 107.912317][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.912601][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.912631][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.912651][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.141426][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.784'. [ 108.141564][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.784'. [ 109.118275][ T9471] tipc: Started in network mode [ 109.119362][ T9471] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 109.129008][ T9471] tipc: Enabling of bearer rejected, failed to enable media [ 110.409994][ T9513] loop1: detected capacity change from 0 to 32768 [ 110.424235][ T8611] loop1: p1 p2 p3 < p5 p6 > [ 110.425895][ T8611] loop1: p1 size 242222080 extends beyond EOD, truncated [ 110.430442][ T8611] loop1: p2 start 4294967295 is beyond EOD, truncated [ 110.446375][ T9513] loop1: p1 p2 p3 < p5 p6 > [ 110.447849][ T9513] loop1: p1 size 242222080 extends beyond EOD, truncated [ 110.451001][ T9513] loop1: p2 start 4294967295 is beyond EOD, truncated [ 110.996033][ T31] kauditd_printk_skb: 80 callbacks suppressed [ 110.996074][ T31] audit: type=1326 audit(110.970:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 111.005366][ T31] audit: type=1326 audit(110.980:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 111.005411][ T31] audit: type=1326 audit(110.980:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 111.005442][ T31] audit: type=1326 audit(110.980:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=291 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 111.005456][ T31] audit: type=1326 audit(110.980:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 111.005469][ T31] audit: type=1326 audit(110.980:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 111.005482][ T31] audit: type=1326 audit(110.980:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 111.005496][ T31] audit: type=1326 audit(110.980:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 111.005509][ T31] audit: type=1326 audit(110.980:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9575 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 111.165488][ T717] nci: nci_rsp_packet: unknown rsp opcode 0x211 [ 111.253348][ T9608] gtp0: entered promiscuous mode [ 111.282865][ T6796] udevd[6796]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 111.285272][ T6540] udevd[6540]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 111.287595][ T7065] udevd[7065]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 111.295133][ T8611] udevd[8611]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 111.376494][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 111.690577][ T9644] loop1: detected capacity change from 0 to 2048 [ 111.694125][ T31] audit: type=1326 audit(111.660:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9642 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a35c0a8 code=0x7ffc0000 [ 111.763555][ T8611] loop1: p2 p3 p7 [ 111.808670][ T9644] loop1: p2 p3 p7 [ 112.055565][ T6540] udevd[6540]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 112.059501][ T6796] udevd[6796]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 112.060830][ T9685] tipc: Enabled bearer , priority 0 [ 112.061191][ T9685] syzkaller0: entered promiscuous mode [ 112.061200][ T9685] syzkaller0: entered allmulticast mode [ 112.065261][ T8611] udevd[8611]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 112.076591][ T9685] tipc: Resetting bearer [ 112.102217][ T6796] udevd[6796]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 112.115001][ T9683] tipc: Resetting bearer [ 112.136026][ T9683] tipc: Disabling bearer [ 112.139635][ T9694] lo: entered allmulticast mode [ 112.146668][ T9694] tunl0: entered allmulticast mode [ 112.147602][ T9694] gre0: entered allmulticast mode [ 112.157007][ T9694] gretap0: entered allmulticast mode [ 112.160037][ T9694] erspan0: entered allmulticast mode [ 112.162520][ T9694] ip_vti0: entered allmulticast mode [ 112.171419][ T9694] ip6_vti0: entered allmulticast mode [ 112.172590][ T9694] sit0: entered allmulticast mode [ 112.173618][ T9694] ip6tnl0: entered allmulticast mode [ 112.184538][ T9694] ip6gre0: entered allmulticast mode [ 112.197883][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 112.200196][ T9694] syz_tun: entered allmulticast mode [ 112.201510][ T9694] ip6gretap0: entered allmulticast mode [ 112.202529][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.202647][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.202856][ T9694] bridge0: entered allmulticast mode [ 112.204092][ T9694] vcan0: entered allmulticast mode [ 112.205030][ T9694] bond0: entered allmulticast mode [ 112.205038][ T9694] bond_slave_0: