last executing test programs: 3m39.869731185s ago: executing program 4 (id=325): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x294, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x264, 0x2, [@TCA_FLOW_EMATCHES={0x260, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x2}, {0xffffffffffffffff, 0x3, 0x2}}}, @TCF_EM_IPT={0x34, 0x3, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x59, 0x3, 0xd}, {0x9, 0x1, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x78dc, 0x8, 0x7}, {0xffffffffffffffff, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xf1, 0x2, 0xe}, {0xbd3, 0x5, 0x1, "5c55ebf407"}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7fff, 0x2, 0x9}, {0x4, 0x1, 0x1, '?'}}}, @TCF_EM_CONTAINER={0x88, 0x2, 0x0, 0x0, {{0x9, 0x0, 0xf6e5}, "f544ede9e8294332226b6830115a8d3776de06b822729c306bb2d5eef391af2b2de5dc84f766ee2bc45b5f21f5d88370dbfb8365633d91031a7c88d2182c6a1e5a017e9e745e87d8b9fee3121c31ef160333ba3f3ef787f9ea5a35218b06b40299768905b4c0cb496359c804cbb2eb05e67266f7965f8c076cbd400f"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x9, 0x9e, 0x0, 0x2400000}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc4, 0x2e93, 0x0, 0x0, {{0x400}, "9e517a96e257e9ff5da56bab7f3000e0f6d9c7624d23a66c5d9ce4716414227792bfcad14897a45e02ac56514209a7eedd005bc5f72f2c1c5c2b5f87980265f6e13653dbf009ed8e7b9e3139052636a2badaad74cc22c9529a3d0000009c59a2f5b43e5152787f2da8ab898933ac3a32f320375fea4b5e19081548a862eff43e242b29da5dd439ebea94e71e2a81fce4cc46251fca3a8e1a5593a2baf56acd8770c3ef1c46865a97e3054a1da0fd48944e67417489292c"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xea}, {0x4, 0x7, 0x825, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x294}}, 0x20008050) 3m38.250546025s ago: executing program 4 (id=329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 3m37.313211652s ago: executing program 4 (id=332): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0x102}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 3m36.625038308s ago: executing program 4 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x34, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3m35.646527106s ago: executing program 4 (id=342): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) sendto$inet(r2, &(0x7f00000000c0)="f7", 0x1, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) readv(r1, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) 3m35.031356659s ago: executing program 4 (id=344): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 3m32.412079905s ago: executing program 32 (id=344): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 2m35.803484302s ago: executing program 3 (id=560): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)) sendmsg$nl_route_sched(r2, 0x0, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x1a, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r5, @ANYRES32=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="79610400000000"], 0x14}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) syz_pidfd_open(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m34.272643966s ago: executing program 3 (id=566): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) 2m33.006754018s ago: executing program 3 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback, r2, 0x37, 0x8, r2, @void, @value=r2}, 0x20) 2m31.903498665s ago: executing program 3 (id=576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x1802, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2m30.151228843s ago: executing program 3 (id=580): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x4e20, 0xfffffffffffffd2a, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afcee67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 2m29.382647158s ago: executing program 3 (id=585): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000016c0)=0x1000000, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2m14.092511059s ago: executing program 33 (id=585): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000016c0)=0x1000000, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 49.047847359s ago: executing program 6 (id=990): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) r0 = syz_io_uring_setup(0x1d9e, &(0x7f00000000c0)={0x0, 0xe866, 0x40, 0x0, 0x2d1}, &(0x7f0000000040), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000000)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 46.752572001s ago: executing program 6 (id=1001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 45.912900813s ago: executing program 6 (id=1003): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800880, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) 45.391269574s ago: executing program 6 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x10000, 0x1000, 0x8005cc}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 44.692222477s ago: executing program 6 (id=1011): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 44.501151211s ago: executing program 6 (id=1012): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 29.046992903s ago: executing program 34 (id=1012): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 9.436223237s ago: executing program 5 (id=1095): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r0) 8.543033182s ago: executing program 5 (id=1099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 7.709153685s ago: executing program 1 (id=1102): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r1, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) 7.457454052s ago: executing program 5 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 7.428226722s ago: executing program 0 (id=1104): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r2, &(0x7f0000001400)="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", 0x101) sendfile(r2, r3, 0x0, 0xe065) 6.661354837s ago: executing program 1 (id=1105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") 6.072959015s ago: executing program 0 (id=1107): ustat(0x10, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000008000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRESHEX=r0, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x7c}}, 0x400c0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01020000000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) recvmmsg(r4, &(0x7f000000c2c0), 0x0, 0x2020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = open(&(0x7f0000000180)='./file2\x00', 0x4000, 0x0) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000090002"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRES32=r7, @ANYRES16=r6], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r9}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 5.492181042s ago: executing program 2 (id=1108): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2480, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getgroups(0x0, 0x0) 5.41724854s ago: executing program 1 (id=1109): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003680)=""/4098, 0x1002}, {0x0}, {0x0}], 0x3}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 5.233215078s ago: executing program 5 (id=1110): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x5, 0x897, 0x200, 0x0, 0xf}) 4.821923241s ago: executing program 2 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {0x0, 0xfff3}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x100000000000000) 4.81953564s ago: executing program 5 (id=1112): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 4.028507064s ago: executing program 5 (id=1113): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec080000000008001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0xc000) 4.016414516s ago: executing program 2 (id=1114): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r1, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) 3.937724447s ago: executing program 0 (id=1115): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)) sendmsg$nl_route_sched(r2, 0x0, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x1a, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r5, @ANYRES32=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="79610400000000"], 0x14}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) syz_pidfd_open(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.349437863s ago: executing program 1 (id=1116): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, 0x0) 3.176616689s ago: executing program 2 (id=1117): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x4c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) 1.940142712s ago: executing program 1 (id=1118): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_role=,hash,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$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") ftruncate(0xffffffffffffffff, 0x2007ffc) 1.939747437s ago: executing program 2 (id=1119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 1.885801816s ago: executing program 0 (id=1120): r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365) 1.029668893s ago: executing program 0 (id=1121): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 524.217159ms ago: executing program 1 (id=1122): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 479.539873ms ago: executing program 7 (id=1036): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 407.451537ms ago: executing program 2 (id=1123): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 0s ago: executing program 0 (id=1124): ustat(0x10, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000008000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRESHEX=r0, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x7c}}, 0x400c0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01020000000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) recvmmsg(r4, &(0x7f000000c2c0), 0x0, 0x2020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = open(&(0x7f0000000180)='./file2\x00', 0x4000, 0x0) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000090002"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kernel console output (not intermixed with test programs): eft allmulticast mode [ 397.219485][ T12] bridge_slave_1: left promiscuous mode [ 397.226662][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.275708][ T6979] random: crng reseeded on system resumption [ 397.312884][ T12] bridge_slave_0: left allmulticast mode [ 397.319411][ T12] bridge_slave_0: left promiscuous mode [ 397.326464][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.904541][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.946865][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.989271][ T12] bond0 (unregistering): Released all slaves [ 398.449787][ T12] hsr_slave_0: left promiscuous mode [ 398.471490][ T12] hsr_slave_1: left promiscuous mode [ 398.484569][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.492517][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.504846][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.512752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.540601][ T12] veth1_macvtap: left promiscuous mode [ 398.547005][ T12] veth0_macvtap: left promiscuous mode [ 398.553097][ T12] veth1_vlan: left promiscuous mode [ 398.558746][ T12] veth0_vlan: left promiscuous mode [ 399.119137][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 399.119230][ T30] audit: type=1107 audit(1753614175.060:410): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 399.278056][ T6988] loop3: detected capacity change from 0 to 512 [ 399.777342][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.791222][ T6988] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.185041][ T12] team0 (unregistering): Port device team_slave_1 removed [ 400.373999][ T12] team0 (unregistering): Port device team_slave_0 removed [ 400.791133][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.835725][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.882502][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.995695][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.084370][ T7009] loop0: detected capacity change from 0 to 128 [ 401.101244][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.121110][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.270689][ T30] audit: type=1800 audit(1753614177.210:411): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.353" name="file2" dev="loop0" ino=1048600 res=0 errno=0 [ 401.361259][ T7006] lo speed is unknown, defaulting to 1000 [ 402.183080][ T7006] chnl_net:caif_netlink_parms(): no params data found [ 402.259031][ T7024] netlink: 7 bytes leftover after parsing attributes in process `syz.1.358'. [ 402.273515][ T7024] netlink: 7 bytes leftover after parsing attributes in process `syz.1.358'. [ 403.145318][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 403.219514][ T5825] Bluetooth: hci1: command tx timeout [ 403.251097][ T30] audit: type=1326 audit(1753614179.190:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 403.346653][ T30] audit: type=1326 audit(1753614179.240:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 403.370058][ T30] audit: type=1326 audit(1753614179.260:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 403.394458][ T30] audit: type=1326 audit(1753614179.260:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 403.417536][ T30] audit: type=1326 audit(1753614179.260:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 403.439988][ T30] audit: type=1326 audit(1753614179.270:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 403.462675][ T30] audit: type=1326 audit(1753614179.270:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 