last executing test programs: 14.612308095s ago: executing program 0 (id=1767): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 14.366051727s ago: executing program 0 (id=1769): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) rmdir(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) 14.159196993s ago: executing program 0 (id=1771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) syz_emit_ethernet(0xd81, &(0x7f0000000600)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d6c438", 0xd4b, 0xe, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x2c, 0x1a3, '\x00', [@generic={0x3, 0xd17, "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"}]}], "14cb3cc2fb45052d9fe6fac8aa4a609dd6d1c5c751d2211f5ab5c585aece759fc83959"}}}}}, 0x0) 14.007116771s ago: executing program 3 (id=1773): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000003040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x5800) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000002010400000000000000000b000108"], 0x14}}, 0x20040000) syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'/13], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 13.84074093s ago: executing program 0 (id=1775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) 13.704527385s ago: executing program 0 (id=1776): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff11) socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x29aa40, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) getgid() 13.136357183s ago: executing program 0 (id=1779): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x28}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) connect$inet6(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x0, 0x3}}) 12.798930707s ago: executing program 3 (id=1781): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) rmdir(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) 12.326033776s ago: executing program 3 (id=1785): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0) 12.13860049s ago: executing program 3 (id=1789): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff11) socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x29aa40, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) getgid() 11.716251967s ago: executing program 3 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYBLOB="b13d5440445acdaed671a8089dbc7d06e9da49952e5876431d5f1466d63ed1c68bd28d2ec230ed6b1e6e06bb66ce7d0449d6f4ff326e62d6245d710d638f777858f2fdb28fe6d0694439dfa2835ba7e74126e968c855f72d256e45cd92abe95378886fee9f22c765f41aa930fc7c179c6e99b4d73f5d1b62c1f28242cafb34a09de2e9cf90ee3acf061527b9d91f9c252e6da79f4ef125", @ANYRES16=r2, @ANYBLOB="17753cede049a25b18f7457fff28149e845ca88be6beec62eb47232a2d29852d5e7294acc267fc83035112bb87cc839132814c4696c4fb2e8cb62ada22bd72824b4275fdb1f5384631fd3184daa058fdefb4f9493a1cdcdce9ea46cf8869cc53a36f9cbfba5102dd35f056373f26dccbd01908364fc2891478e93db9dc5027fbc08471cf7e30f6587c313246e2c94db8c75b0c15c2d68ea4632cab0f4a8cde3b4e345db83a474b94af326414cab4150628ac949e6005d3a83262257984e9bb7700a85bfe20dff4"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='qrtr_ns_message\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x4, 0x81, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000015000300686173683a69702c706f72742c6e6574000000000bf2"], 0x50}}, 0x0) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x0, 0x0) openat(r5, &(0x7f00000005c0)='./bus\x00', 0x220000, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$netlink(r2, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) 3.70491768s ago: executing program 4 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8905, 0x2000, 0x0, 0x2f2}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_read_part_table(0x5cd, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) 2.511240379s ago: executing program 4 (id=1835): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x40004) 2.362471045s ago: executing program 2 (id=1837): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) 2.180927824s ago: executing program 2 (id=1838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[], 0x98}}, 0x0) 2.037519101s ago: executing program 2 (id=1839): io_setup(0x8, &(0x7f00000002c0)=0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_submit(r0, 0x1, &(0x7f0000000080)=[0x0]) 1.847009692s ago: executing program 2 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b732638aaaaaaeaaaaaaabb0800"], 0x0) 1.734548764s ago: executing program 1 (id=1842): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 1.675016716s ago: executing program 2 (id=1843): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) 1.578387333s ago: executing program 1 (id=1844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 1.472455257s ago: executing program 2 (id=1845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 1.320238829s ago: executing program 1 (id=1846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 1.317996766s ago: executing program 3 (id=1847): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x400]}, 0x8, 0x80400) 1.317423988s ago: executing program 4 (id=1848): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) 783.555055ms ago: executing program 4 (id=1849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[], 0x98}}, 0x0) 444.531697ms ago: executing program 1 (id=1850): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0xc, 0x3}]}]}}, 0x0, 0x2e, 0x0, 0x8, 0xfffffffa}, 0x28) 322.481223ms ago: executing program 4 (id=1851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 267.231581ms ago: executing program 1 (id=1852): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 23.147297ms ago: executing program 1 (id=1853): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x8040480) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=1854): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@flushoncommit}, {@usebackuproot}]}, 0x1, 0x50f3, &(0x7f000000f3c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) r2 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, 0x0, 0x0, 0x6000, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x6, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) write$uinput_user_dev(r4, &(0x7f0000000f80)={'syz0\x00', {0x4, 0x1, 0x5, 0x2}, 0x21, [0x2, 0x7, 0x0, 0x6, 0x60, 0x0, 0x8, 0x5, 0x9, 0x4, 0x2, 0x5, 0xa89, 0x6, 0x5, 0x8, 0x5, 0x8, 0x4, 0x7, 0xfffffffd, 0x0, 0xc, 0x1, 0x8001, 0xbc, 0x6, 0x6, 0x6, 0x4, 0xd61, 0x9, 0xbf, 0x401, 0xfffffff7, 0x0, 0x4, 0x2, 0x8000, 0x8, 0x8, 0x3, 0x4, 0xc72e, 0xfffffffc, 0x40, 0x2, 0x5, 0x8, 0x9, 0x6, 0x2, 0x1, 0x4, 0x1de, 0x9, 0x5, 0x1, 0x0, 0x2, 0x2, 0x1, 0x9, 0x1], [0x1473, 0x2, 0x7, 0x8, 0x2062, 0xf9, 0x28, 0x7, 0x7fffffff, 0x8, 0xa5f, 0x100, 0x6, 0x1, 0x400, 0x6, 0x101, 0x0, 0x1, 0x329f, 0x6, 0x0, 0x2, 0x9, 0xffff0001, 0x8f, 0x1, 0x663, 0xba, 0x1, 0x4, 0x3, 0x16ffe9ec, 0x7f, 0x401, 0x9, 0x681, 0x6, 0x6, 0x525, 0x5, 0x7a, 0x2, 0xfffffb37, 0x9, 0x9, 0x8, 0x6, 0x7, 0x4, 0x9, 0x2b, 0x5, 0x4, 0x2, 0x4, 0x867, 0x4, 0x9, 0x8c1, 0xb3, 0x9, 0xfffffffa, 0x400], [0x28ae, 0x2, 0xb, 0x20a1, 0x7fff, 0x10001, 0x3f4, 0x0, 0x4, 0x3, 0x9, 0x3ff, 0x7, 0x80000001, 0x5, 0xb2b, 0x7c, 0x6, 0x80000000, 0x6, 0x1, 0x0, 0x0, 0x2c2, 0x7, 0xfffffffe, 0xc4, 0xccb, 0x6, 0x2, 0xe, 0xbea, 0x1, 0x4, 0x39, 0x1, 0xd, 0xd82, 0x8, 0x9a7, 0x7, 0x2, 0x100, 0x3, 0xfffff13c, 0x2, 0x1829, 0xc, 0xfffffe00, 0x3, 0x2, 0x5, 0x2, 0x3, 0x6, 0x7, 0x9, 0x82a, 0x351, 0x3, 0x7, 0x8, 0x3, 0x1], [0x800, 0xe, 0x7, 0x6, 0x4, 0x4, 0x3, 0xc, 0x1, 0x9, 0x6, 0xff, 0x9, 0x1, 0x5b, 0x9, 0x5, 0xffffffff, 0x10, 0x50a, 0x7, 0xf, 0x1, 0x7, 0x3ff, 0x3, 0x9, 0x2, 0x0, 0x4, 0x9, 0x80000000, 0x7, 0x3, 0xfffffffe, 0x2, 0x7, 0x342e, 0x3bb, 0x7ff, 0x5, 0x313a, 0x10001, 0x9, 0x5, 0x7, 0x8001, 0x46, 0x1, 0x3, 0x5, 0xa43, 0x8, 0x5, 0x0, 0x3, 0x5, 0x5, 0x3, 0x3ff, 0xc00, 0x800, 0x80000001, 0x1]}, 0x45c) write$FUSE_WRITE(r3, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0xf000, 0x0, 0x100000}) kernel console output (not intermixed with test programs): rsion = 48b305e5 [ 248.974526][ T8580] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.009634][ T8538] syz.3.746: attempt to access beyond end of device [ 249.009634][ T8538] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 249.107649][ T8587] syz.3.746: attempt to access beyond end of device [ 249.107649][ T8587] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 249.136661][ T8538] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40 [ 249.162869][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.337116][ C1] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 249.347858][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 249.347892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.347908][ C1] Call Trace: [ 249.347918][ C1] [ 249.347928][ C1] dump_stack_lvl+0x189/0x250 [ 249.347977][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.348015][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 249.348049][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 249.348087][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.348132][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 249.348177][ C1] f2fs_write_end_io+0x886/0xb60 [ 249.348221][ C1] blk_update_request+0x57e/0xe60 [ 249.348271][ C1] blk_mq_end_request+0x3e/0x70 [ 249.348305][ C1] blk_done_softirq+0x10a/0x160 [ 249.348339][ C1] handle_softirqs+0x27d/0x880 [ 249.348377][ C1] ? run_ksoftirqd+0x9b/0x100 [ 249.348418][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 249.348454][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.348492][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.348524][ C1] run_ksoftirqd+0x9b/0x100 [ 249.348559][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 249.348604][ C1] smpboot_thread_fn+0x542/0xa60 [ 249.348654][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.348698][ C1] kthread+0x711/0x8a0 [ 249.348723][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 249.348757][ C1] ? __pfx_kthread+0x10/0x10 [ 249.348788][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.348821][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.348857][ C1] ? __pfx_kthread+0x10/0x10 [ 249.348880][ C1] ret_from_fork+0x599/0xb30 [ 249.348912][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 249.348953][ C1] ? __switch_to_asm+0x39/0x70 [ 249.348976][ C1] ? __switch_to_asm+0x33/0x70 [ 249.348997][ C1] ? __pfx_kthread+0x10/0x10 [ 249.349020][ C1] ret_from_fork_asm+0x1a/0x30 [ 249.349063][ C1] [ 249.349073][ C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 249.442443][ T8593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.759'. [ 249.442968][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 249.443000][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.443025][ C1] Call Trace: [ 249.443036][ C1] [ 249.443048][ C1] dump_stack_lvl+0x189/0x250 [ 249.443109][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.443148][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 249.443182][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 249.443220][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.443271][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 249.443319][ C1] f2fs_write_end_io+0x886/0xb60 [ 249.443369][ C1] blk_update_request+0x57e/0xe60 [ 249.443422][ C1] blk_mq_end_request+0x3e/0x70 [ 249.443460][ C1] blk_done_softirq+0x10a/0x160 [ 249.443496][ C1] handle_softirqs+0x27d/0x880 [ 249.443535][ C1] ? run_ksoftirqd+0x9b/0x100 [ 249.443581][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 249.443620][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.443659][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.443694][ C1] run_ksoftirqd+0x9b/0x100 [ 249.443735][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 249.443782][ C1] smpboot_thread_fn+0x542/0xa60 [ 249.443820][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.443866][ C1] kthread+0x711/0x8a0 [ 249.443893][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 249.443929][ C1] ? __pfx_kthread+0x10/0x10 [ 249.443956][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.443991][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.444036][ C1] ? __pfx_kthread+0x10/0x10 [ 249.444060][ C1] ret_from_fork+0x599/0xb30 [ 249.444095][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 249.444138][ C1] ? __switch_to_asm+0x39/0x70 [ 249.444163][ C1] ? __switch_to_asm+0x33/0x70 [ 249.444186][ C1] ? __pfx_kthread+0x10/0x10 [ 249.444212][ C1] ret_from_fork_asm+0x1a/0x30 [ 249.444258][ C1] [ 249.444343][ C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 249.742876][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 249.742909][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.742924][ C1] Call Trace: [ 249.742934][ C1] [ 249.742943][ C1] dump_stack_lvl+0x189/0x250 [ 249.742991][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.743028][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 249.743061][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 249.743098][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.743154][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 249.743200][ C1] f2fs_write_end_io+0x886/0xb60 [ 249.743245][ C1] blk_update_request+0x57e/0xe60 [ 249.743295][ C1] blk_mq_end_request+0x3e/0x70 [ 249.743330][ C1] blk_done_softirq+0x10a/0x160 [ 249.743365][ C1] handle_softirqs+0x27d/0x880 [ 249.743406][ C1] ? run_ksoftirqd+0x9b/0x100 [ 249.743448][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 249.743485][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.743522][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.743554][ C1] run_ksoftirqd+0x9b/0x100 [ 249.743589][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 249.743632][ C1] smpboot_thread_fn+0x542/0xa60 [ 249.743668][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.743711][ C1] kthread+0x711/0x8a0 [ 249.743739][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 249.743776][ C1] ? __pfx_kthread+0x10/0x10 [ 249.743797][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.743829][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.743862][ C1] ? __pfx_kthread+0x10/0x10 [ 249.743885][ C1] ret_from_fork+0x599/0xb30 [ 249.743917][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 249.743958][ C1] ? __switch_to_asm+0x39/0x70 [ 249.743980][ C1] ? __switch_to_asm+0x33/0x70 [ 249.744003][ C1] ? __pfx_kthread+0x10/0x10 [ 249.744025][ C1] ret_from_fork_asm+0x1a/0x30 [ 249.744068][ C1] [ 249.927294][ C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 249.934243][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 249.934277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.934293][ C1] Call Trace: [ 249.934302][ C1] [ 249.934312][ C1] dump_stack_lvl+0x189/0x250 [ 249.934359][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.934397][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 249.934428][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 249.934465][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.934512][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 249.934558][ C1] f2fs_write_end_io+0x886/0xb60 [ 249.934603][ C1] blk_update_request+0x57e/0xe60 [ 249.934654][ C1] blk_mq_end_request+0x3e/0x70 [ 249.934689][ C1] blk_done_softirq+0x10a/0x160 [ 249.934723][ C1] handle_softirqs+0x27d/0x880 [ 249.934769][ C1] ? run_ksoftirqd+0x9b/0x100 [ 249.934811][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 249.934846][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.934885][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.934916][ C1] run_ksoftirqd+0x9b/0x100 [ 249.934952][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 249.934996][ C1] smpboot_thread_fn+0x542/0xa60 [ 249.935032][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 249.935075][ C1] kthread+0x711/0x8a0 [ 249.935107][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 249.935141][ C1] ? __pfx_kthread+0x10/0x10 [ 249.935165][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.935199][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.935234][ C1] ? __pfx_kthread+0x10/0x10 [ 249.935257][ C1] ret_from_fork+0x599/0xb30 [ 249.935291][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 249.935332][ C1] ? __switch_to_asm+0x39/0x70 [ 249.935354][ C1] ? __switch_to_asm+0x33/0x70 [ 249.935376][ C1] ? __pfx_kthread+0x10/0x10 [ 249.935400][ C1] ret_from_fork_asm+0x1a/0x30 [ 249.935443][ C1] [ 249.935453][ C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 250.126993][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 250.127027][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.127051][ C1] Call Trace: [ 250.127061][ C1] [ 250.127070][ C1] dump_stack_lvl+0x189/0x250 [ 250.127119][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.127156][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 250.127190][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 250.127227][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.127275][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 250.127339][ C1] f2fs_write_end_io+0x886/0xb60 [ 250.127393][ C1] blk_update_request+0x57e/0xe60 [ 250.127444][ C1] blk_mq_end_request+0x3e/0x70 [ 250.127480][ C1] blk_done_softirq+0x10a/0x160 [ 250.127541][ C1] handle_softirqs+0x27d/0x880 [ 250.127587][ C1] ? run_ksoftirqd+0x9b/0x100 [ 250.127637][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 250.127692][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 250.127738][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 250.127834][ C1] run_ksoftirqd+0x9b/0x100 [ 250.127870][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 250.127953][ C1] smpboot_thread_fn+0x542/0xa60 [ 250.128013][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 250.128103][ C1] kthread+0x711/0x8a0 [ 250.128130][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 250.128172][ C1] ? __pfx_kthread+0x10/0x10 [ 250.128206][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.128239][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.128284][ C1] ? __pfx_kthread+0x10/0x10 [ 250.128307][ C1] ret_from_fork+0x599/0xb30 [ 250.128357][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 250.128397][ C1] ? __switch_to_asm+0x39/0x70 [ 250.128420][ C1] ? __switch_to_asm+0x33/0x70 [ 250.128452][ C1] ? __pfx_kthread+0x10/0x10 [ 250.128487][ C1] ret_from_fork_asm+0x1a/0x30 [ 250.128537][ C1] [ 250.128546][ C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 250.331936][ T5826] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 251.660775][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 251.701392][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 252.044406][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 252.197212][ T8619] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 252.222940][ T8619] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 252.272590][ T8622] loop4: detected capacity change from 0 to 512 [ 252.296397][ T8622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.398141][ T8622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 252.420775][ T8622] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.685414][ T8622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 254.886832][ T8633] loop3: detected capacity change from 0 to 32768 [ 254.944704][ T8633] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 254.988239][ T8633] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 255.200205][ T8658] loop4: detected capacity change from 0 to 2048 [ 255.213478][ T8633] XFS (loop3): Ending clean mount [ 255.278177][ T8633] XFS (loop3): Quotacheck needed: Please wait. [ 255.288238][ T8658] loop4: p1 < > p4 [ 255.306276][ T8658] loop4: p4 size 8388608 extends beyond EOD, truncated [ 255.380826][ T8633] XFS (loop3): Quotacheck: Done. [ 255.541309][ T5826] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 255.600938][ T8665] loop2: detected capacity change from 0 to 512 [ 255.612299][ T8665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.699856][ T8665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 255.764283][ T8665] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.071087][ T8673] loop4: detected capacity change from 0 to 512 [ 256.128250][ T8665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 256.139503][ T8673] EXT4-fs: Ignoring removed nobh option [ 256.180124][ T8673] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.791: iget: bad i_size value: 38620345925642 [ 256.245633][ T8673] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.791: couldn't read orphan inode 15 (err -117) [ 256.338647][ T8673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.030812][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 257.163690][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 257.378206][ T8694] +: renamed from syzkaller0 [ 257.431020][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.783899][ T8716] loop2: detected capacity change from 0 to 512 [ 258.862511][ T8716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.903531][ T8716] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.934140][ T8716] EXT4-fs error (device loop2): ext4_do_update_inode:5636: inode #2: comm syz.2.803: corrupted inode contents [ 258.953919][ T8716] EXT4-fs error (device loop2): ext4_dirty_inode:6521: inode #2: comm syz.2.803: mark_inode_dirty error [ 258.986843][ T8716] EXT4-fs error (device loop2): ext4_do_update_inode:5636: inode #2: comm syz.2.803: corrupted inode contents [ 259.068077][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.078358][ T8702] loop3: detected capacity change from 0 to 32768 [ 259.128635][ T8702] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: chain list count 1 [ 259.147569][ T8699] loop1: detected capacity change from 0 to 32768 [ 259.165522][ T8702] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 259.186238][ T8702] OCFS2: File system is now read-only. [ 259.199167][ T8699] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 259.212293][ T8702] (syz.3.799,8702,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 259.232379][ T8699] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 259.241450][ T8702] (syz.3.799,8702,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 259.251683][ T8702] (syz.3.799,8702,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 259.262916][ T8702] (syz.3.799,8702,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 259.305608][ T8702] (syz.3.799,8702,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 259.331454][ T8699] XFS (loop1): Ending clean mount [ 259.345767][ T8702] (syz.3.799,8702,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 259.367624][ T8699] XFS (loop1): Quotacheck needed: Please wait. [ 259.469083][ T8699] XFS (loop1): Quotacheck: Done. [ 259.546603][ T5822] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 259.728468][ T8740] loop2: detected capacity change from 0 to 512 [ 259.763424][ T8740] EXT4-fs: Ignoring removed nobh option [ 259.804750][ T8740] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.808: iget: bad i_size value: 38620345925642 [ 259.868336][ T8740] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.808: couldn't read orphan inode 15 (err -117) [ 259.890999][ T8702] autofs: Unknown parameter 'fd0x0000000000000000' [ 259.947970][ T8740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.995463][ T8702] loop3: detected capacity change from 0 to 2048 [ 260.002696][ T8702] udf: Unknown parameter '1844674407370955161500000000000000000000' [ 260.293542][ T8746] bridge_slave_0: left allmulticast mode [ 260.347206][ T8746] bridge_slave_0: left promiscuous mode [ 260.406747][ T8584] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 260.569981][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.717416][ T8746] bridge_slave_1: left allmulticast mode [ 260.743006][ T8746] bridge_slave_1: left promiscuous mode [ 260.779914][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.869429][ T8746] bond0: (slave bond_slave_0): Releasing backup interface [ 260.911977][ T8746] bond0: (slave bond_slave_1): Releasing backup interface [ 260.979346][ T8746] team0: Port device team_slave_0 removed [ 261.004443][ T8746] team0: Port device team_slave_1 removed [ 261.021842][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.041159][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.061770][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.080621][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.092644][ T8746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 261.236903][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.438334][ T8760] loop1: detected capacity change from 0 to 512 [ 261.502814][ T8760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.550978][ T8760] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.590840][ T8760] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #2: comm syz.1.815: corrupted inode contents [ 261.626116][ T8760] EXT4-fs error (device loop1): ext4_dirty_inode:6521: inode #2: comm syz.1.815: mark_inode_dirty error [ 261.653521][ T8760] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #2: comm syz.1.815: corrupted inode contents [ 261.759035][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.148748][ T8787] bridge_slave_0: left allmulticast mode [ 262.155986][ T8787] bridge_slave_0: left promiscuous mode [ 262.162277][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.208594][ T8787] bridge_slave_1: left allmulticast mode [ 262.234287][ T8787] bridge_slave_1: left promiscuous mode [ 262.247857][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.289902][ T8787] bond0: (slave bond_slave_0): Releasing backup interface [ 262.324854][ T8787] bond0: (slave bond_slave_1): Releasing backup interface [ 262.356835][ T8787] team0: Port device team_slave_0 removed [ 262.405044][ T8787] team0: Port device team_slave_1 removed [ 262.422394][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.455117][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.488974][ T8787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 262.986403][ T8775] loop4: detected capacity change from 0 to 32768 [ 263.209002][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.221479][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.710248][ T8775] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: chain list count 1 [ 263.794713][ T8783] loop1: detected capacity change from 0 to 32768 [ 263.803184][ T8775] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 263.823783][ T8775] OCFS2: File system is now read-only. [ 263.829310][ T8775] (syz.4.819,8775,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 263.854562][ T8775] (syz.4.819,8775,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 263.861013][ T8783] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.874261][ T8775] (syz.4.819,8775,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 263.896578][ T8775] (syz.4.819,8775,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 263.923805][ T8775] (syz.4.819,8775,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 263.942246][ T8775] (syz.4.819,8775,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 263.993112][ T31] audit: type=1326 audit(1762882177.299:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.021744][ T8783] XFS (loop1): Ending clean mount [ 264.028906][ T8791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'. [ 264.062441][ T8783] XFS (loop1): Quotacheck needed: Please wait. [ 264.068872][ T8789] loop2: detected capacity change from 0 to 32768 [ 264.070887][ T31] audit: type=1326 audit(1762882177.299:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.103924][ T31] audit: type=1326 audit(1762882177.299:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.131701][ T31] audit: type=1326 audit(1762882177.299:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.171902][ T8789] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 264.305790][ T31] audit: type=1326 audit(1762882177.299:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.357168][ T8789] XFS (loop2): Ending clean mount [ 264.377548][ T8783] XFS (loop1): Quotacheck: Done. [ 264.431585][ T8789] XFS (loop2): Quotacheck needed: Please wait. [ 264.448156][ T31] audit: type=1326 audit(1762882177.299:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.502594][ T31] audit: type=1326 audit(263.929:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.555567][ T31] audit: type=1326 audit(263.929:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.556338][ T8775] autofs: Unknown parameter 'fd0x0000000000000000' [ 264.622701][ T5822] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 264.656821][ T31] audit: type=1326 audit(263.929:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.685277][ T8789] XFS (loop2): Quotacheck: Done. [ 264.748236][ T8825] loop4: detected capacity change from 0 to 2048 [ 264.766923][ T31] audit: type=1326 audit(263.929:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 264.789572][ T8825] udf: Unknown parameter '1844674407370955161500000000000000000000' [ 264.964315][ T8832] netlink: 'syz.3.833': attribute type 10 has an invalid length. [ 265.002649][ T8832] team0: Port device dummy0 added [ 265.017022][ T8834] netlink: 'syz.3.833': attribute type 10 has an invalid length. [ 265.096793][ T8834] team0: Port device dummy0 removed [ 265.131743][ T5829] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 265.142813][ T8834] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 265.384259][ T8838] +: renamed from syzkaller0 [ 265.387640][ T8841] loop1: detected capacity change from 0 to 256 [ 265.517812][ T8841] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 265.594187][ T8841] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 265.631072][ T8841] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 265.643828][ T8841] exFAT-fs (loop1): Filesystem has been set read-only [ 265.684527][ T8841] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 265.703080][ T8841] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 266.822179][ T8851] loop4: detected capacity change from 0 to 32768 [ 266.859307][ T8851] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.876920][ T8857] loop2: detected capacity change from 0 to 32768 [ 266.912962][ T8857] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: chain list count 1 [ 266.933622][ T8851] XFS (loop4): Ending clean mount [ 266.945342][ T8851] XFS (loop4): Quotacheck needed: Please wait. [ 266.952051][ T8857] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 266.991052][ T8857] OCFS2: File system is now read-only. [ 266.997081][ T8857] (syz.2.844,8857,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 267.021107][ T8851] XFS (loop4): Quotacheck: Done. [ 267.038763][ T8857] (syz.2.844,8857,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 267.079980][ T8857] (syz.2.844,8857,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 267.100594][ T5832] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 267.109438][ T8857] (syz.2.844,8857,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 267.109476][ T8857] (syz.2.844,8857,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 267.122947][ T8857] (syz.2.844,8857,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 267.260266][ T8861] loop3: detected capacity change from 0 to 32768 [ 267.294252][ T8861] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 267.352309][ T8861] XFS (loop3): Ending clean mount [ 267.380975][ T8861] XFS (loop3): Quotacheck needed: Please wait. [ 267.463833][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 267.479454][ T8861] XFS (loop3): Quotacheck: Done. [ 267.592943][ T8903] loop1: detected capacity change from 0 to 512 [ 267.624263][ T8903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.670570][ T5826] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 267.693537][ T8903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 267.811448][ T8857] loop2: detected capacity change from 0 to 2048 [ 267.834807][ T8857] udf: Unknown parameter '1844674407370955161500000000000000000000' [ 267.950073][ T8903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 267.970202][ T8910] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 268.015610][ T8910] bond0: (slave dummy0): Releasing backup interface [ 268.024870][ T8913] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 268.085289][ T8910] team0: Port device dummy0 added [ 268.147316][ T8913] team0: Port device dummy0 removed [ 268.186980][ T8913] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 269.029186][ T8954] netlink: 'syz.4.877': attribute type 10 has an invalid length. [ 269.083031][ T8957] netlink: 'syz.4.877': attribute type 10 has an invalid length. [ 269.094728][ T8954] bond0: (slave dummy0): Releasing backup interface [ 269.156565][ T8954] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 269.190989][ T8954] team0: Failed to send options change via netlink (err -105) [ 269.219692][ T8954] team0: Port device dummy0 added [ 269.235113][ T8957] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 269.264732][ T8919] loop1: detected capacity change from 0 to 32768 [ 269.271850][ T8957] team0: Failed to send options change via netlink (err -105) [ 269.280081][ T8957] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 269.293466][ T8957] team0: Port device dummy0 removed [ 269.308121][ T8919] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.318709][ T8957] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 269.366822][ T8919] XFS (loop1): Ending clean mount [ 269.384277][ T8919] XFS (loop1): Quotacheck needed: Please wait. [ 269.450748][ T8919] XFS (loop1): Quotacheck: Done. [ 269.503060][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 269.503083][ T31] audit: type=1804 audit(269.419:731): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.862" name="/newroot/182/file0/bus" dev="loop1" ino=4430 res=1 errno=0 [ 269.633665][ T5822] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.917404][ T8941] loop3: detected capacity change from 0 to 32768 [ 270.006887][ T8941] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: chain list count 1 [ 270.044781][ T8941] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 270.067691][ T8941] OCFS2: File system is now read-only. [ 270.073262][ T8941] (syz.3.871,8941,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 270.081761][ T8941] (syz.3.871,8941,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 270.091582][ T8941] (syz.3.871,8941,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 270.101957][ T8941] (syz.3.871,8941,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 270.111002][ T8941] (syz.3.871,8941,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 270.119984][ T8941] (syz.3.871,8941,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 270.304285][ T8982] atomic_op ffff88807ca97998 conn xmit_atomic 0000000000000000 [ 270.557104][ T8941] loop3: detected capacity change from 0 to 2048 [ 270.574566][ T8941] udf: Unknown parameter '1844674407370955161500000000000000000000' [ 270.782638][ T8993] tipc: Enabling of bearer rejected, failed to enable media [ 271.198659][ T9014] netem: change failed [ 271.566173][ T9028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'. [ 271.586428][ T9028] IPVS: Unknown mcast interface: vetN1_macvtap [ 273.329740][ T9046] loop4: detected capacity change from 0 to 32768 [ 273.669134][ T9094] netlink: 'syz.3.926': attribute type 3 has an invalid length. [ 273.905401][ T9107] atomic_op ffff888059cc9998 conn xmit_atomic 0000000000000000 [ 274.763684][ T9142] netlink: 48 bytes leftover after parsing attributes in process `syz.0.945'. [ 274.807695][ T9143] batadv1: entered promiscuous mode [ 274.822596][ T9143] batadv1: entered allmulticast mode [ 274.877859][ T9145] loop2: detected capacity change from 0 to 512 [ 274.901058][ T9145] ext4: Unknown parameter 'obj_user' [ 275.442389][ T9137] infiniband syz!: set active [ 275.466460][ T9137] infiniband syz!: added team_slave_0 [ 275.569481][ T9137] RDS/IB: syz!: added [ 275.574567][ T9137] smc: adding ib device syz! with port count 1 [ 275.592530][ T9137] smc: ib device syz! port 1 has no pnetid [ 276.107937][ T9188] netlink: 'syz.0.965': attribute type 3 has an invalid length. [ 276.296107][ T9193] tipc: Enabling of bearer rejected, failed to enable media [ 276.429670][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.968'. [ 276.467349][ T9199] IPVS: Unknown mcast interface: ip [ 276.875135][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 277.845044][ T9221] loop3: detected capacity change from 0 to 32768 [ 277.934661][ T9239] bond0: (slave dummy0): Releasing backup interface [ 277.971310][ T9221] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 277.991961][ T9247] netlink: 'syz.4.985': attribute type 10 has an invalid length. [ 278.041848][ T9247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.985'. [ 278.067088][ T9221] XFS (loop3): Ending clean mount [ 278.076386][ T9239] bond0: (slave bond_slave_0): Releasing backup interface [ 278.087906][ T9221] XFS (loop3): Quotacheck needed: Please wait. [ 278.136466][ T9239] bond0: (slave bond_slave_1): Releasing backup interface [ 278.174674][ T9221] XFS (loop3): Quotacheck: Done. [ 278.211454][ T31] audit: type=1804 audit(278.129:732): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.979" name="/newroot/179/file0/bus" dev="loop3" ino=4430 res=1 errno=0 [ 278.255950][ T9239] team0: Port device team_slave_0 removed [ 278.307736][ T9239] team0: Port device team_slave_1 removed [ 278.317443][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.322834][ T5826] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.333939][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.364490][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.405433][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.490457][ T9239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 278.568096][ T9247] batman_adv: batadv0: Adding interface: virt_wifi0 [ 278.596062][ T9247] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.684923][ T9247] batman_adv: batadv0: Interface activated: virt_wifi0 [ 279.098408][ T9270] random: crng reseeded on system resumption [ 280.103029][ T9299] loop2: detected capacity change from 0 to 256 [ 280.122326][ T9299] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 280.146011][ T9299] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 280.209470][ T9299] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 280.227905][ T9299] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 280.398921][ T31] audit: type=1326 audit(280.299:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.4.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 280.437694][ T31] audit: type=1326 audit(280.299:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.4.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 280.460142][ T31] audit: type=1326 audit(280.309:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.4.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 280.483225][ T31] audit: type=1326 audit(280.309:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.4.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 280.507656][ T31] audit: type=1326 audit(280.309:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.4.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 280.534819][ T31] audit: type=1326 audit(280.309:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.4.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 280.581704][ T31] audit: type=1326 audit(280.449:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.4.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 280.609576][ T31] audit: type=1326 audit(280.449:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.4.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 280.691231][ T31] audit: type=1326 audit(280.489:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.4.