entered allmulticast mode [ 112.205044][ T9694] bond_slave_1: entered allmulticast mode [ 112.207431][ T9694] team0: entered allmulticast mode [ 112.207441][ T9694] team_slave_0: entered allmulticast mode [ 112.207448][ T9694] team_slave_1: entered allmulticast mode [ 112.208537][ T9694] dummy0: entered allmulticast mode [ 112.211668][ T9694] nlmon0: entered allmulticast mode [ 112.212749][ T9694] caif0: entered allmulticast mode [ 112.212914][ T9694] batadv0: entered allmulticast mode [ 112.216737][ T9694] vxcan0: entered allmulticast mode [ 112.217689][ T9694] vxcan1: entered allmulticast mode [ 112.220273][ T9694] veth0: entered allmulticast mode [ 112.228413][ T9694] veth1: entered allmulticast mode [ 112.281232][ T9694] wg0: entered allmulticast mode [ 112.333099][ T9694] wg1: entered allmulticast mode [ 112.390823][ T9694] wg2: entered allmulticast mode [ 112.392038][ T9694] veth0_to_bridge: entered allmulticast mode [ 112.395731][ T9694] veth1_to_bridge: entered allmulticast mode [ 112.398049][ T9694] veth0_to_bond: entered allmulticast mode [ 112.399902][ T9694] veth1_to_bond: entered allmulticast mode [ 112.401953][ T9694] veth0_to_team: entered allmulticast mode [ 112.404084][ T9694] veth1_to_team: entered allmulticast mode [ 112.406910][ T9694] veth0_to_batadv: entered allmulticast mode [ 112.408243][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.408435][ T9694] batadv_slave_0: entered allmulticast mode [ 112.409918][ T9694] veth1_to_batadv: entered allmulticast mode [ 112.413174][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.413342][ T9694] batadv_slave_1: entered allmulticast mode [ 112.414246][ T9694] xfrm0: entered allmulticast mode [ 112.415032][ T9694] veth0_to_hsr: entered allmulticast mode [ 112.415834][ T9694] hsr_slave_0: entered allmulticast mode [ 112.416538][ T9694] veth1_to_hsr: entered allmulticast mode [ 112.417351][ T9694] hsr_slave_1: entered allmulticast mode [ 112.419647][ T9694] hsr0: entered allmulticast mode [ 112.420901][ T9694] veth1_virt_wifi: entered allmulticast mode [ 112.422041][ T9694] veth0_virt_wifi: entered allmulticast mode [ 112.422923][ T9694] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 112.423126][ T9694] veth1_vlan: entered allmulticast mode [ 112.424128][ T9694] veth0_vlan: entered allmulticast mode [ 112.427005][ T9694] vlan0: entered allmulticast mode [ 112.427063][ T9694] vlan1: entered allmulticast mode [ 112.441253][ T9694] macvlan0: entered allmulticast mode [ 112.461380][ T9694] macvlan1: entered allmulticast mode [ 112.462751][ T9694] ipvlan0: entered allmulticast mode [ 112.462815][ T9694] ipvlan1: entered allmulticast mode [ 112.463115][ T9694] veth1_macvtap: entered allmulticast mode [ 112.464036][ T9694] veth0_macvtap: entered allmulticast mode [ 112.491123][ T9694] macvtap0: entered allmulticast mode [ 112.494291][ T9694] macsec0: entered allmulticast mode [ 112.530871][ T9694] geneve0: entered allmulticast mode [ 112.551421][ T9694] geneve1: entered allmulticast mode [ 112.554041][ T9694] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 112.555771][ T9694] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 112.557414][ T9694] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 112.560114][ T9694] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 112.632492][ T9694] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 112.703332][ T9694] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 112.704698][ T9694] gtp0: left promiscuous mode [ 112.704908][ T9694] gtp0: entered allmulticast mode [ 112.705639][ T9694] ip6tnl1: entered allmulticast mode [ 112.705702][ T9694] ip6erspan0: entered allmulticast mode [ 112.769367][ T9717] tipc: Enabling of bearer rejected, failed to enable media [ 112.771248][ T6743] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.772981][ T6743] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.774545][ T6743] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.776109][ T6743] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.795861][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 112.810118][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 112.810181][ T9735] bridge_slave_1: left promiscuous mode [ 112.811296][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.814216][ T9735] bridge_slave_0: left promiscuous mode [ 112.814293][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.174760][ T9750] loop6: detected capacity change from 0 to 512 [ 113.177184][ T9750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.201966][ T9750] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 113.202000][ T9750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 113.202024][ T9750] System zones: 0-1, 15-15, 