403.486966][ T30] audit: type=1326 audit(1753614179.270:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 403.668887][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.681316][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.710471][ T7006] bridge_slave_0: entered allmulticast mode [ 403.728858][ T7006] bridge_slave_0: entered promiscuous mode [ 403.911353][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.919282][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.927711][ T7006] bridge_slave_1: entered allmulticast mode [ 403.938281][ T7006] bridge_slave_1: entered promiscuous mode [ 404.171848][ T7043] loop1: detected capacity change from 0 to 512 [ 404.293845][ T7043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.309578][ T7043] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.378871][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.469622][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.520004][ T7049] loop2: detected capacity change from 0 to 256 [ 404.779675][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.819898][ T7006] team0: Port device team_slave_0 added [ 404.846672][ T7006] team0: Port device team_slave_1 added [ 405.081198][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.088809][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.116042][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.293087][ T5825] Bluetooth: hci1: command tx timeout [ 405.295565][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.306402][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.335921][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.750213][ T7006] hsr_slave_0: entered promiscuous mode [ 405.761307][ T7006] hsr_slave_1: entered promiscuous mode [ 405.771023][ T7006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.779003][ T7006] Cannot create hsr debugfs directory [ 405.917863][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 405.917948][ T30] audit: type=1326 audit(1753614181.840:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 405.949837][ T30] audit: type=1326 audit(1753614181.840:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 405.973119][ T30] audit: type=1326 audit(1753614181.860:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 405.995593][ T30] audit: type=1326 audit(1753614181.860:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 406.921936][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 407.390982][ T5825] Bluetooth: hci1: command tx timeout [ 407.564110][ T7006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 407.637343][ T7006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 407.703756][ T7006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 407.751213][ T7071] loop3: detected capacity change from 0 to 1024 [ 407.759805][ T7006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 407.796550][ T7071] EXT4-fs: Ignoring removed oldalloc option [ 407.803621][ T7071] EXT4-fs: Ignoring removed bh option [ 407.925266][ T7071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.290434][ T30] audit: type=1804 audit(1753614184.220:429): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.374" name="/newroot/75/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 408.312217][ T7081] mmap: syz.2.376 (7081) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 408.432870][ T7083] loop1: detected capacity change from 0 to 512 [ 408.464260][ T30] audit: type=1804 audit(1753614184.400:430): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.374" name="/newroot/75/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 408.631703][ T7083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.645676][ T7083] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.961027][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.036620][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.230383][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.269018][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.309596][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.317452][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.436300][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.444130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.473809][ T5825] Bluetooth: hci1: command tx timeout [ 409.841640][ T30] audit: type=1326 audit(1753614185.760:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 409.947774][ T30] audit: type=1326 audit(1753614185.810:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 409.970996][ T30] audit: type=1326 audit(1753614185.810:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 409.994214][ T30] audit: type=1326 audit(1753614185.810:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 411.663118][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.888522][ T7124] loop2: detected capacity change from 0 to 512 [ 413.092201][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.108271][ T7124] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.555634][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.030074][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.036979][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.225153][ T7006] veth0_vlan: entered promiscuous mode [ 414.339462][ T7006] veth1_vlan: entered promiscuous mode [ 414.522020][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 414.522107][ T30] audit: type=1326 audit(1753614190.460:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.553250][ T30] audit: type=1326 audit(1753614190.460:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.576499][ T30] audit: type=1326 audit(1753614190.500:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.599417][ T30] audit: type=1326 audit(1753614190.500:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.621973][ T30] audit: type=1326 audit(1753614190.500:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.651013][ T30] audit: type=1326 audit(1753614190.590:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.674886][ T30] audit: type=1326 audit(1753614190.620:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.783262][ T30] audit: type=1326 audit(1753614190.720:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.806223][ T30] audit: type=1326 audit(1753614190.720:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.812266][ T7006] veth0_macvtap: entered promiscuous mode [ 414.828636][ T30] audit: type=1326 audit(1753614190.720:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 414.996616][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 415.017767][ T7006] veth1_macvtap: entered promiscuous mode [ 415.299688][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.429901][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.527061][ T7006] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.536678][ T7006] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.546039][ T7006] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.555470][ T7006] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.032011][ T7149] loop1: detected capacity change from 0 to 1024 [ 416.133832][ T7149] EXT4-fs: Ignoring removed orlov option [ 416.139932][ T7149] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.204704][ T7149] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 416.365048][ T7149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.831586][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.902686][ T7170] loop0: detected capacity change from 0 to 512 [ 418.113862][ T7170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.133916][ T7170] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.528153][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.845008][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 419.286109][ T7182] loop2: detected capacity change from 0 to 512 [ 419.318452][ T7182] EXT4-fs: Ignoring removed mblk_io_submit option [ 419.329250][ T7182] ext4: Unknown parameter 'seclabel' [ 421.154412][ T7221] loop0: detected capacity change from 0 to 512 [ 421.301249][ T7221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.315359][ T7221] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.876487][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.026100][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 422.286455][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 422.286542][ T30] audit: type=1326 audit(1753614198.230:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 422.436278][ T30] audit: type=1326 audit(1753614198.270:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=155 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 422.458861][ T30] audit: type=1326 audit(1753614198.270:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 422.481560][ T30] audit: type=1326 audit(1753614198.270:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 423.091453][ T4070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.099729][ T4070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.225235][ T1841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.233814][ T1841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.846420][ T7251] loop5: detected capacity change from 0 to 1024 [ 424.906446][ T7251] EXT4-fs: Ignoring removed orlov option [ 424.943705][ T7251] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 425.055985][ T7251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.684969][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.913565][ T7267] loop2: detected capacity change from 0 to 512 [ 426.129814][ T7267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.143423][ T7267] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.253387][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.430'. [ 426.705927][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.600481][ T7292] loop1: detected capacity change from 0 to 1024 [ 427.664131][ T7293] loop5: detected capacity change from 0 to 512 [ 427.677164][ T7292] EXT4-fs: Ignoring removed nobh option [ 427.683438][ T7292] EXT4-fs: inline encryption not supported [ 427.685205][ T7293] EXT4-fs: Ignoring removed i_version option [ 427.696307][ T7293] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.703850][ T7293] ext4: Unknown parameter 'seclabel' [ 427.783320][ T7292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.897867][ T7295] loop0: detected capacity change from 0 to 1024 [ 427.940112][ T7295] EXT4-fs: Ignoring removed orlov option [ 427.981586][ T7295] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 428.126360][ T7292] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 428.154529][ T7295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.553860][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.604128][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.619076][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.444'. [ 431.700655][ T7338] loop1: detected capacity change from 0 to 1024 [ 431.728946][ T7338] EXT4-fs: Ignoring removed orlov option [ 431.764112][ T7338] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 431.790231][ T7340] Illegal XDP return value 4294967294 on prog (id 195) dev N/A, expect packet loss! [ 431.837376][ T7338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.904741][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 431.914670][ T7342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.922981][ T7342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.960401][ T7342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.968773][ T7342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.013809][ T30] audit: type=1800 audit(1753614207.930:461): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.457" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 432.353289][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.026698][ T7367] loop0: detected capacity change from 0 to 128 [ 434.087332][ T7367] FAT-fs (loop0): Directory bread(block 162) failed [ 434.094837][ T7367] FAT-fs (loop0): Directory bread(block 163) failed [ 434.108944][ T7367] FAT-fs (loop0): Directory bread(block 164) failed [ 434.118246][ T7367] FAT-fs (loop0): Directory bread(block 165) failed [ 434.125474][ T7367] FAT-fs (loop0): Directory bread(block 166) failed [ 434.132854][ T7367] FAT-fs (loop0): Directory bread(block 167) failed [ 434.139797][ T7367] FAT-fs (loop0): Directory bread(block 168) failed [ 434.146952][ T7367] FAT-fs (loop0): Directory bread(block 169) failed [ 434.855674][ T7375] loop5: detected capacity change from 0 to 1024 [ 434.886292][ T7375] EXT4-fs: Ignoring removed orlov option [ 434.934157][ T7375] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 435.056217][ T7375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.119270][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 435.193958][ T30] audit: type=1800 audit(1753614211.110:462): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.471" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 435.316686][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.904620][ T7390] loop2: detected capacity change from 0 to 764 [ 436.285581][ T30] audit: type=1326 audit(1753614212.220:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 436.384170][ T30] audit: type=1326 audit(1753614212.260:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 436.407187][ T30] audit: type=1326 audit(1753614212.280:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 436.430350][ T30] audit: type=1326 audit(1753614212.310:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 436.458786][ T30] audit: type=1326 audit(1753614212.310:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 436.483565][ T30] audit: type=1326 audit(1753614212.330:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 436.506545][ T30] audit: type=1326 audit(1753614212.330:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 436.529536][ T30] audit: type=1326 audit(1753614212.400:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 437.760683][ T7415] loop3: detected capacity change from 0 to 1024 [ 437.820476][ T7416] lo speed is unknown, defaulting to 1000 [ 437.829665][ T7415] EXT4-fs: Ignoring removed orlov option [ 438.146873][ T7415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.175999][ T7424] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 88: padding at end of block bitmap is not set [ 438.736602][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.895670][ T30] audit: type=1326 audit(1753614215.830:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 439.998788][ T30] audit: type=1326 audit(1753614215.870:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 440.021815][ T30] audit: type=1326 audit(1753614215.870:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 440.049573][ T30] audit: type=1326 audit(1753614215.870:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 440.075945][ T30] audit: type=1326 audit(1753614215.870:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 440.099268][ T30] audit: type=1326 audit(1753614215.910:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 440.225315][ T7442] loop1: detected capacity change from 0 to 512 [ 440.381646][ T7442] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 440.392787][ T7442] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 440.410361][ T7442] EXT4-fs (loop1): mount failed [ 441.447337][ T30] audit: type=1326 audit(1753614217.390:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 441.477712][ T30] audit: type=1326 audit(1753614217.390:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 441.505637][ T30] audit: type=1326 audit(1753614217.390:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 441.638840][ T7459] loop0: detected capacity change from 0 to 512 [ 441.684566][ T7459] EXT4-fs (loop0): orphan cleanup on readonly fs [ 441.722663][ T7459] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.501: bg 0: block 248: padding at end of block bitmap is not set [ 441.786964][ T7459] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.501: Failed to acquire dquot type 1 [ 441.853614][ T7459] EXT4-fs (loop0): 1 truncate cleaned up [ 441.903071][ T7459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.040358][ T7470] lo speed is unknown, defaulting to 1000 [ 442.328917][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 443.017069][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.160054][ T7489] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 444.303581][ T7491] loop0: detected capacity change from 0 to 512 [ 444.352929][ T7491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 444.479030][ T7491] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.510: inline data xattr refers to an external xattr inode [ 444.573452][ T7491] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.510: couldn't read orphan inode 17 (err -117) [ 444.595477][ T7491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.770351][ T7491] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 444.865805][ T7496] loop1: detected capacity change from 0 to 512 [ 445.008841][ T7496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.022686][ T7496] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.216697][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.644731][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.704446][ T7508] ip6gretap1: entered allmulticast mode [ 447.407586][ T7523] loop0: detected capacity change from 0 to 2048 [ 447.600565][ T7523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.669969][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 447.670056][ T30] audit: type=1326 audit(1753614223.610:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 447.699287][ T30] audit: type=1326 audit(1753614223.610:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 447.727056][ T30] audit: type=1326 audit(1753614223.610:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 447.751935][ T30] audit: type=1326 audit(1753614223.610:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 447.785064][ T30] audit: type=1326 audit(1753614223.650:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 447.968366][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 447.985325][ T30] audit: type=1326 audit(1753614223.810:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 448.008242][ T30] audit: type=1326 audit(1753614223.810:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 448.036187][ T30] audit: type=1326 audit(1753614223.850:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 448.060636][ T30] audit: type=1326 audit(1753614223.850:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 448.083326][ T30] audit: type=1326 audit(1753614223.850:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 448.238930][ T7535] loop1: detected capacity change from 0 to 512 [ 448.315720][ T7535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 448.392301][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.426012][ T7535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.446278][ T7535] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.848006][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 449.453287][ T7542] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 450.024853][ T7558] loop5: detected capacity change from 0 to 512 [ 450.137730][ T7558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.151579][ T7558] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.206528][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.677225][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.013734][ T7573] loop2: detected capacity change from 0 to 512 [ 451.141536][ T7573] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 451.268946][ T7573] EXT4-fs (loop2): mount failed [ 454.273963][ T7615] loop1: detected capacity change from 0 to 128 [ 454.313049][ T7615] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 454.323140][ T7616] netlink: 344 bytes leftover after parsing attributes in process `syz.5.555'. [ 454.332065][ T7615] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 454.471044][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 454.471130][ T30] audit: type=1804 audit(1753614230.410:623): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.554" name="/newroot/120/file0/bus" dev="loop1" ino=1048605 res=1 errno=0 [ 454.612662][ T30] audit: type=1804 audit(1753614230.550:624): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.554" name="/newroot/120/file0/bus" dev="loop1" ino=1048605 res=1 errno=0 [ 454.712939][ T30] audit: type=1804 audit(1753614230.580:625): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.554" name="/newroot/120/file0/bus" dev="loop1" ino=1048605 res=1 errno=0 [ 454.791759][ T30] audit: type=1326 audit(1753614230.680:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 454.814457][ T30] audit: type=1326 audit(1753614230.690:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 454.837553][ T30] audit: type=1326 audit(1753614230.690:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 454.860788][ T30] audit: type=1326 audit(1753614230.700:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 454.890278][ T30] audit: type=1326 audit(1753614230.700:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 454.914487][ T30] audit: type=1326 audit(1753614230.700:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 454.937452][ T30] audit: type=1326 audit(1753614230.710:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 455.319200][ T3713] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 455.891802][ T7634] loop5: detected capacity change from 0 to 512 [ 455.920159][ T7628] syzkaller0: entered promiscuous mode [ 455.926195][ T7628] syzkaller0: entered allmulticast mode [ 456.007024][ T7634] EXT4-fs (loop5): orphan cleanup on readonly fs [ 456.049855][ T7634] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.562: bg 0: block 248: padding at end of block bitmap is not set [ 456.155806][ T7634] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.562: Failed to acquire dquot type 1 [ 456.249684][ T7634] EXT4-fs (loop5): 1 truncate cleaned up [ 456.309256][ T7634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 456.910905][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.779860][ T7655] netlink: 256 bytes leftover after parsing attributes in process `syz.0.568'. [ 458.964780][ T7666] syzkaller0: entered promiscuous mode [ 458.970721][ T7666] syzkaller0: entered allmulticast mode [ 460.835977][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 460.846179][ T7682] smc: net device bond0 applied user defined pnetid S [ 460.942258][ T7682] smc: net device bond0 erased user defined pnetid S [ 463.381641][ T7709] syzkaller0: entered promiscuous mode [ 463.396359][ T7709] syzkaller0: entered allmulticast mode [ 463.606905][ T7713] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 463.615847][ T7713] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 463.626059][ T7713] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 464.622276][ T7726] netlink: 256 bytes leftover after parsing attributes in process `syz.2.592'. [ 464.781486][ T7727] loop0: detected capacity change from 0 to 256 [ 466.228019][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 466.228117][ T30] audit: type=1326 audit(1753614242.130:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 467.095248][ T7748] syzkaller0: entered promiscuous mode [ 467.101262][ T7748] syzkaller0: entered allmulticast mode [ 467.559031][ T7756] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 467.568695][ T7756] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 469.584870][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.610'. [ 469.997684][ T7778] netlink: 'syz.1.611': attribute type 3 has an invalid length. [ 470.649911][ T7786] netlink: 76 bytes leftover after parsing attributes in process `syz.1.616'. [ 471.105761][ T7788] syzkaller0: entered promiscuous mode [ 471.111670][ T7788] syzkaller0: entered allmulticast mode [ 472.830701][ T7809] tipc: Started in network mode [ 472.836177][ T7809] tipc: Node identity b6d58446a732, cluster identity 4711 [ 472.845118][ T7809] tipc: Enabled bearer , priority 0 [ 472.977735][ T7808] tipc: Disabling bearer [ 473.783894][ T30] audit: type=1326 audit(1753614249.730:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 473.873051][ T30] audit: type=1326 audit(1753614249.750:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 473.896471][ T30] audit: type=1326 audit(1753614249.750:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 474.070110][ T30] audit: type=1326 audit(1753614249.990:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 474.095994][ T30] audit: type=1326 audit(1753614249.990:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 474.118890][ T30] audit: type=1326 audit(1753614250.000:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 474.146810][ T30] audit: type=1326 audit(1753614250.000:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 474.559482][ T30] audit: type=1326 audit(1753614250.500:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 474.582585][ T30] audit: type=1326 audit(1753614250.500:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 474.605209][ T30] audit: type=1326 audit(1753614250.500:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 474.804415][ T7829] syzkaller0: entered promiscuous mode [ 474.810399][ T7829] syzkaller0: entered allmulticast mode [ 474.893023][ T7832] loop0: detected capacity change from 0 to 512 [ 475.051278][ T7832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.073841][ T7832] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.408586][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.415500][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.535973][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.108183][ T7848] loop2: detected capacity change from 0 to 512 [ 476.249078][ T7848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.262922][ T7848] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.467592][ T7853] tipc: Started in network mode [ 476.473048][ T7853] tipc: Node identity 0ec4756517d1, cluster identity 4711 [ 476.481336][ T7853] tipc: Enabled bearer , priority 0 [ 476.535946][ T7852] tipc: Disabling bearer [ 476.747009][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 476.872625][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.930840][ T7859] loop5: detected capacity change from 0 to 128 [ 477.848003][ T7871] loop5: detected capacity change from 0 to 512 [ 478.186102][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 478.196219][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 478.206869][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 478.221596][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 478.239742][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 478.295855][ T7871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.309594][ T7871] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.405367][ T7876] lo speed is unknown, defaulting to 1000 [ 478.886316][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 