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 280.976594][ T9332] loop4: detected capacity change from 0 to 256 [ 281.033805][ T9332] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 281.093904][ T9332] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 281.162013][ T9332] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 281.192627][ T9332] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 281.358867][ T9313] loop2: detected capacity change from 0 to 32768 [ 281.384886][ T9313] btrfs: Deprecated parameter 'usebackuproot' [ 281.415564][ T9313] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 281.456126][ T9313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1014 (9313) [ 281.498410][ T9313] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.514034][ T9313] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 281.683999][ T9313] BTRFS info (device loop2): rebuilding free space tree [ 281.770462][ T9313] BTRFS info (device loop2): allowing degraded mounts [ 281.782533][ T9381] loop4: detected capacity change from 0 to 256 [ 281.794664][ T9313] BTRFS info (device loop2): enabling ssd optimizations [ 281.801925][ T9378] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 281.815814][ T9313] BTRFS info (device loop2): turning on flush-on-commit [ 281.821232][ T9381] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 281.822817][ T9313] BTRFS info (device loop2): enabling free space tree [ 281.878390][ T9381] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 281.893038][ T9313] BTRFS info (device loop2): force clearing of disk cache [ 281.923817][ T9313] BTRFS info (device loop2): trying to use backup root at mount time [ 281.926653][ T9381] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 281.931973][ T9313] BTRFS info (device loop2): use zstd compression, level 3 [ 281.967126][ T9381] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 282.184627][ T9395] netlink: 24 bytes leftover after parsing attributes in process `gtp'. [ 282.294226][ T9395] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 282.400389][ T5829] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.719336][ T9437] loop3: detected capacity change from 0 to 4096 [ 283.746836][ T9437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.748135][ T9444] loop4: detected capacity change from 0 to 512 [ 283.767687][ T9444] EXT4-fs: Ignoring removed nobh option [ 283.782820][ T9444] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1067: iget: bad i_size value: 38620345925642 [ 283.798369][ T9444] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1067: couldn't read orphan inode 15 (err -117) [ 283.818591][ T9444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.886624][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.988466][ T9459] loop1: detected capacity change from 0 to 2048 [ 285.028637][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.068902][ T9459] Alternate GPT is invalid, using primary GPT. [ 285.075313][ T9459] loop1: p1 p2 p3 [ 285.079155][ T9459] loop1: partition table partially beyond EOD, truncated [ 285.170350][ T9468] netlink: 'syz.4.1077': attribute type 10 has an invalid length. [ 285.187563][ T9468] team0: Failed to send options change via netlink (err -105) [ 285.212979][ T9468] team0: Port device dummy0 added [ 285.224939][ T9469] netlink: 'syz.4.1077': attribute type 10 has an invalid length. [ 285.275857][ T9469] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 285.311509][ T9469] team0: Failed to send options change via netlink (err -105) [ 285.344384][ T9469] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 285.370911][ T9469] team0: Port device dummy0 removed [ 285.379221][ T9473] netlink: 24 bytes leftover after parsing attributes in process `gtp'. [ 285.392124][ T9474] loop1: detected capacity change from 0 to 256 [ 285.408584][ T9469] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 285.441189][ T9474] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 285.504436][ T9474] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 285.551575][ T9473] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 285.578795][ T9474] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 285.599729][ T9474] exFAT-fs (loop1): Filesystem has been set read-only [ 285.683501][ T9456] loop2: detected capacity change from 0 to 32768 [ 285.793547][ T9487] loop1: detected capacity change from 0 to 512 [ 285.804617][ T9456] find_entry called with index = 0 [ 285.815641][ T9487] EXT4-fs: Ignoring removed nobh option [ 285.820294][ T9456] read_mapping_page failed! [ 285.842878][ T9456] ERROR: (device loop2): txCommit: [ 285.842878][ T9456] [ 285.861786][ T9487] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1084: iget: bad i_size value: 38620345925642 [ 285.862371][ T9456] find_entry called with index = 0 [ 285.896153][ T9456] read_mapping_page failed! [ 285.912055][ T9456] ERROR: (device loop2): txCommit: [ 285.912055][ T9456] [ 285.921543][ T9487] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1084: couldn't read orphan inode 15 (err -117) [ 285.966304][ T9487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.750513][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1092'. [ 286.880869][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.107956][ T9524] loop1: detected capacity change from 0 to 256 [ 287.136905][ T9524] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 287.149908][ T9525] loop2: detected capacity change from 0 to 2048 [ 287.196752][ T9524] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 287.207395][ T9525] Alternate GPT is invalid, using primary GPT. [ 287.213952][ T9525] loop2: p1 p2 p3 [ 287.217727][ T9525] loop2: partition table partially beyond EOD, truncated [ 287.275613][ T9524] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 287.298785][ T9524] exFAT-fs (loop1): Filesystem has been set read-only [ 287.796198][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 287.818472][ T9520] loop3: detected capacity change from 0 to 32768 [ 287.896669][ T9520] find_entry called with index = 0 [ 287.932150][ T9520] read_mapping_page failed! [ 287.954965][ T9520] ERROR: (device loop3): txCommit: [ 287.954965][ T9520] [ 287.995955][ T9520] find_entry called with index = 0 [ 288.001205][ T9520] read_mapping_page failed! [ 288.023920][ T9520] ERROR: (device loop3): txCommit: [ 288.023920][ T9520] [ 288.489384][ T9584] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.507284][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'. [ 289.166275][ T9593] loop2: detected capacity change from 0 to 8192 [ 289.245527][ T9593] loop2: p2 p3 p4 [ 289.263973][ T9593] loop2: p2 start 164919041 is beyond EOD, truncated [ 289.300407][ T9593] loop2: p3 size 66846464 extends beyond EOD, truncated [ 289.334045][ T9593] loop2: p4 size 37048832 extends beyond EOD, truncated [ 289.349073][ T9605] netlink: 660 bytes leftover after parsing attributes in process `syz.0.1130'. [ 289.429110][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 289.464150][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 289.496781][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 289.534398][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 289.568789][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 289.715099][ T9589] loop1: detected capacity change from 0 to 32768 [ 290.037464][ T9589] find_entry called with index = 0 [ 290.043441][ T9589] read_mapping_page failed! [ 290.053504][ T9589] ERROR: (device loop1): txCommit: [ 290.053504][ T9589] [ 290.064162][ T9589] find_entry called with index = 0 [ 290.069410][ T9589] read_mapping_page failed! [ 290.074008][ T9589] ERROR: (device loop1): txCommit: [ 290.074008][ T9589] [ 291.181544][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 291.181565][ T31] audit: type=1326 audit(291.099:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9639 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 291.303328][ T31] audit: type=1326 audit(291.099:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9639 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 291.339123][ T31] audit: type=1326 audit(291.149:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9639 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 291.366971][ T31] audit: type=1326 audit(291.149:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9639 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 291.678183][ T31] audit: type=1326 audit(291.149:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9639 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 291.717341][ T9650] netlink: 'syz.3.1151': attribute type 10 has an invalid length. [ 292.098957][ T9651] netlink: 'syz.3.1151': attribute type 10 has an invalid length. [ 292.380456][ T9650] bond0: (slave dummy0): Releasing backup interface [ 292.401126][ T9650] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 292.423429][ T9650] team0: Failed to send options change via netlink (err -105) [ 293.388322][ T9650] team0: Port device dummy0 added [ 293.394958][ T9647] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 293.407415][ T9647] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 293.417096][ T9647] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 293.592346][ T9651] team0: Port device dummy0 removed [ 293.604986][ T9651] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 293.768085][ T9676] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 294.142668][ T9693] netlink: 24 bytes leftover after parsing attributes in process `gtp'. [ 294.267393][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 294.874533][ T9716] xt_hashlimit: max too large, truncated to 1048576 [ 294.975852][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 295.007839][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 295.105095][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 296.661857][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 297.630214][ T9787] loop1: detected capacity change from 0 to 128 [ 297.653667][ T9787] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 297.706588][ T31] audit: type=1800 audit(297.629:767): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1204" name="bus" dev="loop1" ino=1048643 res=0 errno=0 [ 297.975967][ T9787] syz.1.1204: attempt to access beyond end of device [ 297.975967][ T9787] loop1: rw=2049, sector=161, nr_sectors = 16 limit=128 [ 297.992087][ T9787] syz.1.1204: attempt to access beyond end of device [ 297.992087][ T9787] loop1: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 298.015111][ T9787] syz.1.1204: attempt to access beyond end of device [ 298.015111][ T9787] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 298.032159][ T9787] syz.1.1204: attempt to access beyond end of device [ 298.032159][ T9787] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 298.046415][ T9787] syz.1.1204: attempt to access beyond end of device [ 298.046415][ T9787] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 298.069731][ T9787] syz.1.1204: attempt to access beyond end of device [ 298.069731][ T9787] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 298.084305][ T9787] syz.1.1204: attempt to access beyond end of device [ 298.084305][ T9787] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 298.312899][ T9787] syz.1.1204: attempt to access beyond end of device [ 298.312899][ T9787] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 298.328688][ T9787] syz.1.1204: attempt to access beyond end of device [ 298.328688][ T9787] loop1: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 298.344061][ T9787] syz.1.1204: attempt to access beyond end of device [ 298.344061][ T9787] loop1: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 298.377459][ T9797] 8021q: VLANs not supported on ip6_vti0 [ 298.959271][ T9801] team0: No ports can be present during mode change [ 299.364187][ T7741] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 299.419175][ T31] audit: type=1326 audit(299.339:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 299.490565][ T9814] loop4: detected capacity change from 0 to 128 [ 299.499853][ T31] audit: type=1326 audit(299.339:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 299.530862][ T9814] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.561785][ T9816] netlink: 24 bytes leftover after parsing attributes in process `gtp'. [ 299.580625][ T9814] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.591331][ T31] audit: type=1326 audit(299.379:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 299.632611][ T31] audit: type=1326 audit(299.379:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 299.671326][ T9816] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 299.694012][ T31] audit: type=1326 audit(299.379:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 299.756487][ T31] audit: type=1326 audit(299.389:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 299.780440][ T31] audit: type=1326 audit(299.389:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 299.815261][ T31] audit: type=1326 audit(299.389:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 299.861291][ T31] audit: type=1326 audit(299.389:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 299.902480][ T9828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.911080][ T9828] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 299.952224][ T9828] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 300.088821][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 300.311184][ T9847] 9p: Bad value for 'wfdno' [ 300.322167][ T9838] bridge2: entered promiscuous mode [ 300.428706][ T7723] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 301.080118][ T9880] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 302.166226][ T9927] batman_adv: batadv0: Interface deactivated: dummy0 [ 302.226198][ T9927] batman_adv: batadv0: Removing interface: dummy0 [ 302.329833][ T9927] bridge_slave_0: left allmulticast mode [ 302.359627][ T9927] bridge_slave_0: left promiscuous mode [ 302.395003][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.466318][ T9927] bridge_slave_1: left allmulticast mode [ 302.502788][ T9927] bridge_slave_1: left promiscuous mode [ 302.527250][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.597825][ T9927] bond0: (slave bond_slave_0): Releasing backup interface [ 302.654614][ T9927] bond0: (slave bond_slave_1): Releasing backup interface [ 302.748153][ T9927] team0: Port device team_slave_0 removed [ 302.806104][ T9927] team0: Port device team_slave_1 removed [ 302.838348][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.879781][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.923465][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.953820][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.980419][ T9927] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.095471][ T794] syz!: Port: 1 Link DOWN [ 303.482865][ T9972] loop4: detected capacity change from 0 to 256 [ 303.564531][ T31] kauditd_printk_skb: 231 callbacks suppressed [ 303.564551][ T31] audit: type=1804 audit(303.479:1008): pid=9972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1271" name="/newroot/268/file0/bus" dev="loop4" ino=1048645 res=1 errno=0 [ 304.185185][T10001] loop1: detected capacity change from 0 to 1024 [ 304.265421][T10001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.378231][ T31] audit: type=1800 audit(304.299:1009): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1282" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 304.423860][ T31] audit: type=1804 