18-18, 34-34 [ 113.202132][ T9750] EXT4-fs (loop6): orphan cleanup on readonly fs [ 113.202185][ T9750] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.202198][ T9750] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 113.203549][ T9750] EXT4-fs (loop6): 1 truncate cleaned up [ 113.203988][ T9750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.224983][ T8587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.225961][ T9752] hub 2-0:1.0: USB hub found [ 113.226087][ T9752] hub 2-0:1.0: 8 ports detected [ 113.265843][ T9758] loop1: detected capacity change from 0 to 512 [ 113.266182][ T9758] EXT4-fs: Ignoring removed orlov option [ 113.267096][ T9758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.268363][ T9758] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.271717][ T9758] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.884: bg 0: block 248: padding at end of block bitmap is not set [ 113.271995][ T9758] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.884: Failed to acquire dquot type 1 [ 113.273203][ T9758] EXT4-fs (loop1): 1 truncate cleaned up [ 113.274397][ T9758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.278538][ T9758] EXT4-fs: Ignoring removed orlov option [ 113.278587][ T9758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.315796][ T9758] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 113.333295][ T9758] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.884: Abort forced by user [ 113.335397][ T9758] EXT4-fs (loop1): Remounting filesystem read-only [ 113.336860][ T9758] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 113.344764][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.869029][ T9784] loop1: detected capacity change from 0 to 256 [ 113.928098][ T9784] bond0: left promiscuous mode [ 113.929143][ T9784] batadv0: left promiscuous mode [ 113.936061][ T9784] bridge_slave_1: left promiscuous mode [ 113.937746][ T9784] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 114.001518][ T9784] geneve2: left promiscuous mode [ 114.002539][ T9784] geneve2: left allmulticast mode [ 114.003638][ T742] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.005102][ T742] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.006593][ T742] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.009802][ T742] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.051738][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 114.135503][ T9797] tipc: Enabling of bearer rejected, failed to enable media [ 114.827278][ T9805] netlink: 'syz.4.901': attribute type 3 has an invalid length. [ 116.298900][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 116.419317][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 116.419489][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 118.295572][ T31] kauditd_printk_skb: 65 callbacks suppressed [ 118.297104][ T31] audit: type=1326 audit(118.270:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 118.300484][ T31] audit: type=1326 audit(118.270:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 118.305430][ T31] audit: type=1326 audit(118.270:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 118.308985][ T31] audit: type=1326 audit(118.270:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 118.309015][ T31] audit: type=1326 audit(118.270:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 118.309031][ T31] audit: type=1326 audit(118.270:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 118.309047][ T31] audit: type=1326 audit(118.270:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 118.309063][ T31] audit: type=1326 audit(118.270:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 118.309075][ T31] audit: type=1326 audit(118.270:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 118.309087][ T31] audit: type=1326 audit(118.270:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9900 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 119.668120][ T9933] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 119.853726][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 119.853917][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 120.263714][ T9935] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 120.318683][ T9946] loop1: detected capacity change from 0 to 4096 [ 120.321370][ T9946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.327768][ T9946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.366638][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.487854][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.959'. [ 120.579908][ T9973] netlink: 'syz.1.964': attribute type 21 has an invalid length. [ 120.582539][ T9973] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.652179][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.968'. [ 