478.886407][ T30] audit: type=1326 audit(1753614254.780:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 478.916197][ T30] audit: type=1326 audit(1753614254.800:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 478.939166][ T30] audit: type=1326 audit(1753614254.800:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 479.175617][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.875777][ T7892] tipc: Enabled bearer , priority 0 [ 479.926237][ T7889] tipc: Disabling bearer [ 480.102977][ T7897] loop0: detected capacity change from 0 to 128 [ 480.103562][ T7876] chnl_net:caif_netlink_parms(): no params data found [ 480.261198][ T30] audit: type=1800 audit(1753614256.190:691): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.655" name="file2" dev="loop0" ino=1048607 res=0 errno=0 [ 480.333699][ T5825] Bluetooth: hci5: command tx timeout [ 481.285228][ T7909] syzkaller0: entered promiscuous mode [ 481.291167][ T7909] syzkaller0: entered allmulticast mode [ 481.842174][ T7916] loop2: detected capacity change from 0 to 128 [ 481.897564][ T7916] FAT-fs (loop2): Directory bread(block 162) failed [ 481.906309][ T7916] FAT-fs (loop2): Directory bread(block 163) failed [ 481.913675][ T7916] FAT-fs (loop2): Directory bread(block 164) failed [ 481.925272][ T7916] FAT-fs (loop2): Directory bread(block 165) failed [ 481.932216][ T7916] FAT-fs (loop2): Directory bread(block 166) failed [ 481.940640][ T7916] FAT-fs (loop2): Directory bread(block 167) failed [ 481.947863][ T7916] FAT-fs (loop2): Directory bread(block 168) failed [ 481.954906][ T7916] FAT-fs (loop2): Directory bread(block 169) failed [ 482.104526][ T7918] loop5: detected capacity change from 0 to 512 [ 482.302030][ T7918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.316568][ T7918] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.413132][ T5825] Bluetooth: hci5: command tx timeout [ 482.419867][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.427783][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.445386][ T7876] bridge_slave_0: entered allmulticast mode [ 482.455791][ T7876] bridge_slave_0: entered promiscuous mode [ 482.627104][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.644392][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.652700][ T7876] bridge_slave_1: entered allmulticast mode [ 482.663281][ T7876] bridge_slave_1: entered promiscuous mode [ 482.993658][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.143637][ T7876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.178715][ T7876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.548141][ T7876] team0: Port device team_slave_0 added [ 483.565392][ T7930] tipc: Enabling of bearer rejected, failed to enable media [ 483.695741][ T7876] team0: Port device team_slave_1 added [ 484.198657][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.208905][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.235747][ T7876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.419109][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.426846][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.453570][ T7876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.492886][ T5825] Bluetooth: hci5: command tx timeout [ 484.939093][ T7876] hsr_slave_0: entered promiscuous mode [ 484.950537][ T7876] hsr_slave_1: entered promiscuous mode [ 484.960352][ T7876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.968349][ T7876] Cannot create hsr debugfs directory [ 485.241565][ T7951] loop5: detected capacity change from 0 to 512 [ 485.430917][ T7951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.444403][ T7951] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.637680][ T7955] syzkaller0: entered promiscuous mode [ 485.643704][ T7955] syzkaller0: entered allmulticast mode [ 486.100335][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.574395][ T5825] Bluetooth: hci5: command tx timeout [ 487.132221][ T7876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 487.256799][ T7876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.331817][ T7876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.484287][ T7876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 487.536838][ T7974] loop0: detected capacity change from 0 to 512 [ 487.598270][ T7974] EXT4-fs: Ignoring removed i_version option [ 487.699103][ T7974] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 487.711282][ T7974] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 487.721923][ T7974] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.679: Corrupt directory, running e2fsck is recommended [ 487.738093][ T7974] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 487.752720][ T7974] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.679: corrupted in-inode xattr: invalid ea_ino [ 487.793291][ T7974] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.679: couldn't read orphan inode 15 (err -117) [ 487.865255][ T7974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.979734][ T7974] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 487.993419][ T7974] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 488.004082][ T7974] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.679: Corrupt directory, running e2fsck is recommended [ 488.225430][ T7974] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.679: path /131/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 488.291688][ T7977] lo speed is unknown, defaulting to 1000 [ 489.039066][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.322149][ T7876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.815474][ T7876] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.018732][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.026567][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.044811][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.052636][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.089247][ T7993] loop1: detected capacity change from 0 to 512 [ 490.103797][ T7995] loop2: detected capacity change from 0 to 512 [ 490.338139][ T7993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.351852][ T7993] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.525988][ T7995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.541979][ T7995] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.197134][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.259846][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.394039][ T7876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.782023][ T8021] tipc: Enabling of bearer rejected, failed to enable media [ 493.237132][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 493.246736][ T8027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.254847][ T8027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.295714][ T8027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.303787][ T8027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.834773][ T8032] lo speed is unknown, defaulting to 1000 [ 494.848285][ T8040] vlan2: entered allmulticast mode [ 495.076295][ T8045] loop2: detected capacity change from 0 to 512 [ 495.296257][ T8045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.310273][ T8045] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.854677][ T8052] loop5: detected capacity change from 0 to 512 [ 496.003484][ T7876] veth0_vlan: entered promiscuous mode [ 496.040517][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.081882][ T8052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.095653][ T8052] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.171826][ T7876] veth1_vlan: entered promiscuous mode [ 496.553579][ T7876] veth0_macvtap: entered promiscuous mode [ 496.638903][ T7876] veth1_macvtap: entered promiscuous mode [ 496.807789][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.988539][ T4014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.126281][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.253663][ T4014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.675412][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.685968][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.351693][ T8061] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.361977][ T8061] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.371723][ T8061] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.381854][ T8061] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.688161][ T4014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.798592][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.901376][ T4014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.040019][ T7876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.050075][ T7876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.059640][ T7876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.068941][ T7876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.602960][ T8081] loop2: detected capacity change from 0 to 512 [ 499.671571][ T4014] bridge_slave_1: left allmulticast mode [ 499.677865][ T4014] bridge_slave_1: left promiscuous mode [ 499.684872][ T4014] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.716169][ T8081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.729574][ T8081] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.746873][ T4014] bridge_slave_0: left allmulticast mode [ 499.755171][ T4014] bridge_slave_0: left promiscuous mode [ 499.763150][ T4014] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.495998][ T4014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.560707][ T4014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.590942][ T4014] bond0 (unregistering): Released all slaves [ 500.617479][ T4014] bond1 (unregistering): Released all slaves [ 500.650331][ T4014] bond2 (unregistering): Released all slaves [ 500.653626][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.839403][ T8086] lo speed is unknown, defaulting to 1000 [ 501.292889][ T4014] tipc: Left network mode [ 501.655564][ T8104] loop2: detected capacity change from 0 to 512 [ 501.792755][ T4014] hsr_slave_0: left promiscuous mode [ 501.801843][ T4014] hsr_slave_1: left promiscuous mode [ 501.879227][ T8104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.897585][ T8104] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.923993][ T4014] veth1_macvtap: left promiscuous mode [ 501.930012][ T4014] veth0_macvtap: left promiscuous mode [ 501.936347][ T4014] veth1_vlan: left promiscuous mode [ 501.942024][ T4014] veth0_vlan: left promiscuous mode [ 502.469748][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.992092][ T4014] team0 (unregistering): Port device team_slave_1 removed [ 503.090042][ T4014] team0 (unregistering): Port device team_slave_0 removed [ 503.464468][ T8114] tipc: Enabling of bearer rejected, failed to enable media [ 504.639675][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'. [ 505.339745][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 505.512902][ T8133] syz.0.720 uses obsolete (PF_INET,SOCK_PACKET) [ 505.664662][ T8136] loop2: detected capacity change from 0 to 512 [ 505.942102][ T8136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.955930][ T8136] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.508872][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.020828][ T8158] loop0: detected capacity change from 0 to 512 [ 507.146404][ T8158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.160509][ T8158] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.640787][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.382788][ T8178] lo speed is unknown, defaulting to 1000 [ 508.638319][ T30] audit: type=1326 audit(1753614284.560:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 508.665012][ T30] audit: type=1326 audit(1753614284.560:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 508.689507][ T30] audit: type=1326 audit(1753614284.580:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 508.712208][ T30] audit: type=1326 audit(1753614284.580:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 508.963403][ T3713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.971557][ T3713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.368617][ T8192] loop2: detected capacity change from 0 to 512 [ 509.416220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.424592][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.589482][ T8192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.604811][ T8192] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.059117][ T8185] loop5: detected capacity change from 0 to 8192 [ 510.126088][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.264504][ T8185] netlink: 48 bytes leftover after parsing attributes in process `syz.5.733'. [ 510.317290][ T30] audit: type=1800 audit(1753614286.260:696): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.733" name="file2" dev="loop5" ino=1048612 res=0 errno=0 [ 510.426637][ T30] audit: type=1326 audit(1753614286.360:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 510.449808][ T30] audit: type=1326 audit(1753614286.360:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 510.472830][ T30] audit: type=1326 audit(1753614286.360:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 510.498877][ T30] audit: type=1326 audit(1753614286.360:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 510.523049][ T30] audit: type=1326 audit(1753614286.360:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 510.621214][ T8208] loop0: detected capacity change from 0 to 512 [ 510.733836][ T8208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.747489][ T8208] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.271113][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.222994][ T8232] loop1: detected capacity change from 0 to 512 [ 512.347035][ T8232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.361684][ T8232] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.836424][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.264801][ T8246] loop1: detected capacity change from 0 to 512 [ 513.333233][ T8246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.346776][ T8246] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.829419][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.375934][ T8265] IPv6: Can't replace route, no match found [ 515.724809][ T8285] loop5: detected capacity change from 0 to 512 [ 515.939820][ T8285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.953249][ T8285] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.319386][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.249916][ T8303] loop1: detected capacity change from 0 to 128 [ 517.318410][ T8303] FAT-fs (loop1): Directory bread(block 162) failed [ 517.329880][ T8303] FAT-fs (loop1): Directory bread(block 163) failed [ 517.334161][ T8301] syzkaller0: entered promiscuous mode [ 517.336990][ T8303] FAT-fs (loop1): Directory bread(block 164) failed [ 517.342999][ T8301] syzkaller0: entered allmulticast mode [ 517.354441][ T8303] FAT-fs (loop1): Directory bread(block 165) failed [ 517.367957][ T8303] FAT-fs (loop1): Directory bread(block 166) failed [ 517.375203][ T8303] FAT-fs (loop1): Directory bread(block 167) failed [ 517.382266][ T8303] FAT-fs (loop1): Directory bread(block 168) failed [ 517.389452][ T8303] FAT-fs (loop1): Directory bread(block 169) failed [ 517.628506][ T8308] lo speed is unknown, defaulting to 1000 [ 520.155997][ T8340] loop2: detected capacity change from 0 to 128 [ 520.255970][ T8340] FAT-fs (loop2): Directory bread(block 162) failed [ 520.264522][ T8340] FAT-fs (loop2): Directory bread(block 163) failed [ 520.271456][ T8340] FAT-fs (loop2): Directory bread(block 164) failed [ 520.278593][ T8340] FAT-fs (loop2): Directory bread(block 165) failed [ 520.285657][ T8340] FAT-fs (loop2): Directory bread(block 166) failed [ 520.292859][ T8340] FAT-fs (loop2): Directory bread(block 167) failed [ 520.299977][ T8340] FAT-fs (loop2): Directory bread(block 168) failed [ 520.307237][ T8340] FAT-fs (loop2): Directory bread(block 169) failed [ 520.440054][ T8342] syzkaller0: entered promiscuous mode [ 520.446115][ T8342] syzkaller0: entered allmulticast mode [ 521.221640][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 521.221725][ T30] audit: type=1326 audit(1753614297.160:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 521.368709][ T30] audit: type=1326 audit(1753614297.200:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 521.391754][ T30] audit: type=1326 audit(1753614297.200:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 521.414841][ T30] audit: type=1326 audit(1753614297.210:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 521.437593][ T30] audit: type=1326 audit(1753614297.210:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 522.036692][ T8371] 9pnet_fd: Insufficient options for proto=fd [ 522.120653][ T8371] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 523.204227][ T8388] smc: net device bond0 applied user defined pnetid SYZ2 [ 523.542876][ T5110] Bluetooth: hci1: command 0x0406 tx timeout [ 523.692785][ T8397] loop6: detected capacity change from 0 to 128 [ 523.738194][ T8395] syzkaller0: entered promiscuous mode [ 523.744809][ T8395] syzkaller0: entered allmulticast mode [ 523.773744][ T8397] FAT-fs (loop6): Directory bread(block 162) failed [ 523.780948][ T8397] FAT-fs (loop6): Directory bread(block 163) failed [ 523.788068][ T8397] FAT-fs (loop6): Directory bread(block 164) failed [ 523.795160][ T8397] FAT-fs (loop6): Directory bread(block 165) failed [ 523.806759][ T8397] FAT-fs (loop6): Directory bread(block 166) failed [ 523.815173][ T8397] FAT-fs (loop6): Directory bread(block 167) failed [ 523.822177][ T8397] FAT-fs (loop6): Directory bread(block 168) failed [ 523.829326][ T8397] FAT-fs (loop6): Directory bread(block 169) failed [ 524.067391][ T8400] netlink: 132 bytes leftover after parsing attributes in process `syz.1.810'. [ 524.601263][ T8406] lo speed is unknown, defaulting to 1000 [ 524.890885][ T8404] lo speed is unknown, defaulting to 1000 [ 525.874365][ T8407] loop6: detected capacity change from 0 to 8192 [ 526.083456][ T8406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 526.132268][ T8418] 9pnet_fd: Insufficient options for proto=fd [ 526.228135][ T8418] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 527.654191][ T8434] loop6: detected capacity change from 0 to 764 [ 527.748836][ T8434] Symlink component flag not implemented [ 527.755095][ T8434] Symlink component flag not implemented [ 527.761361][ T8434] Symlink component flag not implemented (129) [ 527.767953][ T8434] Symlink component flag not implemented (6) [ 527.819425][ T8436] syzkaller0: entered promiscuous mode [ 527.825629][ T8436] syzkaller0: entered allmulticast mode [ 527.946727][ T8438] syzkaller0: entered promiscuous mode [ 527.952800][ T8438] syzkaller0: entered allmulticast mode [ 529.177441][ T8450] netlink: 7 bytes leftover after parsing attributes in process `syz.0.830'. [ 529.200360][ T8450] netlink: 7 bytes leftover after parsing attributes in process `syz.0.830'. [ 529.303989][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 529.313612][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.321820][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.397342][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.405530][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.515552][ T8454] 9pnet_fd: Insufficient options for proto=fd [ 529.595215][ T8454] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 530.144974][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.6.834'. [ 530.389376][ T8465] loop5: detected capacity change from 0 to 764 [ 530.494613][ T8465] Symlink component flag not implemented [ 530.500733][ T8465] Symlink component flag not implemented [ 530.507049][ T8465] Symlink component flag not implemented (129) [ 530.513688][ T8465] Symlink component flag not implemented (6) [ 530.528719][ T8467] loop1: detected capacity change from 0 to 764 [ 530.613939][ T8467] Symlink component flag not implemented [ 530.619945][ T8467] Symlink component flag not implemented [ 530.626806][ T8467] Symlink component flag not implemented (129) [ 530.633395][ T8467] Symlink component flag not implemented (6) [ 530.714628][ T8469] syzkaller0: entered promiscuous mode [ 530.720698][ T8469] syzkaller0: entered allmulticast mode [ 530.988120][ T8472] syzkaller0: entered promiscuous mode [ 530.994460][ T8472] syzkaller0: entered allmulticast mode [ 531.712216][ T8484] 9pnet_fd: Insufficient options for proto=fd [ 531.753743][ T8484] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 532.338329][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 533.287055][ T8502] loop0: detected capacity change from 0 to 764 [ 533.370852][ T8502] Symlink component flag not implemented [ 533.377105][ T8502] Symlink component flag not implemented [ 533.383546][ T8502] Symlink component flag not implemented (129) [ 533.389983][ T8502] Symlink component flag not implemented (6) [ 533.472109][ T8506] loop1: detected capacity change from 0 to 764 [ 533.515223][ T8506] Symlink component flag not implemented [ 533.528489][ T8506] Symlink component flag not implemented [ 533.539596][ T8506] Symlink component flag not implemented (129) [ 533.547610][ T8506] Symlink component flag not implemented (6) [ 533.770628][ T8508] syzkaller0: entered promiscuous mode [ 533.776941][ T8508] syzkaller0: entered allmulticast mode [ 534.017500][ T8510] syzkaller0: entered promiscuous mode [ 534.023618][ T8510] syzkaller0: entered allmulticast mode [ 534.351691][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 534.455309][ T8516] 9pnet_fd: Insufficient options for proto=fd [ 534.492009][ T8516] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 535.251610][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.863'. [ 535.262835][ T8523] loop1: detected capacity change from 0 to 1024 [ 535.288011][ T8523] EXT4-fs: Ignoring removed orlov option [ 535.443756][ T8523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.648877][ T30] audit: type=1800 audit(1753614311.590:742): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.862" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 535.975287][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.140242][ T8547] tipc: Enabling of bearer rejected, failed to enable media [ 536.163094][ T8547] syzkaller0: entered promiscuous mode [ 536.168986][ T8547] syzkaller0: entered allmulticast mode [ 536.229396][ T8548] loop6: detected capacity change from 0 to 764 [ 536.353090][ T8548] Symlink component flag not implemented [ 536.359260][ T8548] Symlink component flag not implemented [ 536.366053][ T8548] Symlink component flag not implemented (129) [ 536.372677][ T8548] Symlink component flag not implemented (6) [ 536.655369][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.872'. [ 536.868087][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.875685][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.877941][ T8556] syzkaller0: entered promiscuous mode [ 536.889444][ T8556] syzkaller0: entered allmulticast mode [ 536.944186][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.872'. [ 537.406136][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.873'. [ 537.490424][ T8565] 9pnet_fd: Insufficient options for proto=fd [ 537.579874][ T8565] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 538.096091][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 538.590279][ T30] audit: type=1326 audit(1753614314.530:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 538.613092][ T30] audit: type=1326 audit(1753614314.530:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 538.636183][ T30] audit: type=1326 audit(1753614314.530:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 538.662758][ T30] audit: type=1326 audit(1753614314.530:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 538.686681][ T30] audit: type=1326 audit(1753614314.530:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 538.879126][ T8573] loop0: detected capacity change from 0 to 8192 [ 539.397157][ T8588] tipc: Enabling of bearer rejected, failed to enable media [ 539.407972][ T8586] loop2: detected capacity change from 0 to 764 [ 539.410159][ T8588] syzkaller0: entered promiscuous mode [ 539.420584][ T8588] syzkaller0: entered allmulticast mode [ 539.971690][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.886'. [ 540.019492][ T8592] syzkaller0: entered promiscuous mode [ 540.025648][ T8592] syzkaller0: entered allmulticast mode [ 540.395055][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 540.975893][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 541.869795][ T8623] loop2: detected capacity change from 0 to 764 [ 541.957313][ T8623] iso9660: Unknown parameter 'GPL' [ 542.459479][ T8619] loop5: detected capacity change from 0 to 8192 [ 542.506976][ T8631] tipc: Enabling of bearer rejected, failed to enable media [ 542.534669][ T8631] syzkaller0: entered promiscuous mode [ 542.546888][ T8631] syzkaller0: entered allmulticast mode [ 542.757995][ T8636] loop2: detected capacity change from 0 to 512 [ 542.853692][ T8633] bond_slave_0: entered promiscuous mode [ 542.859841][ T8633] bond_slave_1: entered promiscuous mode [ 542.868460][ T8633] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 542.886610][ T8633] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 542.991603][ T8636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.005245][ T8636] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.181788][ T8640] tipc: Enabled bearer , priority 0 [ 543.213851][ T8637] tipc: Disabling bearer [ 543.280597][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.902'. [ 543.718260][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.062849][ T8645] syzkaller0: entered promiscuous mode [ 544.068720][ T8645] syzkaller0: entered allmulticast mode [ 545.040873][ T8658] loop6: detected capacity change from 0 to 764 [ 545.820593][ T8659] loop2: detected capacity change from 0 to 8192 [ 545.863936][ T8659] netlink: 48 bytes leftover after parsing attributes in process `syz.2.909'. [ 545.936139][ T8663] loop5: detected capacity change from 0 to 8192 [ 545.949185][ T30] audit: type=1800 audit(1753614321.830:748): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.909" name="file2" dev="loop2" ino=1048613 res=0 errno=0 [ 545.980769][ T8665] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 545.990094][ T8668] loop6: detected capacity change from 0 to 128 [ 546.040708][ T30] audit: type=1326 audit(1753614321.960:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 546.064279][ T30] audit: type=1326 audit(1753614321.960:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 546.087136][ T30] audit: type=1326 audit(1753614321.970:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 546.109982][ T30] audit: type=1326 audit(1753614321.970:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 546.117479][ T8668] FAT-fs (loop6): Directory bread(block 162) failed [ 546.136425][ T30] audit: type=1326 