audit(304.329:1010): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1282" name="/newroot/264/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 304.468964][T10001] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 304.579132][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.690712][T10024] loop1: detected capacity change from 0 to 32768 [ 306.769268][T10024] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: chain list count 1 [ 306.822402][T10024] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 306.856327][T10024] OCFS2: File system is now read-only. [ 306.895423][T10024] (syz.1.1289,10024,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 306.934193][T10024] (syz.1.1289,10024,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 306.966569][T10024] (syz.1.1289,10024,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 307.001208][T10024] (syz.1.1289,10024,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 307.033405][T10024] (syz.1.1289,10024,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 307.065069][T10024] (syz.1.1289,10024,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 307.414723][ T31] audit: type=1326 audit(307.339:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 307.494665][ T31] audit: type=1326 audit(307.359:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 307.602873][ T31] audit: type=1326 audit(307.369:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 307.632054][ T31] audit: type=1326 audit(307.369:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 307.658254][ T31] audit: type=1326 audit(307.369:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 307.775266][T10024] loop1: detected capacity change from 0 to 2048 [ 307.782442][T10024] udf: Unknown parameter '1844674407370955161500000000000000000000' [ 307.974980][T10065] loop1: detected capacity change from 0 to 512 [ 307.975584][T10067] loop3: detected capacity change from 0 to 256 [ 307.997755][T10067] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 308.020975][T10065] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 308.023007][T10067] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 308.054348][T10067] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 308.063641][T10067] exFAT-fs (loop3): Filesystem has been set read-only [ 308.107309][T10065] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1308: bg 0: block 104: invalid block bitmap [ 308.121028][T10067] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 308.154353][T10067] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 308.176954][T10065] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 308.207308][T10065] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1308: invalid indirect mapped block 1 (level 1) [ 308.275299][T10065] EXT4-fs (loop1): 1 truncate cleaned up [ 308.282991][T10065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.439338][T10077] netlink: 'syz.0.1313': attribute type 32 has an invalid length. [ 308.481619][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.730630][T10092] netlink: 'syz.0.1318': attribute type 10 has an invalid length. [ 309.790069][T10092] team0: Failed to send options change via netlink (err -105) [ 309.794390][T10095] netlink: 'syz.0.1318': attribute type 10 has an invalid length. [ 309.805293][T10092] team0: Port device dummy0 added [ 309.876371][T10095] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 309.919233][T10095] team0: Failed to send options change via netlink (err -105) [ 309.956392][T10095] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 309.990815][T10095] team0: Port device dummy0 removed [ 310.037969][T10095] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.067118][ T31] audit: type=1326 audit(309.979:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 310.144392][ T31] audit: type=1326 audit(309.979:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 310.263361][ T31] audit: type=1326 audit(309.979:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 310.326685][ T31] audit: type=1326 audit(309.979:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 310.421470][ T31] audit: type=1326 audit(309.979:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 310.482795][ T31] audit: type=1326 audit(310.019:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 310.525394][ T31] audit: type=1326 audit(310.019:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 310.555272][ T31] audit: type=1326 audit(310.019:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 310.579343][ T31] audit: type=1326 audit(310.019:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 310.614551][ T31] audit: type=1326 audit(310.029:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 311.551831][T10121] bond0: (slave dummy0): Releasing backup interface [ 311.613285][T10121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 311.952917][T10130] loop1: detected capacity change from 0 to 8192 [ 312.103910][T10130] loop1: p2 p3 p4 [ 312.107918][T10130] loop1: p2 start 164919041 is beyond EOD, truncated [ 312.161649][T10130] loop1: p3 size 66846464 extends beyond EOD, truncated [ 312.199634][T10130] loop1: p4 size 37048832 extends beyond EOD, truncated [ 313.028267][T10149] loop3: detected capacity change from 0 to 2048 [ 313.117521][T10149] loop3: p1 < > p4 [ 313.153089][T10149] loop3: p4 size 8388608 extends beyond EOD, truncated [ 313.707599][T10171] netlink: 'syz.0.1351': attribute type 12 has an invalid length. [ 314.791233][T10192] loop3: detected capacity change from 0 to 2048 [ 314.874641][T10192] Alternate GPT is invalid, using primary GPT. [ 314.880982][T10192] loop3: p1 p2 p3 [ 314.884894][T10192] loop3: partition table partially beyond EOD, truncated [ 315.224174][T10199] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1363'. [ 315.254437][T10199] ksmbd: Unknown IPC event: 3, ignore. [ 315.412114][T10202] netlink: 'syz.1.1364': attribute type 3 has an invalid length. [ 315.426155][T10203] netlink: 133536 bytes leftover after parsing attributes in process `syz.2.1365'. [ 316.966680][T10221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 317.229810][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 318.078569][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 318.078590][ T31] audit: type=1326 audit(317.999:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.208420][ T31] audit: type=1326 audit(318.039:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.299065][ T31] audit: type=1326 audit(318.049:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.399246][ T31] audit: type=1326 audit(318.049:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.480602][ T31] audit: type=1326 audit(318.049:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.554817][ T31] audit: type=1326 audit(318.049:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.636742][ T31] audit: type=1326 audit(318.049:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.744002][ T31] audit: type=1326 audit(318.049:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.819067][ T31] audit: type=1326 audit(318.049:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.883852][ T31] audit: type=1326 audit(318.059:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 318.941911][T10234] loop3: detected capacity change from 0 to 8192 [ 319.016622][T10234] loop3: p2 p3 p4 [ 319.037008][T10234] loop3: p2 start 164919041 is beyond EOD, truncated [ 319.054069][T10234] loop3: p3 size 66846464 extends beyond EOD, truncated [ 319.075354][T10234] loop3: p4 size 37048832 extends beyond EOD, truncated [ 319.166661][T10245] loop4: detected capacity change from 0 to 2048 [ 319.223496][T10245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.456847][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1383'. [ 319.873413][ T5965] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 320.087383][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 320.114796][ T5965] usb 5-1: no configurations [ 320.143473][ T5965] usb 5-1: can't read configurations, error -22 [ 320.373785][ T5965] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 320.576492][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 320.608654][ T5965] usb 5-1: no configurations [ 320.633899][ T5965] usb 5-1: can't read configurations, error -22 [ 320.671086][ T5965] usb usb5-port1: attempt power cycle [ 320.906840][T10286] loop3: detected capacity change from 0 to 2048 [ 320.951829][T10283] loop1: detected capacity change from 0 to 1024 [ 320.983068][T10286] Alternate GPT is invalid, using primary GPT. [ 320.989873][T10286] loop3: p1 p2 p3 [ 320.993680][T10286] loop3: partition table partially beyond EOD, truncated [ 321.043406][T10283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.043938][ T5965] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 321.114692][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 321.134478][ T5965] usb 5-1: no configurations [ 321.139148][ T5965] usb 5-1: can't read configurations, error -22 [ 321.251414][T10283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1394: bg 0: block 88: padding at end of block bitmap is not set [ 321.286237][T10292] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1394'. [ 321.296035][ T5965] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 321.318021][T10292] hsr_slave_0: left promiscuous mode [ 321.335284][T10292] hsr_slave_1: left promiscuous mode [ 321.340902][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 321.350312][ T5965] usb 5-1: no configurations [ 321.374555][ T5965] usb 5-1: can't read configurations, error -22 [ 321.384820][ T5965] usb usb5-port1: unable to enumerate USB device [ 321.567352][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.906663][T10250] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 321.997569][T10250] EXT4-fs (loop4): Remounting filesystem read-only [ 322.879575][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.294152][T10328] sd 0:0:1:0: device reset [ 324.176334][ T7742] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.237153][ T7742] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.284144][ T7742] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.334983][ T7742] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.419721][ T31] kauditd_printk_skb: 161 callbacks suppressed [ 324.419741][ T31] audit: type=1326 audit(324.339:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 324.525352][ T31] audit: type=1326 audit(324.339:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 324.562505][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.569645][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.623450][ T31] audit: type=1326 audit(324.379:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 324.707922][ T31] audit: type=1326 audit(324.379:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 324.799564][ T31] audit: type=1326 audit(324.379:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 324.832695][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1421'. [ 324.853848][ T31] audit: type=1326 audit(324.389:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 324.903837][ T31] audit: type=1326 audit(324.389:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 324.968736][ T31] audit: type=1326 audit(324.389:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 325.008575][ T31] audit: type=1326 audit(324.399:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 325.086143][ T31] audit: type=1326 audit(324.399:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 325.465049][T10359] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 325.493958][T10359] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 325.543896][T10359] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 325.657826][T10366] +: renamed from syzkaller0 [ 326.118697][T10374] loop4: detected capacity change from 0 to 1024 [ 326.126584][T10375] loop2: detected capacity change from 0 to 128 [ 326.135716][T10374] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 326.158413][T10375] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 326.164075][T10374] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 326.201003][T10375] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 326.202680][T10374] JBD2: no valid journal superblock found [ 326.223033][T10374] EXT4-fs (loop4): Could not load journal inode [ 326.316077][ T7742] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 326.431943][T10379] loop3: detected capacity change from 0 to 764 [ 326.496325][T10379] Symlink component flag not implemented [ 326.502352][T10379] Symlink component flag not implemented [ 326.523642][T10379] Symlink component flag not implemented (129) [ 326.532439][T10379] Symlink component flag not implemented (6) [ 326.555816][T10379] rock: directory entry would overflow storage [ 326.562673][T10379] rock: sig=0x4f50, size=4, remaining=3 [ 326.571560][T10379] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 326.705400][T10393] loop1: detected capacity change from 0 to 256 [ 327.002432][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 327.074560][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'. [ 328.376639][T10424] loop4: detected capacity change from 0 to 32768 [ 328.403002][T10424] btrfs: Deprecated parameter 'usebackuproot' [ 328.422211][T10424] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 328.481356][T10424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1451 (10424) [ 328.514836][T10424] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.538051][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1461'. [ 328.538555][T10424] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 328.701491][T10424] BTRFS info (device loop4): rebuilding free space tree [ 328.746467][T10424] BTRFS info (device loop4): allowing degraded mounts [ 328.764512][T10424] BTRFS info (device loop4): enabling ssd optimizations [ 