120.900696][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.976'. [ 121.401737][T10013] netlink: 'syz.2.978': attribute type 10 has an invalid length. [ 121.412638][T10013] team0: Port device dummy0 added [ 121.414372][T10013] netlink: 'syz.2.978': attribute type 10 has an invalid length. [ 121.416486][T10013] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 121.424651][T10013] team0: Failed to send options change via netlink (err -105) [ 121.424723][T10013] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 121.425566][T10013] team0: Port device dummy0 removed [ 121.427360][T10013] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.576614][T10025] lo: entered allmulticast mode [ 121.578412][T10025] tunl0: entered allmulticast mode [ 121.583038][T10025] gre0: entered allmulticast mode [ 121.591766][T10025] gretap0: entered allmulticast mode [ 121.596616][T10025] erspan0: entered allmulticast mode [ 121.603000][T10025] ip_vti0: entered allmulticast mode [ 121.606027][T10025] ip6_vti0: entered allmulticast mode [ 121.610416][T10025] sit0: entered allmulticast mode [ 121.613671][T10025] ip6tnl0: entered allmulticast mode [ 121.617333][T10025] ip6gre0: entered allmulticast mode [ 121.624396][T10025] syz_tun: entered allmulticast mode [ 121.628949][T10025] ip6gretap0: entered allmulticast mode [ 121.638084][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.638246][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.639222][T10025] bridge0: entered allmulticast mode [ 121.640642][T10025] vcan0: entered allmulticast mode [ 121.644245][T10025] bond0: entered allmulticast mode [ 121.644276][T10025] bond_slave_0: entered allmulticast mode [ 121.644284][T10025] bond_slave_1: entered allmulticast mode [ 121.644292][T10025] dummy0: entered allmulticast mode [ 121.647073][T10025] team0: entered allmulticast mode [ 121.647083][T10025] team_slave_0: entered allmulticast mode [ 121.647089][T10025] team_slave_1: entered allmulticast mode [ 121.649378][T10025] nlmon0: entered allmulticast mode [ 121.650094][T10025] caif0: entered allmulticast mode [ 121.650251][T10025] batadv0: entered allmulticast mode [ 121.651728][T10025] vxcan0: entered allmulticast mode [ 121.652111][T10025] vxcan1: entered allmulticast mode [ 121.652453][T10025] veth0: entered allmulticast mode [ 121.653472][T10025] veth1: entered allmulticast mode [ 121.691215][T10025] wg0: entered allmulticast mode [ 121.735508][T10025] wg1: entered allmulticast mode [ 121.810864][T10025] wg2: entered allmulticast mode [ 121.815555][T10025] veth0_to_bridge: entered allmulticast mode [ 121.826617][T10025] veth1_to_bridge: entered allmulticast mode [ 121.835019][T10025] veth0_to_bond: entered allmulticast mode [ 121.839165][T10025] veth1_to_bond: entered allmulticast mode [ 121.843079][T10025] veth0_to_team: entered allmulticast mode [ 121.850462][T10025] veth1_to_team: entered allmulticast mode [ 121.854380][T10025] veth0_to_batadv: entered allmulticast mode [ 121.860332][T10025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.865229][T10025] batadv_slave_0: entered allmulticast mode [ 121.866306][T10025] veth1_to_batadv: entered allmulticast mode [ 121.871241][T10025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.871485][T10025] batadv_slave_1: entered allmulticast mode [ 121.875251][T10025] xfrm0: entered allmulticast mode [ 121.879416][T10025] veth0_to_hsr: entered allmulticast mode [ 121.882186][T10025] hsr_slave_0: entered allmulticast mode [ 121.884190][T10025] veth1_to_hsr: entered allmulticast mode [ 121.886555][T10025] hsr_slave_1: entered allmulticast mode [ 121.888734][T10025] hsr0: entered allmulticast mode [ 121.891588][T10025] veth1_virt_wifi: entered allmulticast mode [ 121.893779][T10025] veth0_virt_wifi: entered allmulticast mode [ 121.895858][T10025] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 121.897614][T10025] veth1_macvtap: entered allmulticast mode [ 121.900050][T10025] veth0_macvtap: entered allmulticast mode [ 121.922110][T10025] macvtap0: entered allmulticast mode [ 121.924661][T10025] macsec0: entered allmulticast mode [ 121.964107][T10025] geneve0: entered allmulticast mode [ 121.988134][T10025] geneve1: entered allmulticast mode [ 121.997143][T10025] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 122.009395][T10025] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 122.020715][T10025] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 122.029391][T10025] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 122.091872][T10025] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 122.149866][T10025] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 122.153279][T10025] bridge0.1: entered