audit(1753614321.970:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 546.136720][ T30] audit: type=1326 audit(1753614321.980:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 546.136985][ T30] audit: type=1326 audit(1753614322.020:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 546.166094][ T30] audit: type=1326 audit(1753614322.090:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 546.168157][ T8668] FAT-fs (loop6): Directory bread(block 163) failed [ 546.190314][ T30] audit: type=1326 audit(1753614322.090:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 546.213351][ T8668] FAT-fs (loop6): Directory bread(block 164) failed [ 546.278440][ T8668] FAT-fs (loop6): Directory bread(block 165) failed [ 546.285569][ T8668] FAT-fs (loop6): Directory bread(block 166) failed [ 546.293162][ T8668] FAT-fs (loop6): Directory bread(block 167) failed [ 546.300078][ T8668] FAT-fs (loop6): Directory bread(block 168) failed [ 546.307427][ T8668] FAT-fs (loop6): Directory bread(block 169) failed [ 547.004198][ T8673] tipc: Enabling of bearer rejected, failed to enable media [ 547.090967][ T8672] syzkaller0: entered promiscuous mode [ 547.097102][ T8672] syzkaller0: entered allmulticast mode [ 547.281190][ T8676] tipc: Started in network mode [ 547.286889][ T8676] tipc: Node identity 5e2cdb213698, cluster identity 4711 [ 547.295400][ T8676] tipc: Enabled bearer , priority 0 [ 547.407448][ T8675] tipc: Disabling bearer [ 548.243767][ T8686] syzkaller0: entered promiscuous mode [ 548.249624][ T8686] syzkaller0: entered allmulticast mode [ 548.745669][ T8698] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 549.015862][ T8705] loop1: detected capacity change from 0 to 512 [ 549.125340][ T8705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.139457][ T8705] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.578779][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.659150][ T8701] loop6: detected capacity change from 0 to 8192 [ 549.759720][ T8701] netlink: 48 bytes leftover after parsing attributes in process `syz.6.929'. [ 550.207589][ T8723] tipc: Enabled bearer , priority 0 [ 550.259404][ T8721] tipc: Disabling bearer [ 550.648025][ T8730] loop1: detected capacity change from 0 to 1024 [ 550.688920][ T8730] EXT4-fs: Ignoring removed orlov option [ 550.786848][ T8730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.928765][ T8734] syzkaller0: entered promiscuous mode [ 550.940263][ T8734] syzkaller0: entered allmulticast mode [ 550.977937][ T8730] EXT4-fs: Ignoring sb option on remount [ 550.984235][ T8730] EXT4-fs: Ignoring removed orlov option [ 550.990540][ T8730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 550.997785][ T8730] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 551.020458][ T8730] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 551.461465][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.759505][ T8757] loop1: detected capacity change from 0 to 8192 [ 553.920156][ T8757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.949'. [ 553.963609][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 553.963712][ T30] audit: type=1800 audit(1753614329.900:765): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.949" name="file2" dev="loop1" ino=1048615 res=0 errno=0 [ 554.050933][ T30] audit: type=1326 audit(1753614329.970:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 554.387415][ T8777] syzkaller0: entered promiscuous mode [ 554.393389][ T8777] syzkaller0: entered allmulticast mode [ 557.570648][ T8814] syzkaller0: entered promiscuous mode [ 557.576780][ T8814] syzkaller0: entered allmulticast mode [ 558.114140][ T8811] loop0: detected capacity change from 0 to 8192 [ 559.118587][ T8828] lo speed is unknown, defaulting to 1000 [ 559.687716][ T8837] loop0: detected capacity change from 0 to 1024 [ 559.760936][ T8837] EXT4-fs: inline encryption not supported [ 559.767743][ T8837] EXT4-fs: Ignoring removed i_version option [ 559.925209][ T8837] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 560.112949][ T8837] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.976: lblock 2 mapped to illegal pblock 2 (length 1) [ 560.164253][ T8837] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 560.173914][ T8837] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.976: lblock 0 mapped to illegal pblock 48 (length 1) [ 560.201383][ T8837] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 560.210900][ T8837] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.976: Failed to acquire dquot type 0 [ 560.367265][ T8837] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 560.421807][ T8837] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.976: mark_inode_dirty error [ 560.443191][ T8837] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 560.454033][ T8837] EXT4-fs (loop0): 1 orphan inode deleted [ 560.467145][ T8837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.499588][ T3815] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 560.541759][ T8848] loop2: detected capacity change from 0 to 1024 [ 560.553058][ T3815] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 560.566402][ T3815] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 0 [ 560.611516][ T8848] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 560.647551][ T8837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.682218][ T8850] loop5: detected capacity change from 0 to 128 [ 560.695662][ T8848] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.982: Invalid block bitmap block 0 in block_group 0 [ 560.702043][ T8837] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.976: Invalid inode table block 1 in block_group 0 [ 560.733812][ T8848] Quota error (device loop2): write_blk: dquota write failed [ 560.741874][ T8848] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 560.753949][ T8848] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.982: Failed to acquire dquot type 0 [ 560.839013][ T30] audit: type=1800 audit(1753614336.780:767): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.983" name="file2" dev="loop5" ino=1048616 res=0 errno=0 [ 560.839665][ T8837] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 560.906885][ T8850] syz.5.983: attempt to access beyond end of device [ 560.906885][ T8850] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 560.918024][ T8848] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.982: Freeing blocks not in datazone - block = 0, count = 4096 [ 560.963580][ T8848] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.982: Invalid inode bitmap blk 0 in block_group 0 [ 560.983725][ T8837] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.976: mark_inode_dirty error [ 560.996776][ T8853] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 561.003616][ T8853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.012057][ T8853] vhci_hcd vhci_hcd.0: Device attached [ 561.018899][ T1841] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 561.028692][ T1841] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 561.043564][ T8848] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 561.071203][ T8848] EXT4-fs (loop2): 1 orphan inode deleted [ 561.086376][ T8848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.149323][ T8854] vhci_hcd: connection closed [ 561.159265][ T3713] vhci_hcd: stop threads [ 561.172796][ T3713] vhci_hcd: release socket [ 561.181252][ T3713] vhci_hcd: disconnect device [ 561.203036][ T24] vhci_hcd: vhci_device speed not set [ 561.409335][ T8858] syzkaller0: entered promiscuous mode [ 561.415595][ T8858] syzkaller0: entered allmulticast mode [ 561.471117][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.275708][ T8860] loop5: detected capacity change from 0 to 8192 [ 563.333285][ T8873] loop1: detected capacity change from 0 to 512 [ 563.452967][ T8873] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.992: casefold flag without casefold feature [ 563.490024][ T8873] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.992: couldn't read orphan inode 15 (err -117) [ 563.555853][ T8873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.921867][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.026827][ T8884] netlink: 'syz.2.996': attribute type 3 has an invalid length. [ 564.481103][ T8888] loop1: detected capacity change from 0 to 1024 [ 564.520754][ T8888] EXT4-fs: inline encryption not supported [ 564.527587][ T8888] EXT4-fs: Ignoring removed i_version option [ 564.606207][ T8888] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 564.769689][ T8891] syzkaller0: entered promiscuous mode [ 564.775805][ T8891] syzkaller0: entered allmulticast mode [ 564.852050][ T8888] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.998: lblock 2 mapped to illegal pblock 2 (length 1) [ 564.909935][ T8888] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 564.919078][ T8888] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.998: lblock 0 mapped to illegal pblock 48 (length 1) [ 565.023004][ T8888] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 565.032158][ T8888] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.998: Failed to acquire dquot type 0 [ 565.034222][ T8886] loop5: detected capacity change from 0 to 8192 [ 565.105331][ T8888] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 565.117232][ T8888] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.998: mark_inode_dirty error [ 565.142943][ T8888] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 565.154019][ T8888] EXT4-fs (loop1): 1 orphan inode deleted [ 565.162948][ T8888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.185508][ T3713] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 565.247471][ T3713] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 565.257931][ T3713] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 565.325512][ T8888] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.379276][ T8888] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.998: Invalid inode table block 1 in block_group 0 [ 565.412944][ T8888] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 565.435774][ T8888] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.998: mark_inode_dirty error [ 565.849427][ T8904] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 566.325270][ T8909] loop1: detected capacity change from 0 to 512 [ 566.373106][ T8909] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1008: casefold flag without casefold feature [ 566.411337][ T8909] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1008: couldn't read orphan inode 15 (err -117) [ 566.493870][ T8909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.784442][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.579199][ T8945] loop5: detected capacity change from 0 to 1024 [ 570.638430][ T8945] EXT4-fs: inline encryption not supported [ 570.644882][ T8945] EXT4-fs: Ignoring removed i_version option [ 570.753449][ T8945] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 571.036825][ T8945] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.1018: lblock 2 mapped to illegal pblock 2 (length 1) [ 571.103955][ T8945] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 571.118026][ T8945] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.1018: lblock 0 mapped to illegal pblock 48 (length 1) [ 571.672816][ T8945] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 571.681939][ T8945] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1018: Failed to acquire dquot type 0 [ 571.792945][ T8945] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 571.822930][ T8945] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1018: mark_inode_dirty error [ 572.042896][ T8945] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 572.043250][ T8945] EXT4-fs (loop5): 1 orphan inode deleted [ 572.045778][ T8945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.153663][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 572.193191][ T3815] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 572.223702][ T8952] 9pnet_fd: Insufficient options for proto=fd [ 572.241925][ T3815] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 572.242116][ T3815] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 0 [ 572.264310][ T8952] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 572.477148][ T8945] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.777348][ T8945] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.1018: Invalid inode table block 1 in block_group 0 [ 572.834990][ T8945] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 572.889118][ T8945] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.1018: mark_inode_dirty error [ 575.997073][ T8958] bond_slave_0: entered promiscuous mode [ 576.003372][ T8958] bond_slave_1: entered promiscuous mode [ 576.011692][ T8958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 576.036825][ T8958] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 576.699102][ T8964] loop5: detected capacity change from 0 to 512 [ 576.897669][ T8964] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.1024: casefold flag without casefold feature [ 577.003612][ T8964] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1024: couldn't read orphan inode 15 (err -117) [ 577.140389][ T8964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.937754][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.150709][ T8978] syzkaller0: entered promiscuous mode [ 579.156673][ T8978] syzkaller0: entered allmulticast mode [ 579.598999][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 579.666971][ T8983] 