328.771535][T10424] BTRFS info (device loop4): turning on flush-on-commit [ 328.799942][T10424] BTRFS info (device loop4): enabling free space tree [ 328.813811][T10424] BTRFS info (device loop4): force clearing of disk cache [ 328.831426][T10424] BTRFS info (device loop4): trying to use backup root at mount time [ 328.845242][T10472] loop3: detected capacity change from 0 to 2048 [ 328.863984][T10424] BTRFS info (device loop4): use zstd compression, level 3 [ 328.967546][T10472] Alternate GPT is invalid, using primary GPT. [ 328.983193][T10472] loop3: p1 p2 p3 [ 328.999115][T10472] loop3: partition table partially beyond EOD, truncated [ 329.191777][ T5832] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.025819][T10499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 330.099007][T10499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 330.493875][T10503] loop4: detected capacity change from 0 to 32768 [ 330.558743][T10503] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: chain list count 1 [ 330.636027][T10503] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 330.683856][T10503] OCFS2: File system is now read-only. [ 330.689390][T10503] (syz.4.1473,10503,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 330.719371][T10503] (syz.4.1473,10503,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 330.744139][T10503] (syz.4.1473,10503,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 330.763869][T10503] (syz.4.1473,10503,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 330.772797][T10503] (syz.4.1473,10503,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 330.803851][T10503] (syz.4.1473,10503,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 331.089223][T10509] loop2: detected capacity change from 0 to 32768 [ 331.124880][T10509] btrfs: Deprecated parameter 'usebackuproot' [ 331.134871][T10509] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 331.188150][T10509] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1483 (10509) [ 331.263745][T10509] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.303891][T10509] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 331.396055][T10503] loop4: detected capacity change from 0 to 2048 [ 331.403288][T10503] udf: Unknown parameter '1844674407370955161500000000000000000000' [ 331.601268][T10509] BTRFS info (device loop2): rebuilding free space tree [ 331.811188][T10509] BTRFS info (device loop2): allowing degraded mounts [ 331.843802][T10509] BTRFS info (device loop2): enabling ssd optimizations [ 331.850897][T10509] BTRFS info (device loop2): turning on flush-on-commit [ 331.907113][T10509] BTRFS info (device loop2): enabling free space tree [ 331.933183][T10509] BTRFS info (device loop2): force clearing of disk cache [ 331.973842][T10509] BTRFS info (device loop2): trying to use backup root at mount time [ 332.003853][T10509] BTRFS info (device loop2): use zstd compression, level 3 [ 332.189565][T10556] loop4: detected capacity change from 0 to 512 [ 332.231523][T10556] EXT4-fs: Ignoring removed nobh option [ 332.272892][T10556] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1497: iget: bad i_size value: 38620345925642 [ 332.308260][T10556] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1497: couldn't read orphan inode 15 (err -117) [ 332.339683][T10556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.668658][ T5829] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 333.330843][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.397001][ T31] kauditd_printk_skb: 123 callbacks suppressed [ 333.397023][ T31] audit: type=1326 audit(333.319:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 333.503339][ T31] audit: type=1326 audit(333.319:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 333.578976][ T31] audit: type=1326 audit(333.319:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 333.684309][ T31] audit: type=1326 audit(333.319:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 333.742874][ T31] audit: type=1326 audit(333.319:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 333.776347][T10583] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 333.784446][ T31] audit: type=1326 audit(333.319:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 333.836789][T10585] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 333.853552][T10583] team0: Failed to send options change via netlink (err -105) [ 333.864043][T10583] team0: Port device dummy0 added [ 333.870076][T10585] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 333.883828][ T31] audit: type=1326 audit(333.319:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 333.933472][T10585] team0: Failed to send options change via netlink (err -105) [ 333.941734][ T31] audit: type=1326 audit(333.319:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 333.968516][T10585] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 333.982462][T10585] team0: Port device dummy0 removed [ 333.997406][ T31] audit: type=1326 audit(333.359:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 334.027556][T10585] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 334.036759][ T31] audit: type=1326 audit(333.529:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.3.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b378f6c9 code=0x7ffc0000 [ 334.208737][T10595] loop4: detected capacity change from 0 to 512 [ 334.225150][T10595] EXT4-fs: Ignoring removed nobh option [ 334.249173][T10595] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1513: iget: bad i_size value: 38620345925642 [ 334.283423][T10595] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1513: couldn't read orphan inode 15 (err -117) [ 334.306004][T10595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.463003][T10580] loop1: detected capacity change from 0 to 32768 [ 334.474053][T10580] btrfs: Deprecated parameter 'usebackuproot' [ 334.480299][T10580] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 334.491232][T10580] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1508 (10580) [ 334.566389][T10580] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.579729][T10580] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 335.135538][T10580] BTRFS info (device loop1): rebuilding free space tree [ 335.162739][T10580] BTRFS info (device loop1): allowing degraded mounts [ 335.169743][T10580] BTRFS info (device loop1): enabling ssd optimizations [ 335.177128][T10580] BTRFS info (device loop1): turning on flush-on-commit [ 335.185247][T10580] BTRFS info (device loop1): enabling free space tree [ 335.192110][T10580] BTRFS info (device loop1): force clearing of disk cache [ 335.200667][T10580] BTRFS info (device loop1): trying to use backup root at mount time [ 335.208932][T10580] BTRFS info (device loop1): use zstd compression, level 3 [ 335.441379][ T5822] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.462984][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.486801][T10617] loop2: detected capacity change from 0 to 8192 [ 335.553298][T10617] loop2: p2 p3 p4 [ 335.566362][T10617] loop2: p2 start 164919041 is beyond EOD, truncated [ 335.579280][T10617] loop2: p3 size 66846464 extends beyond EOD, truncated [ 335.599255][T10617] loop2: p4 size 37048832 extends beyond EOD, truncated [ 335.608123][T10628] loop3: detected capacity change from 0 to 1024 [ 335.658871][T10628] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 335.699089][T10628] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 335.749801][T10628] JBD2: no valid journal superblock found [ 335.758641][T10628] EXT4-fs (loop3): Could not load journal inode [ 337.931840][T10643] vlan2: entered allmulticast mode [ 337.937202][T10643] bridge_slave_0: entered allmulticast mode [ 337.974862][T10649] sch_fq: defrate 8 ignored. [ 338.197565][T10653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1526'. [ 338.519128][T10672] sd 0:0:1:0: device reset [ 339.020070][T10691] loop4: detected capacity change from 0 to 512 [ 339.084669][T10691] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 339.096848][T10657] loop1: detected capacity change from 0 to 32768 [ 339.125193][T10657] btrfs: Deprecated parameter 'usebackuproot' [ 339.144771][T10657] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 339.174681][T10657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1527 (10657) [ 339.211951][T10657] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 339.254166][T10657] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 339.430402][T10715] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 339.449840][T10657] BTRFS info (device loop1): rebuilding free space tree [ 339.551296][T10657] BTRFS info (device loop1): allowing degraded mounts [ 339.587344][T10657] BTRFS info (device loop1): enabling ssd optimizations [ 339.598271][T10657] BTRFS info (device loop1): turning on flush-on-commit [ 339.608025][T10657] BTRFS info (device loop1): enabling free space tree [ 339.624026][T10657] BTRFS info (device loop1): force clearing of disk cache [ 339.638039][T10657] BTRFS info (device loop1): trying to use backup root at mount time [ 339.661625][T10657] BTRFS info (device loop1): use zstd compression, level 3 [ 339.714777][T10727] netlink: 'syz.4.1551': attribute type 10 has an invalid length. [ 339.715911][T10728] loop2: detected capacity change from 0 to 1024 [ 339.738282][T10727] team0: Failed to send options change via netlink (err -105) [ 339.747873][T10727] team0: Port device dummy0 added [ 339.759929][T10727] netlink: 'syz.4.1551': attribute type 10 has an invalid length. [ 339.770537][T10727] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 339.776228][T10728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.793586][T10727] team0: Failed to send options change via netlink (err -105) [ 339.806681][T10727] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 339.806728][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 339.806743][ T31] audit: type=1800 audit(339.729:1423): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1552" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 339.818345][ T31] audit: type=1804 audit(339.729:1424): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1552" name="/newroot/273/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 339.823093][T10727] team0: Port device dummy0 removed [ 339.873132][T10727] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 339.887571][T10728] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 340.021642][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.043351][ T5822] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 340.493542][T10749] loop2: detected capacity change from 0 to 256 [ 340.528427][T10750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1560'. [ 340.555248][ T31] audit: type=1804 audit(340.469:1425): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1561" name="/newroot/276/file0/bus" dev="loop2" ino=1048651 res=1 errno=0 [ 340.777190][T10759] loop3: detected capacity change from 0 to 1024 [ 340.810907][T10759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.877490][ T31] audit: type=1800 audit(340.799:1426): pid=10759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1565" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 340.944796][ T31] audit: type=1804 audit(340.849:1427): pid=10759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1565" name="/newroot/298/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 340.962225][T10759] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 341.266427][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.650462][T10779] loop4: detected capacity change from 0 to 1024 [ 341.659808][T10755] loop2: detected capacity change from 0 to 32768 [ 341.674697][T10755] btrfs: Deprecated parameter 'usebackuproot' [ 341.680923][T10755] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 341.690741][T10779] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 341.703536][T10755] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1564 (10755) [ 341.717655][T10779] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 341.746123][T10779] JBD2: no valid journal superblock found [ 341.756473][T10755] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 341.772320][T10779] EXT4-fs (loop4): Could not load journal inode [ 341.787275][T10755] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 341.964080][T10755] BTRFS info (device loop2): rebuilding free space tree [ 341.998581][T10755] BTRFS info (device loop2): allowing degraded mounts [ 342.022849][T10755] BTRFS info (device loop2): enabling ssd optimizations [ 342.044065][T10755] BTRFS info (device loop2): turning on flush-on-commit [ 342.061309][T10755] BTRFS info (device loop2): enabling free space tree [ 342.073781][T10755] BTRFS info (device loop2): force clearing of disk cache [ 342.080965][T10755] BTRFS info (device loop2): trying to use backup root at mount time [ 342.112805][T10755] BTRFS info (device loop2): use zstd compression, level 3 [ 342.402899][ T5829] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.440529][T10828] loop4: detected capacity change from 0 to 1024 [ 343.470068][T10828] EXT4-fs: Ignoring removed nobh option [ 343.492077][T10828] EXT4-fs: Ignoring removed bh option [ 343.550289][T10830] loop2: detected capacity change from 0 to 1024 [ 343.568304][T10828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.588602][T10830] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 343.606741][T10830] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 343.623328][T10830] JBD2: no valid journal superblock found [ 343.637120][T10830] EXT4-fs (loop2): Could not load journal inode [ 343.663629][T10828] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 343.832034][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.235394][ T31] audit: type=1326 audit(344.159:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 