allmulticast mode [ 122.155988][T10025] gre1: entered allmulticast mode [ 122.166701][T10027] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 122.197475][ T742] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.197534][ T742] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.197559][ T742] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.197576][ T742] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.315862][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.996'. [ 123.183509][T10124] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 123.183539][T10124] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 123.278861][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1017'. [ 123.279041][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1017'. [ 123.515398][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1018'. [ 123.522135][ T31] kauditd_printk_skb: 110 callbacks suppressed [ 123.522172][ T31] audit: type=1326 audit(123.490:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.522199][ T31] audit: type=1326 audit(123.500:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.522216][ T31] audit: type=1326 audit(123.500:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.528702][ T31] audit: type=1326 audit(123.500:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.528723][ T31] audit: type=1326 audit(123.500:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.528742][ T31] audit: type=1326 audit(123.500:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.528757][ T31] audit: type=1326 audit(123.500:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.528771][ T31] audit: type=1326 audit(123.500:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.528785][ T31] audit: type=1326 audit(123.500:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.528797][ T31] audit: type=1326 audit(123.500:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10128 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 123.577649][T10127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.588471][T10131] macvlan0: entered promiscuous mode [ 123.588518][T10131] macvlan0: entered allmulticast mode [ 123.590318][T10131] bond1: entered promiscuous mode [ 123.590526][T10131] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 123.633862][T10131] bond1: left promiscuous mode [ 123.769722][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'. [ 124.100264][T10176] netlink: 'syz.5.1040': attribute type 4 has an invalid length. [ 124.596223][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'. [ 125.096012][ T742] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 125.096155][ T742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 125.096190][ T742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 125.096211][ T742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 125.536803][T10305] loop1: detected capacity change from 0 to 1024 [ 125.559080][T10305] EXT4-fs (loop1): Invalid log cluster size: 31 [ 125.676248][T10321] bond_slave_1: entered promiscuous mode [ 125.676895][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1106'. [ 125.697736][T10321] bond0: (slave bond_slave_1): Releasing backup interface [ 125.722522][T10321] bond_slave_1 (unregistering): left promiscuous mode [ 125.849966][T10336] wg0: entered promiscuous mode [ 125.850250][T10216] Set syz1 is full, maxelem 65536 reached [ 125.935998][ T2413] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.936057][ T2413] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.118041][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1128'. [ 126.174626][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1130'. [ 126.857033][T10380] Set syz1 is full, maxelem 65536 reached [ 127.181815][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 127.273551][T10458] netlink: '+}[@': attribute type 7 has an invalid length. [ 127.688893][T10482] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1179'. [ 127.866895][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 127.879322][T10511] tipc: Enabling of bearer rejected, failed to enable media [ 128.169869][T10513] netlink: 'syz.1.1194': attribute type 3 has an invalid length. [ 128.357648][T10537] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1202'. [ 128.359504][T10537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1202'. [ 128.361383][T10537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1202'. [ 128.444416][T10537] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1202'. [ 128.446395][T10537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1202'. [ 128.448169][T10537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1202'. [ 128.508982][T10537] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1202'. [ 