9pnet_fd: Insufficient options for proto=fd [ 579.764816][ T8981] loop2: detected capacity change from 0 to 1024 [ 579.774447][ T8981] EXT4-fs: inline encryption not supported [ 579.780577][ T8981] EXT4-fs: Ignoring removed i_version option [ 579.860384][ T8981] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 580.319776][ T8987] loop5: detected capacity change from 0 to 1024 [ 580.390685][ T8987] EXT4-fs: Ignoring removed orlov option [ 580.457745][ T8983] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 580.765699][ T8987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.811966][ T8981] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1031: lblock 2 mapped to illegal pblock 2 (length 1) [ 580.892150][ T8981] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 580.901118][ T8981] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.1031: lblock 0 mapped to illegal pblock 48 (length 1) [ 580.946679][ T8987] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 581.037860][ T30] audit: type=1326 audit(1753614356.950:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 581.067692][ T30] audit: type=1326 audit(1753614356.950:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 581.104451][ T8981] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 581.113936][ T8981] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1031: Failed to acquire dquot type 0 [ 581.223203][ T8981] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 581.279830][ T8981] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1031: mark_inode_dirty error [ 581.338575][ T8981] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 581.355081][ T8981] EXT4-fs (loop2): 1 orphan inode deleted [ 581.365454][ T8981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.388578][ T30] audit: type=1326 audit(1753614357.110:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 581.411801][ T30] audit: type=1326 audit(1753614357.110:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 581.434690][ T30] audit: type=1326 audit(1753614357.110:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 581.461369][ T30] audit: type=1326 audit(1753614357.110:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 581.485294][ T30] audit: type=1326 audit(1753614357.110:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 581.508128][ T30] audit: type=1326 audit(1753614357.130:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 581.563670][ T3713] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 581.594837][ T8922] Set syz1 is full, maxelem 65536 reached [ 581.646830][ T3713] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 581.735564][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.744103][ T8981] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.835701][ T8981] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.1031: Invalid inode table block 1 in block_group 0 [ 581.876568][ T8981] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 581.934358][ T8981] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.1031: mark_inode_dirty error [ 583.260243][ T9011] loop5: detected capacity change from 0 to 1024 [ 583.283725][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 583.298666][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 583.308595][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 583.324604][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 583.337033][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 583.385304][ T9011] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 583.461229][ T9012] lo speed is unknown, defaulting to 1000 [ 583.558253][ T9011] EXT4-fs (loop5): orphan cleanup on readonly fs [ 583.763394][ T9011] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1040: Invalid block bitmap block 0 in block_group 0 [ 583.856230][ T9011] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1040: Failed to acquire dquot type 0 [ 583.932071][ T9011] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.1040: Freeing blocks not in datazone - block = 0, count = 4096 [ 583.986190][ T9011] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1040: Invalid inode bitmap blk 0 in block_group 0 [ 584.029502][ T1841] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 584.093126][ T9011] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 584.118761][ T9011] EXT4-fs (loop5): 1 orphan inode deleted [ 584.133578][ T9011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 584.353769][ T9012] chnl_net:caif_netlink_parms(): no params data found [ 584.569952][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.622640][ T9023] syzkaller0: entered promiscuous mode [ 584.634487][ T9023] syzkaller0: entered allmulticast mode [ 584.751498][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 584.778921][ T9025] 9pnet_fd: Insufficient options for proto=fd [ 584.792844][ T9025] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 585.202833][ T9029] loop0: detected capacity change from 0 to 1024 [ 585.263803][ T9029] EXT4-fs: Ignoring removed orlov option [ 585.374676][ T5110] Bluetooth: hci3: command tx timeout [ 585.405767][ T9029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.541852][ T9033] loop5: detected capacity change from 0 to 256 [ 585.562099][ T9029] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 585.907382][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.951663][ T9033] FAT-fs (loop5): Directory bread(block 64) failed [ 585.971585][ T9033] FAT-fs (loop5): Directory bread(block 65) failed [ 585.980362][ T9033] FAT-fs (loop5): Directory bread(block 66) failed [ 585.987450][ T9033] FAT-fs (loop5): Directory bread(block 67) failed [ 585.994599][ T9033] FAT-fs (loop5): Directory bread(block 68) failed [ 586.001444][ T9033] FAT-fs (loop5): Directory bread(block 69) failed [ 586.008611][ T9033] FAT-fs (loop5): Directory bread(block 70) failed [ 586.015800][ T9033] FAT-fs (loop5): Directory bread(block 71) failed [ 586.022927][ T9033] FAT-fs (loop5): Directory bread(block 72) failed [ 586.029766][ T9033] FAT-fs (loop5): Directory bread(block 73) failed [ 586.214850][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 586.214935][ T30] audit: type=1800 audit(1753614362.160:792): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1046" name="file1" dev="loop5" ino=1048618 res=0 errno=0 [ 586.255640][ T9033] syz.5.1046: attempt to access beyond end of device [ 586.255640][ T9033] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 586.286155][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.299321][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.310690][ T9012] bridge_slave_0: entered allmulticast mode [ 586.323490][ T9012] bridge_slave_0: entered promiscuous mode [ 586.405927][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.414323][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.422244][ T9012] bridge_slave_1: entered allmulticast mode [ 586.432974][ T9012] bridge_slave_1: entered promiscuous mode [ 586.731193][ T9045] loop0: detected capacity change from 0 to 128 [ 586.817509][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.863863][ T30] audit: type=1800 audit(1753614362.800:793): pid=9045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1049" name="file2" dev="loop0" ino=1048619 res=0 errno=0 [ 586.900401][ T9045] syz.0.1049: attempt to access beyond end of device [ 586.900401][ T9045] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 586.937966][ T9012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.001551][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.038699][ T9012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.139719][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.308453][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.334305][ T9048] netlink: 'syz.5.1051': attribute type 4 has an invalid length. [ 587.348945][ T9012] team0: Port device team_slave_0 added [ 587.449827][ T9012] team0: Port device team_slave_1 added [ 587.455625][ T5110] Bluetooth: hci3: command tx timeout [ 587.466120][ T9047] netlink: 'syz.5.1051': attribute type 4 has an invalid length. [ 587.827734][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.835497][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.862576][ T9012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.926280][ T12] bridge_slave_1: left allmulticast mode [ 587.932638][ T12] bridge_slave_1: left promiscuous mode [ 587.939604][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.057382][ T12] bridge_slave_0: left allmulticast mode [ 588.063701][ T12] bridge_slave_0: left promiscuous mode [ 588.070603][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.403811][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1055'. [ 588.418499][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1055'. [ 588.418610][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1055'. [ 588.790562][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.852923][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.886199][ T12] bond0 (unregistering): Released all slaves [ 588.914702][ T12] bond1 (unregistering): Released all slaves [ 588.965270][ T12] bond2 (unregistering): Released all slaves [ 589.106252][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.115061][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.139609][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1055'. [ 589.145931][ T9012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.151127][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1055'. [ 589.170867][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1055'. [ 589.433528][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1056'. [ 589.513563][ T9062] 9pnet_fd: Insufficient options for proto=fd [ 589.543525][ T5110] Bluetooth: hci3: command tx timeout [ 589.587026][ T9065] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 590.031787][ T9012] hsr_slave_0: entered promiscuous mode [ 590.043236][ T9012] hsr_slave_1: entered promiscuous mode [ 590.147731][ T12] hsr_slave_0: left promiscuous mode [ 590.183904][ T12] hsr_slave_1: left promiscuous mode [ 590.193000][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.200897][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.215657][ T9069] loop0: detected capacity change from 0 to 1024 [ 590.240543][ T9069] EXT4-fs: Ignoring removed orlov option [ 590.243292][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.254873][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.295913][ T12] veth1_macvtap: left promiscuous mode [ 590.301796][ T12] veth0_macvtap: left promiscuous mode [ 590.308417][ T12] veth1_vlan: left promiscuous mode [ 590.315633][ T12] veth0_vlan: left promiscuous mode [ 590.729250][ T9069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.852206][ T9069] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 591.140952][ T9079] loop9: detected capacity change from 0 to 7 [ 591.167714][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.176302][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.190656][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.200515][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.209002][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.217464][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.226172][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.234444][ T9079] ldm_validate_partition_table(): Disk read failed. [ 591.241447][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.249933][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.258875][ T9079] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.272874][ T9079] Dev loop9: unable to read RDB block 0 [ 591.279110][ T9079] loop9: unable to read partition table [ 591.298158][ T12] team0 (unregistering): Port device team_slave_1 removed [ 591.326391][ T9079] loop9: partition table beyond EOD, truncated [ 591.333127][ T9079] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 591.333127][ T9079] ) failed (rc=-5) [ 591.373349][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.392468][ T12] team0 (unregistering): Port device team_slave_0 removed [ 591.551875][ T9081] loop1: detected capacity change from 0 to 128 [ 591.623979][ T5110] Bluetooth: hci3: command tx timeout [ 591.682810][ T30] audit: type=1800 audit(1753614367.620:794): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1062" name="file2" dev="loop1" ino=1048620 res=0 errno=0 [ 591.736980][ T9081] syz.1.1062: attempt to access beyond end of device [ 591.736980][ T9081] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 592.038525][ T9067] syzkaller0: entered promiscuous mode [ 592.044571][ T9067] syzkaller0: entered allmulticast mode [ 592.176721][ T30] audit: type=1326 audit(1753614368.110:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 592.203352][ T30] audit: type=1326 audit(1753614368.110:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 592.229498][ T30] audit: type=1326 audit(1753614368.110:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 592.253652][ T30] audit: type=1326 audit(1753614368.120:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=377 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 592.277537][ T30] audit: type=1326 audit(1753614368.120:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 592.733400][ T9087] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1067'. [ 592.743178][ T9087] ksmbd: Unknown IPC event: 3, ignore. [ 593.512999][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 593.599860][ T9096] 9pnet_fd: Insufficient options for proto=fd [ 