344.243164][T10860] netlink: 'syz.0.1597': attribute type 10 has an invalid length. [ 344.290378][ T31] audit: type=1326 audit(344.159:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 344.313404][T10861] netlink: 'syz.0.1597': attribute type 10 has an invalid length. [ 344.324592][T10860] bond0: (slave dummy0): Releasing backup interface [ 344.363645][T10860] team0: Port device dummy0 added [ 344.367085][ T31] audit: type=1326 audit(344.159:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 344.412626][T10861] team0: Port device dummy0 removed [ 344.439355][T10861] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 344.476624][ T31] audit: type=1326 audit(344.159:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 344.548891][ T31] audit: type=1326 audit(344.159:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0023b8f6c9 code=0x7ffc0000 [ 344.722374][T10864] bond1: option resend_igmp: invalid value (1024) [ 344.757432][T10864] bond1: option resend_igmp: allowed values 0 - 255 [ 344.841888][T10864] bond1 (unregistering): Released all slaves [ 344.997142][T10878] loop2: detected capacity change from 0 to 1024 [ 345.011484][T10878] EXT4-fs: Ignoring removed orlov option [ 345.076776][T10878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.170127][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 345.170149][ T31] audit: type=1326 audit(345.089:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 345.219643][ T31] audit: type=1326 audit(345.089:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 345.240967][T10878] smc: net device bond0 applied user defined pnetid S [ 345.241960][ T31] audit: type=1326 audit(345.099:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 345.319329][T10884] smc: net device bond0 erased user defined pnetid S [ 345.345605][ T31] audit: type=1326 audit(345.099:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 345.376940][ T31] audit: type=1326 audit(345.099:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 345.402341][ T31] audit: type=1326 audit(345.109:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 345.426969][ T31] audit: type=1326 audit(345.109:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 345.449926][ T31] audit: type=1326 audit(345.109:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 345.512074][ T31] audit: type=1800 audit(345.119:1467): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1603" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 345.587462][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.633848][ T31] audit: type=1326 audit(345.119:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 346.005972][T10899] netlink: 'syz.2.1610': attribute type 10 has an invalid length. [ 346.066316][T10899] bond0: (slave dummy0): Releasing backup interface [ 346.076613][T10900] netlink: 'syz.2.1610': attribute type 10 has an invalid length. [ 346.112558][T10899] team0: Port device dummy0 added [ 346.196663][T10900] team0: Port device dummy0 removed [ 346.238881][T10900] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 347.356332][T10926] xt_hashlimit: max too large, truncated to 1048576 [ 347.584260][T10930] loop4: detected capacity change from 0 to 1024 [ 347.807161][T10930] EXT4-fs: Ignoring removed orlov option [ 347.842358][T10930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.961433][T10940] loop3: detected capacity change from 0 to 2048 [ 348.100678][T10940] Alternate GPT is invalid, using primary GPT. [ 348.107213][T10940] loop3: p1 p2 p3 [ 348.111156][T10940] loop3: partition table partially beyond EOD, truncated [ 348.578513][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.821317][T10955] loop4: detected capacity change from 0 to 256 [ 348.957130][T10960] xt_hashlimit: max too large, truncated to 1048576 [ 349.000074][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1633'. [ 349.531705][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 349.645474][T10969] tipc: Enabling of bearer rejected, failed to enable media [ 349.761411][T10976] +: renamed from syzkaller0 [ 349.920957][T10992] syzkaller1: entered promiscuous mode [ 349.930448][T10992] syzkaller1: entered allmulticast mode [ 350.125754][T11001] loop2: detected capacity change from 0 to 256 [ 350.199579][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 350.199598][ T31] audit: type=1804 audit(350.119:1476): pid=11001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1646" name="/newroot/293/file0/bus" dev="loop2" ino=1048653 res=1 errno=0 [ 350.498421][T11010] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1650'. [ 350.580835][ T31] audit: type=1326 audit(350.499:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 350.662731][ T31] audit: type=1326 audit(350.499:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 350.742792][ T31] audit: type=1326 audit(350.509:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 350.804545][ T31] audit: type=1326 audit(350.509:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 350.863614][ T31] audit: type=1326 audit(350.529:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 350.929916][ T31] audit: type=1326 audit(350.529:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 351.004054][ T31] audit: type=1326 audit(350.529:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 351.049541][ T31] audit: type=1326 audit(350.529:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 351.098633][ T31] audit: type=1326 audit(350.529:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 351.378141][T11031] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 351.575684][T11027] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 351.902678][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 352.194812][T11046] loop4: detected capacity change from 0 to 1024 [ 352.212425][T11046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.270187][T11046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.560526][T11060] loop1: detected capacity change from 0 to 1024 [ 352.622019][T11060] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 352.670733][T11060] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 352.753861][T11060] JBD2: no valid journal superblock found [ 352.759690][T11060] EXT4-fs (loop1): Could not load journal inode [ 353.462339][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 354.702742][T11100] loop9: detected capacity change from 0 to 7 [ 354.738596][T11100] buffer_io_error: 4 callbacks suppressed [ 354.738629][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.799427][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.836321][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.877580][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.933966][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 354.973144][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.011678][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.032491][T11100] ldm_validate_partition_table(): Disk read failed. [ 355.062281][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.092743][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.124407][T11100] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.132518][T11100] Dev loop9: unable to read RDB block 0 [ 355.156563][T11100] loop9: unable to read partition table [ 355.179303][T11100] loop9: partition table beyond EOD, truncated [ 355.203144][T11100] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 355.203144][T11100] ) failed (rc=-5) [ 356.903949][T11119] +: renamed from syzkaller0 [ 357.351621][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1694'. [ 357.376175][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1694'. [ 357.956509][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 357.956530][ T31] audit: type=1326 audit(357.879:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 358.012363][T11141] loop2: detected capacity change from 0 to 1024 [ 358.037767][ T31] audit: type=1326 audit(357.879:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 358.099925][T11141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.133915][ T31] audit: type=1326 audit(357.919:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 358.232418][T11141] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1698'. [ 358.241753][ T31] audit: type=1326 audit(357.919:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 358.264426][ T31] audit: type=1326 audit(357.919:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 358.620572][T11141] hsr_slave_0: left promiscuous mode [ 358.936853][T11141] hsr_slave_1: left promiscuous mode [ 359.049670][ T31] audit: type=1326 audit(357.919:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 359.072084][ T31] audit: type=1326 audit(357.919:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 359.097231][ T31] audit: type=1326 audit(357.919:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 359.124053][ T31] audit: type=1326 audit(357.919:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe72278f6c9 code=0x7ffc0000 [ 359.147436][ T31] audit: type=1326 audit(357.919:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.2.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe72278f703 code=0x7ffc0000 [ 359.203637][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.445544][T11159] netlink: 'syz.3.1704': attribute type 10 has an invalid length. [ 359.508571][T11160] netlink: 'syz.3.1704': attribute type 10 has an invalid length. [ 359.526087][T11159] bond0: (slave dummy0): Releasing backup interface [ 359.589384][T11160] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 360.206349][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 360.224461][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 360.253956][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'. [ 360.306360][T11172] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 361.362329][T11185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.686916][T11185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.898341][T11185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.122390][T11185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.454092][ T7725] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.546356][ T7725] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.564005][ T7725] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.657034][ T7725] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.915020][T11204] loop2: detected capacity change from 0 to 512 [ 363.245557][T11206] loop3: detected capacity change from 0 to 2048 [ 363.362159][T11206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.453634][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.478530][T11215] unsupported nla_type 52263 [ 363.493803][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 363.712248][T11217] loop2: detected capacity change from 0 to 2048 [ 364.147933][T11217] loop2: unable to read partition table [ 364.154010][T11217] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 364.456978][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 364.456999][ T31] audit: type=1326 audit(364.379:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ab8f6c9 code=0x7ffc0000 [ 364.565225][ T31] audit: type=1326 audit(364.419:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ab8f6c9 code=0x7ffc0000 [ 364.625833][T11227] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1725'. [ 364.633788][ T31] audit: type=1326 audit(364.419:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e7ab8f6c9 code=0x7ffc0000 [ 364.693897][T11227] hsr_slave_0: left promiscuous mode [ 364.700603][T11233] loop2: detected capacity change from 0 to 256 [ 364.701899][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.716850][T11227] hsr_slave_1: left promiscuous mode [ 364.724049][ T31] audit: type=1326 audit(364.419:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ab8f6c9 code=0x7ffc0000 [ 364.858337][ T31] audit: type=1326 audit(364.419:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ab8f6c9 code=0x7ffc0000 [ 364.916098][ T31] audit: type=1326 audit(364.419:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e7ab8f6c9 code=0x7ffc0000 [ 364.939093][ T31] audit: type=1326 audit(364.419:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ab8f6c9 code=0x7ffc0000 [ 364.992776][ T31] audit: type=1326 audit(364.419:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ab8f6c9 code=0x7ffc0000 [ 365.004159][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 365.019669][ T31] audit: type=1326 audit(364.419:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6e7ab8f6c9 code=0x7ffc0000 [ 365.094325][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 365.156769][ T31] audit: type=1326 audit(364.419:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e7ab8f703 code=0x7ffc0000 [ 366.197091][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 366.745266][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'. [ 367.082575][T11266] netlink: 'syz.3.1740': attribute type 10 has an invalid length. [ 367.714010][T11281] Bluetooth: MGMT ver 1.23 [ 368.018869][T11288] bond0: (slave dummy0): Releasing backup interface [ 368.109911][T11288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.144389][T11293] netlink: 'syz.3.1753': attribute type 10 has an invalid length. [ 368.404843][T11303] loop2: detected capacity change from 0 to 7 [ 368.436114][T11303] Dev loop2: unable to read RDB block 7 [ 368.459498][T11303] loop2: unable to read partition table [ 368.488407][T11303] loop2: partition table beyond EOD, truncated [ 368.516224][T11303] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 369.034256][T11317] +: renamed from syzkaller0 [ 369.036095][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'. [ 369.516115][T11332] netlink: 'syz.3.1766': attribute type 10 has an invalid length. [ 369.804108][T11341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1770'. [ 370.032636][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 370.032658][ T31] audit: type=1326 audit(369.949:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 370.105126][T11347] loop3: detected capacity change from 0 to 512 [ 370.123017][T11347] EXT4-fs: Ignoring removed nobh option [ 370.141178][ T31] audit: type=1326 audit(369.949:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 370.149469][T11345] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1772'. [ 370.211207][ T31] audit: type=1326 audit(369.949:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 370.244921][T11347] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1773: iget: bad i_size value: 38620345925642 [ 370.280288][T11347] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1773: couldn't read orphan inode 15 (err -117) [ 370.303311][ T31] audit: type=1326 audit(369.949:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 370.329804][T11347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.454389][ T31] audit: type=1326 audit(369.949:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 370.605602][ T31] audit: type=1326 audit(369.949:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 370.973808][ T31] audit: type=1326 audit(369.949:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 371.105821][ T31] audit: type=1326 audit(369.949:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 371.245681][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.255407][ T31] audit: type=1326 audit(369.949:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 371.384005][ T31] audit: type=1326 audit(369.949:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.1.