128.513205][T10537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1202'. [ 128.570737][ T31] kauditd_printk_skb: 244 callbacks suppressed [ 128.570777][ T31] audit: type=1326 audit(128.530:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10549 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 128.570803][ T31] audit: type=1326 audit(128.540:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10549 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8db5a5d4 code=0x7ffc0000 [ 128.570824][ T31] audit: type=1326 audit(128.540:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10549 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 128.570844][ T31] audit: type=1326 audit(128.540:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10549 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff8db5a9ac code=0x7ffc0000 [ 128.570860][ T31] audit: type=1326 audit(128.540:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10549 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8db867c8 code=0x7ffc0000 [ 128.778935][T10564] lo speed is unknown, defaulting to 1000 [ 128.779252][T10564] lo speed is unknown, defaulting to 1000 [ 128.782420][T10564] lo speed is unknown, defaulting to 1000 [ 128.795699][T10564] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.818728][T10564] lo speed is unknown, defaulting to 1000 [ 128.822196][T10564] lo speed is unknown, defaulting to 1000 [ 128.825334][T10564] lo speed is unknown, defaulting to 1000 [ 128.829113][T10564] lo speed is unknown, defaulting to 1000 [ 128.832660][T10564] lo speed is unknown, defaulting to 1000 [ 128.953970][ T31] audit: type=1326 audit(128.930:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10549 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 128.954013][ T31] audit: type=1326 audit(128.930:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10549 comm="syz.4.1206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db5c0a8 code=0x7ffc0000 [ 129.056072][ T31] audit: type=1326 audit(129.030:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 129.056191][ T31] audit: type=1326 audit(129.030:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 129.056362][ T31] audit: type=1326 audit(129.030:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=67 compat=0 ip=0xffff8ad5c0a8 code=0x7ffc0000 [ 129.089667][T10578] netem: change failed [ 129.110048][T10580] lo speed is unknown, defaulting to 1000 [ 130.522877][T10624] bond1: entered promiscuous mode [ 130.522911][T10624] bond1: entered allmulticast mode [ 130.523441][T10624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.613526][T10624] bond1 (unregistering): Released all slaves [ 130.694430][T10638] loop1: detected capacity change from 0 to 164 [ 130.701426][T10638] syz.1.1241: attempt to access beyond end of device [ 130.701426][T10638] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 130.704578][T10638] syz.1.1241: attempt to access beyond end of device [ 130.704578][T10638] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 130.802074][T10649] loop1: detected capacity change from 0 to 2048 [ 130.803753][T10649] EXT4-fs: Ignoring removed orlov option [ 130.825941][T10649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.853113][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.080282][T10678] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 131.136507][T10681] netlink: 'syz.5.1259': attribute type 1 has an invalid length. [ 131.140309][T10680] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.325884][T10690] lo speed is unknown, defaulting to 1000 [ 131.601818][T10728] netlink: 'syz.5.1279': attribute type 10 has an invalid length. [ 131.601850][T10728] batadv0: left allmulticast mode [ 131.603095][T10728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.605108][T10728] batadv0: entered allmulticast mode [ 131.605415][T10728] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 132.281324][T10754] loop1: detected capacity change from 0 to 1024 [ 132.282067][T10754] EXT4-fs: Ignoring removed bh option [ 132.287310][T10754] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 132.298115][T10754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.316493][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.334019][T10760] ucma_write: process 628 (syz.1.1290) changed security contexts after opening file descriptor, this is not allowed. [ 132.807079][T10800] __nla_validate_parse: 8 callbacks suppressed [ 132.807120][T10800] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1307'. [ 132.852531][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1311'. [ 132.894742][T10814] tipc: Enabling of bearer rejected, failed to enable media [ 132.939467][T10821] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1314'. [ 