593.913533][ T9097] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 594.289284][ T9012] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 594.424139][ T9012] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 594.504716][ T9012] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 594.567994][ T9012] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 595.356324][ T9106] loop2: detected capacity change from 0 to 512 [ 595.403104][ T9105] loop0: detected capacity change from 0 to 1024 [ 595.426492][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1074'. [ 595.484515][ T9105] EXT4-fs: Ignoring removed orlov option [ 595.650781][ T9105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.716404][ T9105] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 595.777846][ T9106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.796358][ T9106] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.900006][ T9119] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 595.927987][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.102735][ T9012] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.147449][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.174629][ T1841] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.182409][ T1841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.254422][ T9121] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 596.276845][ T1841] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.284629][ T1841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.337792][ T9121] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 39 with error 28 [ 596.351117][ T9121] EXT4-fs (loop2): This should not happen!! Data will be lost [ 596.351117][ T9121] [ 596.362760][ T9121] EXT4-fs (loop2): Total free blocks count 0 [ 596.369070][ T9121] EXT4-fs (loop2): Free/Dirty block details [ 596.375908][ T9121] EXT4-fs (loop2): free_blocks=65280 [ 596.381482][ T9121] EXT4-fs (loop2): dirty_blocks=224 [ 596.387113][ T9121] EXT4-fs (loop2): Block reservation details [ 596.393556][ T9121] EXT4-fs (loop2): i_reserved_data_blocks=248 [ 596.829001][ T729] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 352 with error 28 [ 598.103460][ T9142] loop5: detected capacity change from 0 to 2048 [ 598.298552][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.305644][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.333936][ T9142] loop5: p1 < > p4 [ 598.415806][ T9142] loop5: p4 size 8388608 extends beyond EOD, truncated [ 598.613484][ T9012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.984255][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'. [ 599.606085][ T9162] loop1: detected capacity change from 0 to 1024 [ 599.637296][ T9162] EXT4-fs: Ignoring removed orlov option [ 599.708154][ T9162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.764051][ T9162] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 600.135608][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.880912][ T9176] syzkaller0: entered promiscuous mode [ 600.886873][ T9176] syzkaller0: entered allmulticast mode [ 601.413100][ T9012] veth0_vlan: entered promiscuous mode [ 601.500378][ T9012] veth1_vlan: entered promiscuous mode [ 601.645644][ T9181] loop2: detected capacity change from 0 to 764 [ 601.799566][ T9012] veth0_macvtap: entered promiscuous mode [ 601.842447][ T9012] veth1_macvtap: entered promiscuous mode [ 602.050386][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.168124][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.252580][ T9012] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.261901][ T9012] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.272107][ T9012] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.281704][ T9012] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.054631][ T9196] loop5: detected capacity change from 0 to 1024 [ 603.077014][ T9196] EXT4-fs: Ignoring removed orlov option [ 603.191553][ T9196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.326870][ T9196] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 603.710122][ T7006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.885695][ T9211] lo speed is unknown, defaulting to 1000 [ 604.461389][ T9221] loop0: detected capacity change from 0 to 128 [ 604.601078][ T30] audit: type=1804 audit(1753614380.530:800): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1104" name="/newroot/226/file2/file0" dev="loop0" ino=1048621 res=1 errno=0 [ 605.050055][ T9224] syzkaller0: entered promiscuous mode [ 605.056050][ T9224] syzkaller0: entered allmulticast mode [ 605.328436][ T9228] loop1: detected capacity change from 0 to 764 [ 606.570098][ T9234] loop0: detected capacity change from 0 to 8192 [ 606.661196][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 606.721858][ T9244] macvtap1: entered promiscuous mode [ 606.727769][ T9244] erspan0: entered promiscuous mode [ 606.734219][ T9244] macvtap1: entered allmulticast mode [ 606.739933][ T9244] erspan0: entered allmulticast mode [ 606.755866][ T9234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1107'. [ 606.843977][ T30] audit: type=1800 audit(1753614382.780:801): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1107" name="file2" dev="loop0" ino=1048622 res=0 errno=0 [ 606.925477][ T30] audit: type=1326 audit(1753614382.830:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.0.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 606.950513][ T30] audit: type=1326 audit(1753614382.830:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.0.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 608.240988][ T30] audit: type=1326 audit(1753614384.170:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 608.324166][ T9259] lo speed is unknown, defaulting to 1000 [ 608.349763][ T30] audit: type=1326 audit(1753614384.220:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 608.473357][ T30] audit: type=1326 audit(1753614384.390:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 608.504138][ T30] audit: type=1326 audit(1753614384.390:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 608.527332][ T30] audit: type=1326 audit(1753614384.390:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 608.550098][ T30] audit: type=1326 audit(1753614384.400:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 609.538877][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.547580][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.925988][ T9274] loop1: detected capacity change from 0 to 256 [ 609.937277][ T9272] syzkaller0: entered promiscuous mode [ 609.943336][ T9272] syzkaller0: entered allmulticast mode [ 609.960131][ T729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.968651][ T729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.270224][ T9274] FAT-fs (loop1): Directory bread(block 64) failed [ 610.277303][ T9274] FAT-fs (loop1): Directory bread(block 65) failed [ 610.284571][ T9274] FAT-fs (loop1): Directory bread(block 66) failed [ 610.291417][ T9274] FAT-fs (loop1): Directory bread(block 67) failed [ 610.298650][ T9274] FAT-fs (loop1): Directory bread(block 68) failed [ 610.305631][ T9274] FAT-fs (loop1): Directory bread(block 69) failed [ 610.312856][ T9274] FAT-fs (loop1): Directory bread(block 70) failed [ 610.319872][ T9274] FAT-fs (loop1): Directory bread(block 71) failed [ 610.334412][ T9274] FAT-fs (loop1): Directory bread(block 72) failed [ 610.343533][ T9274] FAT-fs (loop1): Directory bread(block 73) failed [ 611.237872][ T9285] ===================================================== [ 611.245477][ T9285] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 611.253974][ T9285] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 611.259978][ T9285] do_xdp_generic+0xd52/0x1690 [ 611.265122][ T9285] tun_get_user+0x447a/0x6b40 [ 611.270086][ T9285] tun_chr_write_iter+0x3e9/0x5c0 [ 611.275591][ T9285] vfs_write+0xb48/0x1580 [ 611.280233][ T9285] __ia32_sys_write+0x1f9/0x4d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 611.285492][ T9285] ia32_sys_call+0x30f2/0x42c0 [ 611.290483][ T9285] __do_fast_syscall_32+0xb0/0x150 [ 611.295983][ T9285] do_fast_syscall_32+0x38/0x80 [ 611.301085][ T9285] do_SYSENTER_32+0x1f/0x30 [ 611.306061][ T9285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.312797][ T9285] [ 611.315253][ T9285] Uninit was stored to memory at: [ 611.320695][ T9285] pskb_expand_head+0x310/0x1610 [ 611.326100][ T9285] do_xdp_generic+0xa79/0x1690 [ 611.331239][ T9285] tun_get_user+0x447a/0x6b40 [ 611.336411][ T9285] tun_chr_write_iter+0x3e9/0x5c0 [ 611.341721][ T9285] vfs_write+0xb48/0x1580 [ 611.346710][ T9285] __ia32_sys_write+0x1f9/0x4d0 [ 611.351818][ T9285] ia32_sys_call+0x30f2/0x42c0 [ 611.357118][ T9285] __do_fast_syscall_32+0xb0/0x150 [ 611.362968][ T9285] do_fast_syscall_32+0x38/0x80 [ 611.368499][ T9285] do_SYSENTER_32+0x1f/0x30 [ 611.373445][ T9285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.380097][ T9285] [ 611.382691][ T9285] Uninit was created at: [ 611.387263][ T9285] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 611.394388][ T9285] kmalloc_reserve+0x22f/0x4b0 [ 611.399394][ T9285] __alloc_skb+0x347/0x7d0 [ 611.404245][ T9285] alloc_skb_with_frags+0xc5/0xa60 [ 611.409689][ T9285] sock_alloc_send_pskb+0xad8/0xc70 [ 611.415267][ T9285] tun_get_user+0x1019/0x6b40 [ 611.420230][ T9285] tun_chr_write_iter+0x3e9/0x5c0 [ 611.425665][ T9285] vfs_write+0xb48/0x1580 [ 611.430239][ T9285] __ia32_sys_write+0x1f9/0x4d0 [ 611.435508][ T9285] ia32_sys_call+0x30f2/0x42c0 [ 611.440526][ T9285] __do_fast_syscall_32+0xb0/0x150 [ 611.446134][ T9285] do_fast_syscall_32+0x38/0x80 [ 611.451323][ T9285] do_SYSENTER_32+0x1f/0x30 [ 611.456293][ T9285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.463073][ T9285] [ 611.465654][ T9285] CPU: 0 UID: 0 PID: 9285 Comm: syz.2.1123 Not tainted 6.16.0-rc7-syzkaller-00138-g513fc69f8fc7 #0 PREEMPT(none) [ 611.478134][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.488549][ T9285] ===================================================== [ 611.495882][ T9285] Disabling lock debugging due to kernel taint [ 611.502468][ T9285] Kernel panic - not syncing: kmsan.panic set ... [ 611.509379][ T9285] CPU: 0 UID: 0 PID: 9285 Comm: syz.2.1123 Tainted: G B 6.16.0-rc7-syzkaller-00138-g513fc69f8fc7 #0 PREEMPT(none) [ 611.523247][ T9285] Tainted: [B]=BAD_PAGE [ 611.527548][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.537799][ T9285] Call Trace: [ 611.541224][ T9285] [ 611.544299][ T9285] __dump_stack+0x26/0x30 [ 611.548889][ T9285] dump_stack_lvl+0x53/0x270 [ 611.553738][ T9285] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 611.559831][ T9285] dump_stack+0x1e/0x25 [ 611.564263][ T9285] panic+0x4bd/0xd50 [ 611.568474][ T9285] kmsan_report+0x31c/0x320 [ 611.573305][ T9285] ? __msan_warning+0x1b/0x30 [ 611.578188][ T9285] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 611.584342][ T9285] ? do_xdp_generic+0xd52/0x1690 [ 611.589522][ T9285] ? tun_get_user+0x447a/0x6b40 [ 611.594728][ T9285] ? tun_chr_write_iter+0x3e9/0x5c0 [ 611.600190][ T9285] ? vfs_write+0xb48/0x1580 [ 611.604909][ T9285] ? __ia32_sys_write+0x1f9/0x4d0 [ 611.610162][ T9285] ? ia32_sys_call+0x30f2/0x42c0 [ 611.615321][ T9285] ? __do_fast_syscall_32+0xb0/0x150 [ 611.620849][ T9285] ? do_fast_syscall_32+0x38/0x80 [ 611.626284][ T9285] ? do_SYSENTER_32+0x1f/0x30 [ 611.631632][ T9285] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.638499][ T9285] ? ___bpf_prog_run+0xea65/0xeba0 [ 611.643892][ T9285] ? __bpf_prog_run32+0xc2/0xf0 [ 611.649004][ T9285] ? kmsan_get_metadata+0xfb/0x160 [ 611.654371][ T9285] __msan_warning+0x1b/0x30 [ 611.659091][ T9285] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 611.665180][ T9285] do_xdp_generic+0xd52/0x1690 [ 611.670270][ T9285] ? tun_get_user+0x3f41/0x6b40 [ 611.675384][ T9285] ? filter_irq_stacks+0x49/0x190 [ 611.680696][ T9285] ? tun_get_user+0x43f5/0x6b40 [ 611.685814][ T9285] tun_get_user+0x447a/0x6b40 [ 611.690769][ T9285] ? stack_depot_save_flags+0x35/0x7b0 [ 611.696505][ T9285] ? __rcu_read_unlock+0x6d/0xd0 [ 611.701682][ T9285] ? kmsan_get_metadata+0xfb/0x160 [ 611.707034][ T9285] ? kmsan_get_metadata+0xfb/0x160 [ 611.712384][ T9285] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 611.719028][ T9285] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 611.725485][ T9285] tun_chr_write_iter+0x3e9/0x5c0 [ 611.730917][ T9285] vfs_write+0xb48/0x1580 [ 611.735519][ T9285] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 611.741357][ T9285] __ia32_sys_write+0x1f9/0x4d0 [ 611.746474][ T9285] ia32_sys_call+0x30f2/0x42c0 [ 611.751463][ T9285] __do_fast_syscall_32+0xb0/0x150 [ 611.756830][ T9285] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 611.762796][ T9285] do_fast_syscall_32+0x38/0x80 [ 611.767896][ T9285] do_SYSENTER_32+0x1f/0x30 [ 611.772681][ T9285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.779344][ T9285] RIP: 0023:0xf70ee539 [ 611.783696][ T9285] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 611.803798][ T9285] RSP: 002b:00000000f50de520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 611.812468][ T9285] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000300 [ 611.820648][ T9285] RDX: 000000000000fdef RSI: 00000000f7454ff4 RDI: 0000000000000000 [ 611.828815][ T9285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 611.836971][ T9285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 611.845171][ T9285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.853365][ T9285] [ 611.856844][ T9285] Kernel Offset: disabled [ 611.861262][ T9285] Rebooting in 86400 seconds..