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efdc6d8f703 code=0x7ffc0000 [ 371.579517][T11376] netlink: 'syz.2.1783': attribute type 10 has an invalid length. [ 371.930783][T11386] loop2: detected capacity change from 0 to 512 [ 371.996032][T11389] loop3: detected capacity change from 0 to 128 [ 372.026273][T11386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.029257][T11389] EXT4-fs: Ignoring removed nobh option [ 372.089756][T11389] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.264962][ T5826] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.514669][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.744991][T11401] loop2: detected capacity change from 0 to 512 [ 372.761614][T11401] EXT4-fs: Ignoring removed nobh option [ 372.835222][T11401] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1792: iget: bad i_size value: 38620345925642 [ 372.872095][T11401] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1792: couldn't read orphan inode 15 (err -117) [ 372.917593][T11401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.821969][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.016394][T11410] loop2: detected capacity change from 0 to 512 [ 374.068809][T11410] EXT4-fs warning (device loop2): ext4_enable_quotas:7181: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 374.119888][T11410] EXT4-fs (loop2): mount failed [ 374.654479][T11423] +: renamed from syzkaller0 [ 374.936859][T11429] loop2: detected capacity change from 0 to 512 [ 376.180831][ T31] kauditd_printk_skb: 151 callbacks suppressed [ 376.180854][ T31] audit: type=1326 audit(376.089:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 376.304176][ T31] audit: type=1326 audit(376.099:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 376.318895][T11449] +: renamed from syzkaller0 [ 376.343898][ T31] audit: type=1326 audit(376.099:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 376.393793][ T31] audit: type=1326 audit(376.099:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 376.443923][ T31] audit: type=1326 audit(376.099:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 376.493972][ T31] audit: type=1326 audit(376.099:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 376.537531][ T31] audit: type=1326 audit(376.099:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 376.613820][ T31] audit: type=1326 audit(376.099:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efdc6d8f6c9 code=0x7ffc0000 [ 376.682543][ T31] audit: type=1326 audit(376.099:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efdc6d8f703 code=0x7ffc0000 [ 376.735767][ T31] audit: type=1326 audit(376.099:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efdc6d8e17f code=0x7ffc0000 [ 377.704023][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 377.917559][T11460] loop2: detected capacity change from 0 to 512 [ 377.957187][T11460] EXT4-fs (loop2): orphan cleanup on readonly fs [ 377.998376][T11460] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1817: bad orphan inode 13 [ 378.047361][T11460] ext4_test_bit(bit=12, block=18) = 1 [ 378.083510][T11460] is_bad_inode(inode)=0 [ 378.093430][T11460] NEXT_ORPHAN(inode)=2130706432 [ 378.118892][T11460] max_ino=32 [ 378.122161][T11460] i_nlink=1 [ 378.152218][T11460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.243864][T11460] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 378.258120][T11465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.307271][T11460] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 378.401195][T11460] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1817: iget: bad i_size value: 360287970189639690 [ 378.446128][T11460] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1817: iget: bad i_size value: 360287970189639690 [ 378.527360][T11465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.586265][T11470] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.709688][T11467] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 378.837460][T11465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.943320][T11470] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.068647][T11465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.109153][T11470] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.249663][T11470] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.425422][ T7742] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.486492][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1823'. [ 379.509382][ T7729] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.655514][ T7723] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.665287][ T7723] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.698161][ T7742] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.764169][T11481] smc: net device bond0 applied user defined pnetid SYZ0 [ 379.788246][ T7742] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.806211][ T7742] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.862873][ T7723] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.973979][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.021538][T11483] +: renamed from syzkaller0 [ 380.833846][T11500] loop4: detected capacity change from 0 to 2048 [ 381.336933][T11500] loop4: unable to read partition table [ 381.342863][T11500] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 382.776937][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1846'. [ 383.792263][T11546] +: renamed from syzkaller0 [ 384.166273][T11550] ------------[ cut here ]------------ [ 384.171813][T11550] WARNING: ./include/linux/ns_common.h:255 at free_nsproxy+0x45f/0x560, CPU#1: syz.1.1853/11550 [ 384.182619][T11550] Modules linked in: [ 384.186639][T11550] CPU: 1 UID: 0 PID: 11550 Comm: syz.1.1853 Not tainted syzkaller #0 PREEMPT(full) [ 384.196153][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.206500][T11550] RIP: 0010:free_nsproxy+0x45f/0x560 [ 384.211851][T11550] Code: 77 33 33 00 90 0f 0b 90 e9 83 fd ff ff e8 69 33 33 00 4c 89 ff be 03 00 00 00 e8 bc ff 00 03 e9 8f fd ff ff e8 52 33 33 00 90 <0f> 0b 90 e9 0c fe ff ff e8 44 33 33 00 4c 89 ff be 03 00 00 00 e8 [ 384.232163][T11550] RSP: 0018:ffffc9000afc7a90 EFLAGS: 00010293 [ 384.239183][T11550] RAX: ffffffff818dec2e RBX: ffff888062f407b8 RCX: ffff88802e933d00 [ 384.247532][T11550] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 384.255705][T11550] RBP: 00000000ffffffff R08: ffff88802953d8cb R09: 1ffff110052a7b19 [ 384.263963][T11550] R10: dffffc0000000000 R11: ffffed10052a7b1a R12: dffffc0000000000 [ 384.271982][T11550] R13: 0000000000000000 R14: ffff88802953d800 R15: ffff88802953d8c8 [ 384.280639][T11550] FS: 0000000000000000(0000) GS:ffff888125fcc000(0000) knlGS:0000000000000000 [ 384.289820][T11550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.296554][T11550] CR2: 0000000000000000 CR3: 0000000083b14000 CR4: 00000000003526f0 [ 384.304694][T11550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 384.312732][T11550] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 384.320847][T11550] Call Trace: [ 384.324257][T11550] [ 384.327234][T11550] do_exit+0x6b8/0x2300 [ 384.331457][T11550] ? do_raw_spin_lock+0x121/0x290 [ 384.337062][T11550] ? __pfx_do_exit+0x10/0x10 [ 384.341775][T11550] do_group_exit+0x21c/0x2d0 [ 384.346910][T11550] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.352183][T11550] get_signal+0x1285/0x1340 [ 384.356870][T11550] arch_do_signal_or_restart+0x9a/0x7a0 [ 384.362565][T11550] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 384.368959][T11550] ? exit_to_user_mode_loop+0x55/0x4f0 [ 384.374578][T11550] exit_to_user_mode_loop+0x87/0x4f0 [ 384.379913][T11550] ? rcu_is_watching+0x15/0xb0 [ 384.384822][T11550] do_syscall_64+0x2e9/0xfa0 [ 384.389467][T11550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.395685][T11550] ? clear_bhb_loop+0x60/0xb0 [ 384.400429][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.406566][T11550] RIP: 0033:0x7efdc6d8f6c9 [ 384.411016][T11550] Code: Unable to access opcode bytes at 0x7efdc6d8f69f. [ 384.418150][T11550] RSP: 002b:00007efdc7b650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 384.426683][T11550] RAX: fffffffffffffe00 RBX: 00007efdc6fe5fa8 RCX: 00007efdc6d8f6c9 [ 384.434746][T11550] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efdc6fe5fa8 [ 384.443244][T11550] RBP: 00007efdc6fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 384.451815][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.459899][T11550] R13: 00007efdc6fe6038 R14: 00007fff8635f490 R15: 00007fff8635f578 [ 384.468140][T11550] [ 384.471196][T11550] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 384.478595][T11550] CPU: 1 UID: 0 PID: 11550 Comm: syz.1.1853 Not tainted syzkaller #0 PREEMPT(full) [ 384.487995][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.498086][T11550] Call Trace: [ 384.501405][T11550] [ 384.504363][T11550] dump_stack_lvl+0x99/0x250 [ 384.508998][T11550] ? __asan_memcpy+0x40/0x70 [ 384.513617][T11550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.518844][T11550] ? __pfx__printk+0x10/0x10 [ 384.523466][T11550] vpanic+0x237/0x6d0 [ 384.527462][T11550] ? __pfx_vpanic+0x10/0x10 [ 384.531980][T11550] ? is_bpf_text_address+0x26/0x2b0 [ 384.537205][T11550] panic+0xb9/0xc0 [ 384.540940][T11550] ? __pfx_panic+0x10/0x10 [ 384.545389][T11550] __warn+0x318/0x4d0 [ 384.549417][T11550] ? free_nsproxy+0x45f/0x560 [ 384.554202][T11550] ? free_nsproxy+0x45f/0x560 [ 384.558939][T11550] report_bug+0x2be/0x4f0 [ 384.563308][T11550] ? free_nsproxy+0x45f/0x560 [ 384.568047][T11550] ? free_nsproxy+0x45f/0x560 [ 384.572750][T11550] ? free_nsproxy+0x461/0x560 [ 384.577448][T11550] handle_bug+0x84/0x160 [ 384.581715][T11550] exc_invalid_op+0x1a/0x50 [ 384.586406][T11550] asm_exc_invalid_op+0x1a/0x20 [ 384.591300][T11550] RIP: 0010:free_nsproxy+0x45f/0x560 [ 384.596691][T11550] Code: 77 33 33 00 90 0f 0b 90 e9 83 fd ff ff e8 69 33 33 00 4c 89 ff be 03 00 00 00 e8 bc ff 00 03 e9 8f fd ff ff e8 52 33 33 00 90 <0f> 0b 90 e9 0c fe ff ff e8 44 33 33 00 4c 89 ff be 03 00 00 00 e8 [ 384.616319][T11550] RSP: 0018:ffffc9000afc7a90 EFLAGS: 00010293 [ 384.622408][T11550] RAX: ffffffff818dec2e RBX: ffff888062f407b8 RCX: ffff88802e933d00 [ 384.630389][T11550] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 384.638371][T11550] RBP: 00000000ffffffff R08: ffff88802953d8cb R09: 1ffff110052a7b19 [ 384.646359][T11550] R10: dffffc0000000000 R11: ffffed10052a7b1a R12: dffffc0000000000 [ 384.654473][T11550] R13: 0000000000000000 R14: ffff88802953d800 R15: ffff88802953d8c8 [ 384.662553][T11550] ? free_nsproxy+0x45e/0x560 [ 384.667264][T11550] do_exit+0x6b8/0x2300 [ 384.671527][T11550] ? do_raw_spin_lock+0x121/0x290 [ 384.676587][T11550] ? __pfx_do_exit+0x10/0x10 [ 384.681205][T11550] do_group_exit+0x21c/0x2d0 [ 384.685904][T11550] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.691481][T11550] get_signal+0x1285/0x1340 [ 384.696175][T11550] arch_do_signal_or_restart+0x9a/0x7a0 [ 384.701825][T11550] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 384.708005][T11550] ? exit_to_user_mode_loop+0x55/0x4f0 [ 384.713692][T11550] exit_to_user_mode_loop+0x87/0x4f0 [ 384.719125][T11550] ? rcu_is_watching+0x15/0xb0 [ 384.731598][T11550] do_syscall_64+0x2e9/0xfa0 [ 384.736244][T11550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.742598][T11550] ? clear_bhb_loop+0x60/0xb0 [ 384.747425][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.754160][T11550] RIP: 0033:0x7efdc6d8f6c9 [ 384.759527][T11550] Code: Unable to access opcode bytes at 0x7efdc6d8f69f. [ 384.766568][T11550] RSP: 002b:00007efdc7b650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 384.775017][T11550] RAX: fffffffffffffe00 RBX: 00007efdc6fe5fa8 RCX: 00007efdc6d8f6c9 [ 384.783020][T11550] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efdc6fe5fa8 [ 384.791094][T11550] RBP: 00007efdc6fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 384.799083][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.807179][T11550] R13: 00007efdc6fe6038 R14: 00007fff8635f490 R15: 00007fff8635f578 [ 384.815182][T11550] [ 384.819237][T11550] Kernel Offset: disabled [ 384.823571][T11550] Rebooting in 86400 seconds..