132.939573][T10821] C: renamed from team_slave_0 [ 132.967397][T10823] veth0: entered promiscuous mode [ 132.968758][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 132.991196][T10823] veth0 (unregistering): left promiscuous mode [ 133.125577][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1319'. [ 133.200809][T10841] netlink: 'syz.4.1325': attribute type 13 has an invalid length. [ 133.247571][T10841] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.247724][T10841] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.250098][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 133.253857][T10848] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1325'. [ 133.327596][T10851] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1325'. [ 133.364507][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1330'. [ 133.513994][T10841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.520025][T10841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.709858][ T31] kauditd_printk_skb: 131 callbacks suppressed [ 133.709910][ T31] audit: type=1326 audit(389.679:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.709950][ T31] audit: type=1326 audit(389.679:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.723438][ T31] audit: type=1326 audit(389.699:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.723626][ T31] audit: type=1326 audit(389.699:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.723698][ T31] audit: type=1326 audit(389.699:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.724007][ T31] audit: type=1326 audit(389.699:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.725797][ T31] audit: type=1326 audit(389.699:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.726226][ T31] audit: type=1326 audit(389.699:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.726723][ T31] audit: type=1326 audit(389.699:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=1 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.791545][ T31] audit: type=1326 audit(389.769:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9055c0a8 code=0x7ffc0000 [ 133.844169][ T742] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.844226][ T742] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.844245][ T742] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.844259][ T742] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.872083][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1339'. [ 133.933861][T10888] lo speed is unknown, defaulting to 1000 [ 134.090369][T10895] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.090410][T10895] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 134.367675][T10944] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 134.367764][T10944] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 135.450999][T10993] hub 6-0:1.0: USB hub found [ 135.451737][T10993] hub 6-0:1.0: 8 ports detected [ 135.470106][T10999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.474238][T10999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.485775][T10999] bond0: (slave batadv0): Releasing backup interface [ 135.498540][T10999] batadv0 (unregistering): left allmulticast mode [ 135.535056][T11001] Invalid ELF header magic: != ELF [ 135.674868][T11026] netlink: 'syz.1.1401': attribute type 10 has an invalid length. [ 135.676394][T11026] 9pnet_fd: Insufficient options for proto=fd [ 135.683985][T11026] bond0: entered promiscuous mode [ 135.684015][T11026] batadv0: entered promiscuous mode [ 135.700986][T11029] netlink: 'syz.6.1402': attribute type 1 has an invalid length. [ 135.704559][T11032] loop1: detected capacity change from 0 to 2048 [ 135.733901][T11032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.754323][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.021869][T11054] lo speed is unknown, defaulting to 1000 [ 136.206235][T11058] lo speed is unknown, defaulting to 1000 [ 136.471998][T11083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.512499][T11094] syz.6.1428: attempt to access beyond end of device [ 136.512499][T11094] loop6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 136.515452][T11094] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32 [ 136.688026][T11118] Invalid ELF header magic: != ELF [ 136.994662][T11122] lo speed is unknown, defaulting to 1000 [ 137.003705][T11117] loop1: detected capacity change from 0 to 4096 [ 137.006134][T11117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.029321][T11117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.058749][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.108810][T11131] lo speed is unknown, defaulting to 1000 [ 137.212633][T11134] loop6: detected capacity change from 0 to 512 [ 137.232617][T11134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.239987][T11134] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.1441: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 137.242258][T11134] EXT4-fs (loop6): Remounting filesystem read-only [ 137.880298][ T8587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.008048][T11198] netlink: 'syz.4.1469': attribute type 21 has an invalid length. [ 138.117724][T11205] tipc: Enabled bearer , priority 0 [ 138.119951][T11204] tipc: Resetting bearer [ 138.857058][T11204] tipc: Disabling bearer [ 138.860526 ** replaying previous printk message ** [ 138.860526][T11181] Unable to handle kernel paging request at virtual address ffff7000218bfa04 [ 138.860546][T11181] KASAN: probably wild-memory-access in range [0xffff80010c5fd020-0xffff80010c5fd027] [ 138.860567][T11181] Mem abort info: [ 138.860571][T11181] ESR = 0x0000000096000007 [ 138.860576][T11181] EC = 0x25: DABT (current EL), IL = 32 bits [ 138.860582][T11181] SET = 0, FnV = 0 [ 138.860587][T11181] EA = 0, S1PTW = 0 [ 138.860590][T11181] FSC = 0x07: level 3 translation fault [ 138.860594][T11181] Data abort info: [ 138.860597][T11181] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000 [ 138.860601][T11181] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 138.860605][T11181] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 138.860609][T11181] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000206ec9000 [ 138.860614][T11181] [ffff7000218bfa04] pgd=0000000000000000, p4d=000000023ea66003, pud=000000023ea65003, pmd=100000014a7b3403, pte=0000000000000000 [ 138.860746][T11181] Internal error: Oops: 0000000096000007 [#1] SMP [ 138.876837][T11181] Modules linked in: [ 138.877438][T11181] CPU: 1 UID: 0 PID: 11181 Comm: syz.2.1463 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 138.879111][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 138.880773][T11181] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 138.882134][T11181] pc : kasan_check_range+0x78/0x2a4 [ 138.883056][T11181] lr : __kasan_check_write+0x20/0x30 [ 138.883969][T11181] sp : ffff80009dde6cd0 [ 138.884682][T11181] x29: ffff80009dde6cd0 x28: dfff800000000000 x27: 1fffe0001ebce08e [ 138.886049][T11181] x26: ffff0000f6f549e0 x25: ffff0000f5e70470 x24: 0000000000000000 [ 138.887384][T11181] x23: 0000000000000000 x22: dfff800000000000 x21: 0000000000000001 [ 138.888607][T11181] x20: ffff80010c5fd020 x19: ffff0000cd72b800 x18: 00000000ffffffff [ 138.889913][T11181] x17: ffff800093507000 x16: ffff80008b007340 x15: 0000000000000001 [ 138.891296][T11181] x14: 1ffff000218bfa04 x13: 0000000000000000 x12: ffffffffffffffff [ 138.892632][T11181] x11: ffff7000218bfa04 x10: dfff800000000000 x9 : 1ffff000218bfa04 [ 138.893945][T11181] x8 : ffff80010c5fd027 x7 : ffff8000802310a8 x6 : ffff8000802312a4 [ 138.895199][T11181] x5 : ffff0000ebf74490 x4 : ffff80009dde6a00 x3 : ffff800086580158 [ 138.896485][T11181] x2 : 0000000000000001 x1 : 0000000000000008 x0 : ffff80010c5fd020 [ 138.897831][T11181] Call trace: [ 138.898359][T11181] kasan_check_range+0x78/0x2a4 (P) [ 138.899196][T11181] __kasan_check_write+0x20/0x30 [ 138.900031][T11181] nsim_queue_free+0xc8/0x164 [ 138.900798][T11181] nsim_create+0xa78/0xd48 [ 138.901510][T11181] __nsim_dev_port_add+0x544/0x898 [ 138.902349][T11181] nsim_dev_port_add_all+0x50/0x114 [ 138.903157][T11181] nsim_dev_reload_up+0x3e0/0x648 [ 138.903926][T11181] devlink_reload+0x428/0x750 [ 138.904706][T11181] devlink_nl_reload_doit+0x930/0xb0c [ 138.905577][T11181] genl_family_rcv_msg_doit+0x1d8/0x2bc [ 138.906454][T11181] genl_rcv_msg+0x450/0x624 [ 138.907248][T11181] netlink_rcv_skb+0x220/0x3fc [ 138.908021][T11181] genl_rcv+0x38/0x50 [ 138.908637][T11181] netlink_unicast+0x694/0x8c4 [ 138.909412][T11181] netlink_sendmsg+0x648/0x930 [ 138.910203][T11181] ____sys_sendmsg+0x490/0x7b8 [ 138.910962][T11181] ___sys_sendmsg+0x204/0x278 [ 138.911700][T11181] __arm64_sys_sendmsg+0x184/0x238 [ 138.912490][T11181] invoke_syscall+0x98/0x2b8 [ 138.913219][T11181] el0_svc_common+0x130/0x23c [ 138.913940][T11181] do_el0_svc+0x48/0x58 [ 138.914640][T11181] el0_svc+0x58/0x180 [ 138.915334][T11181] el0t_64_sync_handler+0x84/0x12c [ 138.916201][T11181] el0t_64_sync+0x198/0x19c [ 138.916910][T11181] Code: 5400014c b4000b8f aa2903ec 8b0e018c (3940016d) [ 138.917970][T11181] ---[ end trace 0000000000000000 ]--- [ 139.063306][T11181] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 139.064613][T11181] SMP: stopping secondary CPUs [ 139.065351][T11181] Kernel Offset: disabled [ 139.066011][T11181] CPU features: 0x40000,00007800,109c1141,5427fea7 [ 139.066962][T11181] Memory Limit: none [ 139.216870][T11181] Rebooting in 86400 seconds..